$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa File: 2DC3DC54D54E11EF8C5B1651C4F9AE02.roa (raw, json) Hash identifier: jj/VEZFojNzwFut6xQ2ddbaM/ffKwcFrBgOFEnS8TYI= Subject key identifier: 2E:0F:53:4F:84:DF:BE:64:02:2C:F3:C1:94:DF:D9:90:BB:FA:00:7A Certificate issuer: /CN=A9150E55/serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Certificate serial: 02F1 Authority key identifier: A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa Signing time: Sat 18 Jan 2025 03:42:03 +0000 ROA not before: Sat 18 Jan 2025 03:42:03 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153494 IP address blocks: 43.243.64.0/22 maxlen: 24 103.38.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150E55, serialNumber=A01A0F06E310B38130131D7882970BF162DD0D66 Validity Not Before: Jan 18 03:42:03 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=678b230a-fdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e7:5f:35:a3:2f:eb:c9:df:d9:c9:bc:ee:be: 1f:ce:93:af:8e:12:02:cb:f3:bd:71:a3:60:18:c9: 86:4f:45:bb:ba:e8:bf:18:87:96:b9:ea:b4:93:92: 9d:57:62:ef:13:68:07:83:b5:bd:e8:20:b5:59:00: c2:c9:a4:78:f5:a5:8e:4d:84:ea:66:99:1a:47:3f: 10:ea:38:f2:78:8c:ca:79:4c:b4:5e:c3:99:8a:49: b7:9f:7e:e5:40:2c:6d:0e:ed:10:22:b4:c3:ab:a3: 81:0b:6b:54:50:70:4c:85:fa:ee:fa:ad:b9:15:49: 9b:28:81:52:76:8d:bb:04:50:27:f9:c7:2c:9b:7f: b9:ae:80:21:88:f4:72:d6:65:3f:bd:d7:e8:82:0a: b2:de:b4:5d:a0:3d:cd:df:77:03:ad:8f:2a:15:de: ea:9d:a1:61:07:ba:5a:fa:f6:61:ca:77:e6:72:14: d0:a7:a3:4f:cd:1b:48:52:03:d0:09:15:47:61:6d: 8a:36:b0:a6:7c:d7:51:30:c1:a6:7c:da:75:4e:27: 16:dd:16:bd:2c:89:d4:1c:38:70:d2:81:49:f3:45: 7b:c4:f2:96:06:7a:57:67:7c:7b:fb:1a:8f:6a:54: 36:f3:20:aa:6c:e8:17:0f:06:bd:07:29:24:30:08: 07:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0F:53:4F:84:DF:BE:64:02:2C:F3:C1:94:DF:D9:90:BB:FA:00:7A X509v3 Authority Key Identifier: keyid:A0:1A:0F:06:E3:10:B3:81:30:13:1D:78:82:97:0B:F1:62:DD:0D:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/oBoPBuMQs4EwEx14gpcL8WLdDWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBoPBuMQs4EwEx14gpcL8WLdDWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E55/7D32A74EC60011EC87005C7DC4F9AE02/2DC3DC54D54E11EF8C5B1651C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.64.0/22 103.38.168.0/22 Signature Algorithm: sha256WithRSAEncryption 19:e8:b3:c4:a6:60:02:ca:c4:93:52:c6:b3:17:fe:b6:69:40: 20:cc:ec:6b:f8:f4:17:1d:c2:32:50:ef:1f:b4:38:9b:be:00: dc:48:d1:ee:b4:40:20:02:14:ae:00:bc:43:23:cd:63:56:fe: f8:61:56:58:dd:81:7a:3c:e2:e8:6b:ed:5c:7e:e9:85:98:bb: cb:47:78:b1:b3:b3:a2:b8:dd:08:b7:4b:27:a6:ba:3e:48:8d: 87:fc:b5:e8:6b:e9:33:3a:fc:11:55:09:e2:d4:6a:ea:04:6b: bb:63:a3:03:27:3e:38:f1:78:d5:39:b7:f0:00:bc:ba:16:3d: 62:44:76:5c:02:8b:ce:b7:db:83:3c:50:eb:fe:47:a9:d2:b7: 04:99:ac:51:0b:82:db:86:05:ae:a0:32:f2:d1:c5:77:e6:62: 8f:b9:2b:5d:ba:3d:2b:b7:ab:86:87:f6:fa:e1:9f:36:88:56: 9a:f4:2d:0f:97:19:14:b3:11:9d:01:3e:ac:53:31:2d:f2:dc: ba:d8:bc:69:54:6f:f7:c1:f4:24:64:8f:f3:ac:76:f8:20:da: c0:cf:93:ee:ec:e0:ec:ad:9e:e4:64:22:72:a6:fd:a6:97:80: 7d:36:a2:f5:21:e0:99:0d:2d:fc:b1:94:4b:3c:8c:87:0e:d1: bf:dc:7d:ed -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBFNTUxMTAvBgNVBAUTKEEwMUEwRjA2RTMxMEIzODEzMDEzMUQ3ODgyOTcwQkYx NjJERDBENjYwHhcNMjUwMTE4MDM0MjAzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhiMjMwYS1mZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtudfNaMv68nf2cm87r4fzpOvjhICy/O9caNgGMmGT0W7uui/GIeWueq0k5Kd V2LvE2gHg7W96CC1WQDCyaR49aWOTYTqZpkaRz8Q6jjyeIzKeUy0XsOZikm3n37l QCxtDu0QIrTDq6OBC2tUUHBMhfru+q25FUmbKIFSdo27BFAn+ccsm3+5roAhiPRy 1mU/vdfoggqy3rRdoD3N33cDrY8qFd7qnaFhB7pa+vZhynfmchTQp6NPzRtIUgPQ CRVHYW2KNrCmfNdRMMGmfNp1TicW3Ra9LInUHDhw0oFJ80V7xPKWBnpXZ3x7+xqP alQ28yCqbOgXDwa9BykkMAgH/QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFC4PU0+E 375kAizzwZTf2ZC7+gB6MB8GA1UdIwQYMBaAFKAaDwbjELOBMBMdeIKXC/Fi3Q1m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEU1NS83RDMyQTc0RUM2 MDAxMUVDODcwMDVDN0RDNEY5QUUwMi9vQm9QQnVNUXM0RXdFeDE0Z3BjTDhXTGRE V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29Cb1BCdU1RczRFd0V4MTRncGNMOFdMZERXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBFNTUvN0QzMkE3NEVDNjAwMTFFQzg3MDA1QzdEQzRGOUFFMDIvMkRDM0RDNTRE NTRFMTFFRjhDNUIxNjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr80ADBAJnJqgwDQYJKoZIhvcNAQELBQADggEBABnos8Sm YALKxJNSxrMX/rZpQCDM7Gv49BcdwjJQ7x+0OJu+ANxI0e60QCACFK4AvEMjzWNW /vhhVljdgXo84uhr7Vx+6YWYu8tHeLGzs6K43Qi3Syemuj5IjYf8tehr6TM6/BFV CeLUauoEa7tjowMnPjjxeNU5t/AAvLoWPWJEdlwCi86324M8UOv+R6nStwSZrFEL gtuGBa6gMvLRxXfmYo+5K126PSu3q4aH9vrhnzaIVpr0LQ+XGRSzEZ0BPqxTMS3y 3LrYvGlUb/fB9CRkj/Osdvgg2sDPk+7s4OytnuRkInKm/aaXgH02ovUh4JkNLfyx lEs8jIcO0b/cfe0= -----END CERTIFICATE-----Generated at Sat Apr 26 07:44:30 2025 by rpki-client