$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa File: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (raw, json) Hash identifier: ySE2YBsbAXt0k1PEdiGam1s5GhhHLonIBlG28ashrzw= Subject key identifier: 20:AF:AC:7B:38:0E:8D:23:7A:03:A4:46:27:D0:A1:6B:63:DC:EE:5D Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0C74 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa Signing time: Wed 12 Feb 2025 19:27:08 +0000 ROA not before: Wed 12 Feb 2025 19:27:08 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 394881 IP address blocks: 45.119.4.0/24 maxlen: 24 103.133.94.0/24 maxlen: 24 203.23.176.0/24 maxlen: 24 203.23.177.0/24 maxlen: 24 203.34.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Feb 12 19:27:08 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67acf60c-d404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:00:be:24:d0:c2:99:8b:d5:76:7f:49:35: 82:4c:a1:32:3d:20:1c:b9:02:b0:34:25:cb:17:be: 75:49:78:fb:ff:69:65:b9:4a:6e:68:48:d6:0c:ba: 76:93:31:d8:cb:b9:fa:59:34:46:f5:c9:74:ba:8b: ea:c6:eb:17:70:6e:9b:cb:7e:ad:07:76:65:38:f3: 94:bb:7b:60:a7:3a:a6:36:78:09:a1:65:d9:e7:d5: cf:88:58:40:f2:6a:e0:de:36:ac:c7:62:99:e3:90: 0f:6e:f3:67:bc:1a:0a:2d:8f:19:02:b3:94:fa:6f: 97:4b:d0:ae:ac:36:36:4f:4d:05:0b:2d:73:67:18: bc:5d:ad:f8:06:c4:ae:fe:6b:19:e7:82:23:ce:0c: 68:db:5d:4e:12:7e:9c:c8:d8:a5:5a:60:14:74:5c: 56:62:b6:b4:2e:af:8f:0b:e0:12:7c:40:8f:27:55: 55:e5:14:04:57:3a:e6:7b:2a:da:9f:fb:a7:c0:c1: b7:f6:a0:ba:8e:b8:c0:9a:f2:5d:7c:94:85:8c:bb: c0:af:f6:b2:0f:05:03:ee:1e:9e:d3:26:b6:7e:26: 39:3a:3d:16:9b:88:58:65:1a:3b:1e:f5:f4:a5:ff: 9c:e0:af:86:82:57:f9:27:4d:e3:a6:41:69:23:b0: 32:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AF:AC:7B:38:0E:8D:23:7A:03:A4:46:27:D0:A1:6B:63:DC:EE:5D X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/0EF9BE4E276F11EEB328204AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.4.0/24 103.133.94.0/24 203.23.176.0/23 203.34.110.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:95:97:7c:4d:90:c5:ec:1a:23:e0:53:7e:29:ee:b3:e3:2d: 17:a3:d0:10:89:eb:91:47:f2:0b:d4:4d:48:68:6b:3f:a0:5b: 0b:7f:f9:d9:e3:0b:1a:b3:40:73:3c:1a:c1:ff:40:c7:ce:ba: 34:12:d4:d1:13:87:7c:d4:31:e0:55:c6:a4:ec:47:d3:f7:1a: 8e:3e:8b:f0:11:45:f4:1e:8f:b1:46:03:a1:eb:5f:6e:b0:9a: 0c:80:13:ab:6d:69:e8:f3:bf:80:cf:70:c3:22:d0:fe:b7:bb: 16:c9:fa:8f:e6:2f:fa:82:5d:b1:5a:98:1b:d5:64:42:ce:c1: 01:93:51:38:39:c4:a5:f7:02:0e:73:10:5d:0a:66:8e:e9:a8: 4d:a8:dc:9e:e7:fc:7c:c1:8c:ec:f2:e0:74:07:8e:f3:89:42: 2e:c4:83:ce:bc:74:bc:f3:76:53:f6:81:45:58:5d:70:59:b8: 9d:19:ec:ae:2f:86:06:55:07:ad:37:c4:fb:45:da:f7:7f:6c: 8c:95:97:9d:c1:7b:d0:6f:bd:ae:c1:ed:5d:a1:5e:21:a5:8a: 7f:2d:a9:ce:98:70:b7:bf:37:3a:e2:0d:66:54:da:5c:0d:e4: 45:14:1d:c6:ab:9c:84:a7:22:9e:1f:ac:13:f5:0d:08:de:6c: 6b:31:bf:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjUwMjEyMTkyNzA4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FjZjYwYy1kNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EkAviTQwpmL1XZ/STWCTKEyPSAcuQKwNCXLF751SXj7/2lluUpuaEjWDLp2 kzHYy7n6WTRG9cl0uovqxusXcG6by36tB3ZlOPOUu3tgpzqmNngJoWXZ59XPiFhA 8mrg3jasx2KZ45APbvNnvBoKLY8ZArOU+m+XS9CurDY2T00FCy1zZxi8Xa34BsSu /msZ54Ijzgxo211OEn6cyNilWmAUdFxWYra0Lq+PC+ASfECPJ1VV5RQEVzrmeyra n/unwMG39qC6jrjAmvJdfJSFjLvAr/ayDwUD7h6e0ya2fiY5Oj0Wm4hYZRo7HvX0 pf+c4K+Gglf5J03jpkFpI7AyXQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFCCvrHs4 Do0jegOkRifQoWtj3O5dMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRFQjUvQUZFQTI5QzIwNjE5MTFFQTg1NEEzNTE2QzRGOUFFMDIvMEVGOUJFNEUy NzZGMTFFRUIzMjgyMDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAtdwQDBABnhV4DBAHLF7ADBADLIm4wDQYJKoZIhvcNAQEL BQADggEBACyVl3xNkMXsGiPgU34p7rPjLRej0BCJ65FH8gvUTUhoaz+gWwt/+dnj CxqzQHM8GsH/QMfOujQS1NETh3zUMeBVxqTsR9P3Go4+i/ARRfQej7FGA6HrX26w mgyAE6ttaejzv4DPcMMi0P63uxbJ+o/mL/qCXbFamBvVZELOwQGTUTg5xKX3Ag5z EF0KZo7pqE2o3J7n/HzBjOzy4HQHjvOJQi7Eg868dLzzdlP2gUVYXXBZuJ0Z7K4v hgZVB603xPtF2vd/bIyVl53Be9Bvva7B7V2hXiGlin8tqc6YcLe/NzriDWZU2lwN 5EUUHcarnISnIp4frBP1DQjebGsxv2I= -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:33 2025 by rpki-client