$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/00C137A2BE7911E990831772C4F9AE02.roa File: 00C137A2BE7911E990831772C4F9AE02.roa (raw, json) Hash identifier: T1EiYlg921dIuqeleHn3qhJut72TmCqiSVWqxjVEiGY= Subject key identifier: 39:77:18:4C:CE:A5:C8:F1:E9:26:68:92:70:52:A8:52:A2:1C:B2:FC Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 34BD Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/00C137A2BE7911E990831772C4F9AE02.roa Signing time: Fri 24 Jan 2025 16:02:21 +0000 ROA not before: Fri 24 Jan 2025 16:02:21 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 136079 IP address blocks: 103.86.100.0/23 maxlen: 24 2405:2cc0::/32 maxlen: 32 2405:2cc0:600d::/48 maxlen: 48 2405:2cc0:600e::/48 maxlen: 48 2405:2cc0:600f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 15:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13501 (0x34bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214 Validity Not Before: Jan 24 16:02:21 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6793b98d-1bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:50:ae:bc:03:5b:c7:ec:04:20:91:f8:60: 59:1b:08:b3:be:d6:98:46:81:96:40:8a:41:3e:d8: 93:12:50:9a:8a:4f:0b:18:c4:e8:19:83:e4:5d:22: 2a:99:81:d1:52:5a:99:98:2f:a0:ce:ce:f8:4e:c2: 7a:f1:9d:80:ba:80:2c:dd:0c:f1:1b:40:4b:e6:a6: 79:81:7f:1e:0e:c5:95:d0:88:4d:48:60:87:31:6f: 3a:6f:de:33:b3:f0:cc:25:44:90:b3:26:3a:74:81: 9c:01:40:eb:77:ca:2e:e7:cb:18:96:42:58:ee:31: 65:e6:37:96:93:95:c2:ba:83:a9:9e:83:4a:1f:3a: 9c:16:af:d4:c1:52:ec:f3:42:a3:0f:e9:78:f8:e0: 80:46:89:90:7a:b7:47:5e:dc:7a:1b:cc:eb:9c:37: 73:e0:9c:1b:6f:e5:52:dc:ea:52:41:45:d6:ea:4b: 7b:37:f9:94:c2:a2:8d:71:1b:93:d1:20:c3:0f:50: c0:f4:49:bf:b5:d3:b1:2b:6a:03:6a:da:0e:ce:87: 1f:68:6f:1a:22:d0:8b:da:64:ec:28:7f:50:e9:b1: c4:15:5c:7a:3f:21:7d:5e:79:11:b1:45:54:21:75: 51:37:5c:48:85:a4:de:7d:c2:58:9d:b8:da:db:8b: ca:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:77:18:4C:CE:A5:C8:F1:E9:26:68:92:70:52:A8:52:A2:1C:B2:FC X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/00C137A2BE7911E990831772C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.100.0/23 IPv6: 2405:2cc0::/32 Signature Algorithm: sha256WithRSAEncryption 33:c2:f8:cf:1d:94:bc:88:5b:46:1a:4c:31:76:8a:00:2c:45: b7:54:ee:10:9d:47:65:59:ac:a8:72:3b:9c:dc:35:ba:22:4d: 9a:1d:66:cc:80:f8:39:ae:ab:af:ad:73:a4:b3:45:36:74:a7: 9e:8c:84:b1:53:c4:50:02:2e:dc:c0:8a:4e:e9:16:6a:5b:33: b1:3c:53:00:45:d1:7d:49:b1:d4:85:93:94:18:e3:02:91:8e: bc:41:b5:ee:4a:5a:d4:ef:ba:03:ac:13:1e:da:bb:89:19:cc: ec:b5:20:39:26:2f:b1:8b:b3:85:d9:ef:e9:fd:9f:d8:6e:34: 95:71:ce:3c:e3:21:56:bd:6c:b9:3e:90:b5:cb:26:01:d6:c8: fc:62:fa:88:63:37:0f:4a:54:82:6d:c9:60:28:5e:9c:a1:4b: 85:28:92:7d:8d:a7:5e:8c:dd:9d:a3:8b:3d:bb:23:88:d3:52: 0a:07:f6:e1:88:c8:1d:55:83:01:b9:1b:b3:a2:94:ad:eb:c3: ba:5b:3c:d3:e8:f6:62:4c:b7:fc:21:1a:c6:be:3b:ac:8d:ad: f2:a5:d6:60:d1:1d:82:5b:e1:96:13:c7:fc:69:fc:03:bc:58: 64:6c:80:3b:7e:7d:6e:6d:29:81:5f:8f:1d:4d:38:9b:9c:b7: d8:05:03:94 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwMTI0MTYwMjIxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkzYjk4ZC0xYmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRZQrrwDW8fsBCCR+GBZGwizvtaYRoGWQIpBPtiTElCaik8LGMToGYPkXSIq mYHRUlqZmC+gzs74TsJ68Z2AuoAs3QzxG0BL5qZ5gX8eDsWV0IhNSGCHMW86b94z s/DMJUSQsyY6dIGcAUDrd8ou58sYlkJY7jFl5jeWk5XCuoOpnoNKHzqcFq/UwVLs 80KjD+l4+OCARomQerdHXtx6G8zrnDdz4Jwbb+VS3OpSQUXW6kt7N/mUwqKNcRuT 0SDDD1DA9Em/tdOxK2oDatoOzocfaG8aItCL2mTsKH9Q6bHEFVx6PyF9XnkRsUVU IXVRN1xIhaTefcJYnbja24vK4wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDl3GEzO pcjx6SZoknBSqFKiHLL8MB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMDBDMTM3QTJC RTc5MTFFOTkwODMxNzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnVmQwDQQCAAIwBwMFACQFLMAwDQYJKoZIhvcNAQELBQAD ggEBADPC+M8dlLyIW0YaTDF2igAsRbdU7hCdR2VZrKhyO5zcNboiTZodZsyA+Dmu q6+tc6SzRTZ0p56MhLFTxFACLtzAik7pFmpbM7E8UwBF0X1JsdSFk5QY4wKRjrxB te5KWtTvugOsEx7au4kZzOy1IDkmL7GLs4XZ7+n9n9huNJVxzjzjIVa9bLk+kLXL JgHWyPxi+ohjNw9KVIJtyWAoXpyhS4Uokn2Np16M3Z2jiz27I4jTUgoH9uGIyB1V gwG5G7OilK3rw7pbPNPo9mJMt/whGsa+O6yNrfKl1mDRHYJb4ZYTx/xp/AO8WGRs gDt+fW5tKYFfjx1NOJuct9gFA5Q= -----END CERTIFICATE-----Generated at Mon Apr 7 17:01:04 2025 by rpki-client