$ rpki-client -vvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa File: 2F903356A40311EFBD995535C4F9AE02.roa (raw, json) Hash identifier: uO169iwF7Z+iK825Wy21kUBoHTcQcMmcJT8QN4XB2IQ= Subject key identifier: A5:A8:50:C8:44:63:BE:FB:12:C4:3B:69:36:18:C5:A1:8C:57:CF:79 Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Certificate serial: 1841 Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa Signing time: Wed 12 Feb 2025 17:24:25 +0000 ROA not before: Wed 12 Feb 2025 17:24:25 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 147302 IP address blocks: 122.129.65.0/24 maxlen: 24 122.129.67.0/24 maxlen: 24 122.129.68.0/24 maxlen: 24 122.129.70.0/24 maxlen: 24 122.129.71.0/24 maxlen: 24 122.129.83.0/24 maxlen: 24 122.129.87.0/24 maxlen: 24 122.129.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6209 (0x1841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE Validity Not Before: Feb 12 17:24:25 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67acd949-fc9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f4:88:34:a7:4d:a5:94:93:b6:cf:a9:97:91: c8:41:00:3e:55:41:02:43:4c:d1:29:46:28:69:3c: 5f:f7:0d:25:e8:d8:dc:28:c4:2b:e8:92:82:b5:3e: 1d:df:09:41:22:6e:9b:12:d0:6f:40:08:0c:c4:94: 1a:6e:7e:ac:b1:95:bc:15:49:00:ab:25:26:c5:9a: 2e:95:17:da:83:45:86:6c:92:cf:ee:0b:9b:b7:8a: 15:3f:73:c5:c9:8a:c2:82:a9:b2:c4:8e:1a:c9:1a: a0:49:a8:69:6f:16:ff:b1:7d:f7:7d:11:e1:70:ae: ae:cf:00:16:c8:8a:92:07:af:ad:b3:d4:54:ee:7a: 1a:ff:82:04:6b:46:67:48:d8:24:94:66:ae:8c:86: 8d:d1:c0:22:ec:b8:b4:7c:de:13:9d:b1:66:63:44: aa:52:ab:9e:aa:c7:90:03:ab:8b:ae:e2:bc:f0:dd: f4:48:08:71:88:dc:f1:59:2a:6c:b6:fe:17:5d:57: 5a:c7:a8:f0:05:1d:12:47:01:d2:a3:9c:a4:02:fc: 7e:67:ef:46:df:43:70:fc:0c:68:4e:fc:8b:49:b9: 9f:a9:22:cf:69:40:2a:cf:68:37:26:db:a2:66:2c: 0f:04:e5:98:ed:5a:4b:39:00:48:d1:e7:f3:64:28: b5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A8:50:C8:44:63:BE:FB:12:C4:3B:69:36:18:C5:A1:8C:57:CF:79 X509v3 Authority Key Identifier: keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/2F903356A40311EFBD995535C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.129.65.0/24 122.129.67.0-122.129.68.255 122.129.70.0/23 122.129.83.0/24 122.129.87.0/24 122.129.95.0/24 Signature Algorithm: sha256WithRSAEncryption 23:e0:15:1e:9b:8a:62:c6:b9:bc:5a:34:2a:a5:e8:98:44:dd: 43:61:f7:4e:bd:b0:6d:02:9a:c6:53:91:71:e6:13:19:5d:32: 42:b0:0b:b4:21:f1:1d:90:9a:6d:7f:c8:6b:bb:13:0d:2c:34: 61:55:13:a0:4a:6e:5a:ee:45:15:4a:47:44:31:2f:84:d8:1c: 87:4d:bb:3e:3a:27:09:b6:68:bf:f7:57:4c:0d:d5:31:42:f0: 27:ec:c9:56:a2:2e:2f:21:1e:9c:04:73:43:d1:70:42:7e:e8: a1:a3:be:37:88:e1:c2:e7:e4:2d:72:8d:10:84:2a:0a:aa:1d: 29:ca:06:ee:4c:07:2d:c2:ae:c7:60:e3:ca:98:3c:8b:8c:bc: ea:bc:1d:03:e3:17:c3:a9:50:9f:c5:8b:3e:b2:81:5a:47:d2: 7f:94:2f:53:1e:99:4b:1d:b3:41:c2:c0:13:27:0c:24:a3:b8: 43:95:ff:9f:08:36:63:66:58:68:86:02:4e:d4:7c:35:42:45: 22:70:41:ad:51:4f:e4:ec:e5:e2:85:2c:6e:10:00:70:2a:75: 6a:6d:2c:15:08:92:eb:49:c7:a0:88:a6:5b:42:55:a6:c2:45: 59:8f:a6:c5:5c:a5:20:3f:5b:45:0a:5d:66:f9:5c:3f:60:cb: 75:30:ee:48 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICGEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzlCNDkxMTAvBgNVBAUTKDRFRTU0MEE0OEFEOTczRkJEODMxQUJEMDI2MDNCNUZC MEZCOTQ1QkUwHhcNMjUwMjEyMTcyNDI1WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FjZDk0OS1mYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/SINKdNpZSTts+pl5HIQQA+VUECQ0zRKUYoaTxf9w0l6NjcKMQr6JKCtT4d 3wlBIm6bEtBvQAgMxJQabn6ssZW8FUkAqyUmxZoulRfag0WGbJLP7gubt4oVP3PF yYrCgqmyxI4ayRqgSahpbxb/sX33fRHhcK6uzwAWyIqSB6+ts9RU7noa/4IEa0Zn SNgklGaujIaN0cAi7Li0fN4TnbFmY0SqUqueqseQA6uLruK88N30SAhxiNzxWSps tv4XXVdax6jwBR0SRwHSo5ykAvx+Z+9G30Nw/AxoTvyLSbmfqSLPaUAqz2g3Jtui ZiwPBOWY7VpLOQBI0efzZCi1tQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKWoUMhE Y777EsQ7aTYYxaGMV895MB8GA1UdIwQYMBaAFE7lQKSK2XP72DGr0CYDtfsPuUW+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOUI0OS8wNzgwQjk5MEM5 RjgxMUU3OUVGMTIwMDlDNEY5QUUwMi9UdVZBcElyWmNfdllNYXZRSmdPMS13LTVS YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R1VkFwSXJaY192WU1hdlFKZ08xLXctNVJiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzlCNDkvMDc4MEI5OTBDOUY4MTFFNzlFRjEyMDA5QzRGOUFFMDIvMkY5MDMzNTZB NDAzMTFFRkJEOTk1NTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBAB6gUEwDAMEAHqBQwMEAHqBRAMEAXqBRgMEAHqBUwMEAHqB VwMEAHqBXzANBgkqhkiG9w0BAQsFAAOCAQEAI+AVHpuKYsa5vFo0KqXomETdQ2H3 Tr2wbQKaxlORceYTGV0yQrALtCHxHZCabX/Ia7sTDSw0YVUToEpuWu5FFUpHRDEv hNgch027PjonCbZov/dXTA3VMULwJ+zJVqIuLyEenARzQ9FwQn7ooaO+N4jhwufk LXKNEIQqCqodKcoG7kwHLcKux2Djypg8i4y86rwdA+MXw6lQn8WLPrKBWkfSf5Qv Ux6ZSx2zQcLAEycMJKO4Q5X/nwg2Y2ZYaIYCTtR8NUJFInBBrVFP5Ozl4oUsbhAA cCp1am0sFQiS60nHoIimW0JVpsJFWY+mxVylID9bRQpdZvlcP2DLdTDuSA== -----END CERTIFICATE-----Generated at Sat Apr 26 09:25:59 2025 by rpki-client