$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/A149F286EFD311EFB37AB53EC4F9AE02.roa File: A149F286EFD311EFB37AB53EC4F9AE02.roa (raw, json) Hash identifier: 7lOYsVaaqHqx4pgPOBBbAkvs7oMzJU4VOgvj6HMpoQE= Subject key identifier: 6A:29:D6:D2:70:81:07:C1:89:B5:06:9D:D2:1A:C2:E2:30:83:D2:47 Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Certificate serial: 1C8E Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/A149F286EFD311EFB37AB53EC4F9AE02.roa Signing time: Thu 20 Feb 2025 21:44:43 +0000 ROA not before: Thu 20 Feb 2025 21:44:43 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 38201 IP address blocks: 43.255.148.0/22 maxlen: 22 43.255.148.0/23 maxlen: 23 43.255.150.0/23 maxlen: 23 103.239.160.0/22 maxlen: 22 103.239.160.0/23 maxlen: 23 103.239.160.0/24 maxlen: 24 103.239.161.0/24 maxlen: 24 103.239.162.0/23 maxlen: 23 175.176.144.0/22 maxlen: 22 175.176.144.0/23 maxlen: 23 175.176.146.0/23 maxlen: 23 175.176.147.0/24 maxlen: 24 202.134.24.0/21 maxlen: 21 202.134.24.0/22 maxlen: 22 202.134.24.0/24 maxlen: 24 202.134.25.0/24 maxlen: 24 202.134.26.0/24 maxlen: 24 202.134.27.0/24 maxlen: 24 202.134.28.0/22 maxlen: 22 202.134.29.0/24 maxlen: 24 202.134.30.0/24 maxlen: 24 202.134.31.0/24 maxlen: 24 2400:6400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7310 (0x1c8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5 Validity Not Before: Feb 20 21:44:43 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67b7a24b-eeb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:b9:53:8a:10:ef:00:03:fc:05:fa:d2:19: 88:6e:b9:11:5c:5d:34:62:85:ff:be:ca:b8:02:db: 8f:fb:51:c3:dd:ad:71:60:55:a2:5b:05:8a:50:c1: 6a:f8:c8:23:31:a9:f7:b2:cf:22:e3:68:44:6d:3a: 34:ec:79:b1:92:94:91:bb:d3:32:99:e4:3a:02:7c: bd:d0:93:1c:f3:00:14:73:44:56:cd:5e:02:22:d6: 49:39:65:4d:66:02:80:39:0e:2a:83:8c:cf:2a:d5: 7f:7e:46:99:c2:68:7f:aa:16:8d:ff:50:85:be:27: 71:51:c7:20:37:88:2a:20:96:12:81:e8:dd:b0:97: 97:57:7a:50:91:eb:37:7e:06:1e:2c:9d:a2:d8:c6: 82:ea:89:12:e0:52:33:14:0c:e2:6e:e5:f5:26:2b: 33:37:24:e8:7e:f0:3e:33:26:dd:9f:75:53:1c:fc: d5:a5:5a:a5:2f:a7:ea:50:05:24:99:ce:23:88:86: f2:d9:45:15:68:6c:d3:e4:43:6c:f4:e8:00:54:c1: c0:9c:99:bc:25:43:7f:05:1a:be:8b:61:7c:ad:45: 8f:d2:40:35:d8:d5:73:e1:81:3b:11:dc:40:44:e4: 78:3c:0c:34:3a:66:da:48:9f:0d:b4:c7:ce:a3:2c: 7c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:29:D6:D2:70:81:07:C1:89:B5:06:9D:D2:1A:C2:E2:30:83:D2:47 X509v3 Authority Key Identifier: keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/A149F286EFD311EFB37AB53EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.148.0/22 103.239.160.0/22 175.176.144.0/22 202.134.24.0/21 IPv6: 2400:6400::/32 Signature Algorithm: sha256WithRSAEncryption b7:0b:7a:eb:36:2b:b2:36:e3:f6:ca:e2:5a:bb:38:a9:26:af: d3:db:7c:bb:1e:63:da:19:30:29:6c:a6:6b:2d:a3:0a:4c:fe: d6:7a:f7:f8:44:3b:86:97:f5:2c:49:8c:87:1d:1f:ee:74:bc: 1c:2e:5b:43:c5:25:ee:b0:a3:37:9c:d4:ab:35:87:a5:74:87: a2:eb:51:7d:22:5d:4c:79:fd:8d:79:5a:e3:48:05:f9:2f:b7: 21:68:7d:84:7b:50:81:14:aa:63:5c:2e:01:36:7a:71:a8:a8: a1:c5:18:93:cd:d5:ec:f0:fe:a5:23:9c:30:06:12:72:eb:96: c0:94:5f:26:61:aa:d4:96:c8:d9:56:81:b9:1f:34:c2:80:dc: 4c:5e:b7:da:0b:4e:f7:cc:4d:3f:7c:2b:fa:e8:37:e6:9b:7d: 04:b9:8a:d8:b3:cb:8a:0d:27:ca:f4:1d:d4:ec:d0:02:12:44: 18:e8:0b:a3:37:79:ee:7f:0f:ef:6d:ca:81:0b:a7:fe:4c:3f: 6c:3f:72:db:bc:ae:83:7e:20:fe:e3:a8:38:54:7e:23:ed:fe: 01:4f:9f:b5:8a:9e:83:a8:15:73:52:4b:8f:22:22:c8:a8:97: 3e:ad:08:27:e9:6c:10:fa:52:33:5d:59:e9:0a:1f:a0:24:2b: a2:b4:6b:c6 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICHI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzOTAxMTAvBgNVBAUTKEM2NDMzQzQ5RTYzQ0Q5MjAzNUIzMDdFOEY3OTYzNzYw OEZFQURCRjUwHhcNMjUwMjIwMjE0NDQzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I3YTI0Yi1lZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPC5U4oQ7wAD/AX60hmIbrkRXF00YoX/vsq4AtuP+1HD3a1xYFWiWwWKUMFq +MgjMan3ss8i42hEbTo07HmxkpSRu9MymeQ6Any90JMc8wAUc0RWzV4CItZJOWVN ZgKAOQ4qg4zPKtV/fkaZwmh/qhaN/1CFvidxUccgN4gqIJYSgejdsJeXV3pQkes3 fgYeLJ2i2MaC6okS4FIzFAzibuX1JiszNyTofvA+Mybdn3VTHPzVpVqlL6fqUAUk mc4jiIby2UUVaGzT5ENs9OgAVMHAnJm8JUN/BRq+i2F8rUWP0kA12NVz4YE7EdxA ROR4PAw0OmbaSJ8NtMfOoyx8awIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGop1tJw gQfBibUGndIawuIwg9JHMB8GA1UdIwQYMBaAFMZDPEnmPNkgNbMH6PeWN2CP6tv1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDM5MC8wRTkzNTRGQ0RD NUMxMUU2OEU5MTVFMzJDNEY5QUUwMi94a004U2VZODJTQTFzd2ZvOTVZM1lJX3Ey X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrTThTZVk4MlNBMXN3Zm85NVkzWUlfcTJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjQzOTAvMEU5MzU0RkNEQzVDMTFFNjhFOTE1RTMyQzRGOUFFMDIvQTE0OUYyODZF RkQzMTFFRkIzN0FCNTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr/5QDBAJn76ADBAKvsJADBAPKhhgwDQQCAAIwBwMFACQA ZAAwDQYJKoZIhvcNAQELBQADggEBALcLeus2K7I24/bK4lq7OKkmr9PbfLseY9oZ MClspmstowpM/tZ69/hEO4aX9SxJjIcdH+50vBwuW0PFJe6wozec1Ks1h6V0h6Lr UX0iXUx5/Y15WuNIBfkvtyFofYR7UIEUqmNcLgE2enGoqKHFGJPN1ezw/qUjnDAG EnLrlsCUXyZhqtSWyNlWgbkfNMKA3Exet9oLTvfMTT98K/roN+abfQS5itizy4oN J8r0HdTs0AISRBjoC6M3ee5/D+9tyoELp/5MP2w/ctu8roN+IP7jqDhUfiPt/gFP n7WKnoOoFXNSS48iIsiolz6tCCfpbBD6UjNdWekKH6AkK6K0a8Y= -----END CERTIFICATE-----Generated at Wed Jun 4 00:11:50 2025 by rpki-client