$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa File: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (raw, json) Hash identifier: dWU1gPzZFM9Cw+SS2wudvR0l02XzByvndbpoX+ljoqk= Subject key identifier: DC:B0:A5:B7:A3:FD:75:19:2D:4A:05:BA:D8:B7:55:A4:86:64:CC:1F Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 0194 Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa Signing time: Thu 01 May 2025 02:39:34 +0000 ROA not before: Thu 01 May 2025 02:39:34 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150808 IP address blocks: 103.111.4.0/24 maxlen: 24 103.111.5.0/24 maxlen: 24 2400:e9e0::/48 maxlen: 48 2400:e9e0:1::/48 maxlen: 48 2400:e9e0:2::/48 maxlen: 48 2400:e9e0:3::/48 maxlen: 48 2400:e9e0:5::/48 maxlen: 48 2400:e9e0:6::/48 maxlen: 48 2400:e9e0:7::/48 maxlen: 48 2400:e9e0:8::/48 maxlen: 48 2400:e9e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: May 1 02:39:34 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812dee6-8fcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:6f:aa:ad:d4:45:98:bb:aa:a9:e1:3a:17: 30:f9:8c:ac:3e:49:f3:b4:58:65:ec:a0:a5:ab:f8: 79:1e:52:5c:ec:71:66:95:13:d6:7d:cd:39:a3:f3: e0:15:de:6c:19:14:6b:70:75:1b:0a:41:1e:4f:5f: c8:51:54:7c:43:3a:b6:41:4a:5b:17:28:05:03:53: 9d:9a:0f:15:d7:bf:92:50:f7:75:c2:8c:25:28:01: f0:3c:60:aa:fd:5c:0c:93:07:50:7a:58:ca:c5:66: f1:03:1d:05:b6:c1:f1:73:b1:0c:d6:d8:a4:e7:57: ef:78:88:6b:88:34:3d:85:f0:b2:4d:ee:27:d3:43: e4:fa:7b:fb:be:a9:ac:44:51:46:83:ab:93:87:98: dc:ec:6f:7b:e1:36:af:5d:2a:0b:14:3b:31:04:b1: dc:a7:fd:09:89:e5:ef:0e:9e:18:d2:36:3b:06:dd: 8c:61:47:50:76:27:3e:35:d0:48:4b:0a:d1:2d:b5: 72:c0:0b:09:ba:7c:50:95:a9:d7:1b:a2:2c:69:fb: 5d:fd:06:d3:9e:80:7f:fa:90:ca:4d:d4:fd:2c:e8: 2c:6c:eb:02:f6:c3:b1:94:8c:28:fb:b8:9d:1a:fe: 57:45:8a:8e:29:fa:1a:53:ff:f6:d8:63:d8:19:56: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B0:A5:B7:A3:FD:75:19:2D:4A:05:BA:D8:B7:55:A4:86:64:CC:1F X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/08E67270C19611EDBDEEFD0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.111.4.0/23 IPv6: 2400:e9e0::/46 2400:e9e0:5::-2400:e9e0:9:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 00:31:b8:eb:8d:d2:4d:e1:e6:df:81:0c:0d:a0:5b:27:d0:e0: e3:32:78:c0:c0:d7:88:c8:83:61:59:ce:a0:b3:50:d9:e1:4e: 2e:17:d7:9a:81:fc:a6:9a:d3:33:5a:16:82:36:25:6a:cc:1f: 0d:84:90:54:18:3b:36:b9:bd:4f:0c:88:7e:c3:d7:c5:d6:ae: b4:3b:65:44:ae:cd:4f:76:da:73:0a:cc:9b:0b:bc:b9:15:66: 85:f4:9b:2e:c0:17:41:e0:39:f4:25:4c:7e:b5:76:35:8a:79: 98:bb:54:a2:15:04:a7:14:33:f1:36:2e:d1:80:ec:23:32:35: ad:ed:66:23:5a:cc:af:b5:bc:70:32:cd:f1:80:d8:c1:42:65: 54:02:62:ea:c7:a2:4c:65:dc:49:8c:66:df:13:97:10:da:3b: d1:d4:95:5b:12:0e:ea:34:f9:72:49:33:f9:9d:42:e6:66:d2: 80:d6:e5:7c:cb:3a:98:06:a5:dd:d0:40:c0:9e:3c:a4:2d:3c: 77:48:25:77:6d:00:b3:be:19:e3:7a:db:90:fe:d6:9c:1f:26: b8:df:e9:f4:49:c7:6e:72:de:bd:9e:04:03:49:48:aa:43:89: 50:5d:ec:1f:2f:69:54:bd:0b:3e:c6:37:4a:9c:74:9c:76:c5: 2c:39:0b:66 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjUwNTAxMDIzOTM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyZGVlNi04ZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhhvqq3URZi7qqnhOhcw+YysPknztFhl7KClq/h5HlJc7HFmlRPWfc05o/Pg Fd5sGRRrcHUbCkEeT1/IUVR8Qzq2QUpbFygFA1Odmg8V17+SUPd1wowlKAHwPGCq /VwMkwdQeljKxWbxAx0FtsHxc7EM1tik51fveIhriDQ9hfCyTe4n00Pk+nv7vqms RFFGg6uTh5jc7G974TavXSoLFDsxBLHcp/0JieXvDp4Y0jY7Bt2MYUdQdic+NdBI SwrRLbVywAsJunxQlanXG6Isaftd/QbTnoB/+pDKTdT9LOgsbOsC9sOxlIwo+7id Gv5XRYqOKfoaU//22GPYGVZLPwIDAQABo4ICujCCArYwHQYDVR0OBBYEFNywpbej /XUZLUoFuti3VaSGZMwfMB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZEQUEvNzFFQjdDNUFDMTkzMTFFRDlCODY2QjBCQzRGOUFFMDIvMDhFNjcyNzBD MTk2MTFFREJERUVGRDBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E NTAzMAwEAgABMAYDBAFnbwQwIwQCAAIwHQMHAiQA6eAAADASAwcAJADp4AAFAwcB JADp4AAIMA0GCSqGSIb3DQEBCwUAA4IBAQAAMbjrjdJN4ebfgQwNoFsn0ODjMnjA wNeIyINhWc6gs1DZ4U4uF9eagfymmtMzWhaCNiVqzB8NhJBUGDs2ub1PDIh+w9fF 1q60O2VErs1PdtpzCsybC7y5FWaF9JsuwBdB4Dn0JUx+tXY1inmYu1SiFQSnFDPx Ni7RgOwjMjWt7WYjWsyvtbxwMs3xgNjBQmVUAmLqx6JMZdxJjGbfE5cQ2jvR1JVb Eg7qNPlySTP5nULmZtKA1uV8yzqYBqXd0EDAnjykLTx3SCV3bQCzvhnjetuQ/tac Hya43+n0Scduct69ngQDSUiqQ4lQXewfL2lUvQs+xjdKnHScdsUsOQtm -----END CERTIFICATE-----Generated at Tue May 13 15:25:20 2025 by rpki-client