$ rpki-client -vvf rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa File: E3DD6362787A11ED89732760C4F9AE02.roa (raw, json) Hash identifier: VMcYRd+8siR3JswMEyznU2Fdgu69nUJbPEZeRjRvvQ8= Subject key identifier: 51:A3:93:BA:B2:3E:C1:C1:C1:DE:41:8B:6E:92:60:5F:30:1B:66:F7 Certificate issuer: /CN=A919A824/serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Certificate serial: 0A18 Authority key identifier: 61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa Signing time: Wed 26 Mar 2025 20:00:16 +0000 ROA not before: Wed 26 Mar 2025 20:00:16 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 134780 IP address blocks: 103.149.0.0/23 maxlen: 23 103.149.0.0/24 maxlen: 24 103.149.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2584 (0xa18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A824, serialNumber=61E4017AFF4776713CFDC8205CC2FB2178462BA1 Validity Not Before: Mar 26 20:00:16 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e45cd0-f7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:9b:ac:e7:a1:2f:ff:ac:c5:e9:a0:f2:74: f6:a4:ce:c8:8d:92:4c:43:43:ba:f0:e6:73:41:e2: 74:96:a1:47:e5:09:24:0f:23:85:f8:ff:94:5a:aa: dd:8d:c4:a2:43:f1:1d:8e:34:c1:a6:a0:51:c1:b1: 98:a3:61:66:6b:c3:a8:d0:26:4a:34:a8:ed:c5:41: 09:0e:58:f8:6e:ee:37:de:66:92:0e:c1:0c:db:b5: 23:cb:af:dc:1a:68:ca:1e:31:e6:dd:0f:06:89:f6: 53:2f:d7:00:ea:a0:d4:f3:0c:1c:a5:61:01:04:42: ec:c9:c2:c5:31:48:74:30:51:a7:af:c7:23:e0:14: 8f:ee:d0:f9:b1:92:b7:1e:50:19:51:00:1d:b0:ee: 52:4c:71:48:10:ab:e1:71:c3:71:4a:26:57:ee:f8: db:fc:13:ca:62:c1:99:7f:4a:99:8d:81:8a:f5:a6: bc:c8:10:40:06:9f:24:42:04:f1:2e:d6:c0:bb:75: 4a:50:db:e8:d6:17:38:3c:e9:6b:6d:cc:73:ce:42: fb:d2:5e:37:62:b0:75:e9:14:60:d5:d4:28:d4:57: aa:90:f7:86:44:36:22:55:23:45:ee:3d:74:d5:f5: bc:cc:0b:f9:60:29:0a:3a:97:58:f2:15:e2:f6:f8: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A3:93:BA:B2:3E:C1:C1:C1:DE:41:8B:6E:92:60:5F:30:1B:66:F7 X509v3 Authority Key Identifier: keyid:61:E4:01:7A:FF:47:76:71:3C:FD:C8:20:5C:C2:FB:21:78:46:2B:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/YeQBev9HdnE8_cggXML7IXhGK6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YeQBev9HdnE8_cggXML7IXhGK6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A824/8BFF3BB46E7F11EA95EF1861C4F9AE02/E3DD6362787A11ED89732760C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.0.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:43:b8:33:cf:ac:57:06:ca:54:09:c4:3f:57:b9:14:ed:93: 3f:7a:f8:5c:54:f8:da:d1:3a:49:6f:8e:e7:89:14:fb:4c:58: 20:0d:40:56:07:ac:52:4e:43:2a:18:d6:24:dc:82:e9:10:bc: 0a:80:4d:ba:fd:34:0d:96:55:33:f5:81:f2:c7:07:7d:ab:13: cc:43:77:a9:b0:2e:7e:44:48:ac:7a:23:87:54:5e:09:c1:a4: 85:54:d9:7d:08:cd:21:1f:a2:6b:f6:5a:05:87:3e:b1:68:a3: 2e:0f:b3:a1:78:55:94:35:46:1a:33:d4:3e:b1:37:10:a1:64: 4e:97:7e:b0:0b:e6:80:98:00:92:41:b0:bf:d3:fa:cb:b9:d2: 8e:0a:4a:01:6b:c6:98:e2:49:ce:7b:81:0f:c0:20:4b:19:71: 93:08:81:b0:e7:31:93:0b:6f:79:b7:89:79:c0:7b:95:f8:9b: a6:35:71:d7:83:95:6e:87:7d:54:9e:1c:ae:80:c3:fb:82:83: a0:b7:78:fb:07:c5:58:dd:db:4c:c9:84:f3:24:da:46:6f:b2: e3:3a:63:6b:27:d3:03:19:27:20:07:c9:cd:e6:7b:6e:86:3d: 28:65:ba:06:15:80:d9:c4:80:f3:4c:90:fd:65:bc:5f:fa:5f: 34:e5:15:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICChgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4MjQxMTAvBgNVBAUTKDYxRTQwMTdBRkY0Nzc2NzEzQ0ZEQzgyMDVDQzJGQjIx Nzg0NjJCQTEwHhcNMjUwMzI2MjAwMDE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NWNkMC1mN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1+brOehL/+sxemg8nT2pM7IjZJMQ0O68OZzQeJ0lqFH5QkkDyOF+P+UWqrd jcSiQ/EdjjTBpqBRwbGYo2Fma8Oo0CZKNKjtxUEJDlj4bu433maSDsEM27Ujy6/c GmjKHjHm3Q8GifZTL9cA6qDU8wwcpWEBBELsycLFMUh0MFGnr8cj4BSP7tD5sZK3 HlAZUQAdsO5STHFIEKvhccNxSiZX7vjb/BPKYsGZf0qZjYGK9aa8yBBABp8kQgTx LtbAu3VKUNvo1hc4POlrbcxzzkL70l43YrB16RRg1dQo1FeqkPeGRDYiVSNF7j10 1fW8zAv5YCkKOpdY8hXi9vgTmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFGjk7qy PsHBwd5Bi26SYF8wG2b3MB8GA1UdIwQYMBaAFGHkAXr/R3ZxPP3IIFzC+yF4Riuh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTgyNC84QkZGM0JCNDZF N0YxMUVBOTVFRjE4NjFDNEY5QUUwMi9ZZVFCZXY5SGRuRThfY2dnWE1MN0lYaEdL NkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1llUUJldjlIZG5FOF9jZ2dYTUw3SVhoR0s2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE4MjQvOEJGRjNCQjQ2RTdGMTFFQTk1RUYxODYxQzRGOUFFMDIvRTNERDYzNjI3 ODdBMTFFRDg5NzMyNzYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlQAwDQYJKoZIhvcNAQELBQADggEBADpDuDPPrFcGylQJ xD9XuRTtkz96+FxU+NrROklvjueJFPtMWCANQFYHrFJOQyoY1iTcgukQvAqATbr9 NA2WVTP1gfLHB32rE8xDd6mwLn5ESKx6I4dUXgnBpIVU2X0IzSEfomv2WgWHPrFo oy4Ps6F4VZQ1Rhoz1D6xNxChZE6XfrAL5oCYAJJBsL/T+su50o4KSgFrxpjiSc57 gQ/AIEsZcZMIgbDnMZMLb3m3iXnAe5X4m6Y1cdeDlW6HfVSeHK6Aw/uCg6C3ePsH xVjd20zJhPMk2kZvsuM6Y2sn0wMZJyAHyc3me26GPShlugYVgNnEgPNMkP1lvF/6 XzTlFaQ= -----END CERTIFICATE-----Generated at Fri May 2 14:30:17 2025 by rpki-client