$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/96A289D42B3711F0BDDC4B6CC4F9AE02.roa File: 96A289D42B3711F0BDDC4B6CC4F9AE02.roa (raw, json) Hash identifier: 8gdeueQHUneqlXN+gXju3YJcGEi4s/J3EJf9JJXgCLY= Subject key identifier: 52:FF:79:A1:5E:02:9E:45:DB:FC:0B:B6:9A:4B:8D:76:0B:5B:5E:C3 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3571 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/96A289D42B3711F0BDDC4B6CC4F9AE02.roa Signing time: Wed 07 May 2025 11:37:00 +0000 ROA not before: Wed 07 May 2025 11:37:00 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 141607 IP address blocks: 103.220.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: May 7 11:37:00 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=681b45dc-169a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:00:89:2d:2b:66:11:02:fc:da:ae:09:03: 56:02:3e:ec:74:70:8e:ab:eb:10:f3:c6:3d:99:9f: ac:53:88:86:3a:79:5c:bf:69:f4:d0:f4:73:6b:19: 9d:a9:c7:7f:a8:b0:8f:b4:39:aa:b9:93:05:8e:00: 04:14:0f:08:cb:7d:d8:e4:c8:8b:b0:20:7c:3d:96: 7c:41:c5:c8:c7:31:8b:37:29:1a:4d:03:7f:2e:29: 2a:fc:06:59:d1:40:71:7d:8f:8d:71:d2:6f:ee:a6: 07:f4:37:34:c4:ed:3e:8e:26:3a:5c:4c:24:6f:32: a5:aa:24:e6:33:b1:22:3b:a5:40:f1:20:49:b8:5a: e9:19:d3:f6:80:0b:f0:a5:d1:0e:db:33:3d:4b:1b: ac:ee:b4:1d:21:6c:12:84:12:8b:76:97:72:f0:73: e0:ab:b0:cc:bc:c7:5e:de:63:e9:b2:1c:b2:da:ad: 7f:f2:cf:94:22:cf:f1:3a:e6:1d:75:b2:4b:37:7e: e5:19:d0:c3:31:aa:22:d2:7d:05:2a:c4:b4:ba:ec: 3d:e0:a7:53:53:17:08:e1:14:71:68:68:65:9d:68: 84:b0:01:36:a7:81:e7:4c:35:01:ae:d0:51:ca:3e: a1:0f:e6:41:01:a4:a4:13:e6:61:b7:c9:81:4c:04: a6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:FF:79:A1:5E:02:9E:45:DB:FC:0B:B6:9A:4B:8D:76:0B:5B:5E:C3 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/96A289D42B3711F0BDDC4B6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.220.22.0/23 Signature Algorithm: sha256WithRSAEncryption 97:e9:96:cb:b6:8f:39:95:4c:08:cc:94:fc:32:ae:2d:da:32: 5f:a4:f3:7e:fd:21:a3:c2:07:0f:30:bc:b1:29:31:55:96:f7: 1a:ec:ac:8b:52:12:44:cb:13:87:91:44:7e:3d:05:94:be:37: 59:1e:0b:6d:96:43:c2:16:e9:16:b8:cc:4e:6e:cb:81:2b:7b: 95:b6:ca:a6:41:5d:9e:86:5a:7b:ee:98:53:47:ee:ee:7c:92: c7:fc:f5:c9:3d:5e:71:fb:1e:a1:a0:ad:fc:f5:58:5f:10:67: 6b:cc:c7:fe:74:e7:92:77:14:f8:36:92:8b:ec:34:cd:53:6b: 6e:8a:53:26:2e:f5:c4:e6:6c:4f:2d:ad:44:fc:28:1c:24:88: 7d:54:a6:dd:f6:09:99:8c:62:57:dd:5b:e8:07:34:11:e9:1e: 34:88:3b:2f:87:e5:13:f9:9e:c9:4f:3a:8c:21:4a:65:46:d1: f7:3f:b3:9f:d1:0a:3c:4c:a1:b4:14:c0:85:4f:ca:68:55:e8: 4f:b4:a0:51:9d:35:2b:a8:66:cc:98:ad:bb:13:61:88:4d:9e: 27:79:c3:b0:4c:0b:ce:73:e9:e4:4a:dc:35:19:47:0a:b7:e8: fd:15:4b:1e:20:d0:c6:f3:e8:f9:61:ed:b0:55:f6:70:e8:28: 80:ff:d3:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjUwNTA3MTEzNzAwWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFiNDVkYy0xNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvQAiS0rZhEC/NquCQNWAj7sdHCOq+sQ88Y9mZ+sU4iGOnlcv2n00PRzaxmd qcd/qLCPtDmquZMFjgAEFA8Iy33Y5MiLsCB8PZZ8QcXIxzGLNykaTQN/Likq/AZZ 0UBxfY+NcdJv7qYH9Dc0xO0+jiY6XEwkbzKlqiTmM7EiO6VA8SBJuFrpGdP2gAvw pdEO2zM9Sxus7rQdIWwShBKLdpdy8HPgq7DMvMde3mPpshyy2q1/8s+UIs/xOuYd dbJLN37lGdDDMaoi0n0FKsS0uuw94KdTUxcI4RRxaGhlnWiEsAE2p4HnTDUBrtBR yj6hD+ZBAaSkE+Zht8mBTASmQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFL/eaFe Ap5F2/wLtppLjXYLW17DMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvOTZBMjg5RDQy QjM3MTFGMEJEREM0QjZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFn3BYwDQYJKoZIhvcNAQELBQADggEBAJfplsu2jzmVTAjM lPwyri3aMl+k8379IaPCBw8wvLEpMVWW9xrsrItSEkTLE4eRRH49BZS+N1keC22W Q8IW6Ra4zE5uy4Ere5W2yqZBXZ6GWnvumFNH7u58ksf89ck9XnH7HqGgrfz1WF8Q Z2vMx/5055J3FPg2kovsNM1Ta26KUyYu9cTmbE8trUT8KBwkiH1Upt32CZmMYlfd W+gHNBHpHjSIOy+H5RP5nslPOowhSmVG0fc/s5/RCjxMobQUwIVPymhV6E+0oFGd NSuoZsyYrbsTYYhNnid5w7BMC85z6eRK3DUZRwq36P0VSx4g0Mbz6Plh7bBV9nDo KID/044= -----END CERTIFICATE-----Generated at Sat May 10 22:04:51 2025 by rpki-client