$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/EE4D73F2AE5611EDA021E516C4F9AE02.roa File: EE4D73F2AE5611EDA021E516C4F9AE02.roa (raw, json) Hash identifier: rHhV9X+494LZVhsBFnMPP35cu2Qc4CF3Pf3vW78mDqc= Subject key identifier: 38:72:34:9F:D0:DE:E7:EC:31:5C:63:35:9E:07:FD:C3:7B:63:8C:69 Certificate issuer: /CN=A9145E67/serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Certificate serial: 0183 Authority key identifier: 98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/EE4D73F2AE5611EDA021E516C4F9AE02.roa Signing time: Thu 27 Feb 2025 04:56:12 +0000 ROA not before: Thu 27 Feb 2025 04:56:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 7545 IP address blocks: 203.22.205.0/24 maxlen: 24 203.30.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E67, serialNumber=9843C89277A812ABD7FADAB52D1D61D278BA2B19 Validity Not Before: Feb 27 04:56:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67bff06c-e109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a8:75:ee:40:96:ff:73:13:0e:15:83:39:98: 1e:13:f9:a2:df:55:a7:00:3a:2a:e5:9c:45:24:c1: 5f:47:0b:f5:1a:4a:2b:c9:ee:f4:09:97:29:04:d3: f6:a1:cd:cf:0c:9f:9f:64:b6:17:45:4d:bf:df:6e: f7:5d:6b:5c:eb:f2:07:54:d2:cd:81:79:01:6d:40: 50:46:24:08:73:f6:d0:5a:81:de:23:06:89:35:bb: 44:1a:ba:79:22:c2:eb:12:8d:67:71:55:3c:9d:56: 25:d4:76:af:4d:cd:48:b8:d7:36:bd:bc:3e:e9:ee: 0c:af:96:d1:34:71:2d:1a:8c:31:08:4d:8f:1f:24: 2c:e3:59:dd:9c:0b:6a:e3:09:80:f5:fe:57:7c:7d: 1b:c9:b6:9c:31:91:be:61:6f:ef:52:4e:06:f9:6d: 55:f0:52:aa:2c:1c:69:4c:9b:6d:4c:cd:42:ab:70: b8:45:b3:31:6b:ba:40:79:75:cd:75:12:f6:80:49: 23:ea:e7:e3:bb:4d:c7:96:84:d4:88:d5:b9:eb:89: 7a:d7:a0:4d:3a:60:67:a4:3d:7c:88:02:31:8e:9e: 86:15:72:d9:c4:37:d9:cb:3b:0b:6e:fa:cf:2a:10: 9e:7c:f8:1e:e8:a8:52:e0:01:b8:21:45:6b:13:9b: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:72:34:9F:D0:DE:E7:EC:31:5C:63:35:9E:07:FD:C3:7B:63:8C:69 X509v3 Authority Key Identifier: keyid:98:43:C8:92:77:A8:12:AB:D7:FA:DA:B5:2D:1D:61:D2:78:BA:2B:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/mEPIkneoEqvX-tq1LR1h0ni6Kxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mEPIkneoEqvX-tq1LR1h0ni6Kxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E67/22C14528AE5211ED9C5DA310C4F9AE02/EE4D73F2AE5611EDA021E516C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.22.205.0/24 203.30.210.0/24 Signature Algorithm: sha256WithRSAEncryption ca:b7:54:d0:94:97:51:85:00:08:65:7f:be:50:62:ca:43:18: e2:5a:c7:08:4a:be:24:92:85:d7:a1:a9:7b:90:df:7b:09:0e: 48:c3:2d:eb:fa:02:7f:f2:bd:cb:c0:cf:d1:47:f9:fe:c2:4e: 74:b4:00:b5:5d:da:c1:18:6e:31:21:e1:b3:55:e0:df:50:3f: a7:1a:b6:8c:f3:a9:64:27:06:34:9e:5f:2b:ac:e3:af:60:34: 44:7b:49:35:e8:8d:7d:9c:c7:76:32:23:22:1a:27:68:9d:62: 5c:a0:77:3b:e6:ac:28:66:00:78:2c:d1:ea:2d:47:a1:aa:d0: 0f:d8:24:b6:7c:b9:5d:d6:a7:c1:ed:e6:e3:84:4c:73:f5:6f: 46:1d:34:d6:3c:fc:2f:3f:0b:cb:1c:9d:91:09:2f:ff:2a:fa: 04:b5:3a:6c:6c:cd:cf:4a:b6:17:a0:d1:6b:f7:11:5e:88:ec: 8b:80:91:50:af:7a:92:7e:1c:b7:d7:25:bb:14:a9:7a:6c:8c: 2a:ec:ab:06:56:1b:be:9c:d6:1f:b5:b8:3c:dc:d7:c8:ec:d7: fa:28:4c:41:0f:0f:fe:e2:4c:7d:71:c9:37:da:e9:ef:e2:b2: 1f:de:bc:26:63:cb:e8:8c:5b:b6:d3:ea:63:49:e8:01:a6:c8: 6b:64:21:54 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFNjcxMTAvBgNVBAUTKDk4NDNDODkyNzdBODEyQUJEN0ZBREFCNTJEMUQ2MUQy NzhCQTJCMTkwHhcNMjUwMjI3MDQ1NjEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JmZjA2Yy1lMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26h17kCW/3MTDhWDOZgeE/mi31WnADoq5ZxFJMFfRwv1Gkorye70CZcpBNP2 oc3PDJ+fZLYXRU2/3273XWtc6/IHVNLNgXkBbUBQRiQIc/bQWoHeIwaJNbtEGrp5 IsLrEo1ncVU8nVYl1HavTc1IuNc2vbw+6e4Mr5bRNHEtGowxCE2PHyQs41ndnAtq 4wmA9f5XfH0bybacMZG+YW/vUk4G+W1V8FKqLBxpTJttTM1Cq3C4RbMxa7pAeXXN dRL2gEkj6ufju03HloTUiNW564l616BNOmBnpD18iAIxjp6GFXLZxDfZyzsLbvrP KhCefPge6KhS4AG4IUVrE5vRNwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDhyNJ/Q 3ufsMVxjNZ4H/cN7Y4xpMB8GA1UdIwQYMBaAFJhDyJJ3qBKr1/ratS0dYdJ4uisZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUU2Ny8yMkMxNDUyOEFF NTIxMUVEOUM1REEzMTBDNEY5QUUwMi9tRVBJa25lb0VxdlgtdHExTFIxaDBuaTZL eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21FUElrbmVvRXF2WC10cTFMUjFoMG5pNkt4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDVFNjcvMjJDMTQ1MjhBRTUyMTFFRDlDNURBMzEwQzRGOUFFMDIvRUU0RDczRjJB RTU2MTFFREEwMjFFNTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADLFs0DBADLHtIwDQYJKoZIhvcNAQELBQADggEBAMq3VNCU l1GFAAhlf75QYspDGOJaxwhKviSShdehqXuQ33sJDkjDLev6An/yvcvAz9FH+f7C TnS0ALVd2sEYbjEh4bNV4N9QP6catozzqWQnBjSeXyus469gNER7STXojX2cx3Yy IyIaJ2idYlygdzvmrChmAHgs0eotR6Gq0A/YJLZ8uV3Wp8Ht5uOETHP1b0YdNNY8 /C8/C8scnZEJL/8q+gS1Omxszc9Ktheg0Wv3EV6I7IuAkVCvepJ+HLfXJbsUqXps jCrsqwZWG76c1h+1uDzc18js1/ooTEEPD/7iTH1xyTfa6e/ish/evCZjy+iMW7bT 6mNJ6AGmyGtkIVQ= -----END CERTIFICATE-----Generated at Sat Apr 26 16:55:24 2025 by rpki-client