$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/905CF618B08F11EF8E3C4F2FC4F9AE02.roa File: 905CF618B08F11EF8E3C4F2FC4F9AE02.roa (raw, json) Hash identifier: iYnobuL6uewbC9DQWWzy41MFmhxRv2c8V9Juso3I4gI= Subject key identifier: 02:C0:3B:BD:CA:E6:B2:21:4F:47:E8:51:FE:91:91:04:79:1B:8A:77 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 043E Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/905CF618B08F11EF8E3C4F2FC4F9AE02.roa Signing time: Tue 04 Feb 2025 11:21:39 +0000 ROA not before: Tue 04 Feb 2025 11:21:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 7029 IP address blocks: 113.20.40.0/22 maxlen: 22 113.20.48.0/22 maxlen: 22 113.20.52.0/22 maxlen: 22 113.20.56.0/22 maxlen: 22 113.20.60.0/22 maxlen: 22 223.29.128.0/22 maxlen: 22 223.29.132.0/22 maxlen: 22 223.29.136.0/22 maxlen: 22 223.29.140.0/22 maxlen: 22 223.29.144.0/22 maxlen: 22 223.29.148.0/22 maxlen: 22 223.29.152.0/22 maxlen: 22 223.29.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73 Validity Not Before: Feb 4 11:21:39 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67a1f843-6ab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:6b:52:e4:37:0a:aa:ee:a7:4e:61:3a:29: 75:e3:6f:8a:c3:e5:2f:32:f2:e9:d6:be:8c:a8:22: a9:6d:c5:0b:d4:41:07:7d:0c:ba:4f:df:42:1b:c8: 2d:f9:cc:a3:10:b3:54:cc:79:7d:a9:b6:64:7c:8b: 21:11:e6:11:ca:4e:47:45:75:60:ab:18:16:cf:d2: de:e5:41:f7:3d:4a:2e:c7:dc:d0:b1:a1:1e:90:5e: 3c:79:69:d1:ca:ad:b4:65:fc:84:bf:f7:2d:a7:ae: 28:bc:0c:bf:1c:2d:c7:ee:b8:be:29:18:2d:ea:51: 58:c0:7f:bd:f8:ba:0d:ef:7c:b9:59:49:50:99:ac: 56:cc:eb:49:16:7f:a7:8b:97:25:91:51:11:14:a2: 7a:a0:08:ce:8c:af:ac:56:ee:1c:e6:d4:fb:19:47: 70:d2:da:4a:67:3f:11:06:9b:20:5e:b0:58:d7:d9: 8b:ba:2f:d8:d9:e5:06:50:cf:42:f6:02:ce:46:95: df:17:ba:4a:6d:f8:20:5c:f3:15:92:7e:4a:19:80: 3b:c4:7f:17:e2:b1:7f:10:a0:7e:57:18:29:db:b9: 06:b4:8e:41:08:7f:41:72:ec:1a:94:34:c0:50:6e: 01:fa:c8:98:05:a7:6e:81:be:87:51:38:f3:4f:e5: 07:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:3B:BD:CA:E6:B2:21:4F:47:E8:51:FE:91:91:04:79:1B:8A:77 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/905CF618B08F11EF8E3C4F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.40.0/22 113.20.48.0/20 223.29.128.0/19 Signature Algorithm: sha256WithRSAEncryption 80:f2:37:bb:0b:e7:8f:e2:e4:dc:59:d4:04:40:24:e7:00:15: a8:b9:f0:b9:1f:ee:9e:38:1c:59:cd:9f:d0:2f:78:33:ca:74: c1:02:36:e0:fb:98:d6:22:59:ae:2b:19:ef:48:3c:42:18:11: 26:46:30:29:f5:5d:88:00:90:18:ae:8a:95:41:73:0a:fe:f1: 50:27:22:9e:71:ea:f8:95:4f:36:26:14:3f:74:12:b7:c1:d7: cf:20:09:b2:b4:2c:88:dd:e4:1b:77:dc:64:a8:15:32:35:91: 42:5a:8d:d9:d9:29:51:97:ba:04:d8:a8:4d:e8:77:39:ca:18: 76:72:6a:28:67:10:25:8b:02:10:30:c2:3c:19:9d:ae:54:82: da:31:d8:7d:b8:fd:5a:75:6d:95:36:be:f3:fd:e7:a3:1b:d1: 7f:b0:c7:4b:78:e6:3c:6e:18:bd:30:da:7b:38:ce:b1:08:27: d8:79:6a:1b:0f:b3:36:b7:08:78:1a:f0:b3:83:49:b5:b5:be: 55:c8:59:1e:f5:e4:62:77:42:17:ac:52:67:48:62:03:f8:b7: e5:d1:50:65:aa:9e:ed:33:c5:68:bf:6b:2f:bb:0d:e0:f8:b5: 92:fd:52:fa:6e:4e:2b:90:84:6d:52:70:8d:28:93:6b:05:a4: 07:65:e5:b7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjUwMjA0MTEyMTM5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ExZjg0My02YWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQVrUuQ3Cqrup05hOil142+Kw+UvMvLp1r6MqCKpbcUL1EEHfQy6T99CG8gt +cyjELNUzHl9qbZkfIshEeYRyk5HRXVgqxgWz9Le5UH3PUoux9zQsaEekF48eWnR yq20ZfyEv/ctp64ovAy/HC3H7ri+KRgt6lFYwH+9+LoN73y5WUlQmaxWzOtJFn+n i5clkVERFKJ6oAjOjK+sVu4c5tT7GUdw0tpKZz8RBpsgXrBY19mLui/Y2eUGUM9C 9gLORpXfF7pKbfggXPMVkn5KGYA7xH8X4rF/EKB+Vxgp27kGtI5BCH9BcuwalDTA UG4B+siYBadugb6HUTjzT+UHkQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFALAO73K 5rIhT0foUf6RkQR5G4p3MB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvOTA1Q0Y2MThC MDhGMTFFRjhFM0M0RjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJxFCgDBARxFDADBAXfHYAwDQYJKoZIhvcNAQELBQADggEB AIDyN7sL54/i5NxZ1ARAJOcAFai58Lkf7p44HFnNn9AveDPKdMECNuD7mNYiWa4r Ge9IPEIYESZGMCn1XYgAkBiuipVBcwr+8VAnIp5x6viVTzYmFD90ErfB188gCbK0 LIjd5Bt33GSoFTI1kUJajdnZKVGXugTYqE3odznKGHZyaihnECWLAhAwwjwZna5U gtox2H24/Vp1bZU2vvP956Mb0X+wx0t45jxuGL0w2ns4zrEIJ9h5ahsPsza3CHga 8LODSbW1vlXIWR715GJ3QhesUmdIYgP4t+XRUGWqnu0zxWi/ay+7DeD4tZL9Uvpu TiuQhG1ScI0ok2sFpAdl5bc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:47 2025 by rpki-client