$ rpki-client -vvf rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa File: 5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa (raw, json) Hash identifier: dyvPcZxPt0csBuZZARHE9y3XiMCjfKdl2w86flcHLuE= Subject key identifier: D6:FE:6D:42:61:C7:B4:A8:FF:EC:DA:EB:BF:AB:5F:0A:F5:59:21:9A Certificate issuer: /CN=A9141620/serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Certificate serial: 0744 Authority key identifier: 03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa Signing time: Sat 10 May 2025 21:40:10 +0000 ROA not before: Sat 10 May 2025 21:40:10 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 132245 IP address blocks: 43.231.200.0/24 maxlen: 24 43.231.201.0/24 maxlen: 24 43.231.202.0/24 maxlen: 24 43.231.203.0/24 maxlen: 24 103.8.132.0/24 maxlen: 24 103.8.133.0/24 maxlen: 24 103.8.134.0/24 maxlen: 24 103.8.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141620, serialNumber=03668A21F0F01F06B274FD88CC9E0A6E83D55F85 Validity Not Before: May 10 21:40:10 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681fc7ba-5e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:7b:68:60:00:2e:c2:63:1b:27:e9:50:66:ec: 94:55:df:80:28:9e:8d:de:ad:bb:e5:40:ab:ce:14: 5b:e3:3b:29:d2:ef:54:60:62:88:36:e5:d6:d5:65: 11:6e:83:80:93:9d:df:11:b6:ca:f4:32:bf:1e:28: 9f:83:f7:8e:ba:7d:a2:a9:12:52:d6:ed:37:5a:bc: 33:41:d3:98:04:18:58:c0:27:df:27:72:84:e7:9f: f4:ff:7d:90:b5:8d:c3:8c:66:de:68:3c:9b:cc:3a: 7c:f8:de:88:c5:76:23:3d:83:19:a5:d6:a3:24:94: b0:62:25:3f:d1:bf:a8:09:9e:89:c6:47:67:72:06: dc:85:8d:56:7c:0e:80:19:5e:64:a1:a2:b8:37:5f: d6:e1:b3:33:d4:32:c0:fb:5f:45:ad:fb:e3:8d:3d: cd:31:ae:9f:55:ad:c4:d9:49:d3:a3:30:16:5b:47: 0c:0c:e9:b5:6b:b2:84:d9:c0:d1:f9:76:26:ab:1a: 8c:a8:7f:66:45:6f:0c:77:55:11:56:cf:ed:03:87: 24:08:0b:91:d9:39:a2:22:d7:d8:79:8d:8a:aa:e9: 6f:22:77:8a:5f:83:12:b9:fd:bd:c1:78:26:7f:6c: 07:72:8d:fa:bc:6c:45:97:44:a4:0d:26:f5:74:f1: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FE:6D:42:61:C7:B4:A8:FF:EC:DA:EB:BF:AB:5F:0A:F5:59:21:9A X509v3 Authority Key Identifier: keyid:03:66:8A:21:F0:F0:1F:06:B2:74:FD:88:CC:9E:0A:6E:83:D5:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/A2aKIfDwHwaydP2IzJ4KboPVX4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2aKIfDwHwaydP2IzJ4KboPVX4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141620/219816AA293D11EBBFC14771C4F9AE02/5DDE6BC2293E11EB9DFA3C72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.200.0/22 103.8.132.0/22 Signature Algorithm: sha256WithRSAEncryption 45:6b:40:7e:40:4a:d0:06:36:45:10:db:86:de:c3:b3:dc:1b: 84:7d:f2:9d:90:98:6c:f1:05:f6:0a:2e:18:df:ea:a4:7c:07: cf:26:8b:b7:83:65:06:f6:f6:ba:7c:48:56:81:f1:d3:b7:16: 9e:73:6b:32:b2:80:85:31:56:20:75:c4:1a:9a:4e:27:21:1d: df:c0:fc:e5:af:0c:a5:ee:09:c4:c7:eb:a3:fa:3c:11:82:36: 47:fa:53:0c:1a:ff:30:b9:65:97:84:dd:98:a7:92:2a:7a:09: 93:19:1b:98:7c:43:f1:de:cb:86:9c:37:3c:6b:f4:27:93:3c: 23:c2:da:36:3f:f4:99:23:1a:f0:8e:e7:c2:d9:49:43:43:c5: 74:04:6c:44:bd:42:f6:3f:e7:74:c1:9f:3a:50:3d:cd:63:45: ad:10:46:98:96:8e:98:aa:ff:15:a9:76:e8:f9:de:33:25:42: d4:22:20:9f:aa:b5:fb:4c:90:3f:7e:3b:1d:d7:05:35:0a:88: a0:73:d0:7f:b5:0a:26:1b:6b:da:d9:d3:b1:98:2f:51:77:7d: 06:3a:e4:24:ef:2d:72:1f:fe:a7:ff:07:c8:e3:fa:3c:06:c7: f5:04:ad:09:e8:59:cc:3a:ee:a8:1d:83:71:56:11:bd:7e:2b: 82:e5:0b:e4 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE2MjAxMTAvBgNVBAUTKDAzNjY4QTIxRjBGMDFGMDZCMjc0RkQ4OENDOUUwQTZF ODNENTVGODUwHhcNMjUwNTEwMjE0MDEwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmYzdiYS01ZTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/3toYAAuwmMbJ+lQZuyUVd+AKJ6N3q275UCrzhRb4zsp0u9UYGKINuXW1WUR boOAk53fEbbK9DK/Hiifg/eOun2iqRJS1u03WrwzQdOYBBhYwCffJ3KE55/0/32Q tY3DjGbeaDybzDp8+N6IxXYjPYMZpdajJJSwYiU/0b+oCZ6JxkdncgbchY1WfA6A GV5koaK4N1/W4bMz1DLA+19FrfvjjT3NMa6fVa3E2UnTozAWW0cMDOm1a7KE2cDR +XYmqxqMqH9mRW8Md1URVs/tA4ckCAuR2TmiItfYeY2KqulvIneKX4MSuf29wXgm f2wHco36vGxFl0SkDSb1dPEARQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNb+bUJh x7So/+za67+rXwr1WSGaMB8GA1UdIwQYMBaAFANmiiHw8B8GsnT9iMyeCm6D1V+F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTYyMC8yMTk4MTZBQTI5 M0QxMUVCQkZDMTQ3NzFDNEY5QUUwMi9BMmFLSWZEd0h3YXlkUDJJeko0S2JvUFZY NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EyYUtJZkR3SHdheWRQMkl6SjRLYm9QVlg0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE2MjAvMjE5ODE2QUEyOTNEMTFFQkJGQzE0NzcxQzRGOUFFMDIvNURERTZCQzIy OTNFMTFFQjlERkEzQzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr58gDBAJnCIQwDQYJKoZIhvcNAQELBQADggEBAEVrQH5A StAGNkUQ24bew7PcG4R98p2QmGzxBfYKLhjf6qR8B88mi7eDZQb29rp8SFaB8dO3 Fp5zazKygIUxViB1xBqaTichHd/A/OWvDKXuCcTH66P6PBGCNkf6Uwwa/zC5ZZeE 3Zinkip6CZMZG5h8Q/Hey4acNzxr9CeTPCPC2jY/9JkjGvCO58LZSUNDxXQEbES9 QvY/53TBnzpQPc1jRa0QRpiWjpiq/xWpduj53jMlQtQiIJ+qtftMkD9+Ox3XBTUK iKBz0H+1CiYba9rZ07GYL1F3fQY65CTvLXIf/qf/B8jj+jwGx/UErQnoWcw67qgd g3FWEb1+K4LlC+Q= -----END CERTIFICATE-----Generated at Fri May 16 18:57:41 2025 by rpki-client