$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/41E7BB1C0BA211F08457541BC4F9AE02.roa File: 41E7BB1C0BA211F08457541BC4F9AE02.roa (raw, json) Hash identifier: SLWKUoxyCCrW041ENZCKTkuF3OJqQTSoY0CsLhDIP04= Subject key identifier: 7D:E8:02:87:FD:6A:2B:01:2D:B7:7E:B3:BA:28:09:6D:5F:94:71:69 Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72 Certificate serial: 05 Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/41E7BB1C0BA211F08457541BC4F9AE02.roa Signing time: Fri 28 Mar 2025 07:02:11 +0000 ROA not before: Fri 28 Mar 2025 07:02:11 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 136897 IP address blocks: 117.18.109.0/24 maxlen: 24 202.181.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C3FB Validity Not Before: Mar 28 07:02:11 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67e64972-bbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:d3:5b:4b:89:dc:ec:aa:2d:f7:5e:16:99: ae:1a:2a:c2:23:61:8b:5a:08:5f:0e:d1:ac:7f:13: 33:a8:02:70:88:3c:33:19:f5:b6:32:46:2c:f4:04: ff:4a:de:9f:3e:02:7c:13:dd:09:8c:18:b1:56:2a: 8f:62:5f:b4:c6:4e:98:68:34:42:eb:bf:2a:35:44: 58:45:fb:5f:9e:1d:d7:37:6b:f9:a0:ea:c0:e4:f0: 75:8a:21:87:50:99:6e:3e:7c:83:52:0a:13:5b:e5: 30:1d:30:15:34:a0:83:c1:51:53:a5:c7:e3:47:a3: bc:c5:a2:bf:d7:c5:f4:0e:70:ba:d6:58:d9:b4:a2: c7:4e:77:71:07:21:15:7d:d5:97:73:a0:52:cb:fc: 57:66:fb:41:e1:ee:43:d1:42:98:20:9a:b8:46:a9: 4d:1e:2e:0d:d2:fb:fa:25:94:c3:01:05:88:7d:4e: 29:c8:1e:a9:1e:97:bf:25:21:d4:c4:15:7d:0f:63: c9:a7:c5:fb:9b:93:af:7f:d7:9a:12:b8:97:47:ce: f9:77:10:6f:f9:33:3a:c2:4e:3e:7d:66:f5:6b:66: 0f:15:15:c4:bf:c4:18:26:5d:ea:eb:f9:95:cb:96: b2:00:6a:8a:04:b7:8d:70:ae:b2:aa:f5:88:4a:18: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E8:02:87:FD:6A:2B:01:2D:B7:7E:B3:BA:28:09:6D:5F:94:71:69 X509v3 Authority Key Identifier: keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/41E7BB1C0BA211F08457541BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.18.109.0/24 202.181.155.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:36:44:79:31:08:39:2d:35:0a:03:8f:f9:6c:f2:c0:d5:0a: e2:18:f2:6f:8a:0d:15:42:2f:b2:8b:28:b9:3a:6e:a2:d8:64: af:75:fe:42:2e:0d:fd:79:0b:36:35:70:bd:76:2f:c8:75:6b: 3e:ab:c4:1a:79:a4:bf:25:31:c1:09:d3:86:34:fc:8e:41:51: e5:65:46:89:15:3d:45:04:4e:e6:34:54:c7:83:b6:96:3e:52: 60:aa:25:8a:69:98:2b:74:e9:0f:45:45:a5:0d:24:d7:ec:a3: e8:d4:26:a3:b5:ce:81:9c:67:66:e4:4d:4b:71:92:dc:3b:4a: 5a:07:62:87:fa:45:8d:8b:16:2c:13:eb:78:82:22:20:4d:a1: 91:eb:8b:1b:3c:36:a7:3c:68:17:ea:f1:b2:fd:82:a8:2b:34: 4e:49:e6:fd:c4:98:15:9f:cd:a6:95:33:cb:09:83:2e:1a:bb: 6f:6d:f5:a6:d1:41:9f:89:0b:8b:ad:c3:e0:fc:8b:2a:14:6d: d0:46:4c:cb:15:f7:ed:47:f8:40:21:4c:64:79:db:52:ce:f2: b3:3e:59:78:79:47:44:06:01:c2:9b:a6:b7:20:7b:5a:12:6b: 7b:9c:a4:50:c8:8a:05:43:86:85:ce:6d:09:36:fd:50:0e:24: 7e:53:37:37 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzNGQjExMC8GA1UEBRMoNEY1Rjc1QTZDMjk4OEY1OEI2MDMwMTJBOERCNDQ1QTFG MzdENUQ3MjAeFw0yNTAzMjgwNzAyMTFaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTY0OTcyLWJiZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCbtNbS4nc7Kot914Wma4aKsIjYYtaCF8O0ax/EzOoAnCIPDMZ9bYyRiz0BP9K 3p8+AnwT3QmMGLFWKo9iX7TGTphoNELrvyo1RFhF+1+eHdc3a/mg6sDk8HWKIYdQ mW4+fINSChNb5TAdMBU0oIPBUVOlx+NHo7zFor/XxfQOcLrWWNm0osdOd3EHIRV9 1ZdzoFLL/Fdm+0Hh7kPRQpggmrhGqU0eLg3S+/ollMMBBYh9TinIHqkel78lIdTE FX0PY8mnxfubk69/15oSuJdHzvl3EG/5MzrCTj59ZvVrZg8VFcS/xBgmXerr+ZXL lrIAaooEt41wrrKq9YhKGJm9AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUfegCh/1q KwEtt36zuigJbV+UcWkwHwYDVR0jBBgwFoAUT191psKYj1i2AwEqjbRFofN9XXIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDM0ZCLzcwMTc4MjE2MEJB MTExRjA4RUZFRDIxOUM0RjlBRTAyL1QxOTFwc0tZajFpMkF3RXFqYlJGb2ZOOVhY SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVDE5MXBzS1lqMWkyQXdFcWpiUkZvZk45WFhJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzNGQi83MDE3ODIxNjBCQTExMUYwOEVGRUQyMTlDNEY5QUUwMi80MUU3QkIxQzBC QTIxMUYwODQ1NzU0MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAHUSbQMEAMq1mzANBgkqhkiG9w0BAQsFAAOCAQEAjjZEeTEI OS01CgOP+WzywNUK4hjyb4oNFUIvsosouTpuothkr3X+Qi4N/XkLNjVwvXYvyHVr PqvEGnmkvyUxwQnThjT8jkFR5WVGiRU9RQRO5jRUx4O2lj5SYKolimmYK3TpD0VF pQ0k1+yj6NQmo7XOgZxnZuRNS3GS3DtKWgdih/pFjYsWLBPreIIiIE2hkeuLGzw2 pzxoF+rxsv2CqCs0Tknm/cSYFZ/NppUzywmDLhq7b231ptFBn4kLi63D4PyLKhRt 0EZMyxX37Uf4QCFMZHnbUs7ysz5ZeHlHRAYBwpumtyB7WhJre5ykUMiKBUOGhc5t CTb9UA4kflM3Nw== -----END CERTIFICATE-----Generated at Sat Apr 5 05:08:00 2025 by rpki-client