$ rpki-client -vvf rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/EB17A8C2152511ECAD055780C4F9AE02.roa File: EB17A8C2152511ECAD055780C4F9AE02.roa (raw, json) Hash identifier: 3Who1qUDm6eD8QDguJD4EaJb2KgGViSYhJ9baOpktjo= Subject key identifier: 55:65:F8:B4:D1:B0:90:22:4A:30:6A:E7:2A:38:65:3D:84:A5:D4:55 Certificate issuer: /CN=A914DF56/serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Certificate serial: 04B7 Authority key identifier: 13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/EB17A8C2152511ECAD055780C4F9AE02.roa Signing time: Thu 02 Jan 2025 23:52:57 +0000 ROA not before: Thu 02 Jan 2025 23:52:57 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 134497 IP address blocks: 103.161.60.0/23 maxlen: 23 103.161.60.0/24 maxlen: 24 103.161.61.0/24 maxlen: 24 2400:6860::/34 maxlen: 34 2400:6860:4000::/34 maxlen: 34 2400:6860:8000::/34 maxlen: 34 2400:6860:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1207 (0x4b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DF56, serialNumber=1396EA940945FC205FF2E3D1B2BE1B90D72CC5E9 Validity Not Before: Jan 2 23:52:57 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=677726d8-6d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4a:7e:9c:63:51:47:84:ba:33:86:1e:bd:f4: 11:de:92:7c:37:2e:8f:82:07:9b:5e:f6:fd:77:67: 6b:a7:a0:a6:6d:ba:0b:4e:43:ca:4f:3f:a8:13:74: da:3c:9c:24:ee:54:ee:0b:3f:c4:18:03:a6:2c:3b: 11:6b:4b:15:9f:3d:21:ea:cd:33:42:4e:60:58:32: 16:a7:69:f4:7c:52:94:5e:2b:83:a3:ad:b1:11:d6: 5b:96:be:b0:66:68:1f:c3:cd:cb:16:00:75:f4:29: 8d:a8:d7:01:82:1f:cc:03:13:ac:fa:e4:2f:c2:bd: e0:bd:0f:f7:37:7a:5e:73:37:64:e9:ab:9d:4c:7b: 09:da:c8:0c:bd:1f:41:60:06:7a:d2:f5:4e:39:af: 24:aa:a9:44:6e:2d:6c:69:82:e3:dc:b3:a0:fa:76: 0b:60:da:a1:a9:e3:b3:38:d0:ac:9a:c7:7f:c3:48: 0e:e7:2c:13:fb:f5:a9:4f:8a:09:43:87:2b:6b:bb: d3:e0:04:ef:84:82:09:59:7f:54:fd:77:85:e1:b7: 83:d3:83:c2:32:74:e1:14:4a:b4:2a:a4:b1:3c:f4: 62:1a:50:18:ff:e9:c0:b3:0e:82:ed:c2:b4:05:b7: b4:13:af:59:18:7a:02:1d:1e:dd:62:75:b3:52:96: eb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:65:F8:B4:D1:B0:90:22:4A:30:6A:E7:2A:38:65:3D:84:A5:D4:55 X509v3 Authority Key Identifier: keyid:13:96:EA:94:09:45:FC:20:5F:F2:E3:D1:B2:BE:1B:90:D7:2C:C5:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/E5bqlAlF_CBf8uPRsr4bkNcsxek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5bqlAlF_CBf8uPRsr4bkNcsxek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DF56/BD7FA038152311ECB74F2080C4F9AE02/EB17A8C2152511ECAD055780C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.60.0/23 IPv6: 2400:6860::/32 Signature Algorithm: sha256WithRSAEncryption 20:50:3d:83:93:14:24:12:cc:61:0e:2a:cc:12:01:24:e3:b3: e1:f9:e5:ca:49:17:28:8a:fc:9a:6f:3f:2a:21:b2:0f:2c:d7: 53:71:ab:b7:f2:e8:17:96:0b:61:6f:cf:54:5b:ed:65:e7:9a: a8:d2:6e:00:c9:d2:8e:28:c2:e5:41:99:f9:ea:e3:47:df:7f: dc:37:08:42:88:e0:67:64:79:78:a7:68:9e:fd:56:0a:7b:0b: 96:a2:42:a2:d1:27:78:6b:da:6e:37:57:c8:f3:36:84:3d:0b: 4b:7b:b2:b7:4f:51:5c:53:ee:44:29:0a:82:82:3a:8f:c6:80: ed:2f:ab:2b:ad:49:10:40:48:41:26:2c:08:23:7c:85:7e:04: 5b:9f:40:3a:58:87:31:09:b9:87:c2:70:ed:37:3f:8f:83:d7: 0a:00:d8:c6:1c:82:2d:ff:7d:fb:b6:2e:74:24:93:db:3f:91: cf:95:48:f2:a4:e5:9e:07:ce:2b:bd:0e:9a:ab:b4:22:18:aa: 87:6b:fc:a2:e8:13:1e:ef:ed:7e:0a:0c:1a:17:db:52:22:b9: 8e:61:db:97:be:4c:45:af:d8:8f:bc:0f:06:4a:90:33:39:ef: d3:79:b1:50:37:84:57:2a:30:5e:de:44:d5:81:c8:a8:73:e5: 53:86:ec:4b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERGNTYxMTAvBgNVBAUTKDEzOTZFQTk0MDk0NUZDMjA1RkYyRTNEMUIyQkUxQjkw RDcyQ0M1RTkwHhcNMjUwMTAyMjM1MjU3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3MjZkOC02ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkp+nGNRR4S6M4YevfQR3pJ8Ny6PggebXvb9d2drp6CmbboLTkPKTz+oE3Ta PJwk7lTuCz/EGAOmLDsRa0sVnz0h6s0zQk5gWDIWp2n0fFKUXiuDo62xEdZblr6w Zmgfw83LFgB19CmNqNcBgh/MAxOs+uQvwr3gvQ/3N3peczdk6audTHsJ2sgMvR9B YAZ60vVOOa8kqqlEbi1saYLj3LOg+nYLYNqhqeOzONCsmsd/w0gO5ywT+/WpT4oJ Q4cra7vT4ATvhIIJWX9U/XeF4beD04PCMnThFEq0KqSxPPRiGlAY/+nAsw6C7cK0 Bbe0E69ZGHoCHR7dYnWzUpbr8QIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFVl+LTR sJAiSjBq5yo4ZT2EpdRVMB8GA1UdIwQYMBaAFBOW6pQJRfwgX/Lj0bK+G5DXLMXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REY1Ni9CRDdGQTAzODE1 MjMxMUVDQjc0RjIwODBDNEY5QUUwMi9FNWJxbEFsRl9DQmY4dVBSc3I0YmtOY3N4 ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U1YnFsQWxGX0NCZjh1UFJzcjRia05jc3hlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NERGNTYvQkQ3RkEwMzgxNTIzMTFFQ0I3NEYyMDgwQzRGOUFFMDIvRUIxN0E4QzIx NTI1MTFFQ0FEMDU1NzgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnoTwwDQQCAAIwBwMFACQAaGAwDQYJKoZIhvcNAQELBQAD ggEBACBQPYOTFCQSzGEOKswSASTjs+H55cpJFyiK/JpvPyohsg8s11Nxq7fy6BeW C2Fvz1Rb7WXnmqjSbgDJ0o4owuVBmfnq40fff9w3CEKI4GdkeXinaJ79Vgp7C5ai QqLRJ3hr2m43V8jzNoQ9C0t7srdPUVxT7kQpCoKCOo/GgO0vqyutSRBASEEmLAgj fIV+BFufQDpYhzEJuYfCcO03P4+D1woA2MYcgi3/ffu2LnQkk9s/kc+VSPKk5Z4H ziu9DpqrtCIYqodr/KLoEx7v7X4KDBoX21IiuY5h25e+TEWv2I+8DwZKkDM579N5 sVA3hFcqMF7eRNWByKhz5VOG7Es= -----END CERTIFICATE-----Generated at Sat Apr 26 10:10:55 2025 by rpki-client