$ rpki-client -vvf rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/0EA2B2D62BB011ED90F41820C4F9AE02.roa File: 0EA2B2D62BB011ED90F41820C4F9AE02.roa (raw, json) Hash identifier: JgZJzlQ79Xx6hUp4SYLcLAs7aGzfQPT8kkBOAf+1nKI= Subject key identifier: 25:95:07:AA:E1:70:45:1C:1F:6E:99:3F:F2:5A:85:AE:98:EB:DE:C1 Certificate issuer: /CN=A91136B5/serialNumber=5AECEAD54CB36CBF1B4A00C4CD410846D23141EF Certificate serial: 0215 Authority key identifier: 5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/0EA2B2D62BB011ED90F41820C4F9AE02.roa Signing time: Thu 03 Apr 2025 02:28:08 +0000 ROA not before: Thu 03 Apr 2025 02:28:08 +0000 ROA not after: Fri 01 Aug 2025 00:00:00 +0000 asID: 136266 IP address blocks: 103.85.192.0/22 maxlen: 24 2400:af40::/32 maxlen: 32 2400:af40::/33 maxlen: 33 2400:af40:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91136B5 Validity Not Before: Apr 3 02:28:08 2025 GMT Not After : Aug 1 00:00:00 2025 GMT Subject: CN=67edf238-1057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:16:0f:cb:2c:f7:f2:f5:95:0e:b3:74:37: a2:4f:94:36:92:72:16:04:e3:82:6c:30:72:d7:08: 04:3b:f4:f1:f4:27:a4:d3:f4:c8:9f:12:77:72:83: e4:f9:c2:e7:0e:4d:28:88:54:19:25:8e:4f:df:d0: e9:65:54:27:ab:d3:50:b9:81:13:ea:d7:3b:cc:8d: ed:9f:37:9f:2a:63:0e:94:fd:27:f7:eb:40:1a:2b: 53:3d:a7:9e:96:51:c9:ed:83:6e:5d:7f:2b:a9:c1: 74:68:2f:0c:16:d9:a8:72:c4:18:56:6a:2a:df:bf: 08:1a:79:0e:df:9e:3b:e6:04:f3:44:28:06:46:d2: 04:45:38:52:ae:56:0c:e0:37:f4:e9:96:6a:7f:b7: a2:6a:ba:62:e0:df:58:52:a4:f7:0e:aa:57:c7:6a: 6b:47:fc:04:58:77:8b:75:01:91:60:fc:f2:dc:aa: 79:57:12:e9:ae:ef:99:78:1b:20:77:0a:1e:c6:09: 73:bc:7e:6b:31:33:44:44:f8:eb:74:8a:99:7c:69: e3:b0:dd:a3:3c:dd:4d:ec:9d:4c:27:8b:4d:81:f2: ec:05:ce:bb:c9:02:11:6e:2f:bb:3b:08:ef:d9:dd: 3f:4d:8c:5c:28:be:3a:9b:86:a7:1b:06:8d:84:15: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:95:07:AA:E1:70:45:1C:1F:6E:99:3F:F2:5A:85:AE:98:EB:DE:C1 X509v3 Authority Key Identifier: keyid:5A:EC:EA:D5:4C:B3:6C:BF:1B:4A:00:C4:CD:41:08:46:D2:31:41:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wuzq1UyzbL8bSgDEzUEIRtIxQe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91136B5/F4115DBC2BAC11ED8D42AB19C4F9AE02/0EA2B2D62BB011ED90F41820C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.192.0/22 IPv6: 2400:af40::/32 Signature Algorithm: sha256WithRSAEncryption d9:aa:68:06:fd:95:ad:49:82:47:c1:12:aa:40:21:09:c3:2c: f1:f6:19:98:8f:9c:ed:6f:64:99:f9:f3:70:0e:28:0a:fd:be: a3:32:31:0c:aa:44:d3:96:b1:fb:a3:d9:02:39:32:54:72:36: 01:d8:5a:1c:f7:6a:f6:05:f6:43:c9:4e:43:4b:15:6e:36:e0: 6f:5b:e8:55:25:a9:09:b9:4a:71:33:29:cf:f9:1c:8d:17:c1: f3:e9:d9:6d:bd:26:6f:55:db:d2:4e:15:11:6b:15:79:7b:c8: 58:31:74:b0:3b:6a:c2:d7:11:77:63:53:c4:fa:24:55:bc:b0: 64:4c:39:c4:11:03:e3:73:c7:b5:ad:0c:b6:c8:9d:ac:af:05: 78:dc:bd:f6:75:c0:e2:54:f4:d4:61:e8:43:11:ac:55:35:f8: ce:3a:b8:3c:7a:b1:26:f1:67:89:d9:25:2a:90:1d:d3:b5:44: 98:6d:7d:4d:d6:22:93:8d:05:28:19:73:38:b9:2d:5f:07:57: 34:08:b1:a1:f6:d2:73:ce:e7:8b:5d:83:88:62:46:fe:c8:52: 6a:9f:da:74:9b:f0:8e:f8:e6:e2:25:17:78:c7:ca:d9:58:28: a8:78:a5:2b:ae:3e:76:9e:8d:b1:98:62:b9:9d:4e:63:8c:c0: da:76:0d:e7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM2QjUxMTAvBgNVBAUTKDVBRUNFQUQ1NENCMzZDQkYxQjRBMDBDNENENDEwODQ2 RDIzMTQxRUYwHhcNMjUwNDAzMDIyODA4WhcNMjUwODAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkZjIzOC0xMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRkWD8ss9/L1lQ6zdDeiT5Q2knIWBOOCbDBy1wgEO/Tx9Cek0/TInxJ3coPk +cLnDk0oiFQZJY5P39DpZVQnq9NQuYET6tc7zI3tnzefKmMOlP0n9+tAGitTPaee llHJ7YNuXX8rqcF0aC8MFtmocsQYVmoq378IGnkO35475gTzRCgGRtIERThSrlYM 4Df06ZZqf7eiarpi4N9YUqT3DqpXx2prR/wEWHeLdQGRYPzy3Kp5VxLpru+ZeBsg dwoexglzvH5rMTNERPjrdIqZfGnjsN2jPN1N7J1MJ4tNgfLsBc67yQIRbi+7Owjv 2d0/TYxcKL46m4anGwaNhBUnFQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFCWVB6rh cEUcH26ZP/Jaha6Y697BMB8GA1UdIwQYMBaAFFrs6tVMs2y/G0oAxM1BCEbSMUHv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzZCNS9GNDExNURCQzJC QUMxMUVEOEQ0MkFCMTlDNEY5QUUwMi9XdXpxMVV5emJMOGJTZ0RFelVFSVJ0SXhR ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1d1enExVXl6Ykw4YlNnREV6VUVJUnRJeFFlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTM2QjUvRjQxMTVEQkMyQkFDMTFFRDhENDJBQjE5QzRGOUFFMDIvMEVBMkIyRDYy QkIwMTFFRDkwRjQxODIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnVcAwDQQCAAIwBwMFACQAr0AwDQYJKoZIhvcNAQELBQAD ggEBANmqaAb9la1JgkfBEqpAIQnDLPH2GZiPnO1vZJn583AOKAr9vqMyMQyqRNOW sfuj2QI5MlRyNgHYWhz3avYF9kPJTkNLFW424G9b6FUlqQm5SnEzKc/5HI0XwfPp 2W29Jm9V29JOFRFrFXl7yFgxdLA7asLXEXdjU8T6JFW8sGRMOcQRA+Nzx7WtDLbI nayvBXjcvfZ1wOJU9NRh6EMRrFU1+M46uDx6sSbxZ4nZJSqQHdO1RJhtfU3WIpON BSgZczi5LV8HVzQIsaH20nPO54tdg4hiRv7IUmqf2nSb8I745uIlF3jHytlYKKh4 pSuuPnaejbGYYrmdTmOMwNp2Dec= -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:48 2025 by rpki-client