$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa File: C724415E35F911EE9F140449C4F9AE02.roa (raw, json) Hash identifier: Pc8IQ1ldo5iSgY4Srlo9JYYY24JrbIJTNy/Hk8PPyVE= Subject key identifier: 36:91:CC:51:95:C2:8E:67:ED:B4:48:B8:88:B5:30:F5:FB:83:B1:0B Certificate issuer: /CN=A9148D53/serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB Certificate serial: 01A1 Authority key identifier: FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa Signing time: Wed 05 Mar 2025 05:20:17 +0000 ROA not before: Wed 05 Mar 2025 05:20:17 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 137502 IP address blocks: 43.230.48.0/24 maxlen: 24 43.230.49.0/24 maxlen: 24 43.230.50.0/24 maxlen: 24 43.230.51.0/24 maxlen: 24 103.49.80.0/24 maxlen: 24 103.49.81.0/24 maxlen: 24 103.49.82.0/24 maxlen: 24 103.49.83.0/24 maxlen: 24 2401:fd80:1ff::/48 maxlen: 48 2401:fd80:400::/48 maxlen: 48 2401:fd80:401::/48 maxlen: 48 2401:fd80:402::/48 maxlen: 48 2401:fd80:403::/48 maxlen: 48 2401:fd80:404::/48 maxlen: 48 2401:fd80:405::/48 maxlen: 48 2401:fd80:406::/48 maxlen: 48 2401:fd80:407::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 03:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148D53, serialNumber=FDBD4C0D34492F5CEAE4879E4762796E527007EB Validity Not Before: Mar 5 05:20:17 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c7df11-360a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8e:99:bc:cd:a6:8f:b2:6e:28:e7:ff:ef:3e: 05:a9:8d:d0:57:c1:b1:9b:b7:f8:b0:a8:e1:3b:25: c9:41:bf:9e:00:ba:1f:73:41:88:70:14:89:44:65: 1b:eb:bd:c0:5b:68:ea:35:32:d1:19:e3:00:6f:6b: 74:c7:68:24:54:b7:da:d6:9f:65:17:df:9c:ee:60: 2f:c1:8e:e5:e1:ab:bc:a7:f4:cd:70:23:1a:8a:3e: 70:bd:69:5c:c1:14:8b:91:9a:67:ce:fa:17:d6:db: a5:b0:30:66:3a:a8:3c:21:81:86:8f:f9:fa:df:07: a3:d1:2e:79:f5:78:23:eb:4a:c8:47:be:c4:e0:89: 14:ba:9f:7b:07:e6:46:d8:3c:f6:85:25:ef:a9:73: c1:7c:92:18:ff:2e:dd:6f:a9:7c:e8:15:90:c4:21: 38:f1:4d:98:f9:cb:26:b7:f2:92:ab:0f:c9:d1:f1: 46:63:34:58:77:75:63:58:62:89:fa:ae:4c:38:b9: 1f:82:19:7a:a8:41:45:0a:65:d9:15:7c:20:5d:a6: b7:75:ea:0b:26:f4:e7:45:90:66:cb:30:06:b6:d8: 15:a2:04:81:56:89:9b:66:fe:bf:12:fa:26:90:1e: ae:fe:55:21:7f:ae:57:24:3b:aa:ec:5b:1a:1d:3f: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:91:CC:51:95:C2:8E:67:ED:B4:48:B8:88:B5:30:F5:FB:83:B1:0B X509v3 Authority Key Identifier: keyid:FD:BD:4C:0D:34:49:2F:5C:EA:E4:87:9E:47:62:79:6E:52:70:07:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/_b1MDTRJL1zq5IeeR2J5blJwB-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_b1MDTRJL1zq5IeeR2J5blJwB-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D53/D586F8F0307111EE8546A32FC4F9AE02/C724415E35F911EE9F140449C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.48.0/22 103.49.80.0/22 IPv6: 2401:fd80:1ff::/48 2401:fd80:400::/45 Signature Algorithm: sha256WithRSAEncryption 3d:41:b9:d9:c5:94:0c:39:26:63:0f:41:2a:1e:0b:57:0b:48: 5a:8b:80:93:e7:d6:b9:1d:b2:f8:ac:c7:fa:43:9c:47:7f:f0: 6e:32:82:74:d4:0c:1c:31:33:95:43:c9:45:f3:f8:be:21:9a: ad:21:e2:69:0e:4b:8e:26:14:7f:3a:90:24:7f:f4:0a:be:57: 87:18:02:59:ff:03:fe:61:7f:bb:11:6f:2b:9f:95:25:9f:c5: d6:5c:1e:88:66:30:1f:09:25:16:5e:09:a7:69:e7:8f:d9:fc: 54:26:6e:e6:f1:f8:75:a2:bb:98:da:56:87:fe:ee:0d:f9:1c: a1:81:60:81:eb:61:59:b6:11:d8:48:90:08:13:be:ec:d0:f1: 26:2d:bd:0a:af:4e:88:36:84:dc:6a:d6:4f:8e:3c:86:25:66: 28:e7:bf:e2:d4:ec:c1:af:8c:65:fd:5b:02:b0:e0:3d:9b:53: 8a:a8:df:d0:94:14:8e:a3:9f:ef:ae:d4:87:ea:89:60:90:a4: 7e:a1:a3:7d:66:ff:5c:fb:c0:c9:9b:ab:0e:ff:33:b5:fd:f3: 93:62:b4:af:d4:de:f3:12:b7:5d:1c:a3:c0:90:ef:c2:b7:78: 1b:39:ef:7b:fd:ec:bf:72:ad:d0:01:13:e0:c0:d4:cb:a4:52: 50:a9:92:01 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhENTMxMTAvBgNVBAUTKEZEQkQ0QzBEMzQ0OTJGNUNFQUU0ODc5RTQ3NjI3OTZF NTI3MDA3RUIwHhcNMjUwMzA1MDUyMDE3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3ZGYxMS0zNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1o6ZvM2mj7JuKOf/7z4FqY3QV8Gxm7f4sKjhOyXJQb+eALofc0GIcBSJRGUb 673AW2jqNTLRGeMAb2t0x2gkVLfa1p9lF9+c7mAvwY7l4au8p/TNcCMaij5wvWlc wRSLkZpnzvoX1tulsDBmOqg8IYGGj/n63wej0S559Xgj60rIR77E4IkUup97B+ZG 2Dz2hSXvqXPBfJIY/y7db6l86BWQxCE48U2Y+csmt/KSqw/J0fFGYzRYd3VjWGKJ +q5MOLkfghl6qEFFCmXZFXwgXaa3deoLJvTnRZBmyzAGttgVogSBVombZv6/Evom kB6u/lUhf65XJDuq7FsaHT8pRwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFDaRzFGV wo5n7bRIuIi1MPX7g7ELMB8GA1UdIwQYMBaAFP29TA00SS9c6uSHnkdieW5ScAfr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQ1My9ENTg2RjhGMDMw NzExMUVFODU0NkEzMkZDNEY5QUUwMi9fYjFNRFRSSkwxenE1SWVlUjJKNWJsSndC LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iMU1EVFJKTDF6cTVJZWVSMko1YmxKd0Itcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhENTMvRDU4NkY4RjAzMDcxMTFFRTg1NDZBMzJGQzRGOUFFMDIvQzcyNDQxNUUz NUY5MTFFRTlGMTQwNDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAIr5jADBAJnMVAwGAQCAAIwEgMHACQB/YAB/wMHAyQB/YAE ADANBgkqhkiG9w0BAQsFAAOCAQEAPUG52cWUDDkmYw9BKh4LVwtIWouAk+fWuR2y +KzH+kOcR3/wbjKCdNQMHDEzlUPJRfP4viGarSHiaQ5LjiYUfzqQJH/0Cr5XhxgC Wf8D/mF/uxFvK5+VJZ/F1lweiGYwHwklFl4Jp2nnj9n8VCZu5vH4daK7mNpWh/7u DfkcoYFggethWbYR2EiQCBO+7NDxJi29Cq9OiDaE3GrWT448hiVmKOe/4tTswa+M Zf1bArDgPZtTiqjf0JQUjqOf767Uh+qJYJCkfqGjfWb/XPvAyZurDv8ztf3zk2K0 r9Te8xK3XRyjwJDvwrd4Gznve/3sv3Kt0AET4MDUy6RSUKmSAQ== -----END CERTIFICATE-----Generated at Fri Apr 18 01:32:59 2025 by rpki-client