$ rpki-client -vvf rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/7F3D1128DC7811EFA7D7DB49C4F9AE02.roa File: 7F3D1128DC7811EFA7D7DB49C4F9AE02.roa (raw, json) Hash identifier: Oiuj+Kbic3HQuA1OyKape4/HDdacy+ZxoCUL9iL91SY= Subject key identifier: C9:21:48:52:F1:AB:A5:D6:6D:75:C4:50:DA:0C:D9:C4:1A:20:B1:CF Certificate issuer: /CN=A916A447/serialNumber=1F68258C526C5DBC715434357D380020146440EF Certificate serial: 2879 Authority key identifier: 1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/7F3D1128DC7811EFA7D7DB49C4F9AE02.roa Signing time: Thu 06 Mar 2025 16:02:29 +0000 ROA not before: Thu 06 Mar 2025 16:02:29 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 132045 IP address blocks: 101.2.190.0/24 maxlen: 24 103.227.245.0/24 maxlen: 24 103.227.247.0/24 maxlen: 24 203.153.220.0/24 maxlen: 24 203.153.222.0/24 maxlen: 24 223.224.12.0/24 maxlen: 24 223.224.22.0/24 maxlen: 24 223.224.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10361 (0x2879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A447 Validity Not Before: Mar 6 16:02:29 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67c9c715-8ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:6c:dd:b7:ca:db:df:0b:f4:aa:be:00:22:0e: 3d:b1:fd:e1:5c:8a:63:ab:53:6e:8f:b6:9d:a9:c0: c7:ac:af:91:70:d0:dc:37:51:3e:0b:60:b3:98:7a: 7c:09:47:fd:19:27:04:60:2b:10:66:d7:08:37:55: 7d:10:05:c5:76:15:62:9d:bb:07:5e:11:82:8d:eb: 0f:a2:c6:4a:93:2c:a0:6e:e1:f8:b2:61:13:50:ae: 7a:93:36:73:9b:74:d3:f4:d7:b2:3d:b4:08:29:1a: ac:44:e5:f4:5c:06:b7:4b:c6:cf:4c:53:cc:5e:83: 1d:25:0c:1b:3e:ef:9a:3a:ca:51:01:fe:99:67:59: d0:99:53:45:e0:5e:98:c1:97:ed:e9:49:ba:96:12: 86:d3:81:15:33:3c:8c:f3:c7:93:ce:f2:79:35:49: da:88:b0:92:3b:00:1f:b4:05:60:a9:bf:e4:20:62: eb:79:be:78:ac:8b:c3:3b:63:fb:da:99:26:6c:1e: 28:0a:ff:5a:eb:5c:80:35:79:5b:5b:23:0e:f6:1b: d5:86:13:d1:32:f0:49:7b:3f:0f:d1:1b:1e:e2:b6: b7:af:8b:27:1a:70:7b:3d:51:f3:05:51:20:98:62: 26:ad:b1:73:46:c1:08:0d:9c:9b:70:87:9a:26:36: c6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:21:48:52:F1:AB:A5:D6:6D:75:C4:50:DA:0C:D9:C4:1A:20:B1:CF X509v3 Authority Key Identifier: keyid:1F:68:25:8C:52:6C:5D:BC:71:54:34:35:7D:38:00:20:14:64:40:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/H2gljFJsXbxxVDQ1fTgAIBRkQO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2gljFJsXbxxVDQ1fTgAIBRkQO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A447/D2075814A09C11E4B50E7B15C4F9AE02/7F3D1128DC7811EFA7D7DB49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.2.190.0/24 103.227.245.0/24 103.227.247.0/24 203.153.220.0/24 203.153.222.0/24 223.224.12.0/24 223.224.22.0/24 223.224.29.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:b8:ea:01:e1:74:19:09:a6:c2:41:c3:95:80:b2:75:a0:4d: 43:23:fe:dd:c1:28:ca:03:c5:75:46:15:24:22:60:98:0e:2d: e2:75:87:e5:8f:c6:c1:b6:b9:1f:6d:97:eb:04:df:33:91:6d: c3:1e:80:0c:75:8e:d8:7b:0a:bb:8b:fe:a4:58:8c:18:7e:95: 3e:15:69:a8:91:43:ce:b1:51:d4:ca:14:22:ec:b7:c6:2f:7a: 58:a4:56:9a:c5:0b:5f:b4:02:6e:59:82:12:41:84:50:41:3b: 64:f5:2b:db:a0:96:66:5d:45:48:5d:6d:5e:e7:de:fb:83:ce: ed:e6:db:dd:b4:82:f4:e3:09:dc:80:91:57:eb:52:ca:98:11: df:bf:de:1e:4b:f0:cb:83:af:31:38:9a:27:fb:b8:02:98:95: 23:f4:fc:31:90:9c:2c:5f:80:78:1a:d9:07:01:f7:42:95:0e: 53:46:35:25:8c:94:1b:c2:3e:5f:51:b2:c6:68:d2:f5:92:6b: e3:2e:fe:45:2e:86:68:ce:5e:66:79:0e:fb:f8:8f:b7:d8:24: 2f:ba:e3:6f:d4:33:0a:53:d1:64:23:aa:54:cc:54:68:d3:cb: 1a:1d:b0:1e:23:76:14:71:b6:4f:1e:0d:13:9c:d8:6d:6a:44: 6a:72:c1:bb -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICKHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkE0NDcxMTAvBgNVBAUTKDFGNjgyNThDNTI2QzVEQkM3MTU0MzQzNTdEMzgwMDIw MTQ2NDQwRUYwHhcNMjUwMzA2MTYwMjI5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5YzcxNS04ZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Gzdt8rb3wv0qr4AIg49sf3hXIpjq1Nuj7adqcDHrK+RcNDcN1E+C2CzmHp8 CUf9GScEYCsQZtcIN1V9EAXFdhVinbsHXhGCjesPosZKkyygbuH4smETUK56kzZz m3TT9NeyPbQIKRqsROX0XAa3S8bPTFPMXoMdJQwbPu+aOspRAf6ZZ1nQmVNF4F6Y wZft6Um6lhKG04EVMzyM88eTzvJ5NUnaiLCSOwAftAVgqb/kIGLreb54rIvDO2P7 2pkmbB4oCv9a61yANXlbWyMO9hvVhhPRMvBJez8P0Rse4ra3r4snGnB7PVHzBVEg mGImrbFzRsEIDZybcIeaJjbG0QIDAQABo4ICvzCCArswHQYDVR0OBBYEFMkhSFLx q6XWbXXEUNoM2cQaILHPMB8GA1UdIwQYMBaAFB9oJYxSbF28cVQ0NX04ACAUZEDv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTQ0Ny9EMjA3NTgxNEEw OUMxMUU0QjUwRTdCMTVDNEY5QUUwMi9IMmdsakZKc1hieHhWRFExZlRnQUlCUmtR TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyZ2xqRkpzWGJ4eFZEUTFmVGdBSUJSa1FPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkE0NDcvRDIwNzU4MTRBMDlDMTFFNEI1MEU3QjE1QzRGOUFFMDIvN0YzRDExMjhE Qzc4MTFFRkE3RDdEQjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBABlAr4DBABn4/UDBABn4/cDBADLmdwDBADLmd4DBADf4AwD BADf4BYDBADf4B0wDQYJKoZIhvcNAQELBQADggEBAI+46gHhdBkJpsJBw5WAsnWg TUMj/t3BKMoDxXVGFSQiYJgOLeJ1h+WPxsG2uR9tl+sE3zORbcMegAx1jth7CruL /qRYjBh+lT4VaaiRQ86xUdTKFCLst8YvelikVprFC1+0Am5ZghJBhFBBO2T1K9ug lmZdRUhdbV7n3vuDzu3m2920gvTjCdyAkVfrUsqYEd+/3h5L8MuDrzE4mif7uAKY lSP0/DGQnCxfgHga2QcB90KVDlNGNSWMlBvCPl9RssZo0vWSa+Mu/kUuhmjOXmZ5 Dvv4j7fYJC+642/UMwpT0WQjqlTMVGjTyxodsB4jdhRxtk8eDROc2G1qRGpywbs= -----END CERTIFICATE-----Generated at Wed Apr 9 05:03:14 2025 by rpki-client