$ rpki-client -vvf rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E1D3A69C914011EDABD5F778C4F9AE02.roa File: E1D3A69C914011EDABD5F778C4F9AE02.roa (raw, json) Hash identifier: l7RVqMwsQP+9xoPqxUjrdLeHKAHmKPEPtw0sLICnu70= Subject key identifier: 5D:AD:5B:53:AF:56:0F:DA:9E:FB:91:E4:37:E3:C8:E6:01:4B:33:AA Certificate issuer: /CN=A911E9B6/serialNumber=2E8CBB8C2600C6A098C958B964C32DCB18B8035C Certificate serial: 0199 Authority key identifier: 2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E1D3A69C914011EDABD5F778C4F9AE02.roa Signing time: Fri 13 Dec 2024 02:36:18 +0000 ROA not before: Fri 13 Dec 2024 02:36:18 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 17545 IP address blocks: 203.214.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 02:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E9B6 Validity Not Before: Dec 13 02:36:18 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=675b9da1-4f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:a5:97:12:14:a5:8d:ed:d3:20:a7:aa:13: 47:4a:be:31:1c:e4:25:c3:26:4f:10:3c:e6:ab:57: 48:6b:27:f8:1d:28:c4:3d:9d:43:71:4a:32:c9:38: 6f:29:f7:38:4a:02:0d:56:63:f2:5c:92:fe:e3:39: 83:fd:c2:f1:10:94:05:56:e8:51:e1:16:ec:c4:d3: 67:b6:a0:bc:c2:fa:fe:45:bc:55:49:94:c1:69:38: 7b:43:0b:64:b4:c0:64:8b:5b:13:dd:10:44:fe:1a: 8c:13:cc:58:58:ad:a9:db:bd:e1:63:7f:5d:40:13: a3:b6:29:c1:00:3e:00:f2:37:7d:de:4f:35:c4:db: 36:f7:a3:5d:e7:ab:6a:64:97:f9:90:23:82:52:49: 46:d6:0e:1d:24:23:7d:d0:bc:c7:b7:9d:d0:fb:d6: 1c:70:06:8d:ab:ca:b0:ff:f2:79:7d:f9:c2:ac:11: ee:6a:74:7c:a1:e5:02:06:70:77:03:5b:27:56:aa: fe:32:31:f7:17:27:48:f5:dc:c7:3d:66:75:4c:81: e3:a0:3f:9e:45:54:83:1b:d0:58:ec:15:ef:01:8c: b4:c3:ba:8d:4a:4d:00:f4:9e:a8:88:d5:0e:55:70: bf:56:8e:74:62:77:d2:d7:9f:96:56:1e:93:16:16: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AD:5B:53:AF:56:0F:DA:9E:FB:91:E4:37:E3:C8:E6:01:4B:33:AA X509v3 Authority Key Identifier: keyid:2E:8C:BB:8C:26:00:C6:A0:98:C9:58:B9:64:C3:2D:CB:18:B8:03:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Loy7jCYAxqCYyVi5ZMMtyxi4A1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E9B6/7918CB0C7FF511ED9ED4641DC4F9AE02/E1D3A69C914011EDABD5F778C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.214.176.0/23 Signature Algorithm: sha256WithRSAEncryption 43:55:02:68:67:1a:ae:9e:63:61:d3:68:dc:cc:44:15:90:69: 5f:91:72:cf:47:fb:9c:41:d1:cc:05:c6:2c:8d:38:2e:45:37: 38:8d:68:97:49:59:fc:ab:8b:4f:35:66:9f:51:32:81:41:ca: 62:46:29:fc:8d:03:ef:a9:5a:36:1d:a8:84:3b:73:54:27:f4: 66:82:7d:32:2b:6e:89:1d:14:8f:ba:f3:c8:06:83:ab:23:f7: b2:c9:d3:d1:2c:28:99:ce:d3:45:2e:be:c2:56:51:2b:f1:52: 6c:94:0e:9a:fa:b0:ab:fc:c5:5c:aa:e2:20:c3:a1:35:96:ad: 54:3c:13:00:35:30:e9:cc:1b:41:18:a4:27:21:ee:23:92:59: c5:67:e8:a1:a2:dc:58:96:97:e9:12:8d:23:02:3d:12:07:7b: b7:7c:bf:b5:de:cc:b9:79:46:51:e8:ea:2d:8f:2b:95:8a:85: bc:b2:22:33:79:04:ca:b1:9d:30:c5:20:29:79:c1:28:bc:30: cd:a0:06:7e:bb:5a:d5:4e:34:57:eb:e9:ae:83:b5:dc:a6:17: 7d:89:4e:3b:cd:5a:ea:c3:de:fe:f4:ff:8e:7a:4a:de:85:4f: 3e:6e:4a:08:0b:66:2d:2c:4c:9b:6e:61:0e:e5:1c:bc:ae:e4: c3:f3:fd:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU5QjYxMTAvBgNVBAUTKDJFOENCQjhDMjYwMEM2QTA5OEM5NThCOTY0QzMyRENC MThCODAzNUMwHhcNMjQxMjEzMDIzNjE4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzViOWRhMS00ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8illxIUpY3t0yCnqhNHSr4xHOQlwyZPEDzmq1dIayf4HSjEPZ1DcUoyyThv Kfc4SgINVmPyXJL+4zmD/cLxEJQFVuhR4RbsxNNntqC8wvr+RbxVSZTBaTh7Qwtk tMBki1sT3RBE/hqME8xYWK2p273hY39dQBOjtinBAD4A8jd93k81xNs296Nd56tq ZJf5kCOCUklG1g4dJCN90LzHt53Q+9YccAaNq8qw//J5ffnCrBHuanR8oeUCBnB3 A1snVqr+MjH3FydI9dzHPWZ1TIHjoD+eRVSDG9BY7BXvAYy0w7qNSk0A9J6oiNUO VXC/Vo50YnfS15+WVh6TFhakEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFF2tW1Ov Vg/anvuR5DfjyOYBSzOqMB8GA1UdIwQYMBaAFC6Mu4wmAMagmMlYuWTDLcsYuANc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTlCNi83OTE4Q0IwQzdG RjUxMUVEOUVENDY0MURDNEY5QUUwMi9Mb3k3akNZQXhxQ1l5Vmk1Wk1NdHl4aTRB MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xveTdqQ1lBeHFDWXlWaTVaTU10eXhpNEExdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUU5QjYvNzkxOENCMEM3RkY1MTFFRDlFRDQ2NDFEQzRGOUFFMDIvRTFEM0E2OUM5 MTQwMTFFREFCRDVGNzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHL1rAwDQYJKoZIhvcNAQELBQADggEBAENVAmhnGq6eY2HT aNzMRBWQaV+Rcs9H+5xB0cwFxiyNOC5FNziNaJdJWfyri081Zp9RMoFBymJGKfyN A++pWjYdqIQ7c1Qn9GaCfTIrbokdFI+688gGg6sj97LJ09EsKJnO00UuvsJWUSvx UmyUDpr6sKv8xVyq4iDDoTWWrVQ8EwA1MOnMG0EYpCch7iOSWcVn6KGi3FiWl+kS jSMCPRIHe7d8v7XezLl5RlHo6i2PK5WKhbyyIjN5BMqxnTDFICl5wSi8MM2gBn67 WtVONFfr6a6DtdymF32JTjvNWurD3v70/456St6FTz5uSggLZi0sTJtuYQ7lHLyu 5MPz/e8= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:05 2025 by rpki-client