$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/E2C265C67BE311EB9D056E55C4F9AE02.roa File: E2C265C67BE311EB9D056E55C4F9AE02.roa (raw, json) Hash identifier: oZbB/pIobWeTV4wiPSlvpWSXijzBRn5vYtVv79GPhtg= Subject key identifier: 50:7C:40:D7:66:60:1A:3D:37:79:E6:BC:7A:91:94:6E:65:A3:94:AD Certificate issuer: /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Certificate serial: 068A Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/E2C265C67BE311EB9D056E55C4F9AE02.roa Signing time: Tue 06 May 2025 22:33:31 +0000 ROA not before: Tue 06 May 2025 22:33:31 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 138968 IP address blocks: 103.100.156.0/22 maxlen: 24 103.137.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:09:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119F89, serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820 Validity Not Before: May 6 22:33:31 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681a8e3b-ce50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:46:d3:93:6b:33:db:27:a8:19:e9:15:e3:d6: dc:da:8b:82:bf:4f:c2:e3:99:c6:4f:23:5e:31:d4: f8:91:11:63:63:85:5b:dc:26:1b:b8:61:2a:f1:1f: 77:8b:6e:4e:1f:8f:84:2e:4e:88:26:c3:1f:92:f7: ec:4b:f8:77:7d:a2:ef:57:bf:ef:d0:e6:f8:0e:fc: c1:84:00:90:cd:82:fb:14:7a:df:23:2e:ec:1a:f8: 85:56:5d:99:50:1c:14:ea:b5:61:dc:1d:03:ce:d0: 0c:45:c5:e8:d1:9a:14:b8:41:7b:e0:95:58:e0:33: 7a:19:b3:27:0e:1f:25:a9:95:bb:1b:33:82:f1:08: 7a:1a:82:75:3b:4c:9a:65:ea:78:df:be:c5:48:22: 68:1e:98:ac:05:b7:df:aa:88:88:34:38:cf:34:79: f1:61:9d:16:d4:25:d3:4a:d1:76:e6:59:8d:39:f7: 98:46:a8:af:39:e8:9a:4c:3f:61:2a:a8:2a:48:a1: 23:35:87:48:1e:e4:d5:20:69:29:88:4e:a0:87:b7: 67:6e:9e:d4:82:21:89:4b:66:47:7c:d7:35:9d:20: 82:b9:90:2a:77:71:4a:2a:87:fa:05:0d:bd:be:14: 71:1e:84:fc:87:34:4f:22:73:50:b7:82:ce:74:4c: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7C:40:D7:66:60:1A:3D:37:79:E6:BC:7A:91:94:6E:65:A3:94:AD X509v3 Authority Key Identifier: keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/E2C265C67BE311EB9D056E55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.100.156.0/22 103.137.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:68:e4:8f:a0:b1:f0:e6:18:eb:e9:39:7b:8d:1e:05:cf:e1: 70:9f:6d:86:93:53:39:62:a4:94:7b:e8:4d:90:cd:ff:e2:48: 3b:5a:93:8c:16:19:91:3c:1b:b9:50:07:7a:02:44:69:e4:94: 3c:10:48:43:bc:9c:42:6f:1e:1c:0c:17:52:fa:06:a3:d5:88: 62:3c:a1:8b:ac:fa:aa:5b:08:8f:27:ac:c1:5d:5d:5e:0a:64: 5c:f4:78:c7:68:60:3f:9a:23:74:90:a8:7b:c9:99:45:48:da: cb:5e:cb:7b:22:4f:07:43:df:0f:26:cc:03:51:4a:f3:a1:c9: 30:ec:b0:41:1c:ac:11:0f:41:a0:1a:63:5f:94:7f:9c:1b:ac: 7c:71:2c:8d:8d:62:45:1d:25:7d:82:af:ff:e5:18:8a:f5:4b: 56:73:ff:14:ad:b8:3b:4c:72:d5:10:f4:da:92:0b:ab:f9:3a: b7:7c:86:bf:8c:53:4e:fd:5c:f1:ed:53:dd:62:7a:bb:3a:46: 72:76:87:47:f8:78:19:35:f6:58:1c:34:7c:bf:0d:43:de:2b: 71:a5:11:55:97:3f:71:2c:42:3c:c0:a8:a3:04:ea:1c:8e:5a: 09:93:a1:a5:c9:68:27:80:0e:22:56:ac:cc:e4:ad:ec:34:26: 25:f7:44:bb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlGODkxMTAvBgNVBAUTKDU1MDg4QTMxNUJDQjUwOThCRUVGNjY1QUE5Q0JERkQz MkEyMDU4MjAwHhcNMjUwNTA2MjIzMzMxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhOGUzYi1jZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukbTk2sz2yeoGekV49bc2ouCv0/C45nGTyNeMdT4kRFjY4Vb3CYbuGEq8R93 i25OH4+ELk6IJsMfkvfsS/h3faLvV7/v0Ob4DvzBhACQzYL7FHrfIy7sGviFVl2Z UBwU6rVh3B0DztAMRcXo0ZoUuEF74JVY4DN6GbMnDh8lqZW7GzOC8Qh6GoJ1O0ya Zep4377FSCJoHpisBbffqoiINDjPNHnxYZ0W1CXTStF25lmNOfeYRqivOeiaTD9h KqgqSKEjNYdIHuTVIGkpiE6gh7dnbp7UgiGJS2ZHfNc1nSCCuZAqd3FKKof6BQ29 vhRxHoT8hzRPInNQt4LOdEwxcQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFB8QNdm YBo9N3nmvHqRlG5lo5StMB8GA1UdIwQYMBaAFFUIijFby1CYvu9mWqnL39MqIFgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUY4OS9EMzVBQTVBQTdC RTExMUVCOEZGNUY3NTJDNEY5QUUwMi9WUWlLTVZ2TFVKaS03MlphcWN2ZjB5b2dX Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZRaUtNVnZMVUppLTcyWmFxY3ZmMHlvZ1dDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlGODkvRDM1QUE1QUE3QkUxMTFFQjhGRjVGNzUyQzRGOUFFMDIvRTJDMjY1QzY3 QkUzMTFFQjlEMDU2RTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnZJwDBAJnidQwDQYJKoZIhvcNAQELBQADggEBAG5o5I+g sfDmGOvpOXuNHgXP4XCfbYaTUzlipJR76E2Qzf/iSDtak4wWGZE8G7lQB3oCRGnk lDwQSEO8nEJvHhwMF1L6BqPViGI8oYus+qpbCI8nrMFdXV4KZFz0eMdoYD+aI3SQ qHvJmUVI2stey3siTwdD3w8mzANRSvOhyTDssEEcrBEPQaAaY1+Uf5wbrHxxLI2N YkUdJX2Cr//lGIr1S1Zz/xStuDtMctUQ9NqSC6v5Ord8hr+MU079XPHtU91iers6 RnJ2h0f4eBk19lgcNHy/DUPeK3GlEVWXP3EsQjzAqKME6hyOWgmToaXJaCeADiJW rMzkrew0JiX3RLs= -----END CERTIFICATE-----Generated at Wed May 14 14:59:26 2025 by rpki-client