$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E01731A04A0511EFBE524A77C4F9AE02.roa File: E01731A04A0511EFBE524A77C4F9AE02.roa (raw, json) Hash identifier: ywzvrLxBT/Z7nPd3pBvdmtRanDDISy0oLSGMtPD+fnk= Subject key identifier: 08:C7:A6:1F:68:11:1F:A1:4C:B7:62:55:96:C5:99:68:2F:3C:1A:5B Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 37B7 Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E01731A04A0511EFBE524A77C4F9AE02.roa Signing time: Fri 18 Apr 2025 14:50:46 +0000 ROA not before: Fri 18 Apr 2025 14:50:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 38616 IP address blocks: 115.186.0.0/24 maxlen: 24 115.186.100.0/22 maxlen: 22 115.186.104.0/24 maxlen: 24 115.186.116.0/22 maxlen: 22 115.186.122.0/23 maxlen: 23 115.186.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14263 (0x37b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Apr 18 14:50:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680266c6-639a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:15:b9:34:71:7b:83:f9:ac:3a:b0:f0:7d:1b: e9:f7:9e:32:3a:e4:f5:e9:77:a4:88:19:e6:76:0c: 9f:91:e3:17:76:0b:40:17:48:93:4c:74:e6:d5:d1: 47:7a:30:39:7d:b4:05:f9:c5:7b:6e:37:f9:a4:1a: fc:2c:ac:6f:2a:43:f4:3c:cd:7e:a4:36:82:34:48: 5d:7b:9b:fc:25:3f:37:18:95:ca:1b:97:21:cc:7e: 5c:64:6d:8f:db:de:35:cc:64:cf:95:88:b3:b3:c3: 46:8b:41:1e:b4:11:f5:59:7a:e9:9c:4f:43:c9:2e: 15:e2:aa:17:3a:8b:d1:98:1c:ba:ce:da:86:c4:61: 94:6e:33:ed:d1:22:52:4f:59:25:7b:c0:67:81:52: 84:90:51:ef:1a:e9:83:b3:f0:e8:45:a5:1c:77:e4: 05:3e:f9:47:67:9e:36:df:5e:94:19:56:b2:9f:3c: c4:5b:80:83:50:75:9f:a6:76:19:1b:e9:9d:59:a1: 6f:ba:c6:cc:3b:48:ab:c8:d9:06:1a:72:be:c5:be: 68:95:47:c2:55:81:7d:8b:f1:58:3e:95:f0:15:41: ba:3e:8b:44:01:49:96:bc:0c:95:f5:32:9e:53:52: d0:b3:3e:9d:b5:92:d2:5a:f8:9c:f3:e6:0e:b9:27: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C7:A6:1F:68:11:1F:A1:4C:B7:62:55:96:C5:99:68:2F:3C:1A:5B X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E01731A04A0511EFBE524A77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.186.0.0/24 115.186.100.0-115.186.104.255 115.186.116.0/22 115.186.122.0/23 115.186.126.0/23 Signature Algorithm: sha256WithRSAEncryption a0:f6:e0:e1:7f:0d:f4:54:62:ce:cd:f5:83:4e:7a:fb:f7:fb: 1e:35:12:6f:03:64:a8:a9:7f:3c:65:d1:b9:5b:b9:a9:3b:37: a8:43:25:15:d3:c5:24:47:c8:9b:6e:bb:3a:f3:bb:c7:45:b5: 27:6a:79:f4:2c:8a:27:87:0e:35:0a:7a:41:c1:76:92:18:35: 9d:6a:d9:7f:23:b1:47:0c:4c:04:0e:0f:d7:c3:c6:ee:01:b7: 23:81:34:34:90:02:53:7d:61:9b:f3:45:33:8f:28:11:de:9b: 70:f0:9c:79:e5:76:ea:72:3f:c1:38:1b:45:0f:8a:62:8b:a4: b9:5f:91:d7:60:65:87:89:c0:ca:61:a0:80:7b:29:d1:5b:f4: 6b:8f:99:7e:3c:0c:7a:f1:82:e4:5d:65:53:90:e6:92:70:47: 97:7f:11:45:c2:01:36:80:9e:af:ed:a5:ff:99:31:18:3e:0c: ed:13:99:65:d7:3a:17:b4:95:b9:a9:7d:99:60:c5:84:46:a3: d9:3f:3c:35:83:a0:27:64:f2:17:17:83:9d:ae:71:68:50:e8: ff:fd:c1:5c:ff:df:3b:78:d6:00:71:a5:0f:42:35:19:4e:2e: 8f:22:a9:5e:6f:e8:35:2d:f7:59:5d:91:d9:e7:f0:62:a2:be: ea:29:2d:12 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICN7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjUwNDE4MTQ1MDQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAyNjZjNi02MzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BW5NHF7g/msOrDwfRvp954yOuT16XekiBnmdgyfkeMXdgtAF0iTTHTm1dFH ejA5fbQF+cV7bjf5pBr8LKxvKkP0PM1+pDaCNEhde5v8JT83GJXKG5chzH5cZG2P 2941zGTPlYizs8NGi0EetBH1WXrpnE9DyS4V4qoXOovRmBy6ztqGxGGUbjPt0SJS T1kle8BngVKEkFHvGumDs/DoRaUcd+QFPvlHZ542316UGVaynzzEW4CDUHWfpnYZ G+mdWaFvusbMO0iryNkGGnK+xb5olUfCVYF9i/FYPpXwFUG6PotEAUmWvAyV9TKe U1LQsz6dtZLSWvic8+YOuSerwwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFAjHph9o ER+hTLdiVZbFmWgvPBpbMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvRTAxNzMxQTA0 QTA1MTFFRkJFNTI0QTc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBABzugAwDAMEAnO6ZAMEAHO6aAMEAnO6dAMEAXO6egMEAXO6 fjANBgkqhkiG9w0BAQsFAAOCAQEAoPbg4X8N9FRizs31g056+/f7HjUSbwNkqKl/ PGXRuVu5qTs3qEMlFdPFJEfIm267OvO7x0W1J2p59CyKJ4cONQp6QcF2khg1nWrZ fyOxRwxMBA4P18PG7gG3I4E0NJACU31hm/NFM48oEd6bcPCceeV26nI/wTgbRQ+K YoukuV+R12Blh4nAymGggHsp0Vv0a4+ZfjwMevGC5F1lU5DmknBHl38RRcIBNoCe r+2l/5kxGD4M7ROZZdc6F7SVual9mWDFhEaj2T88NYOgJ2TyFxeDna5xaFDo//3B XP/fO3jWAHGlD0I1GU4ujyKpXm/oNS33WV2R2efwYqK+6iktEg== -----END CERTIFICATE-----Generated at Sat Apr 26 12:33:34 2025 by rpki-client