$ rpki-client -vvf rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/95230C121C1111F084CA9515C4F9AE02.roa File: 95230C121C1111F084CA9515C4F9AE02.roa (raw, json) Hash identifier: DGKlkJ6RE4Bjup/NrXtl5xkYzvFaq6I147fZ6Cl8nGM= Subject key identifier: A5:FC:89:D7:A8:B4:E6:19:04:AE:A9:F9:9C:A2:89:1A:06:39:F6:68 Certificate issuer: /CN=A913EDDF/serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1 Certificate serial: 0147 Authority key identifier: 15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/95230C121C1111F084CA9515C4F9AE02.roa Signing time: Fri 18 Apr 2025 04:58:11 +0000 ROA not before: Fri 18 Apr 2025 04:58:11 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 139285 IP address blocks: 103.148.228.0/24 maxlen: 24 103.148.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EDDF, serialNumber=15E1CDDDAECCEABB65665E30ACF445F9729663E1 Validity Not Before: Apr 18 04:58:11 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6801dbe3-57f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:ce:1c:fe:d7:c7:5a:45:0c:b2:62:26:df: 18:fd:75:c9:7f:f4:c8:f1:df:de:76:00:5b:91:7f: 87:7f:27:8e:9d:ef:18:62:a3:38:e9:12:17:24:e0: 6a:72:ed:67:e9:b0:d0:26:71:17:9a:ee:22:6c:40: 2d:3d:a9:dc:f5:0e:63:9c:e6:46:fe:b8:b6:39:3f: 25:cd:f1:c6:6b:7a:a5:78:94:45:92:5b:20:71:5c: 67:fd:55:01:9b:70:28:ef:ca:60:a4:27:c1:63:69: ef:20:e8:cc:65:8d:46:5d:26:b3:0d:46:20:95:e8: 1e:76:dc:c7:a8:25:03:1d:a8:72:80:29:ec:7e:f7: 9f:fd:10:df:a0:35:df:3c:b7:55:af:61:fd:4a:c5: 1e:b8:66:2a:33:a9:4f:fc:82:46:47:f1:39:71:37: 09:e8:67:41:1f:c6:3b:d4:4f:9a:07:a3:a0:3f:9b: d4:3d:88:14:ee:b4:37:2f:46:75:3e:99:e2:b2:9a: 5a:79:b1:5a:9b:c9:83:e1:13:aa:e5:0b:34:90:7a: 35:89:f0:13:2a:5e:fa:58:c1:ce:e6:d0:da:14:dd: 25:09:0b:00:18:7a:48:6e:c7:c8:58:2d:dd:4e:b0: d3:f1:77:43:bc:3f:63:55:03:13:4c:69:59:f7:c9: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FC:89:D7:A8:B4:E6:19:04:AE:A9:F9:9C:A2:89:1A:06:39:F6:68 X509v3 Authority Key Identifier: keyid:15:E1:CD:DD:AE:CC:EA:BB:65:66:5E:30:AC:F4:45:F9:72:96:63:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/FeHN3a7M6rtlZl4wrPRF-XKWY-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FeHN3a7M6rtlZl4wrPRF-XKWY-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EDDF/54785796376411EEA5AA7A58C4F9AE02/95230C121C1111F084CA9515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.228.0/23 Signature Algorithm: sha256WithRSAEncryption 09:32:ae:b4:ce:83:fa:0c:34:5b:9c:63:18:b2:db:35:37:f2: db:cd:9e:2a:1c:8a:5d:4a:cc:96:7c:15:98:74:e2:55:cf:04: 0a:8e:72:7c:a1:b0:1a:2b:87:d9:74:80:f1:f2:d7:8d:bb:f7: e0:71:a8:91:05:bd:08:3c:4e:d8:40:cc:6d:18:e2:3c:57:f9: a9:d7:86:1a:e1:15:da:84:d4:68:95:cf:11:51:78:fa:33:5a: 01:7c:a8:21:a4:fb:12:cc:5d:c5:35:15:cb:80:3e:98:67:f0: d4:6f:a8:fe:c1:af:d5:5b:46:29:29:e8:36:d6:f9:ef:15:49: 34:8f:15:98:75:d8:d0:11:6c:bd:70:0b:6f:54:25:47:24:3f: ff:d2:0d:12:1c:38:db:fe:b8:61:1a:ba:65:e4:82:15:a4:22: 3d:52:58:67:ce:4a:8f:dc:76:5a:79:76:84:f7:64:c3:4a:16: 8a:13:65:f2:24:ec:e2:86:8d:3a:8e:77:e7:5d:d3:63:63:60: 24:66:7e:09:0f:d7:88:9e:d5:8d:a2:6f:c8:79:d0:2d:87:2d: f9:04:cc:e5:50:eb:8e:f5:08:a1:8e:2c:bd:dd:05:07:30:7e: f6:7a:07:da:ea:ef:10:fe:73:f2:27:52:a6:e3:ba:c4:6c:89: b5:b3:69:55 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VEREYxMTAvBgNVBAUTKDE1RTFDREREQUVDQ0VBQkI2NTY2NUUzMEFDRjQ0NUY5 NzI5NjYzRTEwHhcNMjUwNDE4MDQ1ODExWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODAxZGJlMy01N2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NPOHP7Xx1pFDLJiJt8Y/XXJf/TI8d/edgBbkX+HfyeOne8YYqM46RIXJOBq cu1n6bDQJnEXmu4ibEAtPanc9Q5jnOZG/ri2OT8lzfHGa3qleJRFklsgcVxn/VUB m3Ao78pgpCfBY2nvIOjMZY1GXSazDUYglegedtzHqCUDHahygCnsfvef/RDfoDXf PLdVr2H9SsUeuGYqM6lP/IJGR/E5cTcJ6GdBH8Y71E+aB6OgP5vUPYgU7rQ3L0Z1 PpnisppaebFam8mD4ROq5Qs0kHo1ifATKl76WMHO5tDaFN0lCQsAGHpIbsfIWC3d TrDT8XdDvD9jVQMTTGlZ98nVEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKX8ideo tOYZBK6p+ZyiiRoGOfZoMB8GA1UdIwQYMBaAFBXhzd2uzOq7ZWZeMKz0RflylmPh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRURERi81NDc4NTc5NjM3 NjQxMUVFQTVBQTdBNThDNEY5QUUwMi9GZUhOM2E3TTZydGxabDR3clBSRi1YS1dZ LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZlSE4zYTdNNnJ0bFpsNHdyUFJGLVhLV1ktRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VEREYvNTQ3ODU3OTYzNzY0MTFFRUE1QUE3QTU4QzRGOUFFMDIvOTUyMzBDMTIx QzExMTFGMDg0Q0E5NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlOQwDQYJKoZIhvcNAQELBQADggEBAAkyrrTOg/oMNFuc Yxiy2zU38tvNniocil1KzJZ8FZh04lXPBAqOcnyhsBorh9l0gPHy14279+BxqJEF vQg8TthAzG0Y4jxX+anXhhrhFdqE1GiVzxFRePozWgF8qCGk+xLMXcU1FcuAPphn 8NRvqP7Br9VbRikp6DbW+e8VSTSPFZh12NARbL1wC29UJUckP//SDRIcONv+uGEa umXkghWkIj1SWGfOSo/cdlp5doT3ZMNKFooTZfIk7OKGjTqOd+dd02NjYCRmfgkP 14ie1Y2ib8h50C2HLfkEzOVQ6471CKGOLL3dBQcwfvZ6B9rq7xD+c/InUqbjusRs ibWzaVU= -----END CERTIFICATE-----Generated at Sat Apr 26 08:15:03 2025 by rpki-client