$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa File: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (raw, json) Hash identifier: bcWV9If/HkIEw6hnBH3pLaQkTOmCSNPL+NkOOV2t9w0= Subject key identifier: F2:01:7B:67:31:75:CD:32:1B:2C:65:7B:FB:47:75:5B:0B:53:BC:AA Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CA9 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa Signing time: Wed 30 Apr 2025 18:27:43 +0000 ROA not before: Wed 30 Apr 2025 18:27:43 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 150178 IP address blocks: 103.135.138.0/24 maxlen: 24 103.135.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 30 18:27:43 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68126b9f-8a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:06:f8:e0:b9:56:67:4a:07:b0:49:9f:61: f6:4a:d5:8a:0d:8d:8d:49:14:d2:4e:8c:05:96:59: 03:93:e8:e1:e1:4c:b2:40:1e:a1:74:95:2b:19:a3: c7:f1:35:45:32:ee:21:c9:e6:dc:8f:7e:92:fb:a4: cb:6d:a2:36:be:57:f4:31:78:7c:a4:76:65:b0:ea: f7:93:b4:7b:ae:b5:77:08:e8:68:a1:78:8e:18:c4: 44:79:ed:f4:c4:d0:9e:e4:29:5e:e3:16:1f:28:bc: 5a:b5:25:be:ab:03:2d:97:5b:49:ed:78:2a:a3:5b: bb:3a:ea:e5:e7:74:e2:34:63:30:de:70:01:71:3a: 4a:61:6f:ae:ce:3c:95:59:10:17:ac:92:9a:bc:ef: 6c:81:39:34:17:00:c1:0d:50:c0:c2:10:ad:e1:b5: 41:e3:e4:61:66:df:cd:a9:93:fb:ce:8c:e8:af:ee: 11:a4:53:5f:07:94:b1:e9:6d:0f:cc:3b:8b:53:85: e0:ee:02:73:af:6e:15:0f:7a:f1:ed:63:cb:67:59: fb:c7:22:3b:b5:5b:dd:d3:4e:b5:ba:2e:fb:19:bb: 7b:ea:ce:c6:01:a7:33:68:42:33:a4:bd:09:be:b6: 23:c9:7f:cb:79:4e:b6:92:41:53:66:cb:88:96:ad: a9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:01:7B:67:31:75:CD:32:1B:2C:65:7B:FB:47:75:5B:0B:53:BC:AA X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/0D7B74CACE1111ED8BDB217CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.138.0/23 Signature Algorithm: sha256WithRSAEncryption db:49:00:57:68:c7:9a:10:7a:80:9f:09:e6:6a:58:24:a2:f8: cf:bf:c0:f4:c6:1c:bf:92:53:18:3c:fd:23:1e:4d:55:60:e5: d9:a7:25:5e:49:6b:f8:e7:a8:1d:44:71:cd:27:5c:7c:28:0b: c1:3a:b0:2e:22:d4:08:5c:3f:c7:82:16:b4:08:cb:60:d8:a8: fa:48:9e:55:cb:76:79:e3:7a:4e:3a:8a:00:bc:89:c0:97:73: ce:a5:8f:73:1e:5d:9c:11:31:5f:20:17:c0:f3:3b:11:29:e3: 82:b8:fa:a8:23:2b:b0:58:33:25:ed:67:ae:92:d4:9b:c5:6d: 66:2c:5f:3a:dc:bc:1f:b8:89:29:82:97:22:7f:f2:17:72:a9: 0d:e3:ca:06:c2:0b:81:88:b8:f4:ca:0d:2a:5c:3e:d1:8f:c4: 2c:91:84:20:f5:2b:16:47:51:02:a5:e8:04:d2:0b:47:84:b8: 27:14:69:a9:1d:28:9e:29:0b:3f:d8:a6:b2:2e:d5:1e:27:d9: 4d:c5:4e:45:fb:43:30:e2:f2:7e:07:00:42:00:91:91:be:8b: a7:5a:9d:a7:fd:27:21:58:48:06:39:df:c7:2f:4a:16:ad:7a: 78:58:df:a9:0b:df:9d:f7:d7:26:02:9f:04:97:27:96:b0:56: a7:4b:45:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNDMwMTgyNzQzWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNmI5Zi04YTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApikG+OC5VmdKB7BJn2H2StWKDY2NSRTSTowFllkDk+jh4UyyQB6hdJUrGaPH 8TVFMu4hyebcj36S+6TLbaI2vlf0MXh8pHZlsOr3k7R7rrV3COhooXiOGMREee30 xNCe5Cle4xYfKLxatSW+qwMtl1tJ7Xgqo1u7Ourl53TiNGMw3nABcTpKYW+uzjyV WRAXrJKavO9sgTk0FwDBDVDAwhCt4bVB4+RhZt/NqZP7zozor+4RpFNfB5Sx6W0P zDuLU4Xg7gJzr24VD3rx7WPLZ1n7xyI7tVvd0061ui77Gbt76s7GAaczaEIzpL0J vrYjyX/LeU62kkFTZsuIlq2p1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFPIBe2cx dc0yGyxle/tHdVsLU7yqMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMEQ3Qjc0Q0FD RTExMTFFRDhCREIyMTdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnh4owDQYJKoZIhvcNAQELBQADggEBANtJAFdox5oQeoCf CeZqWCSi+M+/wPTGHL+SUxg8/SMeTVVg5dmnJV5Ja/jnqB1Ecc0nXHwoC8E6sC4i 1AhcP8eCFrQIy2DYqPpInlXLdnnjek46igC8icCXc86lj3MeXZwRMV8gF8DzOxEp 44K4+qgjK7BYMyXtZ66S1JvFbWYsXzrcvB+4iSmClyJ/8hdyqQ3jygbCC4GIuPTK DSpcPtGPxCyRhCD1KxZHUQKl6ATSC0eEuCcUaakdKJ4pCz/YprIu1R4n2U3FTkX7 QzDi8n4HAEIAkZG+i6danaf9JyFYSAY538cvShatenhY36kL35331yYCnwSXJ5aw VqdLRa4= -----END CERTIFICATE-----Generated at Wed May 14 08:12:17 2025 by rpki-client