$ rpki-client -vvf rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/E7C319C60DD911F0A4D25B5FC4F9AE02.roa File: E7C319C60DD911F0A4D25B5FC4F9AE02.roa (raw, json) Hash identifier: Fb+Ti1WbP+2ky2gp08ieDxdIQQX1VZl4dWu/c8T0fjM= Subject key identifier: B0:6E:BA:55:91:FB:5B:C1:C3:C8:C2:39:01:B7:91:1D:60:67:A9:F5 Certificate issuer: /CN=A913A8A4/serialNumber=4D176A0B457A6E5695D37A7ECB8DCB3A73CB4812 Certificate serial: 120D Authority key identifier: 4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/E7C319C60DD911F0A4D25B5FC4F9AE02.roa Signing time: Mon 31 Mar 2025 02:43:20 +0000 ROA not before: Mon 31 Mar 2025 02:43:20 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 400618 IP address blocks: 182.255.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 17:10:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4621 (0x120d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A8A4 Validity Not Before: Mar 31 02:43:20 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67ea0147-3ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:5c:3b:a2:40:1a:b9:28:65:8e:68:bd:d9: dc:d3:54:6b:be:fe:87:4a:a3:2e:27:69:06:30:b2: 50:28:0a:47:ab:61:ca:da:1c:0c:3d:2b:36:21:cb: 5b:ca:4c:7b:75:e0:bb:f0:87:57:7d:0b:49:19:16: b6:4d:47:88:70:3c:80:00:52:38:16:61:7c:57:cf: 23:34:f3:64:98:6b:6b:82:c4:1a:78:83:d7:88:30: 8d:fb:c7:66:b3:65:cc:3c:d9:28:3b:1a:85:ee:12: 82:be:c3:aa:fb:15:d6:fb:05:31:b6:f6:60:b5:9d: ee:f7:16:9b:71:6d:8d:e6:b9:47:98:3a:0a:32:af: 04:3e:ef:84:4f:d1:45:fa:39:76:b9:91:a5:89:e6: 71:5c:af:78:30:bf:f6:9a:a6:c9:4d:56:48:d3:6a: 0d:bb:6b:5d:cd:61:89:ed:b2:0a:47:32:5c:1b:cd: 82:5d:b7:53:d1:3c:9f:53:b2:aa:8e:e8:5f:e8:b6: 6b:90:ec:46:9a:12:56:f0:3a:d5:c6:a1:a0:8e:b4: af:20:07:98:3d:2f:f5:0a:33:e6:5b:83:f0:01:bc: 33:ec:78:7b:22:3a:3a:1e:2c:62:d0:ac:b9:2e:da: 8c:b8:49:80:4e:f1:8f:9f:2a:e4:92:75:2e:11:ff: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6E:BA:55:91:FB:5B:C1:C3:C8:C2:39:01:B7:91:1D:60:67:A9:F5 X509v3 Authority Key Identifier: keyid:4D:17:6A:0B:45:7A:6E:56:95:D3:7A:7E:CB:8D:CB:3A:73:CB:48:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/TRdqC0V6blaV03p-y43LOnPLSBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRdqC0V6blaV03p-y43LOnPLSBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A8A4/790E610CE9C311E8A9CED648C4F9AE02/E7C319C60DD911F0A4D25B5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 182.255.32.0/22 Signature Algorithm: sha256WithRSAEncryption c6:d6:b6:00:7a:11:93:96:a6:a2:1f:6e:77:d7:03:e3:fe:88: 32:6b:64:d6:93:da:c0:ed:de:a9:67:5d:52:cc:01:a4:a2:51: 09:a5:5b:d9:88:f5:32:1c:13:df:af:3d:3c:bc:90:9d:a0:25: 12:d8:61:77:b6:48:9b:78:36:f0:1a:70:60:02:1d:1f:35:c8: ee:a6:1a:46:46:4f:2e:f0:f5:c7:86:d5:71:7a:ef:02:d8:b4: 48:e6:6c:88:d4:e1:33:9d:46:93:32:42:de:88:9c:45:63:f0: 8a:84:ee:e6:1e:3b:66:75:56:31:b6:93:0d:46:74:e7:6c:ae: 28:93:df:58:db:52:d4:21:97:7c:0c:bc:6a:19:fe:6f:8d:f4: 69:89:b3:f4:5d:a4:21:95:53:e9:5c:86:d2:cd:58:14:96:b7: 46:07:1f:b5:3e:10:20:e3:bb:4e:5c:1b:81:66:f4:b9:6b:7c: e2:03:cc:1c:77:80:06:f4:6b:50:ee:41:d8:3b:c8:47:23:3c: 05:2b:36:26:7a:90:a0:59:2b:e6:2d:ea:dd:06:71:dc:3c:e2: e5:78:81:c8:1a:cb:80:13:41:b2:1e:31:be:a2:30:4a:00:89: a5:71:5f:c6:3a:46:87:b6:a3:ab:02:4a:81:03:7e:20:a8:0b: f4:56:16:12 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0E4QTQxMTAvBgNVBAUTKDREMTc2QTBCNDU3QTZFNTY5NUQzN0E3RUNCOERDQjNB NzNDQjQ4MTIwHhcNMjUwMzMxMDI0MzIwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhMDE0Ny0zZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcRcO6JAGrkoZY5ovdnc01Rrvv6HSqMuJ2kGMLJQKApHq2HK2hwMPSs2Ictb ykx7deC78IdXfQtJGRa2TUeIcDyAAFI4FmF8V88jNPNkmGtrgsQaeIPXiDCN+8dm s2XMPNkoOxqF7hKCvsOq+xXW+wUxtvZgtZ3u9xabcW2N5rlHmDoKMq8EPu+ET9FF +jl2uZGlieZxXK94ML/2mqbJTVZI02oNu2tdzWGJ7bIKRzJcG82CXbdT0TyfU7Kq juhf6LZrkOxGmhJW8DrVxqGgjrSvIAeYPS/1CjPmW4PwAbwz7Hh7Ijo6Hixi0Ky5 LtqMuEmATvGPnyrkknUuEf9+OwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLBuulWR +1vBw8jCOQG3kR1gZ6n1MB8GA1UdIwQYMBaAFE0XagtFem5WldN6fsuNyzpzy0gS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQThBNC83OTBFNjEwQ0U5 QzMxMUU4QTlDRUQ2NDhDNEY5QUUwMi9UUmRxQzBWNmJsYVYwM3AteTQzTE9uUExT QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RSZHFDMFY2YmxhVjAzcC15NDNMT25QTFNCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0E4QTQvNzkwRTYxMENFOUMzMTFFOEE5Q0VENjQ4QzRGOUFFMDIvRTdDMzE5QzYw REQ5MTFGMEE0RDI1QjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAK2/yAwDQYJKoZIhvcNAQELBQADggEBAMbWtgB6EZOWpqIf bnfXA+P+iDJrZNaT2sDt3qlnXVLMAaSiUQmlW9mI9TIcE9+vPTy8kJ2gJRLYYXe2 SJt4NvAacGACHR81yO6mGkZGTy7w9ceG1XF67wLYtEjmbIjU4TOdRpMyQt6InEVj 8IqE7uYeO2Z1VjG2kw1GdOdsriiT31jbUtQhl3wMvGoZ/m+N9GmJs/RdpCGVU+lc htLNWBSWt0YHH7U+ECDju05cG4Fm9LlrfOIDzBx3gAb0a1DuQdg7yEcjPAUrNiZ6 kKBZK+Yt6t0Gcdw84uV4gcgay4ATQbIeMb6iMEoAiaVxX8Y6Roe2o6sCSoEDfiCo C/RWFhI= -----END CERTIFICATE-----Generated at Sat Apr 12 10:34:30 2025 by rpki-client