$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa File: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (raw, json) Hash identifier: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw= Subject key identifier: 89:5D:E0:62:03:6D:33:E7:A8:9A:3D:5B:45:9B:9A:78:98:20:8C:88 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 1495 Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa Signing time: Sat 31 May 2025 16:58:08 +0000 ROA not before: Sat 31 May 2025 16:58:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135298 IP address blocks: 103.213.104.0/24 maxlen: 24 103.213.105.0/24 maxlen: 24 103.213.106.0/24 maxlen: 24 103.213.107.0/24 maxlen: 24 223.26.20.0/24 maxlen: 24 223.26.21.0/24 maxlen: 24 223.26.22.0/24 maxlen: 24 223.26.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5269 (0x1495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: May 31 16:58:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=683b351f-614c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:27:1e:87:9a:b2:4c:f3:7b:c2:66:54:dd: 18:28:4c:17:69:79:95:cc:8b:e7:1e:f1:64:f7:b3: c5:db:bc:c8:b5:26:e9:81:ba:2c:3f:0f:58:2f:3d: c1:f8:60:8f:2f:7b:d4:da:0d:96:e8:1b:ee:10:4c: ae:0b:f8:ea:41:d3:f0:8d:e8:54:84:43:03:85:60: 1d:27:c7:2e:aa:e1:60:b3:bd:ae:b0:3a:68:62:55: 35:fd:fa:ff:55:85:a1:75:9b:be:f8:99:0b:50:26: 8e:2e:9b:38:a5:1b:7f:4f:52:c3:41:d8:c8:98:79: e3:04:81:a8:8f:fb:a0:47:b4:1e:2b:2e:2a:fc:45: 4e:da:0c:42:d8:89:ab:ed:80:92:6f:26:40:92:8e: 80:fb:e6:c2:17:97:af:89:3e:36:e3:3d:9d:8c:ee: 20:ea:c9:e4:ae:36:45:56:00:2b:3a:f2:ec:c3:b7: 85:56:eb:21:8b:04:4f:4d:62:aa:d2:c8:fe:d4:ec: 39:7a:6c:27:46:5c:a2:83:e9:29:50:aa:32:9b:21: c6:64:e1:c6:b1:4f:cb:43:75:3f:b5:80:fe:cc:7e: 95:0a:8d:a3:30:f1:1e:c9:14:75:9a:42:bd:32:c9: b4:7b:90:9f:bd:af:54:86:03:17:80:69:5f:6a:52: 4a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5D:E0:62:03:6D:33:E7:A8:9A:3D:5B:45:9B:9A:78:98:20:8C:88 X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.104.0/22 223.26.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:f3:2f:a7:44:af:91:05:a4:40:f9:be:48:a6:64:b6:d3:a0: 58:ae:5e:30:47:4b:6d:b4:5f:e3:29:32:cb:0e:56:0b:42:71: b7:e5:ec:41:29:5c:23:22:e2:fc:63:57:cd:19:c7:f7:17:5a: 61:40:14:41:18:47:dc:60:c0:0a:e1:38:1a:03:1f:00:66:a1: 36:da:29:c9:07:45:2f:2b:fd:c4:34:4c:9c:2d:84:ff:25:7d: f6:20:03:9b:8f:79:34:4a:6f:0a:8f:c3:ed:40:25:6b:61:76: 9a:10:22:6e:27:a2:bb:d9:91:76:c4:07:38:54:45:0b:39:41: 6f:f9:a9:ea:cd:cb:23:47:0f:5f:ae:ce:a9:9e:74:dd:54:45: e9:74:18:09:fa:14:8b:6f:af:f1:a0:06:8c:80:58:d6:45:e6: 97:ee:89:97:fe:35:41:92:d3:43:54:82:0c:8e:93:13:61:41: 80:df:b2:8e:4f:1e:7e:09:dd:15:92:d3:d1:5f:3a:13:4e:b2: d0:66:62:36:da:f9:a3:1c:da:cb:37:08:94:3d:c6:40:b5:be: df:95:fb:07:c6:e2:b4:31:7c:b1:9d:9f:e4:0e:d0:37:e9:e4: 8e:ca:d2:7d:d7:f1:7f:5c:2a:2d:b4:76:0a:06:9f:db:3d:8d: 4b:5f:65:83 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUwNTMxMTY1ODA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiMzUxZi02MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoAnHoeaskzze8JmVN0YKEwXaXmVzIvnHvFk97PF27zItSbpgbosPw9YLz3B +GCPL3vU2g2W6BvuEEyuC/jqQdPwjehUhEMDhWAdJ8cuquFgs72usDpoYlU1/fr/ VYWhdZu++JkLUCaOLps4pRt/T1LDQdjImHnjBIGoj/ugR7QeKy4q/EVO2gxC2Imr 7YCSbyZAko6A++bCF5eviT424z2djO4g6snkrjZFVgArOvLsw7eFVushiwRPTWKq 0sj+1Ow5emwnRlyig+kpUKoymyHGZOHGsU/LQ3U/tYD+zH6VCo2jMPEeyRR1mkK9 Msm0e5Cfva9UhgMXgGlfalJKVQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIld4GID bTPnqJo9W0WbmniYIIyIMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTNGNzUvNzIwNkQ2RjQ2QzZGMTFFODlGNkU0RTY2QzRGOUFFMDIvQjE4NTFCQzZC M0Q4MTFFQTlGOEZDQTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJn1WgDBALfGhQwDQYJKoZIhvcNAQELBQADggEBAD7zL6dE r5EFpED5vkimZLbToFiuXjBHS220X+MpMssOVgtCcbfl7EEpXCMi4vxjV80Zx/cX WmFAFEEYR9xgwArhOBoDHwBmoTbaKckHRS8r/cQ0TJwthP8lffYgA5uPeTRKbwqP w+1AJWthdpoQIm4norvZkXbEBzhURQs5QW/5qerNyyNHD1+uzqmedN1URel0GAn6 FItvr/GgBoyAWNZF5pfuiZf+NUGS00NUggyOkxNhQYDfso5PHn4J3RWS09FfOhNO stBmYjba+aMc2ss3CJQ9xkC1vt+V+wfG4rQxfLGdn+QO0Dfp5I7K0n3X8X9cKi20 dgoGn9s9jUtfZYM= -----END CERTIFICATE-----Generated at Mon Jun 2 07:08:50 2025 by rpki-client