$ rpki-client -vvf rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/2DB6F886286111E9BA245A71C4F9AE02.roa File: 2DB6F886286111E9BA245A71C4F9AE02.roa (raw, json) Hash identifier: u+yqPzFm9GwHKpt6ah61N8BF+hT/b/OI4bIwjmc4Bss= Subject key identifier: 15:FF:1F:BA:1F:58:C1:8A:62:07:4B:81:9D:95:43:B0:CD:F7:CF:B7 Certificate issuer: /CN=A9182948/serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Certificate serial: 1064 Authority key identifier: 88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/2DB6F886286111E9BA245A71C4F9AE02.roa Signing time: Fri 20 Dec 2024 17:44:57 +0000 ROA not before: Fri 20 Dec 2024 17:44:57 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138578 IP address blocks: 103.133.164.0/22 maxlen: 22 103.133.164.0/24 maxlen: 24 103.133.165.0/24 maxlen: 24 103.133.166.0/24 maxlen: 24 103.133.167.0/24 maxlen: 24 2404:50c0::/32 maxlen: 32 2404:50c0:bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4196 (0x1064) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182948, serialNumber=8812C867F6A6578808CD92A50BB3952AF57778F8 Validity Not Before: Dec 20 17:44:57 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6765ad18-bd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:35:7c:2c:a9:08:36:a3:83:4b:b7:e5:04: ee:8d:78:33:44:43:90:6e:e4:35:f7:27:a5:56:6f: d6:f1:6d:b4:60:67:9b:30:aa:b8:c6:e1:94:83:c9: 67:4e:44:20:50:83:df:7b:62:13:f5:49:1b:7b:0b: 71:70:76:22:a1:d2:6b:0d:32:96:c2:12:ed:bc:e7: 20:a5:54:de:7a:92:d0:6f:ef:a4:92:b4:df:0c:64: a4:1f:7e:1c:10:a6:62:40:6e:ea:d8:10:92:43:6d: 65:0c:78:a9:fb:5f:59:cd:9d:92:61:4b:8e:e7:12: ae:39:3e:f1:30:09:bb:36:66:f5:f6:12:39:22:35: fb:c8:d8:33:29:06:53:b2:0b:42:bd:c8:b1:ee:ec: 14:03:aa:c5:1f:3b:6d:22:d9:8a:70:a2:4a:70:5a: 1a:d3:c7:27:e5:16:8d:c7:3d:67:fe:35:25:dd:19: b8:3b:5d:a7:0a:3a:70:24:5a:8f:d6:20:b0:52:88: 0b:f9:8e:46:23:c5:61:db:20:70:db:6a:c9:63:6a: af:f0:bd:46:0a:7d:b9:6f:b7:b6:fa:c9:3d:68:a8: ad:d9:d4:6a:ac:1d:7b:52:db:0b:c9:62:aa:33:c8: a1:93:3b:3f:2c:32:04:ad:58:93:9e:a9:ab:1d:01: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FF:1F:BA:1F:58:C1:8A:62:07:4B:81:9D:95:43:B0:CD:F7:CF:B7 X509v3 Authority Key Identifier: keyid:88:12:C8:67:F6:A6:57:88:08:CD:92:A5:0B:B3:95:2A:F5:77:78:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/iBLIZ_amV4gIzZKlC7OVKvV3ePg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iBLIZ_amV4gIzZKlC7OVKvV3ePg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182948/EFA58BD627F011E988468C1BC4F9AE02/2DB6F886286111E9BA245A71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.164.0/22 IPv6: 2404:50c0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:07:64:8a:5c:8e:ee:f6:67:37:65:02:0f:82:15:bd:37:17: aa:80:31:c4:e5:11:c3:b4:f2:bb:12:0a:8d:9f:59:5a:6e:7b: 30:ed:21:c5:a6:c4:d7:57:23:bc:a7:60:b9:71:e8:4b:97:30: 59:b0:9e:e3:41:be:3d:e7:27:83:bb:a8:b4:3b:b7:9e:df:a4: 68:94:ae:24:e9:c0:3d:61:21:2f:6e:65:44:3a:aa:29:83:08: e9:53:39:85:5b:69:b8:6e:4f:98:db:4a:16:50:33:76:57:6c: 15:da:3b:48:95:42:6f:28:04:53:60:5d:1e:7e:fc:db:ac:b1: d6:7c:cc:a1:15:84:be:a3:8b:eb:2f:9d:c5:66:c0:ac:0e:48: d5:dd:61:d6:47:09:47:44:57:15:5a:6a:32:ad:77:e0:c3:e7: e8:ec:79:9f:22:69:76:0a:95:dd:22:78:71:8b:fa:2a:73:33: f9:0a:c1:67:e6:94:ed:d2:b5:c0:d5:4f:ee:45:47:bb:44:82: 59:86:25:6e:06:3b:23:7f:4d:c2:a1:39:2b:ef:c1:83:84:09: 7d:ff:da:56:62:e3:e6:67:9e:23:9e:85:99:1b:64:f3:51:be: b8:d5:48:5f:55:dc:91:a1:4c:f9:74:44:8d:6d:70:dc:d1:73: 8d:05:c3:4e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICEGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5NDgxMTAvBgNVBAUTKDg4MTJDODY3RjZBNjU3ODgwOENEOTJBNTBCQjM5NTJB RjU3Nzc4RjgwHhcNMjQxMjIwMTc0NDU3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY1YWQxOC1iZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jE1fCypCDajg0u35QTujXgzREOQbuQ19yelVm/W8W20YGebMKq4xuGUg8ln TkQgUIPfe2IT9UkbewtxcHYiodJrDTKWwhLtvOcgpVTeepLQb++kkrTfDGSkH34c EKZiQG7q2BCSQ21lDHip+19ZzZ2SYUuO5xKuOT7xMAm7Nmb19hI5IjX7yNgzKQZT sgtCvcix7uwUA6rFHzttItmKcKJKcFoa08cn5RaNxz1n/jUl3Rm4O12nCjpwJFqP 1iCwUogL+Y5GI8Vh2yBw22rJY2qv8L1GCn25b7e2+sk9aKit2dRqrB17UtsLyWKq M8ihkzs/LDIErViTnqmrHQHHcwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFBX/H7of WMGKYgdLgZ2VQ7DN98+3MB8GA1UdIwQYMBaAFIgSyGf2pleICM2SpQuzlSr1d3j4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Mjk0OC9FRkE1OEJENjI3 RjAxMUU5ODg0NjhDMUJDNEY5QUUwMi9pQkxJWl9hbVY0Z0l6WktsQzdPVkt2VjNl UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lCTElaX2FtVjRnSXpaS2xDN09WS3ZWM2VQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI5NDgvRUZBNThCRDYyN0YwMTFFOTg4NDY4QzFCQzRGOUFFMDIvMkRCNkY4ODYy ODYxMTFFOUJBMjQ1QTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhaQwDQQCAAIwBwMFACQEUMAwDQYJKoZIhvcNAQELBQAD ggEBAAoHZIpcju72ZzdlAg+CFb03F6qAMcTlEcO08rsSCo2fWVpuezDtIcWmxNdX I7ynYLlx6EuXMFmwnuNBvj3nJ4O7qLQ7t57fpGiUriTpwD1hIS9uZUQ6qimDCOlT OYVbabhuT5jbShZQM3ZXbBXaO0iVQm8oBFNgXR5+/NussdZ8zKEVhL6ji+svncVm wKwOSNXdYdZHCUdEVxVaajKtd+DD5+jseZ8iaXYKld0ieHGL+ipzM/kKwWfmlO3S tcDVT+5FR7tEglmGJW4GOyN/TcKhOSvvwYOECX3/2lZi4+ZnniOehZkbZPNRvrjV SF9V3JGhTPl0RI1tcNzRc40Fw04= -----END CERTIFICATE-----Generated at Mon Oct 20 19:48:13 2025 by rpki-client