$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/81368CD6594B11EE924DCC64C4F9AE02.roa File: 81368CD6594B11EE924DCC64C4F9AE02.roa (raw, json) Hash identifier: XhkwHyloR+2rDxWbay2n/StJn5+0QtLglAfKwVMv/5o= Subject key identifier: E5:4E:56:E1:3A:D8:97:45:B7:43:D2:BC:2D:C9:A8:64:2C:F1:FC:03 Certificate issuer: /CN=A9154AFB/serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A Certificate serial: 1731 Authority key identifier: D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/81368CD6594B11EE924DCC64C4F9AE02.roa Signing time: Mon 28 Apr 2025 16:55:29 +0000 ROA not before: Mon 28 Apr 2025 16:55:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135003 IP address blocks: 103.86.132.0/22 maxlen: 24 203.6.208.0/22 maxlen: 24 2400:bf40:1::/48 maxlen: 48 2400:bf40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5937 (0x1731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154AFB, serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A Validity Not Before: Apr 28 16:55:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680fb300-adaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e3:8a:8d:5b:03:a9:d7:7c:0f:c7:e3:f0:33: 67:ff:9f:ce:03:8a:08:84:6c:df:39:a6:23:3b:9e: d8:d2:a8:35:80:2e:9b:17:9d:80:81:06:71:d3:87: 85:72:0a:1f:ec:0f:78:b1:4a:2b:3f:ed:72:ff:57: 3f:03:60:6e:ac:a7:0f:d9:7a:24:34:bc:c7:59:79: bc:ea:d6:af:b7:a1:79:cb:e0:fe:3a:b7:8a:52:7c: e7:c7:46:77:4e:5a:63:2c:39:cf:7a:11:92:67:2c: 59:70:8d:6d:ba:59:15:f7:e5:59:01:80:a7:3f:b6: 5b:78:e9:7d:a4:bf:d7:30:ca:3f:76:66:63:36:65: 5c:74:35:65:e3:5a:5d:bd:37:d6:84:c2:12:ed:1f: fd:8f:5a:cb:fe:06:cf:a8:87:7c:2f:a0:d7:cb:9d: 57:68:eb:ef:f1:16:6c:ec:e3:70:12:ec:48:a1:6d: 6b:8d:99:7f:ec:6c:a3:f0:b5:cd:74:7c:6d:51:6c: aa:95:e7:d6:7d:8c:f7:f2:c0:73:2d:86:69:bd:df: fd:3f:e5:9c:5e:a5:0f:56:34:8b:87:47:26:1e:40: 6b:21:e0:f7:cd:01:0f:a3:ad:5f:30:f8:de:d5:0a: 98:9f:a7:4d:0f:70:32:8e:2f:74:70:85:d9:62:70: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4E:56:E1:3A:D8:97:45:B7:43:D2:BC:2D:C9:A8:64:2C:F1:FC:03 X509v3 Authority Key Identifier: keyid:D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/81368CD6594B11EE924DCC64C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.86.132.0/22 203.6.208.0/22 IPv6: 2400:bf40:1::-2400:bf40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 24:c9:30:57:20:68:80:55:c7:dd:62:97:fa:fc:00:30:55:e2: 57:6c:f3:a0:ea:33:58:cd:4d:cc:09:67:8a:b7:d2:04:19:11: e2:1d:06:62:37:2b:0c:ef:6f:35:c9:59:c5:ee:f4:1d:e8:9d: 0e:e8:77:69:aa:76:f8:2f:8d:ae:f5:90:6f:09:1b:3a:1b:e9: 3f:7a:cb:5c:59:30:c3:06:b9:71:ac:dc:ea:64:cd:af:3b:ef: d1:23:fd:f0:6a:55:ae:14:07:45:f0:a4:bf:14:3c:3c:3b:11: ff:67:bc:0b:98:8f:b8:4d:d8:3f:b6:85:68:80:95:97:b2:e3: 6c:93:bc:36:75:5c:0e:07:84:3e:76:95:15:61:23:78:30:20: 53:80:93:ff:f3:fd:fb:31:a8:0d:f7:79:86:7c:1d:22:c9:b9: 13:7e:ba:62:40:11:55:45:cf:b7:f0:c0:b7:93:ce:53:cd:8f: 33:13:33:8d:2d:55:ad:97:5b:65:2f:45:2f:60:16:e2:88:fd: 1e:c9:dc:f3:b7:5e:69:f3:e6:5a:3d:10:77:b5:42:71:40:82: 59:8d:a2:d8:c3:fc:b1:b7:8d:2a:b3:00:70:bd:82:53:38:34: 2b:b1:13:b6:28:e4:1a:72:88:7a:a9:b9:7b:36:ff:70:32:db: b5:e9:50:2a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICFzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRBRkIxMTAvBgNVBAUTKEQ0RTMxNzZDQjlGNDg5M0U3NEM0RTgwNUZBN0ZCNUQ5 MEE0QTdCMEEwHhcNMjUwNDI4MTY1NTI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmYjMwMC1hZGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+OKjVsDqdd8D8fj8DNn/5/OA4oIhGzfOaYjO57Y0qg1gC6bF52AgQZx04eF cgof7A94sUorP+1y/1c/A2BurKcP2XokNLzHWXm86tavt6F5y+D+OreKUnznx0Z3 TlpjLDnPehGSZyxZcI1tulkV9+VZAYCnP7ZbeOl9pL/XMMo/dmZjNmVcdDVl41pd vTfWhMIS7R/9j1rL/gbPqId8L6DXy51XaOvv8RZs7ONwEuxIoW1rjZl/7Gyj8LXN dHxtUWyqlefWfYz38sBzLYZpvd/9P+WcXqUPVjSLh0cmHkBrIeD3zQEPo61fMPje 1QqYn6dND3Ayji90cIXZYnDCBQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFOVOVuE6 2JdFt0PSvC3JqGQs8fwDMB8GA1UdIwQYMBaAFNTjF2y59Ik+dMToBfp/tdkKSnsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEFGQi83OEEwNEU0Q0Uz MkYxMUU3QjZDRUQ0MkZDNEY5QUUwMi8xT01YYkxuMGlUNTB4T2dGLW4tMTJRcEtl d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPTVhiTG4waVQ1MHhPZ0Ytbi0xMlFwS2V3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTRBRkIvNzhBMDRFNENFMzJGMTFFN0I2Q0VENDJGQzRGOUFFMDIvODEzNjhDRDY1 OTRCMTFFRTkyNERDQzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMBIEAgABMAwDBAJnVoQDBALLBtAwGgQCAAIwFDASAwcAJAC/QAABAwcAJAC/ QAACMA0GCSqGSIb3DQEBCwUAA4IBAQAkyTBXIGiAVcfdYpf6/AAwVeJXbPOg6jNY zU3MCWeKt9IEGRHiHQZiNysM7281yVnF7vQd6J0O6Hdpqnb4L42u9ZBvCRs6G+k/ estcWTDDBrlxrNzqZM2vO+/RI/3walWuFAdF8KS/FDw8OxH/Z7wLmI+4Tdg/toVo gJWXsuNsk7w2dVwOB4Q+dpUVYSN4MCBTgJP/8/37MagN93mGfB0iybkTfrpiQBFV Rc+38MC3k85TzY8zEzONLVWtl1tlL0UvYBbiiP0eydzzt15p8+ZaPRB3tUJxQIJZ jaLYw/yxt40qswBwvYJTODQrsRO2KOQacoh6qbl7Nv9wMtu16VAq -----END CERTIFICATE-----Generated at Sun May 11 22:41:37 2025 by rpki-client