$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/EE985C561CEA11EA8B382C0BC4F9AE02.roa File: EE985C561CEA11EA8B382C0BC4F9AE02.roa (raw, json) Hash identifier: /clDM2qDPD5uC0RxJEAiWWigew7J9uL+PN4x0Vi4eF0= Subject key identifier: 6F:DC:9F:48:18:6D:90:A1:AD:D7:68:F3:99:50:AB:6C:D8:22:5C:70 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0BBB Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/EE985C561CEA11EA8B382C0BC4F9AE02.roa Signing time: Thu 24 Apr 2025 19:18:16 +0000 ROA not before: Thu 24 Apr 2025 19:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135412 IP address blocks: 203.119.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Apr 24 19:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=680a8e78-d79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:ab:70:4c:50:4e:4a:f8:ac:df:91:9b:7d: 1c:cf:80:4b:09:6f:c6:78:41:7a:15:b8:dc:af:21: 45:f7:96:9a:96:3f:56:73:b9:2a:1b:e1:95:43:8b: 8c:8c:c4:65:1f:c4:8c:da:ab:00:aa:ba:00:dd:68: d2:47:b7:74:aa:da:de:a2:7a:73:8c:b9:5d:bc:3d: 08:a2:7d:0a:ef:3f:32:7e:55:87:6c:9e:e7:b5:27: 0c:ad:ed:7a:17:9d:23:f5:a4:e9:f3:b9:8a:7e:0a: 37:9c:d5:0b:89:f2:ea:98:df:f7:b3:38:28:19:70: ea:1b:55:3d:c0:19:a6:f2:3e:73:f8:9f:89:b1:58: 6f:6a:d1:61:47:de:6a:1e:8e:d3:81:62:36:e3:6d: c7:40:6f:7a:14:98:da:26:3a:8a:39:c2:ad:6c:e1: a4:9e:be:c9:ee:2a:1f:a7:44:70:29:76:cc:10:ba: bb:d5:ba:3f:ef:7e:6f:75:7b:87:47:45:70:b5:4c: b5:bf:9e:b6:74:9c:32:6f:42:5d:bb:1e:cf:c5:5b: 62:59:d5:f6:50:6a:ed:6b:c4:40:a3:08:4e:66:ff: b1:2d:8c:42:48:e4:b7:c6:6b:f0:c9:6d:3b:ac:8e: 91:e3:d9:53:19:77:d7:8c:70:6c:02:ed:a1:d1:3e: e1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DC:9F:48:18:6D:90:A1:AD:D7:68:F3:99:50:AB:6C:D8:22:5C:70 X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/EE985C561CEA11EA8B382C0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.78.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:43:11:37:dd:cd:f1:00:04:78:3a:e5:ac:18:43:43:e4:16: 3e:43:ba:1f:e4:a3:56:bc:b1:31:e7:96:fe:47:87:bd:d1:5f: 50:bb:01:08:3d:43:fa:55:7e:6c:7f:d2:2a:2c:e9:16:51:dd: 93:c8:5c:79:c3:7d:18:c6:f9:a4:2e:b9:89:f8:95:7e:25:ca: 00:36:12:37:44:2f:35:2e:a2:54:a6:e1:c1:0c:cf:42:7c:5f: 87:b7:b7:81:1b:f7:81:76:9b:c4:7a:90:cf:cb:1d:a4:8f:0f: 59:c6:dc:96:73:6a:c4:46:6f:2b:24:fb:1b:41:1d:ca:28:4f: 48:53:59:ae:1c:e4:38:d5:6f:34:49:9c:76:02:df:81:91:ad: a2:10:1f:2c:94:3a:4b:48:4b:22:2e:96:4a:02:41:10:c8:8c: 3c:e0:34:c4:6d:b9:48:b0:95:49:55:c4:e1:f8:b8:80:99:c9: 6d:58:37:59:83:03:ef:a0:7f:a9:e6:76:4d:9f:de:d4:d7:b7: 86:0e:e7:1a:fe:e2:b2:0b:13:7a:d4:1b:03:f2:88:58:3a:0d: 8b:1e:b9:e4:26:f1:09:03:c8:2f:f7:ac:49:24:c0:54:f0:25: c5:75:da:ad:ee:b2:29:a4:dc:da:b8:73:6b:36:6a:8c:44:cd: 62:1f:6e:3f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjUwNDI0MTkxODE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODBhOGU3OC1kNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD6rcExQTkr4rN+Rm30cz4BLCW/GeEF6FbjcryFF95aalj9Wc7kqG+GVQ4uM jMRlH8SM2qsAqroA3WjSR7d0qtreonpzjLldvD0Ion0K7z8yflWHbJ7ntScMre16 F50j9aTp87mKfgo3nNULifLqmN/3szgoGXDqG1U9wBmm8j5z+J+JsVhvatFhR95q Ho7TgWI2423HQG96FJjaJjqKOcKtbOGknr7J7iofp0RwKXbMELq71bo/735vdXuH R0VwtUy1v562dJwyb0Jdux7PxVtiWdX2UGrta8RAowhOZv+xLYxCSOS3xmvwyW07 rI6R49lTGXfXjHBsAu2h0T7hDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG/cn0gY bZChrddo85lQq2zYIlxwMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OThEMjAvM0Y3NzAzQzIxQ0U5MTFFQTk4ODk3NDg3QzRGOUFFMDIvRUU5ODVDNTYx Q0VBMTFFQThCMzgyQzBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLd04wDQYJKoZIhvcNAQELBQADggEBAJ1DETfdzfEABHg6 5awYQ0PkFj5Duh/ko1a8sTHnlv5Hh73RX1C7AQg9Q/pVfmx/0ios6RZR3ZPIXHnD fRjG+aQuuYn4lX4lygA2EjdELzUuolSm4cEMz0J8X4e3t4Eb94F2m8R6kM/LHaSP D1nG3JZzasRGbysk+xtBHcooT0hTWa4c5DjVbzRJnHYC34GRraIQHyyUOktISyIu lkoCQRDIjDzgNMRtuUiwlUlVxOH4uICZyW1YN1mDA++gf6nmdk2f3tTXt4YO5xr+ 4rILE3rUGwPyiFg6DYseueQm8QkDyC/3rEkkwFTwJcV12q3usimk3Nq4c2s2aoxE zWIfbj8= -----END CERTIFICATE-----Generated at Sat Apr 26 09:22:28 2025 by rpki-client