$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa File: E1C173F01EFD11EE88E45C83C4F9AE02.roa (raw, json) Hash identifier: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g= Subject key identifier: 50:9E:3E:34:F8:18:31:D7:32:4E:EC:2A:02:88:46:2A:46:10:44:0B Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 0165 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa Signing time: Fri 03 Jan 2025 02:46:25 +0000 ROA not before: Fri 03 Jan 2025 02:46:25 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9328 IP address blocks: 202.0.108.0/24 maxlen: 24 202.2.0.0/22 maxlen: 22 203.7.130.0/23 maxlen: 23 203.26.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Jan 3 02:46:25 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67774f80-df54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:9d:af:a2:be:7b:92:41:16:22:77:33:d9:5e: 6e:63:e1:75:7a:38:c5:a6:15:d9:b5:b7:84:c4:38: 68:3d:87:fb:c6:a9:0b:35:41:91:a1:bb:fa:dd:22: d5:e8:f2:c7:ef:72:23:3e:ef:fd:d6:c5:e3:1e:df: 24:e1:8b:d8:5e:b4:4a:a0:bc:ce:ff:61:38:d6:aa: 22:c7:df:30:34:8d:15:96:58:ed:58:44:a2:94:c2: 87:1b:8f:26:c6:2a:0f:a0:83:9c:12:3e:65:3d:b0: d8:e2:ed:00:ef:bb:b1:f1:63:5e:fa:c3:3b:d0:b6: 94:4d:eb:d7:a9:9c:6b:13:db:1f:bf:9a:79:61:bb: 32:4b:d2:17:1a:8b:fb:1c:f5:a6:62:87:f0:04:04: d0:ef:60:68:9f:22:4b:d4:15:14:98:52:25:be:d7: 14:38:7f:0f:9f:ff:0e:16:58:9c:89:72:9e:2a:66: 26:24:69:74:ba:b7:34:cd:6e:c2:7b:bb:d7:21:97: 8b:bc:7d:f7:a1:90:b6:7b:e7:b9:9d:0e:8c:bc:a6: 04:c8:3f:58:0a:f6:04:12:13:74:53:d3:71:14:a2: 4e:ad:9b:db:01:01:3f:92:64:74:6f:18:87:a5:d5: 92:92:e5:7f:28:5a:25:2f:bc:91:db:b4:af:33:dc: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9E:3E:34:F8:18:31:D7:32:4E:EC:2A:02:88:46:2A:46:10:44:0B X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/E1C173F01EFD11EE88E45C83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.108.0/24 202.2.0.0/22 203.7.130.0/23 203.26.100.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:77:c4:da:83:bc:6c:c6:50:b3:18:72:ab:bd:7b:0b:1b:90: 4f:71:77:32:37:6f:3f:66:b6:02:0b:0c:a5:10:8c:15:f0:3a: 9b:cc:65:d3:95:80:af:07:fe:c4:ec:5b:a5:f6:df:4e:d7:26: bd:a8:8e:ea:44:3c:84:12:ef:b8:aa:86:d9:12:a2:aa:f2:4c: 9f:ea:f8:04:7f:56:5b:af:90:aa:5a:63:38:98:47:60:a3:88: ca:11:07:56:1b:30:a4:5a:ac:03:0d:e1:0d:f2:b5:98:39:28: 44:8e:00:db:a2:e2:66:17:66:87:ef:bb:51:f0:a6:79:01:d8: 76:bb:b3:b1:8f:ca:ab:af:7d:2a:08:9b:7f:07:b7:2c:27:96: fd:7e:0c:12:5e:f0:96:91:97:f7:c8:04:9f:5d:1d:68:b5:a4: 4b:b0:ca:6e:1b:6d:94:3e:b3:9c:44:c9:ba:4d:42:89:3e:bf: 02:6d:f1:0f:f1:00:43:42:c9:6d:cb:6c:38:da:c9:10:47:40: f8:53:a4:73:a0:af:5d:65:c0:80:32:53:6f:94:1b:7a:02:f9: ae:c2:87:71:28:b9:cb:1c:95:e4:36:67:0c:96:88:96:18:b2: e8:0e:eb:15:e6:e9:ca:b3:3a:f5:a8:a9:2e:aa:2c:de:48:e4: 5a:98:a8:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwMTAzMDI0NjI1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NGY4MC1kZjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8p2vor57kkEWIncz2V5uY+F1ejjFphXZtbeExDhoPYf7xqkLNUGRobv63SLV 6PLH73IjPu/91sXjHt8k4YvYXrRKoLzO/2E41qoix98wNI0VlljtWESilMKHG48m xioPoIOcEj5lPbDY4u0A77ux8WNe+sM70LaUTevXqZxrE9sfv5p5YbsyS9IXGov7 HPWmYofwBATQ72BonyJL1BUUmFIlvtcUOH8Pn/8OFliciXKeKmYmJGl0urc0zW7C e7vXIZeLvH33oZC2e+e5nQ6MvKYEyD9YCvYEEhN0U9NxFKJOrZvbAQE/kmR0bxiH pdWSkuV/KFolL7yR27SvM9wI1QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFCePjT4 GDHXMk7sKgKIRipGEEQLMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkREMTUvQzc2MUEwQUFDQzUyMTFFREE4MjkxRDEwQzRGOUFFMDIvRTFDMTczRjAx RUZEMTFFRTg4RTQ1QzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBADKAGwDBALKAgADBAHLB4IDBADLGmQwDQYJKoZIhvcNAQEL BQADggEBACt3xNqDvGzGULMYcqu9ewsbkE9xdzI3bz9mtgILDKUQjBXwOpvMZdOV gK8H/sTsW6X2307XJr2ojupEPIQS77iqhtkSoqryTJ/q+AR/VluvkKpaYziYR2Cj iMoRB1YbMKRarAMN4Q3ytZg5KESOANui4mYXZofvu1HwpnkB2Ha7s7GPyquvfSoI m38Htywnlv1+DBJe8JaRl/fIBJ9dHWi1pEuwym4bbZQ+s5xEybpNQok+vwJt8Q/x AENCyW3LbDjayRBHQPhTpHOgr11lwIAyU2+UG3oC+a7Ch3EoucscleQ2ZwyWiJYY sugO6xXm6cqzOvWoqS6qLN5I5FqYqMw= -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:12 2025 by rpki-client