$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa File: 4120F6A28F3011EEA61ACF62C4F9AE02.roa (raw, json) Hash identifier: Ot9cpLYOpRPaFsp3xYibZwM51C9pmXOqK219ZE/jTZk= Subject key identifier: 07:50:DE:26:69:25:21:7B:82:9A:3B:A6:0F:E5:4A:38:F4:30:73:C5 Certificate issuer: /CN=A9179F22/serialNumber=FCF753D346AAAB95AB14C6267515CDF13F80FBBB Certificate serial: 5D Authority key identifier: FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa Signing time: Fri 26 Apr 2024 05:08:18 +0000 ROA not before: Fri 26 Apr 2024 05:08:18 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 14618 IP address blocks: 103.150.252.0/24 maxlen: 24 2400:a4a0:1::/48 maxlen: 48 2400:a4a0:30::/48 maxlen: 48 2400:a4a0:40::/48 maxlen: 48 2400:a4a0:41::/48 maxlen: 48 2400:a4a0:42::/48 maxlen: 48 2400:a4a0:90::/48 maxlen: 48 2400:a4a0:100::/48 maxlen: 48 2400:a4a0:101::/48 maxlen: 48 2400:a4a0:115::/48 maxlen: 48 2400:a4a0:a100::/48 maxlen: 48 2400:a4a0:aaa2::/48 maxlen: 48 2400:a4a0:aaa3::/48 maxlen: 48 2400:a4a0:aaa4::/48 maxlen: 48 2400:a4a0:aaa5::/48 maxlen: 48 2400:a4a0:b100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 93 (0x5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22 Validity Not Before: Apr 26 05:08:18 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=662b36c1-80dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:ab:99:90:e1:c9:89:b7:ad:91:22:2a:6b: b2:53:7b:ba:54:07:f0:a3:e5:b5:b9:02:5b:05:be: 3f:1c:71:63:de:08:b7:a0:6c:27:02:50:ab:eb:73: 66:0c:32:c0:71:74:88:66:63:1b:69:39:ad:fa:8f: 90:7f:87:64:43:32:ae:c8:61:94:bc:42:d2:1e:47: 7b:63:d2:c5:3f:c9:13:ff:df:28:af:db:62:17:2b: 9e:28:8b:8e:31:6f:53:f4:1c:b2:99:9d:ba:55:56: 5d:8d:a2:c7:ab:69:f0:73:c9:ff:7b:69:06:17:d3: 50:8b:3a:17:12:e2:f0:01:8a:72:2a:23:7b:df:85: dc:f1:3c:d1:08:8c:4c:bf:1d:41:78:fb:b1:01:4f: 57:d6:ba:9b:eb:b0:c8:21:4e:75:f8:1d:99:f1:50: 27:85:94:80:34:d8:c7:32:33:fc:40:b8:ba:f4:62: ea:27:4a:13:1d:6d:0f:99:21:c5:c1:de:9f:1e:fc: fd:4f:ea:22:03:81:76:32:cf:0a:5b:23:f7:0e:42: 38:c5:8b:e9:53:bc:68:d7:7b:17:70:ea:8a:91:37: 76:ba:c8:d8:4d:bc:b6:5f:1e:e1:08:ce:b3:50:8e: 8a:73:c1:f9:8e:c2:1b:3a:4b:11:68:1d:c6:e0:12: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:50:DE:26:69:25:21:7B:82:9A:3B:A6:0F:E5:4A:38:F4:30:73:C5 X509v3 Authority Key Identifier: keyid:FC:F7:53:D3:46:AA:AB:95:AB:14:C6:26:75:15:CD:F1:3F:80:FB:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/_PdT00aqq5WrFMYmdRXN8T-A-7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_PdT00aqq5WrFMYmdRXN8T-A-7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/CF9BF5FE8F2F11EE9CBFD961C4F9AE02/4120F6A28F3011EEA61ACF62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.252.0/24 IPv6: 2400:a4a0:1::/48 2400:a4a0:30::/48 2400:a4a0:40::-2400:a4a0:42:ffff:ffff:ffff:ffff:ffff 2400:a4a0:90::/48 2400:a4a0:100::/47 2400:a4a0:115::/48 2400:a4a0:a100::/48 2400:a4a0:aaa2::-2400:a4a0:aaa5:ffff:ffff:ffff:ffff:ffff 2400:a4a0:b100::/48 Signature Algorithm: sha256WithRSAEncryption 7f:d5:fe:25:1a:0a:22:54:ee:e9:26:72:30:a1:40:1f:dc:b6: 8b:c2:df:31:c1:80:47:a0:35:4d:6e:80:14:64:5e:f8:ab:3b: 52:2e:75:8e:41:3b:c9:9b:e0:3f:41:23:e5:cc:38:f9:47:d2: 34:d1:bd:bb:48:db:e8:e3:d6:1a:69:10:06:76:c5:9c:ed:31: 41:4c:36:29:e1:87:70:5d:1f:4a:c3:52:af:95:23:45:42:b5: a6:e0:21:52:72:fc:7c:8f:5e:12:10:6f:d6:1c:bf:b4:02:2d: 53:8a:d5:aa:a0:02:0b:e7:8b:7a:ab:7c:24:13:fd:a0:e9:2e: aa:fc:49:9a:9c:ca:6a:0b:85:43:59:7c:ff:c8:0a:c2:91:31: 2b:62:9f:7c:6e:cb:56:22:f3:6e:bf:c9:33:0a:8c:6b:72:dc: 4f:de:20:eb:23:85:50:2a:07:5e:6e:7b:1c:64:11:41:59:da: 50:92:27:30:ca:93:f9:dd:d3:5e:8d:07:ec:bf:b1:5d:ac:7b: ef:6f:02:21:94:56:21:fd:23:aa:c3:c5:0a:7b:e7:49:63:9d: bf:29:96:c6:83:ef:ce:38:d3:cc:2e:1c:6e:47:5b:5a:af:b9: f4:6b:4b:5b:f3:21:a5:fb:dc:aa:58:62:d0:a3:21:60:39:67: 57:78:0a:0b -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OUYyMjExMC8GA1UEBRMoRkNGNzUzRDM0NkFBQUI5NUFCMTRDNjI2NzUxNUNERjEz RjgwRkJCQjAeFw0yNDA0MjYwNTA4MThaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MmIzNmMxLTgwZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmtquZkOHJibetkSIqa7JTe7pUB/Cj5bW5AlsFvj8ccWPeCLegbCcCUKvrc2YM MsBxdIhmYxtpOa36j5B/h2RDMq7IYZS8QtIeR3tj0sU/yRP/3yiv22IXK54oi44x b1P0HLKZnbpVVl2NoserafBzyf97aQYX01CLOhcS4vABinIqI3vfhdzxPNEIjEy/ HUF4+7EBT1fWupvrsMghTnX4HZnxUCeFlIA02McyM/xAuLr0YuonShMdbQ+ZIcXB 3p8e/P1P6iIDgXYyzwpbI/cOQjjFi+lTvGjXexdw6oqRN3a6yNhNvLZfHuEIzrNQ jopzwfmOwhs6SxFoHcbgEsf7AgMBAAGjggMFMIIDATAdBgNVHQ4EFgQUB1DeJmkl IXuCmjumD+VKOPQwc8UwHwYDVR0jBBgwFoAU/PdT00aqq5WrFMYmdRXN8T+A+7sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5RjIyL0NGOUJGNUZFOEYy RjExRUU5Q0JGRDk2MUM0RjlBRTAyL19QZFQwMGFxcTVXckZNWW1kUlhOOFQtQS03 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1BkVDAwYXFxNVdyRk1ZbWRSWE44VC1BLTdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUYyMi9DRjlCRjVGRThGMkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi80MTIwRjZBMjhG MzAxMUVFQTYxQUNGNjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDCBjgYIKwYBBQUHAQcBAf8E fzB9MAwEAgABMAYDBABnlvwwbQQCAAIwZwMHACQApKAAAQMHACQApKAAMDASAwcG JACkoABAAwcAJACkoABCAwcAJACkoACQAwcBJACkoAEAAwcAJACkoAEVAwcAJACk oKEAMBIDBwEkAKSgqqIDBwEkAKSgqqQDBwAkAKSgsQAwDQYJKoZIhvcNAQELBQAD ggEBAH/V/iUaCiJU7ukmcjChQB/ctovC3zHBgEegNU1ugBRkXvirO1IudY5BO8mb 4D9BI+XMOPlH0jTRvbtI2+jj1hppEAZ2xZztMUFMNinhh3BdH0rDUq+VI0VCtabg IVJy/HyPXhIQb9Ycv7QCLVOK1aqgAgvni3qrfCQT/aDpLqr8SZqcymoLhUNZfP/I CsKRMStin3xuy1Yi826/yTMKjGty3E/eIOsjhVAqB15uexxkEUFZ2lCSJzDKk/nd 016NB+y/sV2se+9vAiGUViH9I6rDxQp750ljnb8plsaD784408wuHG5HW1qvufRr S1vzIaX73KpYYtCjIWA5Z1d4Cgs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:03 2025 by rpki-client