$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/3D61340AEC3111EF94115E39C4F9AE02.roa File: 3D61340AEC3111EF94115E39C4F9AE02.roa (raw, json) Hash identifier: S2pENibd54UpYO4v1LoAYPxHu0n6YcOTc24e+gioHfc= Subject key identifier: 0F:C9:E6:DF:47:9B:32:1A:AA:53:BB:47:F7:49:41:99:8C:59:E2:82 Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0136 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/3D61340AEC3111EF94115E39C4F9AE02.roa Signing time: Thu 03 Apr 2025 05:33:29 +0000 ROA not before: Thu 03 Apr 2025 05:33:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 873 IP address blocks: 43.231.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647 Validity Not Before: Apr 3 05:33:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ee1da9-d5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f4:e4:a7:bd:f1:54:cf:dd:e3:17:7e:08:be: c6:5a:02:44:76:26:10:a0:af:8a:3e:99:f4:d8:5a: 86:fe:4f:e0:bd:30:5c:9a:4f:2c:e6:cb:cc:db:eb: 19:d3:25:4e:39:c9:5b:49:e1:2f:9b:70:b9:20:1c: 46:98:eb:59:7e:ae:5a:7b:db:a1:fd:bd:b6:c6:9a: 72:08:0b:f1:63:14:be:c5:8e:d9:b8:71:e7:57:3c: 43:69:77:66:2e:b1:59:5f:00:5c:d0:d2:6d:a6:8c: 6b:b4:15:f8:e9:99:17:85:5b:55:45:e4:63:7d:38: 30:19:0d:8a:37:0e:3b:7f:95:db:d5:7f:0f:04:ac: 20:a9:c8:6c:94:8e:45:98:3a:27:53:1e:fd:02:fb: 81:da:d3:70:76:88:42:83:b3:0d:19:78:0c:62:4a: 24:fc:59:a6:16:22:fc:ba:fa:5a:0d:b8:a7:5f:b3: ae:9d:0e:02:97:67:e9:fc:eb:a1:06:70:51:c5:1c: 18:37:9e:5f:8a:b2:e0:f6:a3:28:b9:db:a7:13:a6: 92:9f:fe:68:2f:8a:85:d9:77:8d:96:dd:19:0f:0a: 35:70:5e:ad:a0:0f:33:77:30:52:55:a0:9d:e1:3f: da:07:af:a0:6e:7b:1c:5a:4b:af:68:4f:b1:d4:44: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C9:E6:DF:47:9B:32:1A:AA:53:BB:47:F7:49:41:99:8C:59:E2:82 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/3D61340AEC3111EF94115E39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:47:15:ca:7c:a1:85:a2:89:10:91:25:bf:17:2c:fd:ce:ca: 90:02:30:ce:3a:1a:40:54:a8:2f:64:35:a1:c6:d1:cd:15:cc: 29:d8:a9:b2:b9:aa:d3:d8:0e:f8:c4:54:c2:56:61:62:f9:d5: f3:ad:37:da:fc:33:82:62:53:94:f5:41:38:0d:27:c4:68:e1: fd:32:86:20:94:6c:27:68:c3:4a:56:01:c5:7d:25:29:9c:52: fa:fb:65:d7:23:81:4a:81:e8:ce:69:94:8b:76:dd:81:9f:4b: 2b:b8:04:f1:fc:07:0d:d6:7f:d5:b0:09:8e:c7:11:7c:12:c5: 81:12:a0:09:1c:41:65:ca:39:28:06:63:7f:eb:00:e8:26:4a: 12:c9:49:70:b1:b8:32:11:76:72:64:e3:b4:da:b0:48:ff:f8: 30:98:df:f3:9f:a9:14:96:f3:b5:e4:66:c0:42:23:0c:29:a2: ea:28:2e:9b:38:21:7c:68:84:63:05:ba:6a:63:49:a0:bd:37: 51:4b:1e:be:98:79:5c:aa:2d:86:16:28:47:b8:d9:5b:26:9c: 7b:6b:b9:9b:e3:fe:29:40:25:2a:6a:66:e9:cf:e3:9c:75:2f: 18:65:54:5f:4d:68:12:20:4e:fb:1c:3f:a0:6e:b3:b3:00:63: a4:26:48:2c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwNDAzMDUzMzI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMWRhOS1kNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvTkp73xVM/d4xd+CL7GWgJEdiYQoK+KPpn02FqG/k/gvTBcmk8s5svM2+sZ 0yVOOclbSeEvm3C5IBxGmOtZfq5ae9uh/b22xppyCAvxYxS+xY7ZuHHnVzxDaXdm LrFZXwBc0NJtpoxrtBX46ZkXhVtVReRjfTgwGQ2KNw47f5Xb1X8PBKwgqchslI5F mDonUx79AvuB2tNwdohCg7MNGXgMYkok/FmmFiL8uvpaDbinX7OunQ4Cl2fp/Ouh BnBRxRwYN55firLg9qMoudunE6aSn/5oL4qF2XeNlt0ZDwo1cF6toA8zdzBSVaCd 4T/aB6+gbnscWkuvaE+x1ETbeQIDAQABo4IClTCCApEwHQYDVR0OBBYEFA/J5t9H mzIaqlO7R/dJQZmMWeKCMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvM0Q2MTM0MEFF QzMxMTFFRjk0MTE1RTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIr58wwDQYJKoZIhvcNAQELBQADggEBAD5HFcp8oYWiiRCR Jb8XLP3OypACMM46GkBUqC9kNaHG0c0VzCnYqbK5qtPYDvjEVMJWYWL51fOtN9r8 M4JiU5T1QTgNJ8Ro4f0yhiCUbCdow0pWAcV9JSmcUvr7ZdcjgUqB6M5plIt23YGf Syu4BPH8Bw3Wf9WwCY7HEXwSxYESoAkcQWXKOSgGY3/rAOgmShLJSXCxuDIRdnJk 47TasEj/+DCY3/OfqRSW87XkZsBCIwwpouooLps4IXxohGMFumpjSaC9N1FLHr6Y eVyqLYYWKEe42VsmnHtruZvj/ilAJSpqZunP45x1LxhlVF9NaBIgTvscP6Bus7MA Y6QmSCw= -----END CERTIFICATE-----Generated at Sat Apr 5 06:09:03 2025 by rpki-client