$ rpki-client -vvf rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa File: F148BE6E511611EE85A7E634C4F9AE02.roa (raw, json) Hash identifier: 9hsbmWbhyRE5mUOuFHl04Y4Uut8mlBoehod5tJbgja0= Subject key identifier: 81:8A:76:9B:26:9F:75:4E:92:68:21:F5:95:6A:29:E7:30:D1:BA:77 Certificate issuer: /CN=A919CF42/serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Certificate serial: 151D Authority key identifier: 3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa Signing time: Thu 24 Apr 2025 17:15:19 +0000 ROA not before: Thu 24 Apr 2025 17:15:19 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137557 IP address blocks: 103.113.44.0/22 maxlen: 22 103.113.44.0/24 maxlen: 24 2402:b740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5405 (0x151d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CF42, serialNumber=3F556BC0251033BCE572FC6C8AB760ACC4970593 Validity Not Before: Apr 24 17:15:19 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680a71a7-5fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4b:ae:24:4b:60:ba:66:14:78:18:f5:db:5c: ea:90:60:02:68:f0:76:3b:9e:70:e9:e1:39:2b:8b: ca:d3:9b:33:47:27:67:75:db:8d:f9:cb:7a:a4:9f: 68:71:08:b8:1e:f5:e5:85:78:ae:f7:de:11:be:52: d2:f7:f7:82:e4:c9:b1:8f:1f:ad:23:22:ef:6f:5d: 9c:30:69:9e:4d:b9:15:d3:65:9a:63:e0:97:76:4b: 6f:ef:7b:54:d3:7b:6e:85:04:14:ee:cb:5e:dc:18: 9d:d0:38:4c:dc:38:fa:17:c5:d7:af:fc:ac:fd:c9: ef:1f:f7:38:ad:8e:bc:5c:1d:ef:bd:9a:17:11:ed: 4c:e4:1d:f9:d0:6b:32:88:3a:a3:27:fc:34:87:6a: de:a9:34:e0:80:1a:7c:b3:56:5d:3c:4a:8c:eb:60: 4e:80:40:bc:46:b5:64:91:79:78:b0:ec:fc:16:95: 6a:ac:65:de:6e:87:a2:0a:11:0b:43:3e:cb:e3:37: d8:68:03:9b:9b:78:ad:2a:b8:64:5a:2d:c1:36:e9: f3:ec:60:ad:37:83:c8:a2:b6:c7:ee:d1:85:06:94: 46:ce:07:8f:d9:03:1c:01:da:bf:05:9a:17:fa:2f: 6b:dd:9e:bf:56:48:bc:8b:bf:49:36:56:e7:75:60: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:76:9B:26:9F:75:4E:92:68:21:F5:95:6A:29:E7:30:D1:BA:77 X509v3 Authority Key Identifier: keyid:3F:55:6B:C0:25:10:33:BC:E5:72:FC:6C:8A:B7:60:AC:C4:97:05:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/P1VrwCUQM7zlcvxsirdgrMSXBZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P1VrwCUQM7zlcvxsirdgrMSXBZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CF42/7A6ABFCC4CC611E8BEF03D75C4F9AE02/F148BE6E511611EE85A7E634C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.113.44.0/22 IPv6: 2402:b740::/32 Signature Algorithm: sha256WithRSAEncryption a9:99:48:97:7e:59:29:9b:40:45:ea:06:c2:bb:39:71:85:be: 6b:58:b0:bb:c9:bc:5e:b5:9c:60:73:7a:96:d8:ba:00:43:d8: c3:90:0a:e4:76:cc:da:60:1a:5d:d3:bc:76:fd:09:f3:b0:cd: f8:fc:48:3c:8e:09:a5:b8:c0:e5:24:41:bb:c9:e7:28:d4:4d: d6:93:6c:c3:90:ba:85:a3:fc:25:fd:4e:0c:87:13:a2:2b:9d: 1d:17:28:60:d4:4b:50:9a:7b:95:29:81:c5:06:21:37:3e:81: e1:fb:f0:f6:d3:4b:cc:5a:a0:e4:66:b0:a8:10:87:f5:48:b0: 75:90:0c:a8:d0:8c:07:86:2e:6b:55:e7:c9:15:85:1d:76:65: fc:32:c5:8f:cd:c9:37:ee:21:9d:40:8b:6f:41:1b:e2:d8:e0: 95:43:83:60:31:d4:12:c0:bc:1e:82:a2:6c:7d:37:af:16:99: 57:21:d6:35:da:28:eb:ae:81:e8:68:ba:15:47:59:41:3c:08: c1:6a:5c:a5:65:ef:c2:08:e8:06:0e:7c:ad:26:22:c4:5c:b3: ae:c6:0e:4b:ee:d8:ba:4d:93:07:b5:2a:28:d1:3a:74:ef:ce: c9:b7:4c:41:73:e4:c4:24:c8:fa:03:81:a6:d0:32:1e:93:1b: 64:3b:9d:5d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICFR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNGNDIxMTAvBgNVBAUTKDNGNTU2QkMwMjUxMDMzQkNFNTcyRkM2QzhBQjc2MEFD QzQ5NzA1OTMwHhcNMjUwNDI0MTcxNTE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhNzFhNy01ZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokuuJEtgumYUeBj121zqkGACaPB2O55w6eE5K4vK05szRydndduN+ct6pJ9o cQi4HvXlhXiu994RvlLS9/eC5Mmxjx+tIyLvb12cMGmeTbkV02WaY+CXdktv73tU 03tuhQQU7ste3Bid0DhM3Dj6F8XXr/ys/cnvH/c4rY68XB3vvZoXEe1M5B350Gsy iDqjJ/w0h2reqTTggBp8s1ZdPEqM62BOgEC8RrVkkXl4sOz8FpVqrGXeboeiChEL Qz7L4zfYaAObm3itKrhkWi3BNunz7GCtN4PIorbH7tGFBpRGzgeP2QMcAdq/BZoX +i9r3Z6/Vki8i79JNlbndWCsJQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFIGKdpsm n3VOkmgh9ZVqKecw0bp3MB8GA1UdIwQYMBaAFD9Va8AlEDO85XL8bIq3YKzElwWT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0Y0Mi83QTZBQkZDQzRD QzYxMUU4QkVGMDNENzVDNEY5QUUwMi9QMVZyd0NVUU03emxjdnhzaXJkZ3JNU1hC Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AxVnJ3Q1VRTTd6bGN2eHNpcmRnck1TWEJaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUNGNDIvN0E2QUJGQ0M0Q0M2MTFFOEJFRjAzRDc1QzRGOUFFMDIvRjE0OEJFNkU1 MTE2MTFFRTg1QTdFNjM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJncSwwDQQCAAIwBwMFACQCt0AwDQYJKoZIhvcNAQELBQAD ggEBAKmZSJd+WSmbQEXqBsK7OXGFvmtYsLvJvF61nGBzepbYugBD2MOQCuR2zNpg Gl3TvHb9CfOwzfj8SDyOCaW4wOUkQbvJ5yjUTdaTbMOQuoWj/CX9TgyHE6IrnR0X KGDUS1Cae5UpgcUGITc+geH78PbTS8xaoORmsKgQh/VIsHWQDKjQjAeGLmtV58kV hR12ZfwyxY/NyTfuIZ1Ai29BG+LY4JVDg2Ax1BLAvB6Comx9N68WmVch1jXaKOuu gehouhVHWUE8CMFqXKVl78II6AYOfK0mIsRcs67GDkvu2LpNkwe1KijROnTvzsm3 TEFz5MQkyPoDgabQMh6TG2Q7nV0= -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:14 2025 by rpki-client