$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa File: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (raw, json) Hash identifier: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU= Subject key identifier: 03:CF:33:20:1A:09:33:49:8C:73:EF:D0:05:00:7F:2B:0C:60:30:6A Certificate issuer: /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Certificate serial: C4 Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa Signing time: Sat 05 Apr 2025 05:40:35 +0000 ROA not before: Sat 05 Apr 2025 05:40:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152661 IP address blocks: 203.28.104.0/23 maxlen: 23 203.28.104.0/24 maxlen: 24 203.28.105.0/24 maxlen: 24 2401:8d60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 05:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E Validity Not Before: Apr 5 05:40:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f0c253-6288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d4:b5:2e:d3:24:41:05:dc:8e:fc:3f:61:6a: 9e:ae:69:e8:f3:6f:39:36:0f:b7:e2:a1:24:22:ec: 01:48:0f:76:a9:0c:47:59:ca:6f:a1:d2:7d:75:8b: 73:37:5c:e0:88:b1:b9:49:f0:9b:5b:9e:6d:56:c0: 3d:5a:a2:0e:d4:dd:15:05:85:f9:fe:ab:f2:d0:7f: 34:66:3b:a3:0b:30:eb:61:5a:a2:0b:05:2d:1b:41: 6b:bd:1a:fb:8d:fa:fc:b2:2e:30:54:37:d5:d7:67: ad:7c:c6:af:05:f7:97:bb:da:01:60:63:78:37:02: 58:d3:55:35:81:9b:57:87:fa:bf:eb:ff:56:96:0c: 27:6e:4b:3d:3b:1e:87:b1:1d:f9:40:78:75:d9:d9: c2:1c:c5:4d:9d:f9:b2:f3:8a:f6:87:1e:37:0f:f5: d3:d2:49:63:c6:54:20:f6:75:22:22:eb:db:a3:cd: 94:49:8a:14:1e:da:68:3f:33:b4:92:05:68:b6:d5: 53:2e:8c:78:cb:22:93:87:97:a4:4f:a5:2d:77:e2: 63:e8:6e:ef:3d:17:90:63:01:29:db:06:44:c2:1f: e8:ac:30:d4:af:43:a0:cd:e2:5b:b4:ad:5f:2a:1b: 96:43:95:d4:33:27:59:f2:ce:7f:e7:80:bf:8d:dc: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:33:20:1A:09:33:49:8C:73:EF:D0:05:00:7F:2B:0C:60:30:6A X509v3 Authority Key Identifier: keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.28.104.0/23 IPv6: 2401:8d60::/32 Signature Algorithm: sha256WithRSAEncryption 2c:fe:2c:40:e9:36:f4:e4:c0:4d:a7:2a:09:7e:d1:66:61:c5: 85:6e:c4:ec:eb:29:ad:96:18:bd:d9:e8:a8:66:b0:d3:36:fc: 62:4f:d8:09:79:ad:4a:db:5b:dc:ac:36:1d:bc:b1:e9:a9:b9: c5:69:90:22:c8:9f:de:26:83:b1:00:e5:37:00:97:91:56:71: 25:ce:bf:2d:44:2e:83:7e:51:34:9d:fe:1d:53:a4:f2:55:ee: e1:44:55:0b:01:df:4e:3a:a1:2d:2b:24:6b:e9:cf:16:cd:ef: b9:46:73:02:6c:29:ab:ea:dd:f9:41:51:ff:d2:4d:0f:c0:13: 8b:3a:0b:ce:94:44:bf:89:3e:70:db:bb:60:e3:08:e9:a0:77: b2:d7:bb:7f:fb:2b:d9:47:7f:db:4f:d3:63:93:ef:f5:eb:53: a7:3c:88:3a:0b:99:94:45:83:26:3e:7b:db:3a:98:6a:a8:99: db:34:67:3c:8b:e4:ca:f4:dc:15:ac:a5:2e:80:b3:47:b9:da: 70:2e:63:be:99:44:d3:3b:10:f4:f5:84:3d:0a:c2:80:44:ef: 70:df:88:90:e4:5b:3b:93:98:d9:c3:98:e5:79:36:a8:03:51: 3f:22:34:f5:38:5b:36:8c:48:d9:1d:14:26:48:15:8d:40:c6: 22:1b:f0:01 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0VGMUQxMTAvBgNVBAUTKDhGRTVBN0M5OThGQjhCNzhBQzMzMUVBRTgzQkMxNzg2 MjNFRTNDOUUwHhcNMjUwNDA1MDU0MDM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwYzI1My02Mjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19S1LtMkQQXcjvw/YWqermno8285Ng+34qEkIuwBSA92qQxHWcpvodJ9dYtz N1zgiLG5SfCbW55tVsA9WqIO1N0VBYX5/qvy0H80ZjujCzDrYVqiCwUtG0FrvRr7 jfr8si4wVDfV12etfMavBfeXu9oBYGN4NwJY01U1gZtXh/q/6/9Wlgwnbks9Ox6H sR35QHh12dnCHMVNnfmy84r2hx43D/XT0kljxlQg9nUiIuvbo82USYoUHtpoPzO0 kgVottVTLox4yyKTh5ekT6Utd+Jj6G7vPReQYwEp2wZEwh/orDDUr0OgzeJbtK1f KhuWQ5XUMydZ8s5/54C/jdx8rQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAPPMyAa CTNJjHPv0AUAfysMYDBqMB8GA1UdIwQYMBaAFI/lp8mY+4t4rDMeroO8F4Yj7jye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUYxRC9CQTlDRDhBQ0VD RTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kzaXNNeDZ1Zzd3WGhpUHVQ SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0VGMUQvQkE5Q0Q4QUNFQ0U2MTFFRUFBRTlFODFFQzRGOUFFMDIvMUFFN0VENDZF Q0U3MTFFRUIxMkY5QTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAHLHGgwDQQCAAIwBwMFACQBjWAwDQYJKoZIhvcNAQELBQAD ggEBACz+LEDpNvTkwE2nKgl+0WZhxYVuxOzrKa2WGL3Z6KhmsNM2/GJP2Al5rUrb W9ysNh28sempucVpkCLIn94mg7EA5TcAl5FWcSXOvy1ELoN+UTSd/h1TpPJV7uFE VQsB3046oS0rJGvpzxbN77lGcwJsKavq3flBUf/STQ/AE4s6C86URL+JPnDbu2Dj COmgd7LXu3/7K9lHf9tP02OT7/XrU6c8iDoLmZRFgyY+e9s6mGqomds0ZzyL5Mr0 3BWspS6As0e52nAuY76ZRNM7EPT1hD0KwoBE73DfiJDkWzuTmNnDmOV5NqgDUT8i NPU4WzaMSNkdFCZIFY1AxiIb8AE= -----END CERTIFICATE-----Generated at Tue Apr 29 09:19:52 2025 by rpki-client