$ rpki-client -vvf rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa File: 3E122AE0876011ED84335D46C4F9AE02.roa (raw, json) Hash identifier: bMGYEkxmsNwyimLtEml2g/yxjeK2QwKmxudQ/0mQEOc= Subject key identifier: A1:CC:6F:51:BA:98:E9:80:84:43:66:02:59:C3:A0:CA:92:5F:A9:1E Certificate issuer: /CN=A9129F1D/serialNumber=CB5B02D0FC736E2A7AB2D288A0FC33167A4BBCED Certificate serial: 0187 Authority key identifier: CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa Signing time: Mon 27 Jan 2025 02:15:50 +0000 ROA not before: Mon 27 Jan 2025 02:15:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 1221 IP address blocks: 203.24.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129F1D Validity Not Before: Jan 27 02:15:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6796ec56-fba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:8b:79:8d:9b:82:54:2f:29:02:c5:89:81: a3:0d:9d:a4:94:6a:78:31:e6:74:6d:5d:0f:eb:44: 9e:40:f9:7f:61:39:48:7b:16:5d:1f:b2:8a:98:54: 93:1f:80:ee:26:d3:84:24:0a:e7:f7:e4:6d:1b:6a: 7c:d4:f4:22:12:db:2e:2a:24:63:7e:0b:f8:61:67: 8d:0a:ef:18:60:4d:57:9e:13:7c:18:22:05:b6:87: 53:3f:23:90:f6:ca:d1:73:b3:9e:c4:56:45:a1:8b: 97:a2:33:c3:ac:db:8d:ad:e7:d9:3d:c9:05:3f:8c: 90:5e:f9:12:b7:7e:25:99:ce:e4:56:a0:83:89:ff: 0f:6d:1c:64:f5:ff:7b:c7:24:fa:bc:92:e8:66:ea: 7b:d5:f8:cf:38:95:93:87:5c:b5:fd:d8:a4:16:0a: 15:74:37:aa:6b:b8:42:ac:d8:ac:83:5a:ca:21:e7: b0:b2:00:5e:8e:31:01:3c:7e:af:38:b8:aa:5b:66: b2:a8:47:49:cf:e0:78:2d:7a:4f:7d:49:64:98:86: 17:bd:3b:54:e6:98:4f:12:a5:e2:c2:56:ba:d7:c8: 85:8d:9c:e3:d0:c6:82:9c:61:f7:d6:2a:82:25:0a: 63:14:d5:0b:09:f3:e4:d9:12:c7:71:b7:0c:b5:48: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CC:6F:51:BA:98:E9:80:84:43:66:02:59:C3:A0:CA:92:5F:A9:1E X509v3 Authority Key Identifier: keyid:CB:5B:02:D0:FC:73:6E:2A:7A:B2:D2:88:A0:FC:33:16:7A:4B:BC:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/y1sC0Pxzbip6stKIoPwzFnpLvO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1sC0Pxzbip6stKIoPwzFnpLvO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129F1D/21CABA5C875E11EDBDC64946C4F9AE02/3E122AE0876011ED84335D46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.210.0/24 Signature Algorithm: sha256WithRSAEncryption bb:47:f0:2c:ff:58:21:cc:8d:e2:6b:f0:07:01:bd:e9:e3:c8: 5f:9a:76:f5:11:92:b8:ab:d1:d8:06:92:43:80:11:95:3c:81: 89:52:54:b5:3b:d6:d4:0f:af:49:7c:de:22:62:04:a1:7d:d0: ae:ac:c2:d9:f4:9e:e6:dd:0f:43:90:5a:ad:3e:eb:b2:da:b3: 05:0a:bc:68:44:5d:cf:5e:45:75:7a:0a:63:a0:69:bc:4f:0d: 4f:81:c0:ac:37:af:6d:1d:0d:9e:bd:fb:4d:ac:16:95:e3:c4: a3:60:4c:60:b0:6a:0d:d8:6a:2c:59:b4:74:79:3d:3a:b6:5a: 93:c2:4a:3f:4b:e9:f4:62:48:ad:0b:b1:86:e0:e4:a6:ce:ff: b2:b5:14:b3:bc:fb:70:75:66:d7:a2:ba:d2:b4:ff:51:73:10: 5c:1c:ab:86:51:fc:43:aa:95:b4:bd:67:62:d7:73:8c:83:02: 1d:28:c5:e8:c4:b3:a6:6c:49:1c:bd:12:7e:23:57:db:3d:89: 08:73:80:d8:68:86:25:6a:b3:0e:70:aa:40:9c:5a:10:8a:e5: 0d:ee:c4:62:31:d6:04:ca:d0:39:26:00:35:67:02:7c:b2:11: 88:e4:c6:ae:04:9e:11:ba:84:8b:93:85:7d:92:a1:88:8f:09: e8:31:85:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlGMUQxMTAvBgNVBAUTKENCNUIwMkQwRkM3MzZFMkE3QUIyRDI4OEEwRkMzMzE2 N0E0QkJDRUQwHhcNMjUwMTI3MDIxNTUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzk2ZWM1Ni1mYmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGSLeY2bglQvKQLFiYGjDZ2klGp4MeZ0bV0P60SeQPl/YTlIexZdH7KKmFST H4DuJtOEJArn9+RtG2p81PQiEtsuKiRjfgv4YWeNCu8YYE1XnhN8GCIFtodTPyOQ 9srRc7OexFZFoYuXojPDrNuNrefZPckFP4yQXvkSt34lmc7kVqCDif8PbRxk9f97 xyT6vJLoZup71fjPOJWTh1y1/dikFgoVdDeqa7hCrNisg1rKIeewsgBejjEBPH6v OLiqW2ayqEdJz+B4LXpPfUlkmIYXvTtU5phPEqXiwla618iFjZzj0MaCnGH31iqC JQpjFNULCfPk2RLHcbcMtUgTTQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKHMb1G6 mOmAhENmAlnDoMqSX6keMB8GA1UdIwQYMBaAFMtbAtD8c24qerLSiKD8MxZ6S7zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUYxRC8yMUNBQkE1Qzg3 NUUxMUVEQkRDNjQ5NDZDNEY5QUUwMi95MXNDMFB4emJpcDZzdEtJb1B3ekZucEx2 TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxc0MwUHh6YmlwNnN0S0lvUHd6Rm5wTHZPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjlGMUQvMjFDQUJBNUM4NzVFMTFFREJEQzY0OTQ2QzRGOUFFMDIvM0UxMjJBRTA4 NzYwMTFFRDg0MzM1RDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLGNIwDQYJKoZIhvcNAQELBQADggEBALtH8Cz/WCHMjeJr 8AcBvenjyF+advURkrir0dgGkkOAEZU8gYlSVLU71tQPr0l83iJiBKF90K6swtn0 nubdD0OQWq0+67LaswUKvGhEXc9eRXV6CmOgabxPDU+BwKw3r20dDZ69+02sFpXj xKNgTGCwag3YaixZtHR5PTq2WpPCSj9L6fRiSK0LsYbg5KbO/7K1FLO8+3B1Ztei utK0/1FzEFwcq4ZR/EOqlbS9Z2LXc4yDAh0oxejEs6ZsSRy9En4jV9s9iQhzgNho hiVqsw5wqkCcWhCK5Q3uxGIx1gTK0DkmADVnAnyyEYjkxq4EnhG6hIuThX2SoYiP CegxhY8= -----END CERTIFICATE-----Generated at Sun Apr 6 01:30:17 2025 by rpki-client