$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa File: 4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa (raw, json) Hash identifier: e0njY5XzEF4ErGMr0YeVgmDBWLHo1AgDUgiIRsmRwsA= Subject key identifier: 5C:0A:81:5F:97:72:45:80:94:3B:AF:84:A7:F2:32:14:88:AD:54:F8 Certificate issuer: /CN=A9171D3C/serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Certificate serial: 017F Authority key identifier: 4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa Signing time: Sat 03 May 2025 03:39:55 +0000 ROA not before: Sat 03 May 2025 03:39:55 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 61317 IP address blocks: 103.213.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D3C, serialNumber=4DEE0836FA0F7EE92C2E6A6C198016DE8CF8BF16 Validity Not Before: May 3 03:39:55 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6815900b-9f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:cb:50:22:1e:d9:86:76:ea:69:ea:ab:6d: 22:60:34:24:4b:a9:dd:7b:65:49:ec:79:47:d7:af: 6c:81:e7:99:0c:b9:18:21:fd:83:77:9e:60:68:dd: e8:11:b3:40:fd:1f:1c:28:a9:45:78:b3:b2:62:84: 1d:a1:f8:9f:a2:25:e3:97:fe:d2:a8:a8:d3:74:06: b7:6b:39:f8:8e:57:a1:9e:55:94:1a:9d:d9:44:cd: 2c:f2:59:7d:61:0b:c1:b6:ed:87:33:ea:d2:2b:46: d8:23:58:f8:d5:2e:96:32:44:a9:4d:59:55:81:6c: e2:d7:86:36:86:d6:32:99:3d:fb:88:b2:4e:cc:11: ae:18:5d:ea:94:59:ab:9a:8c:26:d6:50:fa:d3:7d: 74:58:e9:29:f2:c3:c0:91:db:dd:7d:1b:a6:61:39: e9:bb:73:42:43:20:a1:d7:59:93:66:a2:bf:ca:d0: 55:ea:d8:5a:a7:f2:24:84:aa:4c:3c:75:4b:7c:9e: 63:c7:e0:6a:0a:04:fb:70:9b:3f:97:dc:0f:c0:57: 0a:16:da:8b:65:e9:ec:79:e6:ca:a2:e6:16:d4:bc: 68:d9:91:df:fb:66:d7:30:4f:a2:07:06:f1:97:f5: 29:f4:71:2c:b4:69:6c:11:92:f4:13:47:9d:02:96: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0A:81:5F:97:72:45:80:94:3B:AF:84:A7:F2:32:14:88:AD:54:F8 X509v3 Authority Key Identifier: keyid:4D:EE:08:36:FA:0F:7E:E9:2C:2E:6A:6C:19:80:16:DE:8C:F8:BF:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/Te4INvoPfuksLmpsGYAW3oz4vxY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Te4INvoPfuksLmpsGYAW3oz4vxY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3C/127157F2056A11EEB8870013C4F9AE02/4C1CC64C7F1A11EEAD41A94EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.213.39.0/24 Signature Algorithm: sha256WithRSAEncryption ce:c8:28:ca:f5:7b:f1:ae:a0:e9:8d:4d:de:47:4a:10:85:75: 6b:18:dc:4d:89:6f:e8:1a:fa:82:ab:60:19:ad:48:15:cf:eb: 50:c8:31:6c:98:c9:98:61:e2:6d:08:50:78:90:0e:95:b2:98: 3c:ba:1b:5a:78:a2:61:3e:b9:66:e3:e0:3b:df:90:87:1d:99: e8:b7:dd:86:e5:2f:46:e4:e2:63:1e:74:9f:13:48:d2:a2:3f: ca:41:42:05:e9:d5:24:83:78:97:48:5a:6a:de:ea:c2:c3:8f: 45:c2:32:86:d9:fd:f1:90:e3:34:a7:0b:50:7e:74:32:60:ce: 4b:fe:ff:77:9a:40:38:81:77:55:0c:5b:78:dc:31:66:96:11: b6:46:87:60:49:89:8e:b7:f6:3c:63:4b:1c:c3:95:d3:3e:9d: 97:91:54:e4:1b:f8:13:29:30:b8:91:0d:81:17:4b:e4:b6:1d: c8:25:d3:4c:e6:54:ea:3d:91:9b:e3:87:16:67:76:89:ca:05: a3:6a:10:d6:94:23:1f:0b:61:72:1f:18:ea:42:d6:d1:a3:7e: cb:c3:93:f3:2e:79:a4:d3:d9:b3:01:64:d7:a0:b5:a5:49:58: 88:f5:6b:d6:92:f5:79:85:9d:0f:3d:e0:76:24:51:b8:ea:0d: f8:96:ab:63 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEM0MxMTAvBgNVBAUTKDRERUUwODM2RkEwRjdFRTkyQzJFNkE2QzE5ODAxNkRF OENGOEJGMTYwHhcNMjUwNTAzMDMzOTU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1OTAwYi05ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZHLUCIe2YZ26mnqq20iYDQkS6nde2VJ7HlH169sgeeZDLkYIf2Dd55gaN3o EbNA/R8cKKlFeLOyYoQdofifoiXjl/7SqKjTdAa3azn4jlehnlWUGp3ZRM0s8ll9 YQvBtu2HM+rSK0bYI1j41S6WMkSpTVlVgWzi14Y2htYymT37iLJOzBGuGF3qlFmr mowm1lD60310WOkp8sPAkdvdfRumYTnpu3NCQyCh11mTZqK/ytBV6thap/IkhKpM PHVLfJ5jx+BqCgT7cJs/l9wPwFcKFtqLZenseebKouYW1Lxo2ZHf+2bXME+iBwbx l/Up9HEstGlsEZL0E0edApYS4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFFwKgV+X ckWAlDuvhKfyMhSIrVT4MB8GA1UdIwQYMBaAFE3uCDb6D37pLC5qbBmAFt6M+L8W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzQy8xMjcxNTdGMjA1 NkExMUVFQjg4NzAwMTNDNEY5QUUwMi9UZTRJTnZvUGZ1a3NMbXBzR1lBVzNvejR2 eFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RlNElOdm9QZnVrc0xtcHNHWUFXM296NHZ4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzFEM0MvMTI3MTU3RjIwNTZBMTFFRUI4ODcwMDEzQzRGOUFFMDIvNEMxQ0M2NEM3 RjFBMTFFRUFENDFBOTRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn1ScwDQYJKoZIhvcNAQELBQADggEBAM7IKMr1e/GuoOmN Td5HShCFdWsY3E2Jb+ga+oKrYBmtSBXP61DIMWyYyZhh4m0IUHiQDpWymDy6G1p4 omE+uWbj4DvfkIcdmei33YblL0bk4mMedJ8TSNKiP8pBQgXp1SSDeJdIWmre6sLD j0XCMobZ/fGQ4zSnC1B+dDJgzkv+/3eaQDiBd1UMW3jcMWaWEbZGh2BJiY639jxj SxzDldM+nZeRVOQb+BMpMLiRDYEXS+S2Hcgl00zmVOo9kZvjhxZndonKBaNqENaU Ix8LYXIfGOpC1tGjfsvDk/MueaTT2bMBZNegtaVJWIj1a9aS9XmFnQ894HYkUbjq DfiWq2M= -----END CERTIFICATE-----Generated at Thu May 15 17:59:20 2025 by rpki-client