$ rpki-client -vvf rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/2C09A102C12F11EEB2C81E5DC4F9AE02.roa File: 2C09A102C12F11EEB2C81E5DC4F9AE02.roa (raw, json) Hash identifier: ECcKBc8WiuzrVsH+AYmrSUBoXHV9q05BQeakFyNNWtQ= Subject key identifier: D2:A9:0A:B6:E4:94:3B:13:9F:B1:27:E5:D5:BB:B2:68:12:7A:FD:61 Certificate issuer: /CN=A915C449/serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66 Certificate serial: 0640 Authority key identifier: 48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/2C09A102C12F11EEB2C81E5DC4F9AE02.roa Signing time: Mon 28 Apr 2025 23:34:28 +0000 ROA not before: Mon 28 Apr 2025 23:34:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151338 IP address blocks: 103.165.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1600 (0x640) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C449, serialNumber=484EBF33750B21CAF028D0CE219B9461D1FBAA66 Validity Not Before: Apr 28 23:34:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68101084-79e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:2d:78:34:c3:4a:11:44:90:a9:cf:a0:82: f0:f8:67:dd:3b:e4:98:ce:72:46:ed:66:1e:96:d7: 1e:81:ce:38:a8:2d:41:bb:cc:a4:3c:16:f4:81:a6: e3:99:fc:9e:8e:07:55:a8:ee:2a:f0:2d:71:1e:76: a4:5e:89:1d:ab:89:a5:e3:50:75:8e:1c:1b:c6:c4: ba:b5:a5:31:4d:5b:e8:fb:85:36:48:30:bd:15:08: 66:77:46:b0:01:cc:1d:94:cb:62:ea:1e:4d:cc:3a: dc:0d:ed:48:54:06:a1:bd:2f:27:86:dd:ef:c2:48: a1:1b:f0:8d:94:48:60:8d:7f:bf:9e:ad:ed:82:92: e2:41:77:92:29:56:03:86:eb:d3:5e:36:3a:c5:a8: d6:0a:2f:09:cc:f6:c4:ec:74:8d:6e:ca:91:b6:92: 47:dc:7b:b6:81:ab:e7:fb:d6:c9:c1:a8:69:9a:cf: 8e:ce:a5:26:01:e9:7d:ca:8a:81:27:02:e1:d8:1d: ae:f4:90:ad:06:41:65:14:e9:3f:f8:cd:19:dc:0f: 9c:5f:bb:95:23:83:b0:43:74:11:c2:9b:94:dd:a2: e5:b5:42:88:12:a8:a6:4e:a3:ef:f5:e8:4f:1a:71: 50:6c:86:d5:17:97:0a:ae:7c:44:81:cb:bf:00:17: fc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A9:0A:B6:E4:94:3B:13:9F:B1:27:E5:D5:BB:B2:68:12:7A:FD:61 X509v3 Authority Key Identifier: keyid:48:4E:BF:33:75:0B:21:CA:F0:28:D0:CE:21:9B:94:61:D1:FB:AA:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/SE6_M3ULIcrwKNDOIZuUYdH7qmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SE6_M3ULIcrwKNDOIZuUYdH7qmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C449/58EA48EA9DD611EB92CF3714C4F9AE02/2C09A102C12F11EEB2C81E5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.84.0/23 Signature Algorithm: sha256WithRSAEncryption 74:57:ef:4f:e9:74:3c:47:9d:69:67:40:bd:50:99:4c:63:6c: e6:59:0f:67:8c:1f:db:99:38:8f:54:cf:3d:66:39:6f:75:39: 4d:f8:f5:7d:4d:f8:f3:12:3b:87:33:c7:e1:1e:95:0c:16:0a: a4:46:da:25:a6:67:3c:d6:78:63:ee:fd:3b:d1:27:1e:e9:5e: 67:bc:8d:7b:56:1d:74:92:1f:5d:0d:98:16:6f:2b:37:2c:97: ed:98:32:cf:75:db:0d:89:25:05:8a:7f:d8:90:c8:0f:23:8f: 62:e5:8f:5e:ea:4b:0c:80:a2:06:2a:ef:20:38:1e:3b:eb:0b: 9d:32:9a:b2:9e:7f:b1:d1:90:e3:47:69:52:93:1d:bd:07:d2: e9:d6:17:22:35:ea:5e:35:69:be:db:b5:31:0e:32:07:88:16: 0c:26:93:a3:9e:74:02:9c:18:e3:a2:ea:d8:a8:83:6f:79:49: 69:06:c7:90:4a:dc:ee:bd:4e:79:af:fc:ba:2b:e2:69:49:ca: c3:9a:e7:95:d3:8e:2b:7b:c4:88:7d:16:86:4e:f5:ad:33:f7: d3:7f:02:e3:95:e6:16:f9:16:bf:22:e8:db:40:78:60:8b:9a: 12:b4:38:a3:2a:36:3c:f8:9b:e6:14:67:e4:35:1f:4c:d2:e9: 94:8b:ab:01 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0NDkxMTAvBgNVBAUTKDQ4NEVCRjMzNzUwQjIxQ0FGMDI4RDBDRTIxOUI5NDYx RDFGQkFBNjYwHhcNMjUwNDI4MjMzNDI4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwMTA4NC03OWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GwteDTDShFEkKnPoILw+GfdO+SYznJG7WYeltcegc44qC1Bu8ykPBb0gabj mfyejgdVqO4q8C1xHnakXokdq4ml41B1jhwbxsS6taUxTVvo+4U2SDC9FQhmd0aw AcwdlMti6h5NzDrcDe1IVAahvS8nht3vwkihG/CNlEhgjX+/nq3tgpLiQXeSKVYD huvTXjY6xajWCi8JzPbE7HSNbsqRtpJH3Hu2gavn+9bJwahpms+OzqUmAel9yoqB JwLh2B2u9JCtBkFlFOk/+M0Z3A+cX7uVI4OwQ3QRwpuU3aLltUKIEqimTqPv9ehP GnFQbIbVF5cKrnxEgcu/ABf8/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNKpCrbk lDsTn7En5dW7smgSev1hMB8GA1UdIwQYMBaAFEhOvzN1CyHK8CjQziGblGHR+6pm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ0OS81OEVBNDhFQTlE RDYxMUVCOTJDRjM3MTRDNEY5QUUwMi9TRTZfTTNVTEljcndLTkRPSVp1VVlkSDdx bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NFNl9NM1VMSWNyd0tORE9JWnVVWWRIN3FtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUM0NDkvNThFQTQ4RUE5REQ2MTFFQjkyQ0YzNzE0QzRGOUFFMDIvMkMwOUExMDJD MTJGMTFFRUIyQzgxRTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpVQwDQYJKoZIhvcNAQELBQADggEBAHRX70/pdDxHnWln QL1QmUxjbOZZD2eMH9uZOI9Uzz1mOW91OU349X1N+PMSO4czx+EelQwWCqRG2iWm ZzzWeGPu/TvRJx7pXme8jXtWHXSSH10NmBZvKzcsl+2YMs912w2JJQWKf9iQyA8j j2Llj17qSwyAogYq7yA4HjvrC50ymrKef7HRkONHaVKTHb0H0unWFyI16l41ab7b tTEOMgeIFgwmk6OedAKcGOOi6tiog295SWkGx5BK3O69Tnmv/Lor4mlJysOa55XT jit7xIh9FoZO9a0z99N/AuOV5hb5Fr8i6NtAeGCLmhK0OKMqNjz4m+YUZ+Q1H0zS 6ZSLqwE= -----END CERTIFICATE-----Generated at Sat May 17 00:47:20 2025 by rpki-client