$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/64BBCC50909D11ED9EA9867FC4F9AE02.roa File: 64BBCC50909D11ED9EA9867FC4F9AE02.roa (raw, json) Hash identifier: xg099yR4eAC7wbvaBb8dUHM2paW9Jui6a4WnYhNuuAw= Subject key identifier: 8A:31:2D:B2:60:ED:CD:EB:F1:23:3B:AB:3E:E1:79:AF:20:EE:54:64 Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Certificate serial: 1035 Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/64BBCC50909D11ED9EA9867FC4F9AE02.roa Signing time: Fri 06 Jun 2025 18:20:46 +0000 ROA not before: Fri 06 Jun 2025 18:20:46 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139005 IP address blocks: 103.138.130.0/24 maxlen: 24 2405:e40::/45 maxlen: 45 2405:e40:100::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:41:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4149 (0x1035) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Validity Not Before: Jun 6 18:20:46 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6843317e-f41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:93:40:6e:5e:ed:2c:2e:8c:b4:77:52:15: 30:d7:c2:f0:6b:3d:b3:38:e2:0b:af:53:91:78:18: 20:c7:7e:c2:6e:40:92:79:b0:d2:ac:3c:21:b2:c7: c9:c7:6b:6f:b3:f5:8d:1f:f2:f0:70:cb:af:d5:1e: 7c:db:a0:2b:d9:49:18:7a:76:69:3e:99:54:04:db: 0f:c5:e7:80:70:63:7a:72:e0:c0:95:9b:bd:23:09: a4:54:80:aa:8b:82:06:b1:41:72:33:96:82:30:a3: 56:7d:95:8d:da:e8:d7:58:07:03:fa:78:31:9f:46: a8:57:91:24:ad:80:2f:21:2b:1e:b0:23:98:f8:7f: 00:a8:21:cb:d7:1b:27:bf:1b:37:77:4d:85:6d:df: 33:1e:dd:72:cb:c1:30:0c:02:e2:0c:fb:4a:12:86: 12:23:d6:29:08:e7:8e:fc:f0:29:a8:35:ad:0f:4a: 1e:7a:ba:f6:62:9b:04:9f:c5:93:da:02:e7:76:3c: 88:aa:c3:b1:54:9c:8c:33:62:b4:8f:11:b9:11:7f: 54:6c:6b:b7:03:6a:c0:66:52:1d:86:bb:49:20:66: ca:f8:e8:9c:e2:90:53:c5:f3:28:27:c8:f0:45:04: 6c:c3:30:f5:ca:d6:3b:52:51:ce:7c:a7:56:3b:22: c5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:31:2D:B2:60:ED:CD:EB:F1:23:3B:AB:3E:E1:79:AF:20:EE:54:64 X509v3 Authority Key Identifier: keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/64BBCC50909D11ED9EA9867FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.130.0/24 IPv6: 2405:e40::/45 2405:e40:100::/45 Signature Algorithm: sha256WithRSAEncryption 1f:54:be:bf:d8:d1:ca:c5:fc:b1:da:51:a9:9e:26:70:83:27: c0:19:8a:91:86:b8:29:d9:99:c9:ed:04:d4:c3:0a:70:e7:21: f9:ee:45:1b:1a:d5:0c:c9:12:00:b0:a9:57:54:eb:f9:b6:a0: e3:05:6e:a0:47:ed:70:55:db:20:27:c7:3e:21:49:5e:36:68: 9a:94:58:54:f9:c0:7a:b9:0d:50:4c:d6:df:87:f5:fe:2f:dc: fd:f3:6a:cb:4a:fe:ef:0a:d0:f8:a3:71:07:c1:96:ae:0c:b8: 7e:20:c4:d7:58:50:09:9e:d8:6e:5d:61:de:c1:c5:99:71:e7: 1b:0d:31:38:47:9c:f3:40:8c:9d:50:ce:a6:e5:93:7a:93:d8: 68:85:48:18:04:fc:96:98:32:ff:2d:00:2e:ab:35:98:9e:cd: 2d:59:3d:25:fe:87:e7:9b:45:ab:f4:1e:a7:70:4c:4a:4b:7f: c9:fb:b9:3b:0e:2c:7e:7d:a6:9e:89:1f:4a:15:e1:5a:b2:5a: 83:03:25:fa:3c:0d:8a:64:d2:c3:22:6f:86:b8:ec:51:b3:d8: 45:fe:0d:9f:11:8e:f0:ac:90:e6:f6:b2:59:a4:1d:2e:1b:57: 64:2b:2e:96:50:22:fd:23:51:77:1b:83:99:11:60:4c:6f:94: 3e:06:38:61 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICEDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy MzNGQzVCNTAwHhcNMjUwNjA2MTgyMDQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzMzE3ZS1mNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUOTQG5e7SwujLR3UhUw18Lwaz2zOOILr1OReBggx37CbkCSebDSrDwhssfJ x2tvs/WNH/LwcMuv1R5826Ar2UkYenZpPplUBNsPxeeAcGN6cuDAlZu9IwmkVICq i4IGsUFyM5aCMKNWfZWN2ujXWAcD+ngxn0aoV5EkrYAvISsesCOY+H8AqCHL1xsn vxs3d02Fbd8zHt1yy8EwDALiDPtKEoYSI9YpCOeO/PApqDWtD0oeerr2YpsEn8WT 2gLndjyIqsOxVJyMM2K0jxG5EX9UbGu3A2rAZlIdhrtJIGbK+Oic4pBTxfMoJ8jw RQRswzD1ytY7UlHOfKdWOyLFmwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFIoxLbJg 7c3r8SM7qz7hea8g7lRkMB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0 RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzBGNEIvNTc3MkFBMzA1NEU0MTFFOTg1MzZGNjU5QzRGOUFFMDIvNjRCQkNDNTA5 MDlEMTFFRDlFQTk4NjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABnioIwGAQCAAIwEgMHAyQFDkAAAAMHAyQFDkABADANBgkq hkiG9w0BAQsFAAOCAQEAH1S+v9jRysX8sdpRqZ4mcIMnwBmKkYa4KdmZye0E1MMK cOch+e5FGxrVDMkSALCpV1Tr+bag4wVuoEftcFXbICfHPiFJXjZompRYVPnAerkN UEzW34f1/i/c/fNqy0r+7wrQ+KNxB8GWrgy4fiDE11hQCZ7Ybl1h3sHFmXHnGw0x OEec80CMnVDOpuWTepPYaIVIGAT8lpgy/y0ALqs1mJ7NLVk9Jf6H55tFq/Qep3BM Skt/yfu5Ow4sfn2mnokfShXhWrJagwMl+jwNimTSwyJvhrjsUbPYRf4NnxGO8KyQ 5vayWaQdLhtXZCsullAi/SNRdxuDmRFgTG+UPgY4YQ== -----END CERTIFICATE-----Generated at Fri Jul 4 08:28:34 2025 by rpki-client