$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/76391AA6995311EC8EAA8C59C4F9AE02.roa File: 76391AA6995311EC8EAA8C59C4F9AE02.roa (raw, json) Hash identifier: W7ot2zpw7zenj0ixyvV0R84xsbmbGiyY0szYoIQxijc= Subject key identifier: 8A:2A:D1:B2:E6:5E:41:02:5D:B7:E7:CF:65:57:66:D9:B9:FD:65:BE Certificate issuer: /CN=A9181CA2/serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD Certificate serial: 03B0 Authority key identifier: C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/76391AA6995311EC8EAA8C59C4F9AE02.roa Signing time: Tue 29 Apr 2025 01:37:56 +0000 ROA not before: Tue 29 Apr 2025 01:37:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140539 IP address blocks: 103.150.40.0/23 maxlen: 23 103.150.40.0/24 maxlen: 24 103.150.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181CA2, serialNumber=C48D44F111D9F4DC8E3E64AD7F96486461CB9FBD Validity Not Before: Apr 29 01:37:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68102d74-9607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:1e:2c:ae:57:d6:a3:0d:33:82:35:7c:93: d6:d0:18:1e:da:6d:6b:72:93:90:48:2f:29:3a:d7: 82:b9:e2:9f:d3:7c:bc:4a:c1:ea:02:5e:f2:25:98: 97:ba:03:ff:17:a1:c6:d8:15:07:82:6b:14:33:52: 7e:98:be:87:fd:e2:61:e8:de:48:69:24:08:9f:3f: 52:7b:a5:a1:5b:88:c6:33:70:3d:2c:0d:03:b7:d3: e8:49:42:cd:6c:03:2c:95:90:11:e6:3c:50:98:6d: 63:22:d1:f9:5f:57:fa:16:30:e4:21:56:e1:87:5a: 5d:f4:1f:4a:99:d0:50:61:75:8a:9c:88:78:78:bf: b7:bc:11:d2:b7:4a:9f:aa:c5:40:2b:0b:49:e8:57: 45:ac:9e:7a:51:09:f3:4e:54:c2:b1:16:8c:19:d0: e8:0e:c3:8c:30:05:4d:db:47:55:cf:d2:ca:c8:5e: ac:09:7e:0a:ca:38:a6:68:b8:aa:0b:77:bb:c9:1f: be:04:df:59:ad:b6:56:83:66:0d:76:92:30:94:53: 06:e0:4b:81:7e:be:9e:b7:a8:7c:be:9c:1a:4a:62: 28:fe:61:6e:dd:76:7d:7b:b2:45:55:20:69:97:60: 61:92:a9:68:99:e7:59:28:64:36:9f:14:88:08:a3: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:D1:B2:E6:5E:41:02:5D:B7:E7:CF:65:57:66:D9:B9:FD:65:BE X509v3 Authority Key Identifier: keyid:C4:8D:44:F1:11:D9:F4:DC:8E:3E:64:AD:7F:96:48:64:61:CB:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/xI1E8RHZ9NyOPmStf5ZIZGHLn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xI1E8RHZ9NyOPmStf5ZIZGHLn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CA2/79365B8E8F0711EC9EB23170C4F9AE02/76391AA6995311EC8EAA8C59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.40.0/23 Signature Algorithm: sha256WithRSAEncryption 06:d0:23:e4:b7:0c:b7:95:72:cb:bd:0d:e7:af:92:b6:36:f1: 7e:21:8d:6a:26:20:94:f7:fa:9b:25:09:ad:3a:8d:a6:be:e3: dc:a0:b8:95:06:65:1d:57:8a:f6:01:b2:05:27:de:7c:f6:e4: 42:50:2a:fb:9b:67:d2:e9:85:77:55:93:69:ea:9f:39:8e:62: 6d:ae:64:3f:5e:40:aa:c0:02:02:f0:13:6b:33:eb:d5:ec:b1: ca:50:4d:35:78:5b:76:09:3a:f1:4a:d2:40:fb:b5:e4:3f:97: 81:73:9d:1c:33:5f:32:93:a9:95:2d:45:78:b6:12:e1:94:4c: ed:60:84:a2:d9:2c:cc:58:9a:2f:32:bb:b1:74:35:0b:78:43: 7d:1b:04:be:4a:ba:cd:ca:65:a4:37:60:ef:c2:7c:07:4b:08: 24:c7:f4:88:21:64:28:23:ba:16:85:5a:e2:fc:84:cc:f8:08: 55:75:fb:64:15:cf:3d:f7:0f:de:2f:5e:a7:dc:98:9b:8f:19: 28:b6:09:24:97:62:c1:f2:ee:ed:dd:f5:1d:49:10:bc:3b:2c: 6d:5b:b2:c1:d6:95:cd:ca:95:ac:e3:4b:e3:9e:b7:99:f9:1b: 38:8c:2e:86:ff:7e:ab:a1:cf:5c:04:4a:09:b1:dd:75:71:bf: b2:cf:04:8b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFDQTIxMTAvBgNVBAUTKEM0OEQ0NEYxMTFEOUY0REM4RTNFNjRBRDdGOTY0ODY0 NjFDQjlGQkQwHhcNMjUwNDI5MDEzNzU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEwMmQ3NC05NjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSUeLK5X1qMNM4I1fJPW0Bge2m1rcpOQSC8pOteCueKf03y8SsHqAl7yJZiX ugP/F6HG2BUHgmsUM1J+mL6H/eJh6N5IaSQInz9Se6WhW4jGM3A9LA0Dt9PoSULN bAMslZAR5jxQmG1jItH5X1f6FjDkIVbhh1pd9B9KmdBQYXWKnIh4eL+3vBHSt0qf qsVAKwtJ6FdFrJ56UQnzTlTCsRaMGdDoDsOMMAVN20dVz9LKyF6sCX4KyjimaLiq C3e7yR++BN9ZrbZWg2YNdpIwlFMG4EuBfr6et6h8vpwaSmIo/mFu3XZ9e7JFVSBp l2BhkqlomedZKGQ2nxSICKPmXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIoq0bLm XkECXbfnz2VXZtm5/WW+MB8GA1UdIwQYMBaAFMSNRPER2fTcjj5krX+WSGRhy5+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUNBMi83OTM2NUI4RThG MDcxMUVDOUVCMjMxNzBDNEY5QUUwMi94STFFOFJIWjlOeU9QbVN0ZjVaSVpHSExu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJMUU4UkhaOU55T1BtU3RmNVpJWkdITG43MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODFDQTIvNzkzNjVCOEU4RjA3MTFFQzlFQjIzMTcwQzRGOUFFMDIvNzYzOTFBQTY5 OTUzMTFFQzhFQUE4QzU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnligwDQYJKoZIhvcNAQELBQADggEBAAbQI+S3DLeVcsu9 DeevkrY28X4hjWomIJT3+pslCa06jaa+49yguJUGZR1XivYBsgUn3nz25EJQKvub Z9LphXdVk2nqnzmOYm2uZD9eQKrAAgLwE2sz69XsscpQTTV4W3YJOvFK0kD7teQ/ l4FznRwzXzKTqZUtRXi2EuGUTO1ghKLZLMxYmi8yu7F0NQt4Q30bBL5Kus3KZaQ3 YO/CfAdLCCTH9IghZCgjuhaFWuL8hMz4CFV1+2QVzz33D94vXqfcmJuPGSi2CSSX YsHy7u3d9R1JELw7LG1bssHWlc3KlazjS+Oet5n5GziMLob/fquhz1wESgmx3XVx v7LPBIs= -----END CERTIFICATE-----Generated at Fri May 16 18:14:05 2025 by rpki-client