$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa File: E8053F36BC3011EA840E2A56C4F9AE02.roa (raw, json) Hash identifier: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc= Subject key identifier: AF:AB:D6:C7:11:E4:E0:64:E5:08:E5:70:3E:B4:87:F2:B6:40:34:A7 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 0869 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa Signing time: Sun 02 Feb 2025 20:59:40 +0000 ROA not before: Sun 02 Feb 2025 20:59:40 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 9311 IP address blocks: 103.224.56.0/24 maxlen: 24 103.224.59.0/24 maxlen: 24 202.58.30.0/24 maxlen: 24 202.58.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2153 (0x869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD Validity Not Before: Feb 2 20:59:40 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=679fdcbc-dab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:f4:a3:03:9c:05:80:ca:9f:8f:0d:61:93: fd:ec:6d:bd:55:f2:f7:5d:40:9e:38:4b:4b:ad:75: b1:c8:5c:1b:9c:46:f0:a3:bb:80:2e:f2:aa:f3:18: 77:93:23:6d:57:a7:2c:46:9b:59:aa:90:99:7b:d4: 27:17:5b:77:9f:db:d3:41:30:5c:6e:d1:a0:a2:1c: 4f:50:2f:79:d5:f7:f1:74:19:4a:73:b8:62:31:e2: e3:a6:c2:63:93:ce:11:97:c1:ec:c7:d5:d9:77:57: 30:aa:9c:98:03:9a:b5:16:8b:2a:4d:dd:6e:29:05: a4:c6:ea:b6:f9:d3:4b:19:4c:c2:3f:5a:59:77:90: 5b:77:52:38:07:1a:4c:f7:67:90:65:85:e2:16:77: 10:7e:2c:a4:5b:4f:fa:fa:fa:d2:e8:af:ff:b3:14: 67:62:f8:1a:7b:c8:7e:66:42:48:2d:12:61:71:d6: 32:e7:53:2e:9d:ba:6f:14:b0:28:95:9a:64:a5:7e: 42:18:66:52:69:f5:98:06:b3:72:a5:e5:8d:41:3a: 9a:ef:1d:09:33:49:ad:b6:89:b5:8b:69:33:d2:97: a4:cc:b4:cc:5a:73:07:99:27:a7:94:b9:a8:6a:a1: c5:27:28:e4:6c:b5:09:0a:71:95:f8:0b:40:69:98: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:AB:D6:C7:11:E4:E0:64:E5:08:E5:70:3E:B4:87:F2:B6:40:34:A7 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/E8053F36BC3011EA840E2A56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.56.0/24 103.224.59.0/24 202.58.30.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:57:7d:4f:62:9b:33:f4:e6:f0:78:71:91:c3:61:47:5b:c6: 5b:4a:c9:2f:02:de:4f:a0:8c:f7:5c:92:e3:9b:26:b0:b3:d6: ea:7c:ed:45:74:4e:0e:a5:06:00:31:f2:6e:84:47:f5:df:04: 5a:dd:09:a3:a3:3d:8f:0d:f5:44:32:0d:84:42:71:99:26:db: 6d:8f:58:14:4b:00:6b:9f:5d:80:97:19:bf:3b:19:f7:e0:ef: 46:40:fc:ed:4d:85:4c:42:f9:dc:9f:4d:1e:4c:c4:3c:0e:28: 12:65:a4:22:c4:52:4b:44:33:63:89:da:e6:c2:3e:69:dd:f2: 6c:ff:f0:c6:51:75:6d:c7:06:0f:ac:94:fe:f4:53:0e:4c:d0: cf:81:f7:8f:38:8a:92:df:33:91:a6:57:43:53:a2:ec:09:54: e6:72:43:42:6c:50:bc:6c:d4:72:d3:66:bd:09:e1:fd:97:9f: 38:b6:b2:1a:3b:c8:12:b3:0b:cb:dc:f3:b4:59:8a:b3:0d:f6: 0d:e8:7b:b5:f3:c9:45:da:02:e8:1c:a4:5c:73:d6:45:20:9f: 66:95:99:f4:4a:b9:6d:fc:ba:4c:29:20:47:7e:01:e4:4b:42: be:ad:58:b3:b1:2b:92:fb:1f:0b:09:9d:50:55:39:0e:c7:0a: 14:e7:28:ef -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwMjAyMjA1OTQwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzlmZGNiYy1kYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwT0owOcBYDKn48NYZP97G29VfL3XUCeOEtLrXWxyFwbnEbwo7uALvKq8xh3 kyNtV6csRptZqpCZe9QnF1t3n9vTQTBcbtGgohxPUC951ffxdBlKc7hiMeLjpsJj k84Rl8Hsx9XZd1cwqpyYA5q1FosqTd1uKQWkxuq2+dNLGUzCP1pZd5Bbd1I4BxpM 92eQZYXiFncQfiykW0/6+vrS6K//sxRnYvgae8h+ZkJILRJhcdYy51MunbpvFLAo lZpkpX5CGGZSafWYBrNypeWNQTqa7x0JM0mttom1i2kz0pekzLTMWnMHmSenlLmo aqHFJyjkbLUJCnGV+AtAaZg9hwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFK+r1scR 5OBk5QjlcD60h/K2QDSnMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGREQvMjhGQjI0ODRCQzMwMTFFQUJCRTBFQzU1QzRGOUFFMDIvRTgwNTNGMzZC QzMwMTFFQTg0MEUyQTU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABn4DgDBABn4DsDBAHKOh4wDQYJKoZIhvcNAQELBQADggEB AI1XfU9imzP05vB4cZHDYUdbxltKyS8C3k+gjPdckuObJrCz1up87UV0Tg6lBgAx 8m6ER/XfBFrdCaOjPY8N9UQyDYRCcZkm222PWBRLAGufXYCXGb87Gffg70ZA/O1N hUxC+dyfTR5MxDwOKBJlpCLEUktEM2OJ2ubCPmnd8mz/8MZRdW3HBg+slP70Uw5M 0M+B9484ipLfM5GmV0NTouwJVOZyQ0JsULxs1HLTZr0J4f2Xnzi2sho7yBKzC8vc 87RZirMN9g3oe7XzyUXaAugcpFxz1kUgn2aVmfRKuW38ukwpIEd+AeRLQr6tWLOx K5L7HwsJnVBVOQ7HChTnKO8= -----END CERTIFICATE-----Generated at Sat Apr 5 06:09:58 2025 by rpki-client