$ rpki-client -vvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/D34372461C8D11E9B21BD858C4F9AE02.roa File: D34372461C8D11E9B21BD858C4F9AE02.roa (raw, json) Hash identifier: KJiYW9fyvj2KonkdW9uDFpKuQ1dT83diO/QTtAE0e3A= Subject key identifier: 07:BD:20:F3:0A:C4:FF:C6:34:6A:4B:AD:8C:5A:29:72:85:3C:2B:EA Certificate issuer: /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Certificate serial: 1844 Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/D34372461C8D11E9B21BD858C4F9AE02.roa Signing time: Tue 04 Feb 2025 16:54:18 +0000 ROA not before: Tue 04 Feb 2025 16:54:18 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136184 IP address blocks: 103.83.88.0/22 maxlen: 22 103.83.88.0/24 maxlen: 24 103.83.89.0/24 maxlen: 24 103.83.90.0/24 maxlen: 24 103.83.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6212 (0x1844) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6 Validity Not Before: Feb 4 16:54:18 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a2463a-832e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:da:f3:ac:16:98:b0:d0:92:c3:2b:d5:6a:6e: 12:12:ce:55:9a:f0:be:48:e2:6b:3d:7b:8c:5c:2a: c3:ec:e6:e2:2e:ae:18:40:b5:8d:5c:02:aa:56:81: f1:62:18:26:74:76:8b:98:82:ed:2c:b2:51:35:01: 25:6f:db:c8:40:16:29:96:be:39:ae:17:72:e3:dd: 18:d5:97:8c:d4:d7:e0:24:bf:9e:3c:b7:5a:94:10: 03:25:31:f3:e5:75:c0:7a:36:b9:e7:6b:ae:d6:5e: c6:13:16:9a:c0:a0:16:fe:e7:fd:b8:da:ae:66:91: 13:1e:db:43:1d:d9:11:02:2c:b8:e2:5b:ea:bc:16: 80:01:fa:62:6a:86:1a:92:c2:3e:57:cf:2f:ee:4e: e4:59:0d:26:f5:fa:c2:d7:70:36:b9:7e:bc:63:c0: 05:c9:f2:aa:ed:bc:57:3a:65:30:28:3d:80:fc:fc: 44:e8:f0:76:93:9a:54:19:9c:2b:1e:ff:32:0c:25: 2e:9c:19:bf:a7:3d:8a:88:bd:85:c3:93:59:31:cc: e4:80:8e:30:01:62:a6:35:d5:18:c8:67:41:c2:d7: 7e:3a:3b:73:62:8b:c0:de:05:f0:2b:87:46:92:9b: 2f:e6:8e:dc:78:f8:20:6d:77:b1:a3:4f:9d:9c:51: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BD:20:F3:0A:C4:FF:C6:34:6A:4B:AD:8C:5A:29:72:85:3C:2B:EA X509v3 Authority Key Identifier: keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/D34372461C8D11E9B21BD858C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.83.88.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:a7:c6:35:ad:95:22:bc:7f:e0:5b:f0:88:7e:f9:9e:2e:ee: 79:c1:87:ff:13:23:73:cc:2d:95:4f:19:26:84:9e:a0:72:48: 8e:98:36:ad:fa:0b:bf:8b:50:c8:4b:38:1a:15:4e:55:c2:81: d7:95:f9:8f:5e:22:91:c6:0d:4d:bf:0a:44:c8:61:4b:d3:4c: 09:fe:ae:51:e3:e5:29:51:88:0f:2d:b2:db:ab:6b:5f:f6:42: 7d:2d:a6:15:9f:6f:ec:63:90:12:91:e1:3d:e1:3d:ac:98:9a: 28:d0:e9:6e:14:44:96:c1:84:42:6f:a1:90:ce:8f:49:ad:97: 68:d9:dc:a9:02:48:a9:af:a4:78:85:f5:a9:9e:52:1f:9a:a2: c5:17:cb:f5:34:72:6f:b2:53:a7:7b:0b:39:bc:90:4b:1d:50: 3f:1a:98:d4:6d:f9:ff:d8:76:24:32:ec:d2:1d:f1:d8:04:a7: ab:0a:59:2a:b0:04:19:ec:7e:3f:c7:45:4d:d8:7f:21:7d:96: d8:3c:9e:6b:2e:d0:72:c3:40:88:d5:9c:55:60:70:ee:e8:b6: ec:28:1b:4a:0a:91:99:1b:1a:89:71:ad:53:40:33:6c:19:f9: ca:88:3d:6d:6d:19:aa:ee:1b:80:0f:cb:83:b0:b7:ea:f9:f9: 47:d4:d4:81 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM5NTMxMTAvBgNVBAUTKDFFNjc4QzZBMjE3RDcxNUIzMEQ5Q0IyMkQ1Rjg4NEQx N0M1Njk5QjYwHhcNMjUwMjA0MTY1NDE4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyNDYzYS04MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9rzrBaYsNCSwyvVam4SEs5VmvC+SOJrPXuMXCrD7ObiLq4YQLWNXAKqVoHx YhgmdHaLmILtLLJRNQElb9vIQBYplr45rhdy490Y1ZeM1NfgJL+ePLdalBADJTHz 5XXAeja552uu1l7GExaawKAW/uf9uNquZpETHttDHdkRAiy44lvqvBaAAfpiaoYa ksI+V88v7k7kWQ0m9frC13A2uX68Y8AFyfKq7bxXOmUwKD2A/PxE6PB2k5pUGZwr Hv8yDCUunBm/pz2KiL2Fw5NZMczkgI4wAWKmNdUYyGdBwtd+OjtzYovA3gXwK4dG kpsv5o7cePggbXexo0+dnFFDcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAe9IPMK xP/GNGpLrYxaKXKFPCvqMB8GA1UdIwQYMBaAFB5njGohfXFbMNnLItX4hNF8Vpm2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzk1My8xMjJEOEQyOEE0 OTYxMUU3QTkyNkVENERDNEY5QUUwMi9IbWVNYWlGOWNWc3cyY3NpMWZpRTBYeFdt YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0htZU1haUY5Y1ZzdzJjc2kxZmlFMFh4V21iWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM5NTMvMTIyRDhEMjhBNDk2MTFFN0E5MjZFRDREQzRGOUFFMDIvRDM0MzcyNDYx QzhEMTFFOUIyMUJEODU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnU1gwDQYJKoZIhvcNAQELBQADggEBACynxjWtlSK8f+Bb 8Ih++Z4u7nnBh/8TI3PMLZVPGSaEnqBySI6YNq36C7+LUMhLOBoVTlXCgdeV+Y9e IpHGDU2/CkTIYUvTTAn+rlHj5SlRiA8tstura1/2Qn0tphWfb+xjkBKR4T3hPayY mijQ6W4URJbBhEJvoZDOj0mtl2jZ3KkCSKmvpHiF9ameUh+aosUXy/U0cm+yU6d7 Czm8kEsdUD8amNRt+f/YdiQy7NId8dgEp6sKWSqwBBnsfj/HRU3YfyF9ltg8nmsu 0HLDQIjVnFVgcO7otuwoG0oKkZkbGolxrVNAM2wZ+cqIPW1tGaruG4APy4Owt+r5 +UfU1IE= -----END CERTIFICATE-----Generated at Mon Oct 20 21:42:31 2025 by rpki-client