$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/022432421A9B11EF8C724E37C4F9AE02.roa File: 022432421A9B11EF8C724E37C4F9AE02.roa (raw, json) Hash identifier: dm8SxeGSmUIEnKBAxZSYW3Vlgy+3VExTf1YjJz0ds5k= Subject key identifier: 7A:D5:7F:F1:2F:5E:8E:8E:ED:FA:F2:40:A4:B9:F9:75:32:A8:22:7B Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0C2C Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/022432421A9B11EF8C724E37C4F9AE02.roa Signing time: Thu 30 Jan 2025 19:07:35 +0000 ROA not before: Thu 30 Jan 2025 19:07:35 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134970 IP address blocks: 103.251.244.0/22 maxlen: 24 103.251.244.0/23 maxlen: 24 103.251.244.0/24 maxlen: 24 103.251.245.0/24 maxlen: 24 103.251.246.0/24 maxlen: 24 103.251.247.0/24 maxlen: 24 220.247.128.0/22 maxlen: 24 220.247.128.0/24 maxlen: 24 220.247.130.0/23 maxlen: 23 220.247.130.0/24 maxlen: 24 220.247.131.0/24 maxlen: 24 2407:7380::/32 maxlen: 32 2407:7380::/36 maxlen: 36 2407:7380::/48 maxlen: 48 2407:7380:a::/48 maxlen: 48 2407:7380:b::/48 maxlen: 48 2407:7380:c::/48 maxlen: 48 2407:7380:d::/48 maxlen: 48 2407:7380:1000::/48 maxlen: 48 2407:7380:2000::/48 maxlen: 48 2407:7380:3000::/48 maxlen: 48 2407:7380:4000::/48 maxlen: 48 2407:7380:5000::/48 maxlen: 48 2407:7380:6000::/48 maxlen: 48 2407:7380:7000::/48 maxlen: 48 2407:7380:8000::/48 maxlen: 48 2407:7380:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE Validity Not Before: Jan 30 19:07:35 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679bcdf6-7524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8e:be:a1:4c:fc:b3:28:9f:d6:ae:b5:19:c4: 69:aa:42:f4:f3:8c:f2:cf:47:8a:07:39:6b:e0:a7: eb:70:68:45:b8:88:d9:30:18:cf:39:15:f7:16:72: e5:ab:30:1e:f0:a1:f9:e8:78:ae:41:a5:0f:d8:bc: 1a:eb:b7:4e:7a:f6:de:39:1a:5e:bc:bb:f4:75:55: de:01:13:d9:73:97:39:65:47:5b:8f:b2:06:85:f4: c4:d0:ce:bc:65:8d:52:b6:ef:c7:87:96:a0:66:41: 4e:56:dc:37:bd:13:91:59:1c:27:64:7e:b8:ee:fd: c4:f4:9a:bf:c4:2a:c8:e1:d5:35:72:99:43:9c:69: 32:e8:07:42:06:b6:ac:3f:17:a5:f2:55:56:bf:11: 72:07:e0:fc:13:11:d8:39:5f:fc:c9:54:5b:8d:17: e4:1b:e5:82:4c:5a:ec:10:fc:41:1f:1f:b5:a7:12: 1f:13:1a:6a:d7:90:46:ef:75:37:44:8c:f4:3b:9e: cf:fb:5a:69:7d:88:6f:70:e5:e6:b6:4a:21:94:41: c2:28:f6:31:cc:1d:9c:22:77:70:69:fe:bc:64:b7: 86:c2:f2:70:00:03:a9:cf:32:87:fe:bc:8a:c6:a0: 91:91:a0:9d:e9:cc:58:9b:f8:f0:ad:e9:bb:4b:03: c0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D5:7F:F1:2F:5E:8E:8E:ED:FA:F2:40:A4:B9:F9:75:32:A8:22:7B X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/022432421A9B11EF8C724E37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.251.244.0/22 220.247.128.0/22 IPv6: 2407:7380::/32 Signature Algorithm: sha256WithRSAEncryption 9f:18:44:b1:fc:6d:73:2c:77:6f:41:fd:01:85:47:3f:ef:f3: d0:ce:89:5b:bf:73:78:be:76:5c:8f:00:ce:0c:97:87:af:ad: ed:d3:34:f8:5c:1c:bf:22:c5:87:16:88:82:6e:42:a9:9f:88: 76:dc:8b:1f:24:a1:e7:dd:dc:a0:ad:42:d6:09:61:44:c2:9e: 6f:30:8d:03:7f:13:c0:86:13:51:71:77:69:cc:a0:68:88:0c: e9:5a:e5:f8:08:59:75:48:32:9b:24:23:a8:22:fc:da:49:f5: 1a:0c:ad:3b:16:51:9f:48:42:3f:be:89:64:29:b2:1a:f6:01: 63:f3:2d:ae:78:ff:64:53:c6:9b:94:5a:92:35:2d:5f:de:fb: 95:52:04:11:d9:02:8e:85:51:64:4c:7b:b2:35:0e:3a:7c:9c: 09:8e:b3:19:d3:ca:cd:ce:0b:8c:57:3a:bf:36:5b:09:fe:41: df:ba:05:2d:05:2a:23:7b:1b:ab:3f:1a:fe:17:59:c3:54:6c: 0b:e6:3f:7a:e0:0a:02:56:0e:91:b9:33:5c:a2:96:0a:98:8e: 54:92:c4:36:1e:13:34:15:a7:61:70:7c:47:14:ad:20:a3:0a: 68:39:0b:3f:fa:e9:34:49:8f:29:97:f6:60:fa:cf:a3:db:66: 19:48:c4:28 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUwMTMwMTkwNzM1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzliY2RmNi03NTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI6+oUz8syif1q61GcRpqkL084zyz0eKBzlr4KfrcGhFuIjZMBjPORX3FnLl qzAe8KH56HiuQaUP2Lwa67dOevbeORpevLv0dVXeARPZc5c5ZUdbj7IGhfTE0M68 ZY1Stu/Hh5agZkFOVtw3vRORWRwnZH647v3E9Jq/xCrI4dU1cplDnGky6AdCBras Pxel8lVWvxFyB+D8ExHYOV/8yVRbjRfkG+WCTFrsEPxBHx+1pxIfExpq15BG73U3 RIz0O57P+1ppfYhvcOXmtkohlEHCKPYxzB2cIndwaf68ZLeGwvJwAAOpzzKH/ryK xqCRkaCd6cxYm/jwrem7SwPA+wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHrVf/Ev Xo6O7fryQKS5+XUyqCJ7MB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUMzQkUvOTQ3QjM1MDYwOTM4MTFFQTk1Q0EzMTI5QzRGOUFFMDIvMDIyNDMyNDIx QTlCMTFFRjhDNzI0RTM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn+/QDBALc94AwDQQCAAIwBwMFACQHc4AwDQYJKoZIhvcN AQELBQADggEBAJ8YRLH8bXMsd29B/QGFRz/v89DOiVu/c3i+dlyPAM4Ml4evre3T NPhcHL8ixYcWiIJuQqmfiHbcix8koefd3KCtQtYJYUTCnm8wjQN/E8CGE1Fxd2nM oGiIDOla5fgIWXVIMpskI6gi/NpJ9RoMrTsWUZ9IQj++iWQpshr2AWPzLa54/2RT xpuUWpI1LV/e+5VSBBHZAo6FUWRMe7I1Djp8nAmOsxnTys3OC4xXOr82Wwn+Qd+6 BS0FKiN7G6s/Gv4XWcNUbAvmP3rgCgJWDpG5M1yilgqYjlSSxDYeEzQVp2FwfEcU rSCjCmg5Cz/66TRJjymX9mD6z6PbZhlIxCg= -----END CERTIFICATE-----Generated at Sun Apr 6 16:43:57 2025 by rpki-client