$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/C885D0C8374B11EEA2157233C4F9AE02.roa File: C885D0C8374B11EEA2157233C4F9AE02.roa (raw, json) Hash identifier: znV1YV1R4QHmzxUCIkShtYBgrQBJHV87NrUXdKtqEAs= Subject key identifier: 5D:C0:61:95:4D:F7:85:F0:B9:CB:21:C5:E3:E0:2A:B0:FF:5A:B0:5B Certificate issuer: /CN=A9194A8C/serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Certificate serial: 014F Authority key identifier: CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/C885D0C8374B11EEA2157233C4F9AE02.roa Signing time: Fri 09 May 2025 00:16:21 +0000 ROA not before: Fri 09 May 2025 00:16:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142121 IP address blocks: 103.166.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=CA8990895C4F4D0E5FE3DF815880B203590FB27A Validity Not Before: May 9 00:16:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681d4955-2ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5f:9c:db:28:67:20:ff:d4:fc:93:ce:ce:42: 7f:92:e2:e3:89:c1:2c:d9:ff:4e:2f:38:1d:8f:e3: 41:5b:40:27:2b:25:a9:fb:90:c6:1f:b4:21:8a:00: 21:8f:2b:ba:ce:48:a4:73:b9:55:a1:1a:15:19:ca: bb:2d:e1:98:f6:f6:82:6d:f9:6a:37:03:cb:bd:d5: 1f:67:53:e7:db:ee:46:b0:3b:15:77:e8:cb:6d:23: 5a:63:38:e5:2d:53:d6:83:a3:6a:c5:bc:6e:58:24: 64:1f:f2:58:92:55:4d:2b:42:cf:e8:ee:ae:f5:08: 17:b3:51:8f:1e:65:52:e4:b0:0d:de:09:85:e9:c2: a8:02:08:89:6e:f2:e5:a2:35:53:ce:b6:8b:81:63: a0:b4:1c:5f:01:1c:1b:ea:99:85:10:a6:cf:25:90: 0e:f0:cc:17:2a:e0:ef:c6:00:96:42:58:b2:b0:c9: b7:b3:cf:12:54:14:41:34:3c:c4:0d:5e:7b:29:e3: 01:31:38:39:e6:85:45:e9:54:b2:9f:a4:60:60:28: 16:a7:ec:9a:37:26:b5:40:68:98:9d:d0:09:67:8b: 19:ed:1e:e3:70:9b:2d:29:23:52:f1:d1:c5:aa:ea: e2:70:6c:e3:c0:b8:56:21:05:d8:62:71:e7:b7:c6: 2d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C0:61:95:4D:F7:85:F0:B9:CB:21:C5:E3:E0:2A:B0:FF:5A:B0:5B X509v3 Authority Key Identifier: keyid:CA:89:90:89:5C:4F:4D:0E:5F:E3:DF:81:58:80:B2:03:59:0F:B2:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/yomQiVxPTQ5f49-BWICyA1kPsno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yomQiVxPTQ5f49-BWICyA1kPsno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/C885D0C8374B11EEA2157233C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.166.168.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:42:f7:c7:21:8c:52:6d:06:23:9a:e2:98:a7:c2:d9:82:c2: bc:b4:99:a6:1a:e8:00:44:b2:95:ab:72:3d:f2:2d:73:04:07: ba:2b:1c:2a:7a:5e:34:3a:ac:47:d2:22:85:5a:0d:bc:65:43: 17:b2:0a:b6:33:d6:54:90:49:29:bf:ac:7e:4f:82:c4:6f:8e: c9:e4:a5:7c:c4:ae:70:7c:b0:7e:2e:bb:0f:e3:04:79:e7:79: cf:7e:4e:ee:32:96:92:70:36:75:a3:c3:dd:5c:4b:13:6e:0d: 8a:09:b3:54:dc:9f:e7:34:d6:10:3d:65:a0:60:6a:c4:00:df: d0:24:af:02:9d:94:4b:bd:49:98:ad:08:b3:f9:4b:b0:6e:b2: 8c:31:ae:32:a4:1c:28:80:a3:14:cf:7d:5d:e2:9c:bf:82:02: 96:f6:16:7d:ca:31:3c:07:42:4d:8a:4c:54:b5:ad:06:2a:a5: 64:12:12:2d:85:90:9b:24:3d:6e:fd:22:21:b0:44:b6:73:f2: 80:d6:ce:14:99:ff:de:99:46:ee:49:b0:dc:46:07:3b:01:94: 7b:d0:ec:9e:81:de:04:88:0d:f4:c4:db:57:52:d3:89:e2:f6: b1:9d:b5:cd:f2:72:8f:ac:40:8d:38:d2:62:43:06:f1:a5:03: df:65:56:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKENBODk5MDg5NUM0RjREMEU1RkUzREY4MTU4ODBCMjAz NTkwRkIyN0EwHhcNMjUwNTA5MDAxNjIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFkNDk1NS0yZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0l+c2yhnIP/U/JPOzkJ/kuLjicEs2f9OLzgdj+NBW0AnKyWp+5DGH7QhigAh jyu6zkikc7lVoRoVGcq7LeGY9vaCbflqNwPLvdUfZ1Pn2+5GsDsVd+jLbSNaYzjl LVPWg6NqxbxuWCRkH/JYklVNK0LP6O6u9QgXs1GPHmVS5LAN3gmF6cKoAgiJbvLl ojVTzraLgWOgtBxfARwb6pmFEKbPJZAO8MwXKuDvxgCWQliysMm3s88SVBRBNDzE DV57KeMBMTg55oVF6VSyn6RgYCgWp+yaNya1QGiYndAJZ4sZ7R7jcJstKSNS8dHF quricGzjwLhWIQXYYnHnt8YtcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF3AYZVN 94XwucshxePgKrD/WrBbMB8GA1UdIwQYMBaAFMqJkIlcT00OX+PfgViAsgNZD7J6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi95b21RaVZ4UFRRNWY0OS1CV0lDeUExa1Bz bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lvbVFpVnhQVFE1ZjQ5LUJXSUN5QTFrUHNuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRBOEMvOUU2NzExQTQyQjFDMTFFQzk1OTk3NDA5QzRGOUFFMDIvQzg4NUQwQzgz NzRCMTFFRUEyMTU3MjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnpqgwDQYJKoZIhvcNAQELBQADggEBAI9C98chjFJtBiOa 4pinwtmCwry0maYa6ABEspWrcj3yLXMEB7orHCp6XjQ6rEfSIoVaDbxlQxeyCrYz 1lSQSSm/rH5PgsRvjsnkpXzErnB8sH4uuw/jBHnnec9+Tu4ylpJwNnWjw91cSxNu DYoJs1Tcn+c01hA9ZaBgasQA39AkrwKdlEu9SZitCLP5S7BusowxrjKkHCiAoxTP fV3inL+CApb2Fn3KMTwHQk2KTFS1rQYqpWQSEi2FkJskPW79IiGwRLZz8oDWzhSZ /96ZRu5JsNxGBzsBlHvQ7J6B3gSIDfTE21dS04ni9rGdtc3yco+sQI040mJDBvGl A99lVoQ= -----END CERTIFICATE-----Generated at Tue May 13 11:28:03 2025 by rpki-client