$ rpki-client -vvf rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa File: 4BB610C2E16511EC8EDF6621C4F9AE02.roa (raw, json) Hash identifier: 7/8a6b3fF4FCit/GoJJNeOaMoxKdi7vv4AgXU+onf50= Subject key identifier: CC:62:BB:C3:31:26:6F:2A:D2:D0:E0:F1:0B:2B:D1:72:33:D3:2C:67 Certificate issuer: /CN=A9163824/serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Certificate serial: 0717 Authority key identifier: 72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa Signing time: Sat 31 May 2025 16:13:37 +0000 ROA not before: Sat 31 May 2025 16:13:37 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 133443 IP address blocks: 43.239.72.0/24 maxlen: 24 43.239.73.0/24 maxlen: 24 43.239.74.0/24 maxlen: 24 43.239.75.0/24 maxlen: 24 103.229.84.0/24 maxlen: 24 103.229.85.0/24 maxlen: 24 103.229.86.0/24 maxlen: 24 103.229.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 15:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1815 (0x717) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163824, serialNumber=7273853DA063EFCB8EC544B0320D5A707B94C089 Validity Not Before: May 31 16:13:37 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b2ab1-8045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e9:36:ca:80:4a:68:92:a5:07:b2:c6:b7:13: 84:6c:1e:29:fb:26:0d:37:86:fa:14:3f:ab:43:13: 2d:ee:aa:b0:bc:a8:af:c2:3f:05:45:0b:a5:10:f1: ac:97:2d:60:e7:5c:55:f8:1d:d7:f8:32:b9:a0:bf: 0e:85:66:8a:e0:b2:72:33:54:34:e0:0b:ab:9b:ce: 35:c1:58:b4:1a:5e:5b:cd:a3:d9:5d:72:2e:d3:92: 89:49:ed:69:92:ca:51:01:a0:4e:4b:ac:60:7b:aa: aa:23:f0:34:9d:1d:4c:34:b6:ec:94:8d:61:ec:e0: 72:83:a0:bd:a7:01:32:75:a8:cd:9a:cf:68:ce:a6: 9b:21:59:c5:9e:39:9f:2e:57:71:5c:01:02:da:63: 6b:a3:8a:1c:fe:59:a7:48:4f:5f:dd:59:5c:b7:54: ca:d4:3b:38:0d:a7:89:f3:d5:19:d7:54:3c:db:38: ae:72:04:80:0d:05:9d:73:35:25:fe:7d:57:aa:b4: 9b:79:02:88:c6:89:4f:0e:2b:17:04:00:35:ea:d5: f5:14:9c:fd:e8:1b:eb:09:1d:9a:0c:76:91:c9:c6: 02:05:f5:ee:dd:18:64:0e:08:0e:a6:bb:de:98:e1: ba:14:00:11:83:16:4b:10:50:65:bc:2a:c2:ef:0b: e1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:62:BB:C3:31:26:6F:2A:D2:D0:E0:F1:0B:2B:D1:72:33:D3:2C:67 X509v3 Authority Key Identifier: keyid:72:73:85:3D:A0:63:EF:CB:8E:C5:44:B0:32:0D:5A:70:7B:94:C0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/cnOFPaBj78uOxUSwMg1acHuUwIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnOFPaBj78uOxUSwMg1acHuUwIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163824/BA0EFE52FD2511E49D93273BC4F9AE02/4BB610C2E16511EC8EDF6621C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.72.0/22 103.229.84.0/22 Signature Algorithm: sha256WithRSAEncryption 94:84:ba:fe:69:59:5b:9d:1a:41:c3:db:6c:2b:15:25:d8:74: 73:44:72:3f:25:c7:fa:7e:1b:0b:e5:7f:51:64:77:75:30:92: da:39:cd:10:51:bd:4b:b3:ae:0d:2a:0c:dc:8a:41:43:46:89: 5f:21:b5:0f:aa:28:54:06:2f:5b:f1:1a:6f:69:3c:9b:80:69: b0:e4:63:f3:8e:d6:73:4e:f7:04:fa:cc:2c:bf:2b:2c:d8:93: 96:1c:2c:8a:08:56:ae:92:13:03:6f:88:ee:a7:3e:30:d0:da: 30:0b:be:33:c5:42:54:d8:70:9c:bc:7c:2e:a2:b0:11:96:97: 80:83:0b:19:c9:af:4f:f7:1c:1d:9f:f5:31:e9:fb:46:ad:39: 51:ed:1b:c4:c8:68:be:d9:27:1c:70:dc:a7:b6:33:71:7f:e9: 72:bb:bf:56:06:6f:93:3b:7a:2a:1c:5e:cd:ce:86:2e:9b:43: 81:4a:70:be:8f:a1:a0:26:a6:06:f7:05:7c:e0:2f:f1:80:f4: 73:e4:52:83:e9:75:06:f8:08:bb:20:e2:ad:73:d4:94:ce:f7: a4:f9:8b:fc:f9:00:65:b7:9c:29:bb:26:53:28:cd:a5:40:3b: d4:e9:3b:c0:56:c1:7c:f7:4b:94:e9:8e:90:9c:f8:14:12:3c: a4:b1:c8:fd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4MjQxMTAvBgNVBAUTKDcyNzM4NTNEQTA2M0VGQ0I4RUM1NDRCMDMyMEQ1QTcw N0I5NEMwODkwHhcNMjUwNTMxMTYxMzM3WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiMmFiMS04MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzek2yoBKaJKlB7LGtxOEbB4p+yYNN4b6FD+rQxMt7qqwvKivwj8FRQulEPGs ly1g51xV+B3X+DK5oL8OhWaK4LJyM1Q04Aurm841wVi0Gl5bzaPZXXIu05KJSe1p kspRAaBOS6xge6qqI/A0nR1MNLbslI1h7OByg6C9pwEydajNms9ozqabIVnFnjmf LldxXAEC2mNro4oc/lmnSE9f3Vlct1TK1Ds4DaeJ89UZ11Q82ziucgSADQWdczUl /n1XqrSbeQKIxolPDisXBAA16tX1FJz96BvrCR2aDHaRycYCBfXu3RhkDggOprve mOG6FAARgxZLEFBlvCrC7wvhqQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMxiu8Mx Jm8q0tDg8Qsr0XIz0yxnMB8GA1UdIwQYMBaAFHJzhT2gY+/LjsVEsDINWnB7lMCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzgyNC9CQTBFRkU1MkZE MjUxMUU0OUQ5MzI3M0JDNEY5QUUwMi9jbk9GUGFCajc4dU94VVN3TWcxYWNIdVV3 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuT0ZQYUJqNzh1T3hVU3dNZzFhY0h1VXdJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjM4MjQvQkEwRUZFNTJGRDI1MTFFNDlEOTMyNzNCQzRGOUFFMDIvNEJCNjEwQzJF MTY1MTFFQzhFREY2NjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr70gDBAJn5VQwDQYJKoZIhvcNAQELBQADggEBAJSEuv5p WVudGkHD22wrFSXYdHNEcj8lx/p+Gwvlf1Fkd3Uwkto5zRBRvUuzrg0qDNyKQUNG iV8htQ+qKFQGL1vxGm9pPJuAabDkY/OO1nNO9wT6zCy/KyzYk5YcLIoIVq6SEwNv iO6nPjDQ2jALvjPFQlTYcJy8fC6isBGWl4CDCxnJr0/3HB2f9THp+0atOVHtG8TI aL7ZJxxw3Ke2M3F/6XK7v1YGb5M7eiocXs3Ohi6bQ4FKcL6PoaAmpgb3BXzgL/GA 9HPkUoPpdQb4CLsg4q1z1JTO96T5i/z5AGW3nCm7JlMozaVAO9TpO8BWwXz3S5Tp jpCc+BQSPKSxyP0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:47 2025 by rpki-client