$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa File: EC065A52C28D11EBBCABCA6CC4F9AE02.roa (raw, json) Hash identifier: uPpnoQZGZKxbY1tDf1IppgOlALrQMUGFd/gQhZLvnlg= Subject key identifier: 1A:9C:0A:9A:06:10:BF:60:47:00:13:D3:9B:0F:27:92:6E:04:EB:84 Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 16BB Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa Signing time: Sun 22 Dec 2024 16:54:13 +0000 ROA not before: Sun 22 Dec 2024 16:54:13 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 56207 IP address blocks: 139.135.192.0/22 maxlen: 22 139.135.196.0/22 maxlen: 22 139.135.200.0/22 maxlen: 22 139.135.204.0/22 maxlen: 22 139.135.208.0/22 maxlen: 22 139.135.212.0/22 maxlen: 22 139.135.216.0/22 maxlen: 22 139.135.220.0/22 maxlen: 22 139.135.224.0/22 maxlen: 22 139.135.228.0/22 maxlen: 22 139.135.232.0/22 maxlen: 22 139.135.236.0/22 maxlen: 22 139.135.240.0/22 maxlen: 22 139.135.244.0/22 maxlen: 22 139.135.248.0/22 maxlen: 22 139.135.252.0/22 maxlen: 22 139.135.252.0/23 maxlen: 23 139.135.254.0/24 maxlen: 24 139.135.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5819 (0x16bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B, serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Dec 22 16:54:13 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67684435-0042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:89:31:ed:82:b3:7c:23:3e:74:a4:2d:5e:e5: 93:7b:64:05:e0:38:ea:18:57:f0:ba:66:99:9d:2a: 67:48:e7:8b:be:84:9f:f6:74:f4:59:8e:6b:38:96: 43:04:44:53:cc:57:86:83:6c:fa:61:fd:33:b1:45: 83:49:c3:71:40:8e:8b:a3:1a:2c:5e:2c:cd:db:6c: 2f:69:c5:64:7d:f8:93:9f:b4:3a:e6:a0:47:56:e9: 5b:00:26:1d:54:44:a6:97:5e:f0:b4:bd:79:e3:9d: f5:c7:c9:a9:bc:98:a0:7f:21:92:5a:73:49:06:cf: b4:8b:15:42:f7:9a:d0:28:a4:21:17:c3:fb:ee:4f: 4f:f3:70:e6:6b:04:22:86:cc:71:5f:b7:47:ff:f3: d3:ab:86:60:da:8c:ba:e4:b3:80:db:b1:71:84:2e: 6a:72:dc:de:62:83:6a:9e:9b:95:f1:83:a7:bf:cf: 71:81:cf:4e:a9:ba:3e:61:c4:7e:e3:c8:53:28:04: cc:bf:25:a6:88:0f:c5:dc:40:be:2a:01:42:d0:a5: db:5c:c4:39:c2:74:68:3e:0d:c6:2f:aa:72:84:48: df:6c:3c:83:89:48:9e:f2:6e:fc:1c:81:04:e2:e0: 3b:2a:cb:ac:c6:ab:a5:66:7a:d9:da:87:71:ad:f2: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9C:0A:9A:06:10:BF:60:47:00:13:D3:9B:0F:27:92:6E:04:EB:84 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/EC065A52C28D11EBBCABCA6CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.135.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9c:8d:e8:c0:6d:12:36:85:56:0e:ae:df:d5:b7:ca:c5:89:db: ea:41:51:40:39:f6:f2:f8:fe:0f:40:d9:61:08:d5:14:2c:d9: 2c:13:c4:98:f1:0a:49:9b:27:26:66:73:87:5b:86:8a:43:f5: b8:42:22:1e:86:04:08:87:ff:f9:4e:41:1c:a5:0b:81:90:bd: 53:48:28:d1:df:b3:0d:ac:81:b4:ce:39:9f:0d:3a:4e:6c:22: 36:e4:a2:3e:7f:b3:6b:d2:9a:1f:f6:df:c7:ea:70:50:6c:c6: 92:2d:51:64:31:01:5d:e5:97:77:88:38:49:af:8a:ab:5a:a7: df:3c:cd:78:cb:fb:bf:ca:cd:e4:76:bd:60:6e:dc:68:cd:cb: 69:5d:ab:22:8c:47:05:b1:04:0c:b5:16:c5:85:bb:49:88:fa: fd:8a:2f:6d:b4:55:c9:ad:e0:3c:52:7e:2b:54:fc:97:7e:de: dc:e9:29:76:d1:e4:18:30:49:2c:4b:8f:e0:e2:55:44:e1:cd: 01:8a:4d:5a:03:63:9e:a5:f4:2b:97:4d:39:68:da:59:f8:95: ed:b0:9f:1a:6d:2a:d4:56:7a:f6:0c:98:0c:5d:63:88:15:81: 2d:d6:1c:71:28:6f:56:16:38:04:7e:d8:3b:06:4c:c5:67:3b: 6d:4e:45:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjQxMjIyMTY1NDEzWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzY4NDQzNS0wMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Ykx7YKzfCM+dKQtXuWTe2QF4DjqGFfwumaZnSpnSOeLvoSf9nT0WY5rOJZD BERTzFeGg2z6Yf0zsUWDScNxQI6LoxosXizN22wvacVkffiTn7Q65qBHVulbACYd VESml17wtL154531x8mpvJigfyGSWnNJBs+0ixVC95rQKKQhF8P77k9P83DmawQi hsxxX7dH//PTq4Zg2oy65LOA27FxhC5qctzeYoNqnpuV8YOnv89xgc9Oqbo+YcR+ 48hTKATMvyWmiA/F3EC+KgFC0KXbXMQ5wnRoPg3GL6pyhEjfbDyDiUie8m78HIEE 4uA7KsusxqulZnrZ2odxrfLJUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBqcCpoG EL9gRwAT05sPJ5JuBOuEMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvRUMwNjVBNTJD MjhEMTFFQkJDQUJDQTZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAaLh8AwDQYJKoZIhvcNAQELBQADggEBAJyN6MBtEjaFVg6u 39W3ysWJ2+pBUUA59vL4/g9A2WEI1RQs2SwTxJjxCkmbJyZmc4dbhopD9bhCIh6G BAiH//lOQRylC4GQvVNIKNHfsw2sgbTOOZ8NOk5sIjbkoj5/s2vSmh/238fqcFBs xpItUWQxAV3ll3eIOEmviqtap988zXjL+7/KzeR2vWBu3GjNy2ldqyKMRwWxBAy1 FsWFu0mI+v2KL220Vcmt4DxSfitU/Jd+3tzpKXbR5BgwSSxLj+DiVUThzQGKTVoD Y56l9CuXTTlo2ln4le2wnxptKtRWevYMmAxdY4gVgS3WHHEob1YWOAR+2DsGTMVn O21ORXc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:44 2025 by rpki-client