$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/E2A6885AABA111EAB7C51982C4F9AE02.roa File: E2A6885AABA111EAB7C51982C4F9AE02.roa (raw, json) Hash identifier: wEtmlVbcpasnLwFOnZ9sSdZ3rM/5plaOGYJHa+ILEY4= Subject key identifier: B0:8B:59:30:8C:44:6E:30:BE:C7:DC:2D:2E:89:7E:0C:04:AE:90:BF Certificate issuer: /CN=A914781A/serialNumber=4D723955243AE88D552439AF8E4E0A09C8F6590D Certificate serial: 34BD Authority key identifier: 4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/E2A6885AABA111EAB7C51982C4F9AE02.roa Signing time: Tue 04 Mar 2025 15:31:00 +0000 ROA not before: Tue 04 Mar 2025 15:31:00 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45455 IP address blocks: 58.82.187.0/24 maxlen: 24 58.82.188.0/24 maxlen: 24 58.82.189.0/24 maxlen: 24 203.156.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13501 (0x34bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A Validity Not Before: Mar 4 15:31:00 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c71cb4-d3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:81:6b:b7:5f:ed:d7:31:1f:5a:a2:b7:74: 73:9c:e4:90:59:64:f6:c4:e8:e9:41:bf:4a:ed:76: b4:85:89:2e:2a:64:0c:b5:71:92:70:92:2f:57:ba: 31:f3:0b:f4:17:ac:c0:ba:c2:37:78:1a:50:26:0e: a5:34:cb:92:f8:0c:94:8f:f8:5e:02:5c:a5:47:4f: 56:ef:ce:43:24:fe:18:47:51:c9:73:b6:d1:83:28: 48:26:a7:6a:b3:fc:ba:c9:ac:05:ee:6a:38:af:ab: f8:fe:9c:c8:fb:72:a8:a5:2c:44:b2:77:47:f4:84: ba:f2:3d:b9:c5:f1:8e:3e:8c:49:2a:69:76:4d:98: b1:6e:be:94:a3:6d:29:bf:9a:cb:2c:9e:bc:96:29: 50:6b:6c:b5:d7:a0:e6:ef:5d:20:b5:02:6e:d3:51: 3d:cd:ac:58:0d:91:59:a2:77:f6:01:53:68:95:50: b9:d7:dd:51:80:74:c2:b9:b6:25:fc:f7:54:5f:fa: 2b:f0:0f:67:78:ad:65:88:67:46:98:ae:a7:78:9d: 3c:fe:33:47:a7:84:18:d1:30:78:43:ee:fb:5e:cd: 84:ef:91:9b:81:4a:09:2d:f2:f8:1f:70:9a:c0:15: 27:d6:1b:51:77:bf:7d:64:54:1b:55:44:ab:4f:5a: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8B:59:30:8C:44:6E:30:BE:C7:DC:2D:2E:89:7E:0C:04:AE:90:BF X509v3 Authority Key Identifier: keyid:4D:72:39:55:24:3A:E8:8D:55:24:39:AF:8E:4E:0A:09:C8:F6:59:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXI5VSQ66I1VJDmvjk4KCcj2WQ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/D52142701D9B11E2B821FD8908B02CD2/E2A6885AABA111EAB7C51982C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.82.187.0-58.82.189.255 203.156.118.0/24 Signature Algorithm: sha256WithRSAEncryption 06:a0:b8:0a:e6:1d:87:81:9e:1d:14:2d:59:ef:7f:48:e1:e1: ae:6f:eb:7e:3d:1f:fd:69:f4:08:e1:d3:64:05:eb:5d:0e:22: f6:1e:65:c4:1a:8c:f2:a9:4a:8f:85:6b:5c:dd:6c:d3:92:f9: 92:b9:21:a1:79:49:47:9b:19:79:d1:a6:63:00:e2:01:90:b7: 6a:cb:a2:ad:01:f5:02:3d:4b:26:9e:bd:fd:3a:c4:4f:0f:0f: ce:b8:2f:2f:8c:f3:c4:57:d7:8a:c0:f6:b8:f5:d6:35:51:95: 2a:c0:63:ed:ac:d0:47:49:5b:a9:c2:64:02:5f:5e:6e:4f:0a: b9:8d:51:b6:d6:36:79:56:33:2d:58:78:25:e5:5a:13:aa:f7: e1:72:9d:91:f0:ce:93:de:b9:51:47:ea:ad:67:2e:d6:b8:21: f3:e9:a3:9e:81:34:20:43:9b:33:de:2a:c7:0e:74:77:99:f3: d6:29:6d:c2:15:cd:86:0b:22:eb:e6:74:ce:0c:23:40:ba:90: e3:ff:04:de:ef:9b:0d:77:97:ea:16:d7:cc:a7:19:ac:fb:0d: 1d:2e:3e:c6:72:d8:a0:1a:2a:28:1c:74:17:bb:6b:35:5f:af: 40:e9:53:57:fc:9e:2e:90:49:bf:f8:87:2d:3e:10:03:54:d7: 5c:53:a0:c9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICNL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDRENzIzOTU1MjQzQUU4OEQ1NTI0MzlBRjhFNEUwQTA5 QzhGNjU5MEQwHhcNMjUwMzA0MTUzMTAwWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3MWNiNC1kM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl3OBa7df7dcxH1qit3RznOSQWWT2xOjpQb9K7Xa0hYkuKmQMtXGScJIvV7ox 8wv0F6zAusI3eBpQJg6lNMuS+AyUj/heAlylR09W785DJP4YR1HJc7bRgyhIJqdq s/y6yawF7mo4r6v4/pzI+3KopSxEsndH9IS68j25xfGOPoxJKml2TZixbr6Uo20p v5rLLJ68lilQa2y116Dm710gtQJu01E9zaxYDZFZonf2AVNolVC5191RgHTCubYl /PdUX/or8A9neK1liGdGmK6neJ08/jNHp4QY0TB4Q+77Xs2E75GbgUoJLfL4H3Ca wBUn1htRd799ZFQbVUSrT1r+xwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFLCLWTCM RG4wvsfcLS6JfgwErpC/MB8GA1UdIwQYMBaAFE1yOVUkOuiNVSQ5r45OCgnI9lkN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS9ENTIxNDI3MDFE OUIxMUUyQjgyMUZEODkwOEIwMkNEMi9UWEk1VlNRNjZJMVZKRG12ams0S0NjajJX UTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RYSTVWU1E2NkkxVkpEbXZqazRLQ2NqMldRMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc4MUEvRDUyMTQyNzAxRDlCMTFFMkI4MjFGRDg5MDhCMDJDRDIvRTJBNjg4NUFB QkExMTFFQUI3QzUxOTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEADpSuwMEATpSvAMEAMucdjANBgkqhkiG9w0BAQsFAAOC AQEABqC4CuYdh4GeHRQtWe9/SOHhrm/rfj0f/Wn0COHTZAXrXQ4i9h5lxBqM8qlK j4VrXN1s05L5krkhoXlJR5sZedGmYwDiAZC3asuirQH1Aj1LJp69/TrETw8Pzrgv L4zzxFfXisD2uPXWNVGVKsBj7azQR0lbqcJkAl9ebk8KuY1RttY2eVYzLVh4JeVa E6r34XKdkfDOk965UUfqrWcu1rgh8+mjnoE0IEObM94qxw50d5nz1iltwhXNhgsi 6+Z0zgwjQLqQ4/8E3u+bDXeX6hbXzKcZrPsNHS4+xnLYoBoqKBx0F7trNV+vQOlT V/yeLpBJv/iHLT4QA1TXXFOgyQ== -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:44 2025 by rpki-client