$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/A473C9A008F311EE98719810C4F9AE02.roa File: A473C9A008F311EE98719810C4F9AE02.roa (raw, json) Hash identifier: I+dyDrUC3DvMgCPW4jStqejUHX8a7vo0aXHEIsgKIwo= Subject key identifier: C7:A7:4E:5D:71:CC:CC:58:FB:65:4A:EC:89:23:9B:C1:68:E3:36:DC Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0C3E Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/A473C9A008F311EE98719810C4F9AE02.roa Signing time: Mon 28 Apr 2025 18:58:24 +0000 ROA not before: Mon 28 Apr 2025 18:58:24 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 138692 IP address blocks: 103.136.200.0/24 maxlen: 24 103.136.201.0/24 maxlen: 24 103.136.202.0/24 maxlen: 24 103.136.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Apr 28 18:58:24 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680fcfcf-74f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1a:e0:8d:93:1b:76:90:00:20:14:eb:4a:04: f6:02:a9:ab:7c:da:f3:3a:bf:ee:da:6a:e4:ba:5b: da:17:4c:82:a7:97:23:05:17:4e:9b:22:fd:df:70: c6:58:62:65:2f:c4:e4:77:2b:93:f7:15:c2:cf:fd: 7f:ab:18:0c:eb:69:b2:8c:99:ee:38:e7:a8:3c:1b: 2e:ef:a3:68:5e:0a:6a:2e:39:44:43:3a:b1:d3:dd: 28:87:65:e5:f8:47:9f:5d:0f:a2:95:db:c1:54:93: ee:1b:c1:f9:e2:81:ad:3a:63:e2:29:21:44:ff:3b: 32:d1:a9:f4:6f:5b:81:2d:bf:89:bb:25:ac:39:5a: b8:29:17:c5:11:8c:eb:72:b6:96:e8:64:a7:29:67: 49:3d:b1:05:64:21:c7:11:bb:65:fa:a5:4b:a2:04: fe:9b:b2:f8:c4:a4:82:ba:1e:04:e2:86:b1:44:69: 95:be:0d:15:63:4f:f9:fb:70:c6:66:df:3f:d6:65: 47:3c:66:57:ec:8f:d8:32:dd:b1:a9:97:71:b1:a9: 21:9b:be:d6:fe:b3:bc:23:bd:08:8f:d5:5a:46:52: 27:d6:ca:16:99:cc:f0:5a:4e:f9:9c:b4:0d:d0:15: ac:d6:fd:7b:1c:29:bf:8a:eb:61:c2:e5:e3:d6:dd: 2d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A7:4E:5D:71:CC:CC:58:FB:65:4A:EC:89:23:9B:C1:68:E3:36:DC X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/A473C9A008F311EE98719810C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.200.0/22 Signature Algorithm: sha256WithRSAEncryption 14:28:39:0d:70:28:00:8a:c4:1a:d0:15:82:13:94:ce:6e:57: 6c:45:eb:8f:84:de:45:2c:b4:c8:ba:43:e9:41:31:55:33:c8: ca:e8:61:01:43:f9:2a:c7:84:0b:21:ce:0c:63:e7:d8:62:fa: c4:80:2d:8f:29:d8:04:42:d6:65:98:1d:6e:97:e9:ab:a8:06: a6:9e:f1:5a:89:a1:11:2e:ba:e3:0d:fe:c3:a2:89:d3:5e:15: 32:e5:05:58:5d:f6:b7:46:ab:a3:0e:ea:be:97:5e:50:59:c7: 43:01:b9:9a:ed:5e:a5:d8:a8:77:d5:1e:50:81:eb:ec:3c:64: 2e:76:95:1e:a5:4e:2e:b6:8f:91:04:21:dc:2c:11:fc:f1:fe: de:e3:b5:db:b1:d4:df:bf:0f:9c:b3:7e:e4:c3:04:44:4a:1e: 02:05:f9:01:97:8c:af:e9:4f:f5:91:ec:95:39:e1:a9:25:83: 54:90:30:df:a4:42:59:a1:46:91:70:49:43:2f:01:49:b6:bb: a5:0f:8f:f2:09:1d:4c:f9:03:5b:01:4b:a9:bb:0a:53:21:ea: 66:31:d3:20:78:db:9f:0a:80:17:b7:af:de:c3:bb:47:dd:f7: 5a:9d:dd:df:32:67:83:43:6b:a5:45:11:40:1c:29:5e:3c:ab: e2:eb:89:80 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjUwNDI4MTg1ODI0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmY2ZjZi03NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hrgjZMbdpAAIBTrSgT2AqmrfNrzOr/u2mrkulvaF0yCp5cjBRdOmyL933DG WGJlL8TkdyuT9xXCz/1/qxgM62myjJnuOOeoPBsu76NoXgpqLjlEQzqx090oh2Xl +EefXQ+ildvBVJPuG8H54oGtOmPiKSFE/zsy0an0b1uBLb+JuyWsOVq4KRfFEYzr craW6GSnKWdJPbEFZCHHEbtl+qVLogT+m7L4xKSCuh4E4oaxRGmVvg0VY0/5+3DG Zt8/1mVHPGZX7I/YMt2xqZdxsakhm77W/rO8I70Ij9VaRlIn1soWmczwWk75nLQN 0BWs1v17HCm/iuthwuXj1t0tUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMenTl1x zMxY+2VK7Ikjm8Fo4zbcMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0ExN0IvODUzOTVENkUwNkQzMTFFQUJBNUQ1QTQ5QzRGOUFFMDIvQTQ3M0M5QTAw OEYzMTFFRTk4NzE5ODEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJniMgwDQYJKoZIhvcNAQELBQADggEBABQoOQ1wKACKxBrQ FYITlM5uV2xF64+E3kUstMi6Q+lBMVUzyMroYQFD+SrHhAshzgxj59hi+sSALY8p 2ARC1mWYHW6X6auoBqae8VqJoREuuuMN/sOiidNeFTLlBVhd9rdGq6MO6r6XXlBZ x0MBuZrtXqXYqHfVHlCB6+w8ZC52lR6lTi62j5EEIdwsEfzx/t7jtdux1N+/D5yz fuTDBERKHgIF+QGXjK/pT/WR7JU54aklg1SQMN+kQlmhRpFwSUMvAUm2u6UPj/IJ HUz5A1sBS6m7ClMh6mYx0yB4258KgBe3r97Du0fd91qd3d8yZ4NDa6VFEUAcKV48 q+LriYA= -----END CERTIFICATE-----Generated at Thu May 15 13:20:08 2025 by rpki-client