$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa File: 0259CB6ABE7911E990831772C4F9AE02.roa (raw, json) Hash identifier: wKOBp6pfgzScIqq1Y5Aq/wLs5uR6pO+UMIgkXEbqkKM= Subject key identifier: 31:09:4F:3F:CE:DB:FE:8B:06:5E:FF:87:B0:98:1F:C9:98:B9:AF:43 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 34D5 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa Signing time: Fri 24 Jan 2025 16:02:44 +0000 ROA not before: Fri 24 Jan 2025 16:02:44 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 55674 IP address blocks: 101.203.168.0/22 maxlen: 24 2405:b40::/32 maxlen: 32 2405:b40::/48 maxlen: 48 2405:b40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214 Validity Not Before: Jan 24 16:02:44 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6793b9a3-b51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:6d:4c:84:87:27:f3:8d:20:f4:96:6b:74: 2c:1b:5c:0e:80:68:f8:d1:02:03:a7:b1:10:b2:b3: a5:36:0a:a9:cd:9b:32:4d:09:82:38:aa:67:c6:8e: 0d:6b:ed:8b:f7:a9:28:78:2f:fb:5c:c0:5a:2a:cf: 22:94:f0:37:83:82:db:cd:41:69:4b:e6:22:29:ea: ac:c5:36:37:97:0b:b6:06:79:c2:d4:8e:c1:d5:48: ab:c6:7a:b4:01:fa:3d:90:8c:b2:51:be:34:36:4d: f2:99:e0:bd:93:59:e7:9c:4a:d6:54:ac:f7:ad:79: 12:b3:46:34:95:73:18:a3:43:96:ac:6c:62:63:c6: 31:79:d4:76:96:f8:08:89:66:2a:34:01:9e:56:d1: 0c:65:f6:de:51:6a:26:aa:55:9b:23:08:3f:2f:35: 91:c4:80:27:25:ff:fb:af:7d:e4:8b:73:3e:8a:5c: 68:c3:92:bf:8c:19:08:63:11:7e:2b:38:6f:2a:6e: 4d:2c:f6:4c:ca:0f:be:6b:23:31:b0:5d:dc:8a:f2: 2e:fa:da:b4:90:d2:5c:f0:6d:24:71:6a:53:85:02: b1:cb:e3:fb:b6:d6:2f:83:c2:ab:29:6f:95:51:21: b6:6a:8b:de:5e:62:67:d0:e2:f4:1a:f1:19:11:b6: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:09:4F:3F:CE:DB:FE:8B:06:5E:FF:87:B0:98:1F:C9:98:B9:AF:43 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/0259CB6ABE7911E990831772C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.203.168.0/22 IPv6: 2405:b40::/32 Signature Algorithm: sha256WithRSAEncryption 1b:ee:70:77:c1:e7:cf:80:13:da:ce:dc:67:36:fc:ce:1e:fc: d8:58:b2:08:10:e1:8f:9f:ad:1d:3f:f7:2c:2e:c1:d6:53:b7: 44:65:77:9b:a4:87:97:89:8e:0a:82:a5:cc:c5:96:e4:3e:8e: 6f:7b:e9:23:d7:96:5f:8d:f4:c9:db:38:f9:77:0e:5f:17:a4: c4:0c:30:62:8b:f6:b7:d6:bf:af:8a:a4:52:ee:7c:3c:63:00: 9a:64:44:48:0f:bc:8d:98:20:d3:20:d7:33:3e:74:c3:84:fb: 45:fa:4a:0d:61:9d:bf:b2:f7:59:4d:e6:89:58:53:2b:6c:77: 15:1a:5d:73:f9:0b:58:ad:5d:ac:51:dc:42:59:82:f0:0a:74: 0c:92:56:a9:60:dd:36:0f:f7:9e:c8:d6:ff:b4:58:b6:09:40: 79:22:16:8f:90:12:3b:a5:96:7f:ea:bb:18:a1:f8:11:80:d1: 1b:95:42:c0:a1:43:04:6e:c6:39:f3:92:4d:9d:51:43:3f:19: 27:ae:0c:79:63:d3:26:9a:fa:16:64:21:dd:c9:af:2b:c5:5d: 6c:3e:9f:22:19:f5:63:bf:19:86:67:5a:38:24:1e:02:26:ab: 7f:75:10:7e:a5:46:e9:0a:3d:03:12:ea:84:9e:7e:79:01:56: 86:37:15:b5 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwMTI0MTYwMjQ0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkzYjlhMy1iNTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvJtTISHJ/ONIPSWa3QsG1wOgGj40QIDp7EQsrOlNgqpzZsyTQmCOKpnxo4N a+2L96koeC/7XMBaKs8ilPA3g4LbzUFpS+YiKeqsxTY3lwu2BnnC1I7B1Uirxnq0 Afo9kIyyUb40Nk3ymeC9k1nnnErWVKz3rXkSs0Y0lXMYo0OWrGxiY8YxedR2lvgI iWYqNAGeVtEMZfbeUWomqlWbIwg/LzWRxIAnJf/7r33ki3M+ilxow5K/jBkIYxF+ KzhvKm5NLPZMyg++ayMxsF3civIu+tq0kNJc8G0kcWpThQKxy+P7ttYvg8KrKW+V USG2aoveXmJn0OL0GvEZEbYKhwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDEJTz/O 2/6LBl7/h7CYH8mYua9DMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvMDI1OUNCNkFC RTc5MTFFOTkwODMxNzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJly6gwDQQCAAIwBwMFACQFC0AwDQYJKoZIhvcNAQELBQAD ggEBABvucHfB58+AE9rO3Gc2/M4e/NhYsggQ4Y+frR0/9ywuwdZTt0Rld5ukh5eJ jgqCpczFluQ+jm976SPXll+N9MnbOPl3Dl8XpMQMMGKL9rfWv6+KpFLufDxjAJpk REgPvI2YINMg1zM+dMOE+0X6Sg1hnb+y91lN5olYUytsdxUaXXP5C1itXaxR3EJZ gvAKdAySVqlg3TYP957I1v+0WLYJQHkiFo+QEjulln/quxih+BGA0RuVQsChQwRu xjnzkk2dUUM/GSeuDHlj0yaa+hZkId3JryvFXWw+nyIZ9WO/GYZnWjgkHgImq391 EH6lRukKPQMS6oSefnkBVoY3FbU= -----END CERTIFICATE-----Generated at Sun Apr 6 19:28:53 2025 by rpki-client