$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/C68D1AE69B9611EFB95B8038C4F9AE02.roa File: C68D1AE69B9611EFB95B8038C4F9AE02.roa (raw, json) Hash identifier: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4= Subject key identifier: A3:6D:05:28:1D:44:60:26:36:89:6E:1C:09:15:EE:26:F2:BB:94:56 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 039F Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/C68D1AE69B9611EFB95B8038C4F9AE02.roa Signing time: Wed 07 May 2025 01:38:22 +0000 ROA not before: Wed 07 May 2025 01:38:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395793 IP address blocks: 103.229.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 7 01:38:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681ab98d-336d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:7f:6e:51:62:49:0c:e7:91:1b:49:f2:c7: d5:6f:12:2d:95:76:59:05:7f:9f:21:d1:b9:a0:91: 59:ff:62:f7:af:0d:48:5c:c9:b4:11:f1:1a:fe:1d: 03:5b:0f:14:a1:1c:d8:59:51:9b:08:44:9a:f6:ba: 2c:48:01:41:18:6a:db:f4:c0:6f:04:d8:16:b9:84: 0f:34:6f:c7:0d:42:3d:e3:75:2f:f8:3c:06:5c:77: 99:32:57:b6:ef:62:a3:1f:6f:2d:f9:6c:34:63:fc: 3c:4f:2c:3b:4b:b3:b6:d4:db:49:01:4f:6d:4a:e2: aa:f1:be:f5:6d:b9:f3:3e:2e:74:fe:23:f2:51:5f: 4f:17:05:dc:1b:e5:63:9d:37:af:88:07:86:bd:53: 01:65:d6:31:d9:49:72:b0:b6:f9:97:88:1a:08:c1: f0:50:8b:6b:f3:66:3e:17:a3:20:74:45:00:74:80: f3:05:c4:35:ff:81:cd:56:db:f1:55:b5:f6:c5:e7: 4c:d5:69:e3:c6:88:db:3b:64:73:c2:92:a0:53:b6: 13:fa:6c:84:f5:9f:80:8b:a5:c9:d5:ef:64:c5:3c: e5:14:23:38:e7:04:ff:9b:b1:81:d8:49:9c:62:cc: 63:ab:bc:f8:da:5b:36:62:b0:bc:a7:f8:60:5a:7c: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6D:05:28:1D:44:60:26:36:89:6E:1C:09:15:EE:26:F2:BB:94:56 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/C68D1AE69B9611EFB95B8038C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.118.0/24 Signature Algorithm: sha256WithRSAEncryption b5:1a:76:9c:1e:5d:77:cf:8e:92:09:e3:78:b3:3e:d6:74:18: ee:49:b3:f3:c9:c6:ac:cf:be:17:d7:88:6b:02:eb:b6:df:5d: d3:3c:69:65:f6:79:94:79:e3:53:59:b7:11:d3:a2:e5:bc:fc: 9c:51:22:ac:cb:28:47:93:4e:58:ec:3f:1e:71:83:d4:33:81: 39:d8:cc:9a:93:60:3f:fe:aa:0d:d8:31:75:a7:46:3a:89:a7: 50:11:83:05:e9:d2:ec:1a:23:16:9c:6c:f5:68:3d:f1:ec:40: 83:c1:2d:97:b3:9f:7b:43:68:e9:10:0c:70:ab:bb:26:ac:90: b4:b9:d1:92:d8:a5:f3:42:38:d0:d6:f2:e4:11:8f:f1:cf:39: c9:c5:a5:93:9e:0c:e6:0f:7c:a6:69:6e:44:46:f4:69:84:68: 4f:3c:2a:e8:88:76:04:15:03:8d:d5:a7:38:f9:dd:d3:f9:62: ef:b7:6f:91:0a:1a:ed:05:f0:9d:cf:b9:e3:8e:ab:7c:67:75: fa:d9:7d:3a:78:ed:8e:b8:5c:1b:66:3c:df:21:46:ff:1d:97: 30:3e:f7:de:b4:ec:89:e5:31:78:67:68:b4:42:0c:d0:5a:55: 38:e2:5a:9e:70:29:23:13:a6:83:f7:ae:42:dc:80:c2:27:7e: 1e:ac:68:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjUwNTA3MDEzODIyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhYjk4ZC0zMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsd5/blFiSQznkRtJ8sfVbxItlXZZBX+fIdG5oJFZ/2L3rw1IXMm0EfEa/h0D Ww8UoRzYWVGbCESa9rosSAFBGGrb9MBvBNgWuYQPNG/HDUI943Uv+DwGXHeZMle2 72KjH28t+Ww0Y/w8Tyw7S7O21NtJAU9tSuKq8b71bbnzPi50/iPyUV9PFwXcG+Vj nTeviAeGvVMBZdYx2UlysLb5l4gaCMHwUItr82Y+F6MgdEUAdIDzBcQ1/4HNVtvx VbX2xedM1WnjxojbO2RzwpKgU7YT+myE9Z+Ai6XJ1e9kxTzlFCM45wT/m7GB2Emc Ysxjq7z42ls2YrC8p/hgWnxBuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKNtBSgd RGAmNoluHAkV7ibyu5RWMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvQzY4RDFBRTY5 Qjk2MTFFRkI5NUI4MDM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn5XYwDQYJKoZIhvcNAQELBQADggEBALUadpweXXfPjpIJ 43izPtZ0GO5Js/PJxqzPvhfXiGsC67bfXdM8aWX2eZR541NZtxHTouW8/JxRIqzL KEeTTljsPx5xg9QzgTnYzJqTYD/+qg3YMXWnRjqJp1ARgwXp0uwaIxacbPVoPfHs QIPBLZezn3tDaOkQDHCruyaskLS50ZLYpfNCONDW8uQRj/HPOcnFpZOeDOYPfKZp bkRG9GmEaE88KuiIdgQVA43Vpzj53dP5Yu+3b5EKGu0F8J3PueOOq3xndfrZfTp4 7Y64XBtmPN8hRv8dlzA+99607InlMXhnaLRCDNBaVTjiWp5wKSMTpoP3rkLcgMIn fh6saHI= -----END CERTIFICATE-----Generated at Sun May 11 19:12:45 2025 by rpki-client