$ rpki-client -vvf rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/4482148613E611EE8ECA2D3CC4F9AE02.roa File: 4482148613E611EE8ECA2D3CC4F9AE02.roa (raw, json) Hash identifier: XTSBtrIecRC5bRQ4gGFFZQkO+lSp1UBH8SdLLnw+dpg= Subject key identifier: 3D:B1:3A:43:89:92:CA:CF:61:5B:2E:34:32:D3:C8:3C:08:9F:E7:59 Certificate issuer: /CN=A9191BBF/serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Certificate serial: 061A Authority key identifier: BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/4482148613E611EE8ECA2D3CC4F9AE02.roa Signing time: Wed 30 Apr 2025 22:34:56 +0000 ROA not before: Wed 30 Apr 2025 22:34:56 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139691 IP address blocks: 103.166.40.0/24 maxlen: 24 103.166.41.0/24 maxlen: 24 2001:df6:7c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191BBF, serialNumber=BF4D8013DB97B8EF00F8CE8C6DBEAFB051E194BC Validity Not Before: Apr 30 22:34:56 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812a58f-083d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:9e:fa:b9:22:18:c9:0c:35:de:29:54:34: be:ad:03:59:fe:e3:7e:2c:ff:af:b4:b6:22:3f:77: 71:2e:3b:de:46:92:7a:50:af:36:ba:e0:db:fb:5b: 88:47:95:ea:42:58:aa:b8:33:13:49:9b:5a:70:18: a1:9d:dc:f4:96:f9:95:c3:db:ef:14:4f:25:e8:8c: 10:74:a5:d1:84:27:d3:d0:7f:ae:a0:26:58:d2:51: 1a:ce:e8:fa:10:fb:54:66:be:b3:17:0a:c4:b7:c8: 3b:3e:d2:b1:21:2e:e9:62:e7:73:5e:71:a0:20:67: 5d:52:63:9d:69:10:08:f5:97:2f:a8:96:22:8b:5d: 85:d9:43:32:25:59:49:96:01:9e:37:4b:f4:63:59: fd:fb:d9:71:8a:0a:e0:88:83:00:f8:fc:d0:33:b7: 61:aa:0c:5a:86:52:c2:e4:7f:2c:e1:47:4a:28:a1: e5:4a:23:3c:66:39:61:75:9c:d4:ee:2d:f3:45:77: 2b:ca:f6:d4:1d:0d:67:ee:ee:26:a4:a1:2a:d9:c3: 68:95:75:46:f9:05:30:29:97:c1:98:86:7a:ee:9b: 8b:f6:48:8f:36:82:b4:81:cc:87:68:22:04:b1:94: fe:8e:ba:19:3c:ab:64:6e:c4:0f:a5:02:89:e6:44: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B1:3A:43:89:92:CA:CF:61:5B:2E:34:32:D3:C8:3C:08:9F:E7:59 X509v3 Authority Key Identifier: keyid:BF:4D:80:13:DB:97:B8:EF:00:F8:CE:8C:6D:BE:AF:B0:51:E1:94:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/v02AE9uXuO8A-M6Mbb6vsFHhlLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v02AE9uXuO8A-M6Mbb6vsFHhlLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191BBF/126B909A9DBD11EB8A1F0B32C4F9AE02/4482148613E611EE8ECA2D3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.40.0/23 IPv6: 2001:df6:7c80::/48 Signature Algorithm: sha256WithRSAEncryption d3:52:d6:13:cf:03:0f:6c:28:0c:c6:a1:bd:7f:76:a3:6d:61: 16:2f:ab:74:e6:5a:46:39:5a:f8:b2:30:86:6a:f3:20:53:7e: 55:5d:3c:9e:76:e2:13:b5:f7:50:66:9f:64:1a:7a:f6:51:d8: 1d:6c:8a:b4:1a:e8:0d:36:e7:41:c0:1d:af:f7:98:f8:da:9b: fc:7b:f9:0a:93:21:c1:1c:11:cd:e1:2e:ff:16:29:a9:c2:f2: 09:6f:68:35:d7:89:89:d9:f3:41:81:8d:97:cf:87:08:26:72: 76:3c:b7:27:53:4a:05:54:a4:e8:78:63:35:2c:98:3d:c3:e2: bf:95:91:4b:61:6c:40:ee:9c:ab:1e:7c:32:6b:8e:1d:2f:3e: 87:a1:13:6c:6a:c1:6d:df:b8:2c:54:a2:96:29:63:ba:47:6e: 2a:ac:fc:10:db:f6:0c:f9:79:97:3c:23:4b:dc:dc:87:91:3e: 9f:a5:f9:a2:98:60:c1:0a:02:66:e3:be:0a:85:7e:11:82:f5: 4f:8c:8c:c6:92:f3:55:27:af:e3:25:40:f3:23:e0:e8:b1:b2: 9d:2a:93:4d:28:e8:3a:5c:9d:8b:cd:d1:5c:f2:f4:36:29:75: 3a:ec:90:b1:e1:66:24:50:ea:27:fc:b7:2e:5a:35:d4:8f:24: f8:65:a2:56 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCQkYxMTAvBgNVBAUTKEJGNEQ4MDEzREI5N0I4RUYwMEY4Q0U4QzZEQkVBRkIw NTFFMTk0QkMwHhcNMjUwNDMwMjIzNDU2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyYTU4Zi0wODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqN2e+rkiGMkMNd4pVDS+rQNZ/uN+LP+vtLYiP3dxLjveRpJ6UK82uuDb+1uI R5XqQliquDMTSZtacBihndz0lvmVw9vvFE8l6IwQdKXRhCfT0H+uoCZY0lEazuj6 EPtUZr6zFwrEt8g7PtKxIS7pYudzXnGgIGddUmOdaRAI9ZcvqJYii12F2UMyJVlJ lgGeN0v0Y1n9+9lxigrgiIMA+PzQM7dhqgxahlLC5H8s4UdKKKHlSiM8ZjlhdZzU 7i3zRXcryvbUHQ1n7u4mpKEq2cNolXVG+QUwKZfBmIZ67puL9kiPNoK0gcyHaCIE sZT+jroZPKtkbsQPpQKJ5kQGCQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD2xOkOJ ksrPYVsuNDLTyDwIn+dZMB8GA1UdIwQYMBaAFL9NgBPbl7jvAPjOjG2+r7BR4ZS8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUJCRi8xMjZCOTA5QTlE QkQxMUVCOEExRjBCMzJDNEY5QUUwMi92MDJBRTl1WHVPOEEtTTZNYmI2dnNGSGhs THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YwMkFFOXVYdU84QS1NNk1iYjZ2c0ZIaGxMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFCQkYvMTI2QjkwOUE5REJEMTFFQjhBMUYwQjMyQzRGOUFFMDIvNDQ4MjE0ODYx M0U2MTFFRThFQ0EyRDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnpigwDwQCAAIwCQMHACABDfZ8gDANBgkqhkiG9w0BAQsF AAOCAQEA01LWE88DD2woDMahvX92o21hFi+rdOZaRjla+LIwhmrzIFN+VV08nnbi E7X3UGafZBp69lHYHWyKtBroDTbnQcAdr/eY+Nqb/Hv5CpMhwRwRzeEu/xYpqcLy CW9oNdeJidnzQYGNl8+HCCZydjy3J1NKBVSk6HhjNSyYPcPiv5WRS2FsQO6cqx58 MmuOHS8+h6ETbGrBbd+4LFSililjukduKqz8ENv2DPl5lzwjS9zch5E+n6X5ophg wQoCZuO+CoV+EYL1T4yMxpLzVSev4yVA8yPg6LGynSqTTSjoOlydi83RXPL0Nil1 OuyQseFmJFDqJ/y3Llo11I8k+GWiVg== -----END CERTIFICATE-----Generated at Fri May 16 23:20:35 2025 by rpki-client