$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa File: 9A7071C0462E11ED90035452C4F9AE02.roa (raw, json) Hash identifier: 2fC6LApklarDYBE/kWA2dAk9w9yvCtuTpXuMhEXBEEU= Subject key identifier: 0F:BA:8A:BC:7D:16:77:16:5A:52:E1:C0:3B:0A:D6:70:D6:A7:B2:69 Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 01CD Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa Signing time: Thu 13 Feb 2025 04:29:06 +0000 ROA not before: Thu 13 Feb 2025 04:29:06 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133748 IP address blocks: 43.249.248.0/22 maxlen: 24 103.41.128.0/22 maxlen: 24 203.208.22.0/24 maxlen: 24 2401:b080::/32 maxlen: 32 2401:b080:1::/48 maxlen: 48 2401:b080:63::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74 Validity Not Before: Feb 13 04:29:06 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67ad7511-c575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:db:38:b2:63:70:42:7f:c5:dd:fe:92:f7: 66:29:c9:7b:9f:f1:24:f5:d2:22:3c:9e:f3:ec:2f: 9b:af:56:bf:ce:59:6b:8b:fb:4c:d6:9e:61:c6:11: cb:0b:b5:27:f0:ec:ef:0f:00:14:86:4c:12:04:f1: f8:70:96:a7:c3:21:34:17:0f:26:e8:f1:0b:1b:b5: 36:d3:42:1e:7c:ae:0d:e5:b0:5a:e3:c9:19:2b:96: de:3d:36:ee:b5:be:de:35:71:02:e8:32:7e:56:ef: c5:cd:54:50:ae:01:b3:3d:b5:8f:10:c2:a0:e2:d0: 2e:5e:1e:9f:3d:5b:c4:97:c0:21:f2:c0:de:5f:3f: e7:14:fd:d1:6a:5c:2b:4b:2a:a0:ab:c2:44:7d:95: e8:5a:ab:f5:2a:62:79:cc:ae:17:3d:9b:3a:3e:db: c8:2e:d8:6a:47:a6:0d:0d:55:66:03:66:b3:f6:da: 73:de:dd:45:d1:97:e8:37:c6:53:70:dd:89:1e:7d: 2b:74:92:35:dc:7a:5c:b0:22:41:08:da:87:d5:ab: 5e:22:2f:db:e1:c2:24:dd:96:09:fa:75:e3:6d:d4: 2f:82:14:c9:42:5a:73:9b:97:f8:bc:89:6c:12:93: 0d:ff:09:52:2c:e0:4d:98:c0:72:dc:95:c3:9e:93: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BA:8A:BC:7D:16:77:16:5A:52:E1:C0:3B:0A:D6:70:D6:A7:B2:69 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/9A7071C0462E11ED90035452C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.248.0/22 103.41.128.0/22 203.208.22.0/24 IPv6: 2401:b080::/32 Signature Algorithm: sha256WithRSAEncryption 94:62:3c:8c:75:df:81:56:a3:77:52:d3:5f:b2:4f:76:a8:47: 85:5b:b1:57:94:7f:08:74:4f:b4:33:c3:00:f8:ad:1f:ba:26: 21:41:27:e8:73:9d:c3:ba:5f:93:9e:69:98:6c:af:ae:04:56: 0c:32:ef:7d:fe:5b:ef:ec:46:e2:7c:2c:cb:29:59:23:a9:c0: aa:26:cf:3c:ef:ac:78:5c:3c:bd:8a:6d:2b:db:2b:e9:8e:8f: 5c:71:52:97:a5:96:0e:1c:2a:c0:98:70:5e:a2:6a:ab:da:2c: 4d:34:d7:47:b1:1e:af:d7:b9:36:56:76:1a:ba:7c:a1:e8:66: 6f:d4:91:a4:28:fd:55:ba:91:49:cc:30:31:a5:30:68:88:b8: 69:33:8f:d1:b2:78:d7:20:c2:fe:e1:69:d5:2f:00:ce:b6:64: c1:11:ad:ab:96:2e:af:23:a6:8b:81:17:d1:60:f3:99:11:df: 1d:af:6d:c7:77:72:3b:92:f9:02:38:04:bb:c2:91:d0:c9:cf: da:19:dc:4e:4b:7e:c5:eb:4b:e7:6b:5a:b5:0a:a8:45:ed:0a: 67:07:b2:94:8c:72:77:79:57:85:39:fb:ec:85:4f:a4:e9:da: 91:b6:e3:76:3f:56:1d:94:82:4c:ff:1f:fa:22:77:3a:7a:60: 67:00:5b:1f -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUwMjEzMDQyOTA2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FkNzUxMS1jNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1jbOLJjcEJ/xd3+kvdmKcl7n/Ek9dIiPJ7z7C+br1a/zllri/tM1p5hxhHL C7Un8OzvDwAUhkwSBPH4cJanwyE0Fw8m6PELG7U200IefK4N5bBa48kZK5bePTbu tb7eNXEC6DJ+Vu/FzVRQrgGzPbWPEMKg4tAuXh6fPVvEl8Ah8sDeXz/nFP3Ralwr Syqgq8JEfZXoWqv1KmJ5zK4XPZs6PtvILthqR6YNDVVmA2az9tpz3t1F0ZfoN8ZT cN2JHn0rdJI13HpcsCJBCNqH1ateIi/b4cIk3ZYJ+nXjbdQvghTJQlpzm5f4vIls EpMN/wlSLOBNmMBy3JXDnpMfVQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFA+6irx9 FncWWlLhwDsK1nDWp7JpMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzQvRTQyQ0JDNEM0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvOUE3MDcxQzA0 NjJFMTFFRDkwMDM1NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr+fgDBAJnKYADBADL0BYwDQQCAAIwBwMFACQBsIAwDQYJ KoZIhvcNAQELBQADggEBAJRiPIx134FWo3dS01+yT3aoR4VbsVeUfwh0T7QzwwD4 rR+6JiFBJ+hzncO6X5OeaZhsr64EVgwy733+W+/sRuJ8LMspWSOpwKomzzzvrHhc PL2KbSvbK+mOj1xxUpellg4cKsCYcF6iaqvaLE0010exHq/XuTZWdhq6fKHoZm/U kaQo/VW6kUnMMDGlMGiIuGkzj9GyeNcgwv7hadUvAM62ZMERrauWLq8jpouBF9Fg 85kR3x2vbcd3cjuS+QI4BLvCkdDJz9oZ3E5LfsXrS+drWrUKqEXtCmcHspSMcnd5 V4U5++yFT6Tp2pG243Y/Vh2Ugkz/H/oidzp6YGcAWx8= -----END CERTIFICATE-----Generated at Sat Apr 5 00:55:48 2025 by rpki-client