$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa File: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (raw, json) Hash identifier: OCepXKtPM8Ugq1ZnTOeqLJrMwE6SWX8J/dtz+Y3O35w= Subject key identifier: F3:FC:CF:C0:EA:0A:CF:0F:09:9D:AD:FD:3A:AB:AC:56:70:03:5E:1C Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Certificate serial: FD Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa Signing time: Thu 27 Feb 2025 06:29:48 +0000 ROA not before: Thu 27 Feb 2025 06:29:48 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 103.150.252.0/24 maxlen: 24 2400:a4a0:1::/48 maxlen: 48 2400:a4a0:30::/48 maxlen: 48 2400:a4a0:40::/48 maxlen: 48 2400:a4a0:41::/48 maxlen: 48 2400:a4a0:42::/48 maxlen: 48 2400:a4a0:90::/48 maxlen: 48 2400:a4a0:100::/48 maxlen: 48 2400:a4a0:101::/48 maxlen: 48 2400:a4a0:115::/48 maxlen: 48 2400:a4a0:a100::/48 maxlen: 48 2400:a4a0:aaa2::/48 maxlen: 48 2400:a4a0:aaa3::/48 maxlen: 48 2400:a4a0:aaa4::/48 maxlen: 48 2400:a4a0:aaa5::/48 maxlen: 48 2400:a4a0:b100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22 Validity Not Before: Feb 27 06:29:48 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c0065b-f126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:40:31:e0:23:28:1b:2c:76:f4:d5:be:a5: 95:ce:c7:14:47:28:f1:95:fb:e8:07:2b:ad:7b:0d: ea:56:70:cd:75:56:83:95:f3:44:76:6a:19:fa:d4: be:6c:ce:c1:cc:ca:90:5e:aa:a6:ae:43:e3:1e:a2: c8:44:e4:84:dc:22:cf:23:50:58:f6:48:64:76:27: 2e:b9:45:6d:99:84:d1:38:4a:81:06:46:19:7a:a9: bf:c4:af:db:60:8e:c2:2f:0e:13:fa:12:86:1e:28: 40:5d:47:3e:f2:9f:1f:13:50:43:c1:22:21:b3:e9: af:2f:87:4c:28:e2:93:99:5b:16:49:fb:de:68:03: 52:ba:72:47:c0:9e:ee:38:69:d6:ba:a6:17:5f:06: 1c:55:10:4a:a9:f3:a8:26:7e:80:71:fb:38:1e:d8: f3:5e:81:b3:f1:92:48:cb:20:d1:e7:35:56:c4:0f: 80:19:a0:e8:41:bc:e5:56:57:76:ef:ab:fb:94:fe: 7b:62:cd:1d:c5:d1:15:ff:be:b9:db:46:81:5c:39: c5:38:53:1b:bf:32:7e:2a:6e:de:1e:e0:87:68:88: ba:bd:ba:03:e5:c4:87:ab:18:cf:60:54:b3:aa:6f: 9a:a1:51:42:81:f4:81:3c:a4:37:bf:e5:71:00:f9: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FC:CF:C0:EA:0A:CF:0F:09:9D:AD:FD:3A:AB:AC:56:70:03:5E:1C X509v3 Authority Key Identifier: keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.252.0/24 IPv6: 2400:a4a0:1::/48 2400:a4a0:30::/48 2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff 2400:a4a0:90::/48 2400:a4a0:100::/47 2400:a4a0:115::/48 2400:a4a0:a100::/48 2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff 2400:a4a0:b100::/48 Signature Algorithm: sha256WithRSAEncryption 93:53:0d:da:12:d6:fd:8e:42:2c:ea:ee:5d:89:5f:95:82:79: 7d:08:58:30:ea:f4:6b:16:61:6e:db:59:eb:30:48:e0:bc:a8: e5:08:ed:09:5a:c7:81:05:77:7f:a1:eb:6a:35:b6:c8:a6:eb: 18:b4:99:a5:55:0b:16:ee:5e:48:25:e7:b9:7b:e9:3e:a2:e6: 85:e2:c3:06:5a:6a:45:c4:57:84:b1:37:fa:b6:64:a7:83:80: 65:ed:7f:d3:3d:89:92:79:0e:70:18:85:34:5e:74:97:68:6c: fa:10:6f:db:ce:a0:97:ae:a9:88:89:60:e5:f6:1a:ba:ea:33: f1:70:7e:20:af:2f:33:38:83:17:43:54:9f:b3:e4:ff:e3:67: fd:0a:3a:87:41:cc:d6:81:c3:04:33:9f:d8:8e:72:16:c0:14: e2:2e:aa:ec:0b:93:ef:19:65:88:aa:03:54:77:1c:eb:ea:96: 5c:12:a7:ed:4c:d7:23:05:42:4e:59:1e:c0:2a:54:c2:f6:80: bf:86:9b:9c:1d:01:e8:28:dd:cc:49:21:05:dc:33:bd:93:95: 0e:3a:7b:e2:73:7d:11:0e:c1:be:7f:64:43:ec:2f:9f:89:7d: ca:f8:db:20:3a:fe:a1:da:1f:32:86:37:e6:b4:73:a0:cc:97: c2:88:d9:8e -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKEZDRjc1M0QzNDZBQUFCOTVBQjE0QzYyNjc1MTVDREYx M0Y4MEZCQkIwHhcNMjUwMjI3MDYyOTQ4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MwMDY1Yi1mMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqNAMeAjKBssdvTVvqWVzscURyjxlfvoByutew3qVnDNdVaDlfNEdmoZ+tS+ bM7BzMqQXqqmrkPjHqLIROSE3CLPI1BY9khkdicuuUVtmYTROEqBBkYZeqm/xK/b YI7CLw4T+hKGHihAXUc+8p8fE1BDwSIhs+mvL4dMKOKTmVsWSfveaANSunJHwJ7u OGnWuqYXXwYcVRBKqfOoJn6Acfs4HtjzXoGz8ZJIyyDR5zVWxA+AGaDoQbzlVld2 76v7lP57Ys0dxdEV/76520aBXDnFOFMbvzJ+Km7eHuCHaIi6vboD5cSHqxjPYFSz qm+aoVFCgfSBPKQ3v+VxAPmjSwIDAQABo4IDBTCCAwEwHQYDVR0OBBYEFPP8z8Dq Cs8PCZ2t/TqrrFZwA14cMB8GA1UdIwQYMBaAFPz3U9NGqquVqxTGJnUVzfE/gPu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DRjlCRjVGRThG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9fUGRUMDBhcXE1V3JGTVltZFJYTjhULUEt N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlGMjIvQ0Y5QkY1RkU4RjJGMTFFRTlDQkZEOTYxQzRGOUFFMDIvNDEyMEY2QTI4 RjMwMTFFRUE2MUFDRjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgY4GCCsGAQUFBwEHAQH/ BH8wfTAMBAIAATAGAwQAZ5b8MG0EAgACMGcDBwAkAKSgAAEDBwAkAKSgADAwEgMH BiQApKAAQAMHACQApKAAQgMHACQApKAAkAMHASQApKABAAMHACQApKABFQMHACQA pKChADASAwcBJACkoKqiAwcBJACkoKqkAwcAJACkoLEAMA0GCSqGSIb3DQEBCwUA A4IBAQCTUw3aEtb9jkIs6u5diV+Vgnl9CFgw6vRrFmFu21nrMEjgvKjlCO0JWseB BXd/oetqNbbIpusYtJmlVQsW7l5IJee5e+k+ouaF4sMGWmpFxFeEsTf6tmSng4Bl 7X/TPYmSeQ5wGIU0XnSXaGz6EG/bzqCXrqmIiWDl9hq66jPxcH4gry8zOIMXQ1Sf s+T/42f9CjqHQczWgcMEM5/YjnIWwBTiLqrsC5PvGWWIqgNUdxzr6pZcEqftTNcj BUJOWR7AKlTC9oC/hpucHQHoKN3MSSEF3DO9k5UOOnvic30RDsG+f2RD7C+fiX3K +NsgOv6h2h8yhjfmtHOgzJfCiNmO -----END CERTIFICATE-----Generated at Thu Mar 13 21:56:55 2025 by rpki-client