$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa File: 23B27B60F68011E982571C3EC4F9AE02.roa (raw, json) Hash identifier: 9K94XURicN1zdV3E+GS8wi/6Xv8R6a1xqP7qJN2QSyU= Subject key identifier: 1D:CB:83:9D:2A:3A:25:DD:99:A7:BE:98:0A:2F:72:8E:86:20:D9:53 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0CA8 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa Signing time: Wed 30 Apr 2025 18:27:42 +0000 ROA not before: Wed 30 Apr 2025 18:27:42 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 138651 IP address blocks: 103.135.136.0/24 maxlen: 24 103.135.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3240 (0xca8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 30 18:27:42 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=68126b9d-0e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:93:27:06:a2:f8:6a:30:8f:f6:b0:72:a7: 65:a4:64:d9:f7:8e:10:e9:ca:50:94:d4:74:89:59: 54:11:21:3f:ae:e1:b2:45:72:cd:3c:56:2d:65:ec: c8:95:71:e5:ff:e8:c3:f9:c3:b6:41:b4:27:ac:d4: 9d:eb:4b:3d:47:fb:1e:7a:43:8e:33:62:65:a4:d6: 8b:b4:29:f0:53:e4:15:77:16:1a:64:0b:15:20:61: 47:8a:bf:56:9e:08:70:ec:84:7d:c6:e3:b1:52:c1: 04:91:c9:f1:8f:f8:bd:85:a1:c1:b5:84:7f:b4:03: 06:ec:97:ab:11:00:a6:b2:09:3b:c8:39:dd:0e:74: fa:cf:d0:94:ce:1e:b3:6f:e7:d5:a5:b0:ef:d3:5b: d6:f1:bc:73:87:4e:3f:fa:f2:7d:7a:91:15:8c:f3: 4d:4e:58:ad:a3:64:d7:03:c6:00:1d:d5:a4:7f:ee: 39:68:3b:5f:d4:a0:d4:a2:e6:5b:8d:02:b7:7d:ce: ba:c0:ff:1e:1f:4e:ee:b2:b1:92:de:f3:c8:87:6d: 2a:82:df:1b:a3:22:36:85:53:79:c2:3a:39:d7:0e: cc:a1:ec:9c:fb:bc:61:f4:18:74:35:e7:63:e9:f0: 1e:8c:79:07:a1:c0:09:03:83:26:46:ad:e7:63:4e: 4e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CB:83:9D:2A:3A:25:DD:99:A7:BE:98:0A:2F:72:8E:86:20:D9:53 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/23B27B60F68011E982571C3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.136.0/23 Signature Algorithm: sha256WithRSAEncryption f1:76:3a:54:13:bd:41:f8:8f:1e:00:88:6e:78:31:6e:4f:ff: 04:92:da:f2:68:c7:6a:82:24:ef:de:d8:70:d7:4c:4b:28:ff: 4a:92:25:c7:51:08:c2:d4:f9:04:49:d1:9d:35:af:59:95:28: 0e:5c:07:a4:a3:1d:b1:a5:4c:80:7b:7b:99:f5:4a:ca:1a:9a: 12:57:01:45:19:17:86:ff:9b:35:17:02:33:6a:7c:30:ca:32: 52:c9:85:d4:35:f7:ce:10:ef:25:1f:b5:ce:fe:1e:cc:e5:25: ab:bd:5b:7a:f6:d2:66:12:6e:79:12:ba:ae:1c:7e:e0:3b:a4: 30:e1:ba:c5:7e:b9:02:4e:83:cb:05:df:82:aa:22:f2:d2:af: 16:d4:e4:5b:cd:d0:c9:55:06:61:c8:2b:c5:6c:86:85:6d:2d: 21:99:81:5b:9a:43:6e:7e:2d:42:03:db:b2:7d:40:f6:a5:17: a9:de:e0:df:18:67:73:20:89:7c:de:2b:85:90:ec:de:2a:d7: ad:24:b9:14:08:ab:4e:21:c0:71:5b:60:1e:ae:44:cf:b0:cd: 7c:68:7d:c6:2f:e0:01:52:e8:93:77:8b:42:ce:c0:30:6e:5c: 96:11:1d:bf:3f:a0:da:e6:ae:53:c6:97:c3:3d:ba:c9:9e:25: 72:f4:21:61 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjUwNDMwMTgyNzQyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNmI5ZC0wZTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5KTJwai+Gowj/awcqdlpGTZ944Q6cpQlNR0iVlUESE/ruGyRXLNPFYtZezI lXHl/+jD+cO2QbQnrNSd60s9R/seekOOM2JlpNaLtCnwU+QVdxYaZAsVIGFHir9W nghw7IR9xuOxUsEEkcnxj/i9haHBtYR/tAMG7JerEQCmsgk7yDndDnT6z9CUzh6z b+fVpbDv01vW8bxzh04/+vJ9epEVjPNNTlito2TXA8YAHdWkf+45aDtf1KDUouZb jQK3fc66wP8eH07usrGS3vPIh20qgt8boyI2hVN5wjo51w7Moeyc+7xh9Bh0Nedj 6fAejHkHocAJA4MmRq3nY05O7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFB3Lg50q OiXdmae+mAovco6GINlTMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODhBMDYvODAxQ0E1ODRGNjdGMTFFOUFBM0U3MDNEQzRGOUFFMDIvMjNCMjdCNjBG NjgwMTFFOTgyNTcxQzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnh4gwDQYJKoZIhvcNAQELBQADggEBAPF2OlQTvUH4jx4A iG54MW5P/wSS2vJox2qCJO/e2HDXTEso/0qSJcdRCMLU+QRJ0Z01r1mVKA5cB6Sj HbGlTIB7e5n1SsoamhJXAUUZF4b/mzUXAjNqfDDKMlLJhdQ1984Q7yUftc7+Hszl Jau9W3r20mYSbnkSuq4cfuA7pDDhusV+uQJOg8sF34KqIvLSrxbU5FvN0MlVBmHI K8VshoVtLSGZgVuaQ25+LUID27J9QPalF6ne4N8YZ3MgiXzeK4WQ7N4q160kuRQI q04hwHFbYB6uRM+wzXxofcYv4AFS6JN3i0LOwDBuXJYRHb8/oNrmrlPGl8M9usme JXL0IWE= -----END CERTIFICATE-----Generated at Wed May 14 14:23:41 2025 by rpki-client