$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/8FAF120C25C211F09DF3175DC4F9AE02.roa File: 8FAF120C25C211F09DF3175DC4F9AE02.roa (raw, json) Hash identifier: gTU10zgFHanpQ1KWq4hJnCtv3CAB1reU+uvXNGAdKp4= Subject key identifier: 16:AC:81:74:54:8B:E9:81:F5:58:A9:6C:69:E7:49:69:4B:BA:1D:EA Certificate issuer: /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097 Certificate serial: 02BE Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/8FAF120C25C211F09DF3175DC4F9AE02.roa Signing time: Wed 30 Apr 2025 12:56:41 +0000 ROA not before: Wed 30 Apr 2025 12:56:41 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 151330 IP address blocks: 103.190.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A646, serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097 Validity Not Before: Apr 30 12:56:41 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68121e09-1736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:81:c5:0b:62:5f:e0:1c:66:4b:1b:76:fa:d3: e9:bd:9b:ca:c9:94:7c:f9:ea:54:df:fd:11:b1:f9: b7:2c:da:b9:90:eb:02:27:13:71:64:dd:24:1e:c0: b5:f3:96:61:61:b5:bb:c1:dc:9b:f5:48:40:86:80: 08:28:d9:5d:d8:03:9a:c2:3c:1f:47:f0:07:b1:9a: a6:b7:f2:40:4c:fd:5f:55:0d:27:06:6f:3d:bb:2e: 6f:3e:c6:49:32:f2:25:c4:b4:b6:5b:2a:df:b2:56: fa:12:7e:13:f8:2f:00:a3:8f:bd:8b:a5:36:5b:77: 37:a9:a4:84:cc:40:3f:da:ae:7a:be:16:1f:5f:6e: 1a:55:e8:1b:84:ed:5e:3d:5c:19:95:b3:c3:51:c7: 47:02:24:48:ee:58:58:3d:c0:e3:0d:44:14:1d:ea: a5:37:a9:fd:07:ee:13:6c:d5:54:c0:b4:77:eb:a2: 73:39:89:53:85:74:37:5b:67:f3:f3:3c:9b:ff:03: 08:35:f9:2a:df:50:6e:44:d1:e5:2d:bc:68:ab:fb: 41:8b:ab:6a:7f:67:e9:84:e0:8b:59:38:38:8f:b8: a8:0e:19:34:b4:5e:cd:68:93:f6:68:6f:69:b0:8d: e8:1b:09:81:64:7e:90:90:a3:ac:3b:94:8e:0c:c8: 72:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:AC:81:74:54:8B:E9:81:F5:58:A9:6C:69:E7:49:69:4B:BA:1D:EA X509v3 Authority Key Identifier: keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/8FAF120C25C211F09DF3175DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.22.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:f7:d4:b4:04:df:4f:da:d2:e6:89:65:0e:00:66:5d:d2:4d: 12:1d:8f:77:64:2e:48:bc:7c:8e:a6:27:e6:02:0a:6a:6f:78: 02:2d:65:c0:69:2a:a4:f0:82:39:f2:7c:1f:67:4a:6d:82:1a: df:b8:59:5c:e0:d0:82:7e:70:2b:5a:da:48:ce:82:cd:1b:c0: 2a:29:45:1f:2f:dd:88:43:32:b9:c2:7f:00:8b:b2:2d:d7:50: 23:55:6f:35:06:86:f3:5e:64:dd:13:86:ac:9d:74:0a:94:e7: 58:fe:94:de:2f:9b:9e:c5:2f:64:1d:54:03:9c:a9:cf:55:91: 1b:d1:8b:0b:5c:c7:7e:f0:f9:78:b4:b0:f9:7c:b2:f8:a2:46: ec:51:f0:63:0b:5f:3c:a5:f0:5b:27:22:31:d2:8d:4d:bb:a1: 4e:e7:12:eb:11:88:31:7c:75:0c:9e:c0:01:2d:fd:35:2b:28: 60:f6:0e:4a:9e:80:c2:d5:db:00:aa:0c:05:23:0c:79:93:0f: 00:5e:78:e5:70:a5:f8:9d:bb:6d:ce:ec:47:8f:b6:d9:37:09: 2f:3e:a2:7d:a5:ec:5c:1a:48:db:4b:91:ae:5c:f5:f5:98:76: 18:22:d0:4c:a2:72:6f:66:c3:64:d2:24:3a:13:4d:a2:7e:48: b0:aa:41:15 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2NDYxMTAvBgNVBAUTKDNGQjM1ODI0NzBFRDAzRjE5NDM1RTY5QjJDMTlCNDA3 NDc3MEYwOTcwHhcNMjUwNDMwMTI1NjQxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyMWUwOS0xNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmoHFC2Jf4BxmSxt2+tPpvZvKyZR8+epU3/0Rsfm3LNq5kOsCJxNxZN0kHsC1 85ZhYbW7wdyb9UhAhoAIKNld2AOawjwfR/AHsZqmt/JATP1fVQ0nBm89uy5vPsZJ MvIlxLS2Wyrfslb6En4T+C8Ao4+9i6U2W3c3qaSEzEA/2q56vhYfX24aVegbhO1e PVwZlbPDUcdHAiRI7lhYPcDjDUQUHeqlN6n9B+4TbNVUwLR366JzOYlThXQ3W2fz 8zyb/wMINfkq31BuRNHlLbxoq/tBi6tqf2fphOCLWTg4j7ioDhk0tF7NaJP2aG9p sI3oGwmBZH6QkKOsO5SODMhyNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBasgXRU i+mB9VipbGnnSWlLuh3qMB8GA1UdIwQYMBaAFD+zWCRw7QPxlDXmmywZtAdHcPCX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTY0Ni8yRjYzOUVCMEY1 ODUxMUVDODdGNkZFMTNDNEY5QUUwMi9QN05ZSkhEdEFfR1VOZWFiTEJtMEIwZHc4 SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3TllKSER0QV9HVU5lYWJMQm0wQjBkdzhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkE2NDYvMkY2MzlFQjBGNTg1MTFFQzg3RjZGRTEzQzRGOUFFMDIvOEZBRjEyMEMy NUMyMTFGMDlERjMxNzVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvhYwDQYJKoZIhvcNAQELBQADggEBAHv31LQE30/a0uaJ ZQ4AZl3STRIdj3dkLki8fI6mJ+YCCmpveAItZcBpKqTwgjnyfB9nSm2CGt+4WVzg 0IJ+cCta2kjOgs0bwCopRR8v3YhDMrnCfwCLsi3XUCNVbzUGhvNeZN0ThqyddAqU 51j+lN4vm57FL2QdVAOcqc9VkRvRiwtcx37w+Xi0sPl8sviiRuxR8GMLXzyl8Fsn IjHSjU27oU7nEusRiDF8dQyewAEt/TUrKGD2DkqegMLV2wCqDAUjDHmTDwBeeOVw pfidu23O7EePttk3CS8+on2l7FwaSNtLka5c9fWYdhgi0Eyicm9mw2TSJDoTTaJ+ SLCqQRU= -----END CERTIFICATE-----Generated at Wed May 14 20:22:14 2025 by rpki-client