$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa File: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (raw, json) Hash identifier: V96z6p8lv3v3DbzjaaBJkTxNIi5ZsjxmKx2jknu2pAQ= Subject key identifier: BE:DE:5B:59:51:22:F2:AE:B7:4F:B7:61:68:01:20:76:DB:D7:E0:70 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 01C0 Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa Signing time: Sat 10 May 2025 01:58:20 +0000 ROA not before: Sat 10 May 2025 01:58:20 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150728 IP address blocks: 103.72.199.0/24 maxlen: 24 2001:df3:c740::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 448 (0x1c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: May 10 01:58:20 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=681eb2bc-8591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2c:f7:26:41:10:4b:17:d2:59:c6:14:8e:40: 16:d0:12:77:1d:d1:4a:8f:92:f7:4f:38:e8:d7:79: 98:0f:81:30:5d:8a:02:0b:09:5c:7b:d7:a8:23:ba: 92:19:4d:7f:c4:07:60:d8:11:ca:62:51:48:87:49: fe:56:b5:0b:bb:0c:68:74:5f:c2:90:2a:92:5c:76: 8c:3a:b9:25:07:60:dd:ca:4b:41:0d:9c:08:9d:4c: 01:19:3a:58:9a:e6:b8:ad:08:08:4d:2f:1b:fb:e6: 95:33:73:2e:ed:7d:9e:a1:36:f6:fe:78:8e:e5:33: d1:7f:93:9f:41:a4:4d:12:6f:8b:1d:e7:c2:3c:d4: e1:3c:55:d9:a0:5a:4c:2f:89:57:e9:9e:0e:92:3c: 00:2b:e7:f6:10:ee:d3:18:53:5d:2c:75:b5:7e:de: 15:00:d5:5a:0d:f5:0c:6e:1d:1f:be:fa:ce:1e:2a: c9:94:bb:94:f1:6a:92:b5:70:d6:8e:87:81:c4:c3: 3a:91:6c:f3:86:a9:9e:ce:ff:45:fb:df:88:56:f6: fc:c7:40:ba:bc:eb:59:fb:75:35:d9:5b:f0:d5:cb: 01:4a:cd:c3:4f:af:a7:d9:e2:f7:a9:cc:1c:0a:8e: cf:30:74:ec:44:b2:97:21:b8:96:db:24:35:67:56: 23:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DE:5B:59:51:22:F2:AE:B7:4F:B7:61:68:01:20:76:DB:D7:E0:70 X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/3F6EE8E42D4211F09E0C422AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.72.199.0/24 IPv6: 2001:df3:c740::/48 Signature Algorithm: sha256WithRSAEncryption 85:7b:aa:d8:67:86:fb:c5:e3:a6:e9:5a:17:dc:e7:24:51:59: 36:a2:0c:1d:a6:c8:96:70:da:b6:fe:87:15:af:fe:5b:23:53: 43:9d:0f:3f:29:05:e1:a5:62:5c:56:f0:03:5a:4f:e9:8f:8c: 57:95:0e:e1:9e:6a:6d:ae:ad:11:eb:c3:0a:db:ac:78:45:2e: 8a:bc:0b:96:81:11:16:98:dc:ee:a8:de:28:74:52:f6:dd:bb: cc:92:33:db:50:10:bf:a9:4f:fc:f9:0f:05:5a:2f:b7:36:30: 72:fa:d0:63:90:f3:dc:e6:de:f1:cd:30:4e:58:29:f3:21:9e: 4e:3d:6f:b3:c5:7b:61:3c:f4:37:a5:72:1f:5d:de:bf:34:51: a3:74:9f:f0:55:54:8c:c7:43:15:e3:96:91:fd:60:ec:67:33: 32:09:07:92:dc:df:70:ed:1f:2d:a3:49:98:18:3e:f2:c1:7d: 1b:98:a1:0c:86:40:c4:ab:1b:cb:b0:82:a6:1c:86:17:c1:90: 88:14:11:09:80:95:4a:f6:83:44:e9:f8:74:81:1d:54:e0:11: 15:c9:66:1f:34:c9:cf:13:8a:33:63:8b:e6:c9:70:e4:e0:f4: 14:4f:f2:9d:71:b6:31:a2:ab:31:a3:61:e0:aa:49:35:b9:47: d0:12:ba:2c -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjUwNTEwMDE1ODIwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFlYjJiYy04NTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyz3JkEQSxfSWcYUjkAW0BJ3HdFKj5L3Tzjo13mYD4EwXYoCCwlce9eoI7qS GU1/xAdg2BHKYlFIh0n+VrULuwxodF/CkCqSXHaMOrklB2DdyktBDZwInUwBGTpY mua4rQgITS8b++aVM3Mu7X2eoTb2/niO5TPRf5OfQaRNEm+LHefCPNThPFXZoFpM L4lX6Z4OkjwAK+f2EO7TGFNdLHW1ft4VANVaDfUMbh0fvvrOHirJlLuU8WqStXDW joeBxMM6kWzzhqmezv9F+9+IVvb8x0C6vOtZ+3U12Vvw1csBSs3DT6+n2eL3qcwc Co7PMHTsRLKXIbiW2yQ1Z1Yj1wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL7eW1lR IvKut0+3YWgBIHbb1+BwMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU1OTcvRTk3MDdEMUU5QTNBMTFFRDgxQjEyNzFEQzRGOUFFMDIvM0Y2RUU4RTQy RDQyMTFGMDlFMEM0MjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnSMcwDwQCAAIwCQMHACABDfPHQDANBgkqhkiG9w0BAQsF AAOCAQEAhXuq2GeG+8XjpulaF9znJFFZNqIMHabIlnDatv6HFa/+WyNTQ50PPykF 4aViXFbwA1pP6Y+MV5UO4Z5qba6tEevDCtuseEUuirwLloERFpjc7qjeKHRS9t27 zJIz21AQv6lP/PkPBVovtzYwcvrQY5Dz3Obe8c0wTlgp8yGeTj1vs8V7YTz0N6Vy H13evzRRo3Sf8FVUjMdDFeOWkf1g7GczMgkHktzfcO0fLaNJmBg+8sF9G5ihDIZA xKsby7CCphyGF8GQiBQRCYCVSvaDROn4dIEdVOARFclmHzTJzxOKM2OL5slw5OD0 FE/ynXG2MaKrMaNh4KpJNblH0BK6LA== -----END CERTIFICATE-----Generated at Sat May 17 07:01:57 2025 by rpki-client