$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/D193920E709411E99F95933EC4F9AE02.roa File: D193920E709411E99F95933EC4F9AE02.roa (raw, json) Hash identifier: Rwnl5e54mLk+LHSVaZTg2cOR8P1YS+fQ04gmO2RO2+Q= Subject key identifier: F9:75:E9:AD:30:7F:15:9B:E1:37:83:D0:25:A3:DE:1A:30:D7:C3:C2 Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 0F46 Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/D193920E709411E99F95933EC4F9AE02.roa Signing time: Fri 16 May 2025 17:52:40 +0000 ROA not before: Fri 16 May 2025 17:52:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139008 IP address blocks: 103.138.144.0/23 maxlen: 23 103.138.144.0/24 maxlen: 24 103.138.145.0/24 maxlen: 24 2001:df0:3f80::/48 maxlen: 48 2406:2c0::/32 maxlen: 32 2406:2c0:1100::/40 maxlen: 40 2406:2c0:1101::/48 maxlen: 48 2406:2c0:1102::/48 maxlen: 48 2406:2c0:110b::/48 maxlen: 48 2406:2c0:1132::/48 maxlen: 48 2406:2c0:7100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 17:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3910 (0xf46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: May 16 17:52:40 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68277b67-b8b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:15:f0:8b:8e:c0:dc:1c:a2:59:00:19:26:e7: 88:bb:44:e7:fb:9c:b0:c1:46:9c:e0:18:82:04:e8: bf:c6:32:b4:bc:2c:d9:fa:84:f2:7a:98:39:d1:1e: 53:14:9d:f9:ae:98:f8:13:cf:a9:1b:ee:69:dd:c9: a9:b3:12:90:bd:b0:2f:89:be:af:5a:77:18:48:97: 23:e4:e5:14:25:8c:7c:8f:4d:53:bd:7f:c3:bb:3f: 8d:73:96:ea:fe:34:67:8b:06:b1:b0:bb:4c:65:fd: 6a:c7:01:2f:d7:66:0f:8f:c3:44:e4:d8:e7:d5:ae: d0:1c:dd:a8:ee:ca:8b:6d:f8:4f:72:58:24:e2:f0: f7:ee:f3:0e:c8:fd:29:f5:b8:a0:21:bd:69:35:64: 19:cb:98:13:b5:b5:1f:2a:12:cd:a7:bf:4d:0b:5b: 8c:5b:43:c1:62:d4:3f:92:97:76:9c:93:58:72:19: a8:fd:2e:98:d8:9e:5c:60:43:24:fe:db:2c:14:76: b1:5b:b0:d5:e8:bd:f8:84:ae:65:cf:6c:12:7b:b7: 73:ba:43:67:9b:69:e4:16:ee:43:0a:78:7d:3d:fb: 3a:13:93:97:4a:76:b0:0d:fd:24:87:6c:5c:cd:11: 2e:9c:6c:d6:83:ca:09:bf:eb:14:fc:a2:0c:31:c7: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:75:E9:AD:30:7F:15:9B:E1:37:83:D0:25:A3:DE:1A:30:D7:C3:C2 X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/D193920E709411E99F95933EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.138.144.0/23 IPv6: 2001:df0:3f80::/48 2406:2c0::/32 Signature Algorithm: sha256WithRSAEncryption 81:78:36:49:15:f8:ad:46:26:f4:5d:2b:62:66:99:21:7d:6e: c9:85:e3:de:b4:e4:68:b3:b7:f7:ef:68:c2:34:9b:69:cf:3b: 2d:3c:6a:f8:0f:6c:e4:db:76:19:71:14:06:d4:05:81:6c:92: 82:85:5e:c9:14:4b:f8:43:4e:e6:c4:69:d0:13:2c:a9:04:6f: 6c:58:8d:d6:58:71:2c:ba:2d:70:e6:2c:be:e5:ce:71:7f:78: 60:40:40:c8:de:ce:f4:e3:64:34:fb:14:02:19:11:cb:28:d3: 4c:5a:24:02:67:e2:47:b1:29:97:0b:0a:d3:8c:fe:d7:01:e7: 7d:2a:5b:9c:4f:1b:8c:0d:f8:57:4c:d8:e2:23:d2:c3:7f:58: 52:9e:92:4e:69:87:b3:11:d5:23:47:a6:a7:0b:53:27:67:7f: dd:73:96:14:01:47:78:5e:35:2f:d9:d1:b3:9e:09:8e:dd:59: 2d:80:51:2c:6e:e8:c9:b1:1f:f5:44:20:49:16:f1:5d:63:0e: fb:ca:af:20:ff:79:a3:b0:23:8b:0a:e2:4e:7c:a7:7a:b5:8c: 52:75:76:71:71:67:cb:ee:8d:5e:40:b4:f3:66:c1:e2:10:df: a8:1e:89:fe:04:22:51:52:6b:d1:3f:7d:36:79:21:66:d1:13: da:d5:7e:14 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICD0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjUwNTE2MTc1MjQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI3N2I2Ny1iOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBXwi47A3ByiWQAZJueIu0Tn+5ywwUac4BiCBOi/xjK0vCzZ+oTyepg50R5T FJ35rpj4E8+pG+5p3cmpsxKQvbAvib6vWncYSJcj5OUUJYx8j01TvX/Duz+Nc5bq /jRniwaxsLtMZf1qxwEv12YPj8NE5Njn1a7QHN2o7sqLbfhPclgk4vD37vMOyP0p 9bigIb1pNWQZy5gTtbUfKhLNp79NC1uMW0PBYtQ/kpd2nJNYchmo/S6Y2J5cYEMk /tssFHaxW7DV6L34hK5lz2wSe7dzukNnm2nkFu5DCnh9Pfs6E5OXSnawDf0kh2xc zREunGzWg8oJv+sU/KIMMceU1QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPl16a0w fxWb4TeD0CWj3how18PCMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlCREYvRTcwRTBBOTg3MDkzMTFFOTgwQkQ3QzNEQzRGOUFFMDIvRDE5MzkyMEU3 MDk0MTFFOTlGOTU5MzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMAwEAgABMAYDBAFnipAwFgQCAAIwEAMHACABDfA/gAMFACQGAsAwDQYJKoZI hvcNAQELBQADggEBAIF4NkkV+K1GJvRdK2JmmSF9bsmF49605Gizt/fvaMI0m2nP Oy08avgPbOTbdhlxFAbUBYFskoKFXskUS/hDTubEadATLKkEb2xYjdZYcSy6LXDm LL7lznF/eGBAQMjezvTjZDT7FAIZEcso00xaJAJn4kexKZcLCtOM/tcB530qW5xP G4wN+FdM2OIj0sN/WFKekk5ph7MR1SNHpqcLUydnf91zlhQBR3heNS/Z0bOeCY7d WS2AUSxu6MmxH/VEIEkW8V1jDvvKryD/eaOwI4sK4k58p3q1jFJ1dnFxZ8vujV5A tPNmweIQ36geif4EIlFSa9E/fTZ5IWbRE9rVfhQ= -----END CERTIFICATE-----Generated at Sun May 18 21:20:05 2025 by rpki-client