$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/8F4855FA719D11EF89D9262FC4F9AE02.roa File: 8F4855FA719D11EF89D9262FC4F9AE02.roa (raw, json) Hash identifier: PwrdrhDZAUvpoeswVRlW4enrKnpklIZJadw0mW5Czq0= Subject key identifier: D1:D7:FF:B2:E5:2E:19:D9:6A:1C:C4:CF:14:35:17:11:D6:D3:FF:79 Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0133 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/8F4855FA719D11EF89D9262FC4F9AE02.roa Signing time: Thu 03 Apr 2025 05:33:27 +0000 ROA not before: Thu 03 Apr 2025 05:33:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136902 IP address blocks: 43.231.205.0/24 maxlen: 24 43.231.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647 Validity Not Before: Apr 3 05:33:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ee1da7-03f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:be:c2:c3:09:89:a9:db:46:7d:23:1b:80: f3:4b:68:ba:cf:9b:51:d3:17:b1:9d:90:e8:8a:a6: fe:39:e8:f7:3a:46:85:43:da:e7:29:6b:78:8c:fd: e6:73:f6:7c:e2:f6:01:e0:4f:ac:5d:90:e4:ca:fc: 16:08:a9:26:34:3f:e5:80:5a:71:25:25:26:36:61: 67:10:24:43:34:1d:1a:ac:58:ec:89:2f:07:c2:63: 35:a1:de:a7:31:d8:31:e8:4c:bc:09:c8:43:f6:3e: 19:60:e0:2a:6f:16:19:d6:9c:20:18:82:8c:58:9b: 65:96:e4:2a:fc:a3:8b:2e:4b:8c:48:2a:68:96:05: aa:a5:c4:68:29:00:68:ef:01:a7:35:ff:da:d2:a8: 80:bd:c0:c3:35:c8:0f:16:ee:72:de:40:d8:67:96: 7b:cf:dc:51:19:e4:31:83:94:3d:32:64:f3:d1:a5: 91:4b:0d:2e:69:9d:29:e8:9e:64:ba:4b:bb:87:1c: d9:1e:ef:8b:19:8f:92:3d:e5:ce:5a:0e:7e:15:78: c1:50:75:14:06:31:c2:54:6e:34:73:f4:f4:8c:6f: ee:8f:6c:e0:d2:d7:93:e6:cd:d7:47:83:28:1a:e0: b2:d2:44:23:dd:b5:66:4c:7a:b7:b4:54:d3:34:d6: c4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D7:FF:B2:E5:2E:19:D9:6A:1C:C4:CF:14:35:17:11:D6:D3:FF:79 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/8F4855FA719D11EF89D9262FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.231.205.0-43.231.206.255 Signature Algorithm: sha256WithRSAEncryption 79:ee:01:95:e8:47:d1:56:a6:f4:0e:83:df:88:01:59:a8:bf: 1d:01:ca:89:14:e3:f4:be:43:96:b9:c8:fd:4a:af:fc:18:98: c7:90:35:49:b4:da:04:c0:6e:f2:c0:9f:a7:39:25:5b:21:9d: a9:6a:f0:72:35:04:ff:f8:c9:d6:d7:71:94:e3:e2:26:8d:81: 51:9e:67:ad:47:13:03:ee:b1:3a:ac:2d:5d:75:69:6f:d5:79: 75:87:38:9e:63:74:63:e3:b0:9e:11:c2:d5:6e:17:99:d9:43: 84:8d:bc:c2:fb:c7:a7:d1:05:8f:44:5c:3f:6b:17:a1:37:35: 42:88:e9:50:ee:5a:70:5f:99:34:25:92:4d:40:91:eb:de:0d: 70:49:6a:8f:1e:6b:5a:d0:60:31:f4:3b:c4:0b:cf:b4:36:99: 17:87:db:0c:8a:db:e2:21:ea:07:4a:8a:a9:ba:d2:49:db:59: 27:3c:bb:ed:78:ed:68:2c:0b:d7:ad:94:9f:15:99:34:2d:9c: b0:a2:a3:0d:d5:8c:85:98:4d:5c:c8:ba:e5:8a:35:9f:ac:40: 83:38:c7:c6:0b:ca:cc:70:74:49:ff:b7:2c:dd:ad:1f:19:ef: 72:36:de:46:c6:95:27:08:7e:0e:91:bb:15:7f:8f:8f:ea:99: 29:51:cd:cd -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjUwNDAzMDUzMzI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2VlMWRhNy0wM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuau+wsMJianbRn0jG4DzS2i6z5tR0xexnZDoiqb+Oej3OkaFQ9rnKWt4jP3m c/Z84vYB4E+sXZDkyvwWCKkmND/lgFpxJSUmNmFnECRDNB0arFjsiS8HwmM1od6n Mdgx6Ey8CchD9j4ZYOAqbxYZ1pwgGIKMWJtlluQq/KOLLkuMSCpolgWqpcRoKQBo 7wGnNf/a0qiAvcDDNcgPFu5y3kDYZ5Z7z9xRGeQxg5Q9MmTz0aWRSw0uaZ0p6J5k uku7hxzZHu+LGY+SPeXOWg5+FXjBUHUUBjHCVG40c/T0jG/uj2zg0teT5s3XR4Mo GuCy0kQj3bVmTHq3tFTTNNbEJwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFNHX/7Ll LhnZahzEzxQ1FxHW0/95MB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU2NDcvOTA1QzEwNDZGMzZGMTFFRTk5NzJFQjc5QzRGOUFFMDIvOEY0ODU1RkE3 MTlEMTFFRjg5RDkyNjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEACvnzQMEACvnzjANBgkqhkiG9w0BAQsFAAOCAQEAee4B lehH0Vam9A6D34gBWai/HQHKiRTj9L5DlrnI/Uqv/BiYx5A1SbTaBMBu8sCfpzkl WyGdqWrwcjUE//jJ1tdxlOPiJo2BUZ5nrUcTA+6xOqwtXXVpb9V5dYc4nmN0Y+Ow nhHC1W4XmdlDhI28wvvHp9EFj0RcP2sXoTc1QojpUO5acF+ZNCWSTUCR694NcElq jx5rWtBgMfQ7xAvPtDaZF4fbDIrb4iHqB0qKqbrSSdtZJzy77XjtaCwL162UnxWZ NC2csKKjDdWMhZhNXMi65Yo1n6xAgzjHxgvKzHB0Sf+3LN2tHxnvcjbeRsaVJwh+ DpG7FX+Pj+qZKVHNzQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:03:26 2025 by rpki-client