$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa File: 3635C928CE3811EF878F6569C4F9AE02.roa (raw, json) Hash identifier: qYH+0NoYqUVH/kICTwmC5FSWgYMcanxVuKqTuwnMQdk= Subject key identifier: BC:7F:7E:B2:BD:B4:AA:5F:D5:5D:A9:44:A3:1C:A1:3B:DA:2D:8E:DA Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2D34 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa Signing time: Thu 09 Jan 2025 03:17:10 +0000 ROA not before: Thu 09 Jan 2025 03:17:09 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 17705 IP address blocks: 103.234.132.0/22 maxlen: 24 121.79.192.0/18 maxlen: 18 121.79.192.0/20 maxlen: 20 121.79.208.0/20 maxlen: 20 121.79.224.0/20 maxlen: 21 121.79.226.0/24 maxlen: 24 121.79.240.0/20 maxlen: 20 122.252.152.0/21 maxlen: 22 150.107.160.0/22 maxlen: 24 203.114.128.0/18 maxlen: 24 2404:1800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 15:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11572 (0x2d34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Jan 9 03:17:09 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=677f3fb5-b29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:27:77:16:cc:0c:69:6b:47:67:ff:35:43: e1:53:a7:8b:bf:87:a5:37:69:20:73:75:45:16:0f: 5c:65:21:3a:36:70:ef:2f:27:25:b4:2f:94:44:40: 39:e8:29:ad:b9:f9:fd:a0:f6:75:59:9c:65:cb:12: a4:83:be:e8:37:0a:7e:cc:7c:c1:ad:e5:7f:3e:21: 45:c0:54:7d:f3:e0:3c:eb:f1:f9:8c:0e:d5:19:3e: 9e:2b:bf:c4:7f:0f:48:b2:66:6f:b1:c3:a5:2d:35: 32:c9:ef:13:61:5b:35:b3:6b:3e:6b:da:73:10:61: 54:17:c0:18:70:3b:7e:ed:cf:2b:94:b6:9c:21:d8: 74:98:94:f8:27:88:38:b0:1c:9e:d2:94:7e:5e:a8: 54:5d:22:44:9e:f8:63:91:58:39:79:93:4c:3f:6e: a4:ae:53:3f:75:8a:17:3b:5f:a9:a3:c1:b6:18:51: f6:2b:99:11:e9:1a:0e:77:6e:bf:76:fb:92:26:28: 87:00:71:21:5d:8c:ef:50:61:93:79:de:d3:0b:c7: 40:18:63:7b:68:64:57:7b:28:f0:e9:2a:71:dc:0c: 32:d2:38:2c:49:f4:ef:01:ba:b7:ec:a7:a3:f8:57: 5a:4f:38:7d:ce:ce:79:32:ae:81:31:8d:50:48:b1: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:7E:B2:BD:B4:AA:5F:D5:5D:A9:44:A3:1C:A1:3B:DA:2D:8E:DA X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/3635C928CE3811EF878F6569C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.234.132.0/22 121.79.192.0/18 122.252.152.0/21 150.107.160.0/22 203.114.128.0/18 IPv6: 2404:1800::/32 Signature Algorithm: sha256WithRSAEncryption 27:6f:79:29:d2:da:8e:f5:fb:4c:38:9c:48:f4:75:14:28:fd: f9:7a:86:54:20:c6:32:56:c1:e7:19:5c:1a:91:7b:c4:1f:0f: 99:90:c0:e4:41:b0:45:c7:ae:76:f6:bc:e0:b5:c0:f2:af:12: af:f4:36:0c:89:69:75:16:82:63:4a:bc:9b:aa:e3:ff:94:f3: fb:21:d4:54:89:c7:76:3d:10:c3:c0:a5:8e:40:79:81:20:6e: 2e:84:7e:db:4e:68:50:6e:22:05:1a:fb:4b:08:91:7a:42:8b: e0:fc:ab:1f:82:b2:89:3c:d9:91:fb:2c:db:99:3f:2f:bc:39: 20:cb:0d:39:fe:06:36:52:00:0c:6f:ef:a2:43:eb:51:b2:bc: 77:82:55:35:bb:84:0d:88:2e:6f:27:72:10:b2:37:fc:86:82: 65:70:8f:24:91:c1:fb:bb:fa:10:f4:17:52:42:37:0d:bd:59: 95:2a:bf:57:b7:01:ce:c4:4d:98:d5:46:95:4a:68:82:91:ba: 8e:60:88:eb:fb:d4:c6:10:64:9c:a4:f7:38:f4:87:85:5f:85: fa:d0:6d:77:d9:35:2c:9e:32:cc:77:7a:2a:9e:50:ba:a9:d5: 9a:7c:93:41:16:0c:ce:5c:26:70:d7:25:76:a0:a0:49:b5:dd: c1:3e:63:e3 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICLTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjUwMTA5MDMxNzA5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdmM2ZiNS1iMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIAndxbMDGlrR2f/NUPhU6eLv4elN2kgc3VFFg9cZSE6NnDvLycltC+UREA5 6Cmtufn9oPZ1WZxlyxKkg77oNwp+zHzBreV/PiFFwFR98+A86/H5jA7VGT6eK7/E fw9IsmZvscOlLTUyye8TYVs1s2s+a9pzEGFUF8AYcDt+7c8rlLacIdh0mJT4J4g4 sBye0pR+XqhUXSJEnvhjkVg5eZNMP26krlM/dYoXO1+po8G2GFH2K5kR6RoOd26/ dvuSJiiHAHEhXYzvUGGTed7TC8dAGGN7aGRXeyjw6Spx3Awy0jgsSfTvAbq37Kej +FdaTzh9zs55Mq6BMY1QSLHtUwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLx/frK9 tKpf1V2pRKMcoTvaLY7aMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBNzIvMDVDODkxREE4OUVEMTFFMzg2OTE2RUE1NTkxMUVBMzIvMzYzNUM5MjhD RTM4MTFFRjg3OEY2NTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAJn6oQDBAZ5T8ADBAN6/JgDBAKWa6ADBAbLcoAwDQQCAAIw BwMFACQEGAAwDQYJKoZIhvcNAQELBQADggEBACdveSnS2o71+0w4nEj0dRQo/fl6 hlQgxjJWwecZXBqRe8QfD5mQwORBsEXHrnb2vOC1wPKvEq/0NgyJaXUWgmNKvJuq 4/+U8/sh1FSJx3Y9EMPApY5AeYEgbi6EfttOaFBuIgUa+0sIkXpCi+D8qx+Csok8 2ZH7LNuZPy+8OSDLDTn+BjZSAAxv76JD61GyvHeCVTW7hA2ILm8nchCyN/yGgmVw jySRwfu7+hD0F1JCNw29WZUqv1e3Ac7ETZjVRpVKaIKRuo5giOv71MYQZJyk9zj0 h4VfhfrQbXfZNSyeMsx3eiqeULqp1Zp8k0EWDM5cJnDXJXagoEm13cE+Y+M= -----END CERTIFICATE-----Generated at Sat Apr 19 02:44:41 2025 by rpki-client