$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa File: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (raw, json) Hash identifier: Q0U2adFevjF3UeWXP2WSO1nQxz6BphgLKsQxsX/j3xo= Subject key identifier: 0A:4D:D6:04:67:B7:B3:96:FA:0E:EC:CB:B1:D6:F9:EC:DF:4B:1E:30 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C26 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa Signing time: Mon 28 Apr 2025 18:58:43 +0000 ROA not before: Mon 28 Apr 2025 18:58:43 +0000 ROA not after: Thu 28 Aug 2025 00:00:00 +0000 asID: 138694 IP address blocks: 103.136.204.0/22 maxlen: 22 103.136.204.0/23 maxlen: 23 103.136.204.0/24 maxlen: 24 103.136.205.0/24 maxlen: 24 103.136.206.0/23 maxlen: 23 103.136.206.0/24 maxlen: 24 103.136.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3110 (0xc26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Apr 28 18:58:43 2025 GMT Not After : Aug 28 00:00:00 2025 GMT Subject: CN=680fcfe2-e6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b4:40:1f:4a:9a:3e:c3:70:79:d4:8e:2f:68: 3c:34:3d:1a:53:be:cc:dc:db:44:39:e1:51:1e:f1: cb:1d:c5:50:b2:6c:fd:42:af:2e:6a:21:86:38:17: 60:b2:d7:66:ae:0b:ad:a7:d9:a8:fe:a4:f5:9a:1e: be:94:b6:d9:51:38:21:fe:e9:8c:e4:7f:de:1c:30: b9:0d:66:e3:91:18:f3:41:88:22:cb:3e:9b:7b:d0: 02:79:6b:bf:a8:20:d1:3d:ae:f0:b9:1c:c0:fd:5f: 78:47:4d:c1:e6:ef:3e:99:1d:43:16:7b:96:6a:4d: 10:e6:9b:64:07:72:a3:d5:e4:93:4b:ad:ba:0b:bf: 68:7b:d3:d7:12:64:36:37:73:aa:d1:48:08:c5:c7: 23:2a:09:96:9d:43:dd:7f:33:5b:0b:fa:a2:1d:24: 18:5b:94:f5:09:32:89:51:2d:a6:c0:b6:2f:31:49: c8:a5:5b:ae:07:5f:e2:60:de:cc:d4:91:5a:b2:06: fa:8b:64:b1:43:fb:c6:1e:51:e2:c7:7f:98:f2:2f: d8:c7:0b:20:d5:05:59:44:c8:e4:c7:3a:2e:64:c6: 79:f2:83:c0:ac:15:d7:e1:36:bd:db:a5:18:9c:f1: a8:c8:47:23:1b:55:b5:3a:65:d1:4f:75:5c:71:ca: 1b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:4D:D6:04:67:B7:B3:96:FA:0E:EC:CB:B1:D6:F9:EC:DF:4B:1E:30 X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/4A6A598EDB1311EB9B223B40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.204.0/22 Signature Algorithm: sha256WithRSAEncryption b2:40:b8:50:89:69:6b:03:ea:d2:ee:51:eb:cf:f3:ee:7e:1e: 3a:73:d6:43:e4:11:a1:3b:73:e1:46:56:9c:d3:74:e2:30:3e: 72:dd:f1:5e:65:5a:28:ab:a6:76:9f:ad:a9:93:d4:5d:a4:1d: ca:64:67:0f:d7:8f:8b:8f:95:e3:d7:a0:31:0f:21:ac:9a:c6: c9:c2:2a:3a:1a:45:49:d5:d8:02:92:a2:17:20:80:01:44:1f: 1e:f2:ea:b6:f3:46:c8:5c:0f:5e:9f:d1:4a:bc:53:1f:74:72: 94:3b:7d:4e:18:25:2b:b2:f5:2d:a9:9a:c1:13:6e:f2:7a:12: 74:17:b1:3f:92:0c:df:cd:c2:99:88:da:ff:60:03:30:9b:07: 0e:98:4a:d9:71:5c:ab:48:e0:12:bf:21:30:09:7f:99:c6:1b: 3d:8d:2b:68:c6:99:7a:52:9d:6c:ab:55:5d:27:06:f4:a6:5f: 29:e1:c5:ac:a3:53:ca:d9:e8:de:4b:92:1e:2e:9e:17:8e:f9: 0d:55:1f:7c:c8:bf:b6:9b:a7:6a:d8:17:a5:06:f2:ec:07:1c: bd:10:6b:5c:3e:fd:b1:06:da:8d:7c:2a:08:09:68:97:53:ae: ab:6b:01:87:56:f9:ed:c4:88:d2:fc:4c:01:a1:17:51:a2:51: c2:3a:b4:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwNDI4MTg1ODQzWhcNMjUwODI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmY2ZlMi1lNmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLRAH0qaPsNwedSOL2g8ND0aU77M3NtEOeFRHvHLHcVQsmz9Qq8uaiGGOBdg stdmrgutp9mo/qT1mh6+lLbZUTgh/umM5H/eHDC5DWbjkRjzQYgiyz6be9ACeWu/ qCDRPa7wuRzA/V94R03B5u8+mR1DFnuWak0Q5ptkB3Kj1eSTS626C79oe9PXEmQ2 N3Oq0UgIxccjKgmWnUPdfzNbC/qiHSQYW5T1CTKJUS2mwLYvMUnIpVuuB1/iYN7M 1JFasgb6i2SxQ/vGHlHix3+Y8i/Yxwsg1QVZRMjkxzouZMZ58oPArBXX4Ta926UY nPGoyEcjG1W1OmXRT3VcccobowIDAQABo4IClTCCApEwHQYDVR0OBBYEFApN1gRn t7OW+g7sy7HW+ezfSx4wMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRDRjYvRkQyNTAxOEEwQjdEMTFFQTk4RThGQTNDQzRGOUFFMDIvNEE2QTU5OEVE QjEzMTFFQjlCMjIzQjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJniMwwDQYJKoZIhvcNAQELBQADggEBALJAuFCJaWsD6tLu UevP8+5+Hjpz1kPkEaE7c+FGVpzTdOIwPnLd8V5lWiirpnaframT1F2kHcpkZw/X j4uPlePXoDEPIayaxsnCKjoaRUnV2AKSohcggAFEHx7y6rbzRshcD16f0Uq8Ux90 cpQ7fU4YJSuy9S2pmsETbvJ6EnQXsT+SDN/NwpmI2v9gAzCbBw6YStlxXKtI4BK/ ITAJf5nGGz2NK2jGmXpSnWyrVV0nBvSmXynhxayjU8rZ6N5Lkh4unheO+Q1VH3zI v7abp2rYF6UG8uwHHL0Qa1w+/bEG2o18KggJaJdTrqtrAYdW+e3EiNL8TAGhF1Gi UcI6tHk= -----END CERTIFICATE-----Generated at Thu May 15 21:40:31 2025 by rpki-client