$ rpki-client -vvf rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/F7C7803489F311EE9AD0D13CC4F9AE02.roa File: F7C7803489F311EE9AD0D13CC4F9AE02.roa (raw, json) Hash identifier: OYcqPPoNzZ0mU98SLaUwZKPqGtyytHy4I1e+KVz3rEQ= Subject key identifier: 93:41:5F:AB:50:14:BF:BC:59:E0:80:1E:1B:7A:97:D9:22:4C:90:AA Certificate issuer: /CN=A9174F24/serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Certificate serial: 0119 Authority key identifier: 94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/F7C7803489F311EE9AD0D13CC4F9AE02.roa Signing time: Mon 05 May 2025 04:11:14 +0000 ROA not before: Mon 05 May 2025 04:11:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136449 IP address blocks: 103.88.156.0/24 maxlen: 24 103.88.157.0/24 maxlen: 24 103.88.158.0/24 maxlen: 24 103.88.159.0/24 maxlen: 24 116.204.224.0/24 maxlen: 24 116.204.225.0/24 maxlen: 24 116.204.226.0/24 maxlen: 24 116.204.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174F24, serialNumber=94C41F1AA60ED650E0FD7A7A8D237A2D46B1B1F8 Validity Not Before: May 5 04:11:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68183a61-f52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:72:fb:a0:b2:bb:0b:d7:5e:aa:20:7c:b4:da: 63:90:37:f2:ac:e3:28:65:f6:74:bb:e1:af:9a:41: ad:e9:ce:39:af:b4:ec:5e:2a:ea:37:e2:bb:59:c2: c6:71:84:d5:4a:4d:88:97:cb:18:1d:7e:97:7d:df: ec:c3:55:63:1d:c1:44:52:f4:1c:34:55:16:e3:0a: fe:1a:f1:2c:a9:4b:de:4e:fe:30:9e:7d:c4:c3:99: c3:81:73:d5:c6:db:64:75:37:5d:f4:87:2e:d5:e0: bf:da:26:6c:f6:08:a0:a0:ae:35:e4:0c:6e:0a:05: a4:c7:45:89:7b:66:e0:1d:08:1c:79:6d:79:be:ed: ff:08:78:70:0d:a0:67:72:eb:30:b8:4c:82:42:bc: 8c:29:56:4a:46:8d:ac:65:ee:12:b6:2d:01:34:1f: ba:b8:38:12:1b:3b:dd:3f:04:ff:fa:b0:e9:72:7b: ae:57:d7:ed:db:cf:86:23:e8:2e:de:06:53:b7:f2: e7:f6:79:02:22:79:a7:0c:96:0b:c3:2c:8a:71:fc: 71:25:90:d3:a8:57:fb:7b:11:a9:d8:7a:a6:6d:12: c1:dc:67:4e:95:8f:9f:10:6c:58:9f:2e:2a:bc:31: cc:1a:f2:bb:61:51:d5:96:9d:f1:24:ae:1c:de:cf: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:41:5F:AB:50:14:BF:BC:59:E0:80:1E:1B:7A:97:D9:22:4C:90:AA X509v3 Authority Key Identifier: keyid:94:C4:1F:1A:A6:0E:D6:50:E0:FD:7A:7A:8D:23:7A:2D:46:B1:B1:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMQfGqYO1lDg_Xp6jSN6LUaxsfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174F24/6FD7EBF089F311EEBF7FC41FC4F9AE02/F7C7803489F311EE9AD0D13CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.156.0/22 116.204.224.0/22 Signature Algorithm: sha256WithRSAEncryption 30:91:2d:f5:ea:77:ac:a7:31:90:42:06:24:25:41:2c:eb:74: 94:22:2e:e6:00:22:01:4e:68:d5:e8:85:f4:ae:3f:0f:da:f0: 08:d4:b3:7f:d1:cb:c2:dc:47:d5:2d:d5:a4:2b:65:2c:f2:20: 4e:11:b5:92:b1:f6:fd:bb:82:40:28:e1:48:01:35:25:0a:0b: fe:32:3d:ff:db:4d:27:dd:3e:9b:af:71:79:a8:f4:e8:3c:70: 09:35:33:af:b4:44:2b:9c:30:ca:1e:5c:62:d0:f6:d2:b6:5b: 9f:b8:6e:1e:7f:6e:30:d5:ce:b7:b0:bd:3c:af:e8:ec:fc:eb: d2:93:65:8d:b7:6e:03:2f:d2:9d:c8:89:09:e7:eb:9d:0c:a6: 35:7a:e3:55:e4:5a:dc:64:ef:c8:01:c2:1c:1f:4c:7c:94:88: a7:17:50:95:78:58:0f:30:d5:41:f2:91:9d:b8:3f:3f:74:d7: c1:82:74:5a:69:7f:fd:5f:94:8e:b6:96:8f:f7:b4:f7:dc:8d: 7c:37:47:b3:10:61:fb:12:79:90:56:49:0e:78:f8:56:fc:0d: 2d:89:d4:47:a2:60:75:a3:df:26:3a:20:7e:e6:cd:e5:d1:d1: d8:69:77:4a:3e:6a:48:ff:8f:1d:58:51:6b:1c:5f:56:7a:7f: 45:5d:be:f3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRGMjQxMTAvBgNVBAUTKDk0QzQxRjFBQTYwRUQ2NTBFMEZEN0E3QThEMjM3QTJE NDZCMUIxRjgwHhcNMjUwNTA1MDQxMTE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4M2E2MS1mNTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3L7oLK7C9deqiB8tNpjkDfyrOMoZfZ0u+GvmkGt6c45r7TsXirqN+K7WcLG cYTVSk2Il8sYHX6Xfd/sw1VjHcFEUvQcNFUW4wr+GvEsqUveTv4wnn3Ew5nDgXPV xttkdTdd9Icu1eC/2iZs9gigoK415AxuCgWkx0WJe2bgHQgceW15vu3/CHhwDaBn cuswuEyCQryMKVZKRo2sZe4Sti0BNB+6uDgSGzvdPwT/+rDpcnuuV9ft28+GI+gu 3gZTt/Ln9nkCInmnDJYLwyyKcfxxJZDTqFf7exGp2HqmbRLB3GdOlY+fEGxYny4q vDHMGvK7YVHVlp3xJK4c3s+QZwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJNBX6tQ FL+8WeCAHht6l9kiTJCqMB8GA1UdIwQYMBaAFJTEHxqmDtZQ4P16eo0jei1GsbH4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEYyNC82RkQ3RUJGMDg5 RjMxMUVFQkY3RkM0MUZDNEY5QUUwMi9sTVFmR3FZTzFsRGdfWHA2alNONkxVYXhz ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNUWZHcVlPMWxEZ19YcDZqU042TFVheHNmZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRGMjQvNkZEN0VCRjA4OUYzMTFFRUJGN0ZDNDFGQzRGOUFFMDIvRjdDNzgwMzQ4 OUYzMTFFRTlBRDBEMTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnWJwDBAJ0zOAwDQYJKoZIhvcNAQELBQADggEBADCRLfXq d6ynMZBCBiQlQSzrdJQiLuYAIgFOaNXohfSuPw/a8AjUs3/Ry8LcR9Ut1aQrZSzy IE4RtZKx9v27gkAo4UgBNSUKC/4yPf/bTSfdPpuvcXmo9Og8cAk1M6+0RCucMMoe XGLQ9tK2W5+4bh5/bjDVzrewvTyv6Oz869KTZY23bgMv0p3IiQnn650MpjV641Xk Wtxk78gBwhwfTHyUiKcXUJV4WA8w1UHykZ24Pz9018GCdFppf/1flI62lo/3tPfc jXw3R7MQYfsSeZBWSQ54+Fb8DS2J1EeiYHWj3yY6IH7mzeXR0dhpd0o+akj/jx1Y UWscX1Z6f0VdvvM= -----END CERTIFICATE-----Generated at Mon May 12 04:13:13 2025 by rpki-client