$ rpki-client -vvf rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/E8343A14280A11ED80EB7F2FC4F9AE02.roa File: E8343A14280A11ED80EB7F2FC4F9AE02.roa (raw, json) Hash identifier: HdD/+ld1Uf50ShMo2E2ANBSVseJYDOqUpaCHNPJZLUs= Subject key identifier: 8E:57:DE:AE:64:11:90:31:29:AF:C8:6A:AF:15:04:0F:48:96:BE:A5 Certificate issuer: /CN=A9155AE4/serialNumber=3CF91608226819C3E9DA84D1195B5326F9249FBD Certificate serial: 028F Authority key identifier: 3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/E8343A14280A11ED80EB7F2FC4F9AE02.roa Signing time: Sat 01 Mar 2025 03:55:11 +0000 ROA not before: Sat 01 Mar 2025 03:55:11 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 24017 IP address blocks: 202.10.240.0/22 maxlen: 22 202.10.244.0/22 maxlen: 22 203.17.26.0/23 maxlen: 23 203.17.26.0/24 maxlen: 24 203.17.27.0/24 maxlen: 24 203.18.237.0/24 maxlen: 24 203.18.238.0/24 maxlen: 24 203.18.239.0/24 maxlen: 24 203.22.0.0/24 maxlen: 24 203.22.1.0/24 maxlen: 24 203.22.2.0/24 maxlen: 24 203.22.10.0/24 maxlen: 24 203.22.11.0/24 maxlen: 24 203.22.12.0/23 maxlen: 23 203.22.14.0/23 maxlen: 23 203.22.14.0/24 maxlen: 24 203.22.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155AE4 Validity Not Before: Mar 1 03:55:11 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c2851f-df89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:6e:41:8a:87:92:28:4a:67:22:3d:8c:f3: e2:00:7d:10:77:7e:8e:c5:7f:f0:93:2f:77:a5:d7: 6b:05:12:b9:be:e7:4c:c0:bd:d3:e7:4a:47:d8:05: ca:f1:ff:06:52:66:e8:a5:3f:8c:7a:46:32:89:a5: 33:87:27:ef:87:22:6f:87:db:83:be:cf:86:bb:8a: 49:de:55:c0:3f:21:03:a1:20:d8:a0:da:6a:e5:d6: e3:01:68:83:5d:9e:f9:cc:04:50:d7:1f:9f:bf:fc: 28:18:3d:33:41:d9:7a:ba:a4:c4:c4:05:1f:93:6e: e5:95:16:3e:51:03:9e:8b:94:b4:c7:e8:3b:cb:b2: ba:d0:31:6d:39:d8:63:ea:65:cd:83:fa:76:16:22: d5:03:3c:b2:2a:73:ab:cc:21:7a:eb:a7:0f:93:9c: e4:80:e7:56:a1:14:01:0d:9f:01:d0:35:09:11:fa: 87:b9:b2:53:9a:03:8a:57:6a:fe:e0:55:65:60:4b: e9:35:72:f6:4c:48:56:3e:b3:5b:9c:cb:52:24:f5: f7:5c:1b:30:05:7e:4c:aa:e1:46:9b:73:77:95:31: b2:4e:53:de:a4:a7:39:9c:07:8c:d4:8b:af:9d:e4: 2c:0c:71:ed:30:5a:ba:14:cf:56:57:19:2f:ae:37: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:57:DE:AE:64:11:90:31:29:AF:C8:6A:AF:15:04:0F:48:96:BE:A5 X509v3 Authority Key Identifier: keyid:3C:F9:16:08:22:68:19:C3:E9:DA:84:D1:19:5B:53:26:F9:24:9F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/PPkWCCJoGcPp2oTRGVtTJvkkn70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PPkWCCJoGcPp2oTRGVtTJvkkn70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155AE4/E5D6D0AC065311ED827BEF54C4F9AE02/E8343A14280A11ED80EB7F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.10.240.0/21 203.17.26.0/23 203.18.237.0-203.18.239.255 203.22.0.0-203.22.2.255 203.22.10.0-203.22.15.255 Signature Algorithm: sha256WithRSAEncryption bf:8f:cc:fe:ef:61:c8:0a:31:38:23:13:a3:21:57:31:c7:a2: bc:f1:d3:52:e5:ef:62:45:b6:c4:14:cd:cc:1a:ad:e5:b2:3e: 66:a4:3f:0e:eb:39:2c:63:9e:fa:f5:f7:61:d6:79:f0:58:27: 5b:15:2e:55:73:85:31:5c:b1:e8:5f:c9:d3:cc:71:6b:37:bb: cd:22:a5:3d:c1:33:50:ac:ba:5e:a5:c8:1c:fc:61:c0:d3:e7: e1:84:ed:7d:7c:ed:35:d8:3f:59:d7:3b:71:4a:86:e6:77:98: 48:3e:3a:b7:eb:66:57:3c:89:78:2b:06:ed:bb:a0:12:26:75: d7:91:cd:8c:da:1f:e8:f1:b2:5f:25:5d:4e:08:d1:26:f2:08: 35:ea:b7:d2:de:ce:bd:77:c1:d8:71:a8:75:62:c8:e1:9e:54: ce:1f:f8:16:2b:60:14:36:c4:9a:3d:e7:d0:d5:81:27:61:73: 80:72:81:5b:87:8b:27:2b:72:53:6c:a9:f8:b8:38:71:ea:04: b1:cc:75:c7:a7:4b:98:15:1b:dd:61:3b:aa:25:61:4d:a3:c8: 91:38:53:15:df:71:04:83:4b:6f:c4:7f:1e:e0:80:0b:5f:57: 3c:93:ec:de:b9:9d:32:95:e0:15:b4:3a:76:23:89:08:c9:a9: cb:3f:9a:ad -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBRTQxMTAvBgNVBAUTKDNDRjkxNjA4MjI2ODE5QzNFOURBODREMTE5NUI1MzI2 RjkyNDlGQkQwHhcNMjUwMzAxMDM1NTExWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyODUxZi1kZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHVuQYqHkihKZyI9jPPiAH0Qd36OxX/wky93pddrBRK5vudMwL3T50pH2AXK 8f8GUmbopT+MekYyiaUzhyfvhyJvh9uDvs+Gu4pJ3lXAPyEDoSDYoNpq5dbjAWiD XZ75zARQ1x+fv/woGD0zQdl6uqTExAUfk27llRY+UQOei5S0x+g7y7K60DFtOdhj 6mXNg/p2FiLVAzyyKnOrzCF666cPk5zkgOdWoRQBDZ8B0DUJEfqHubJTmgOKV2r+ 4FVlYEvpNXL2TEhWPrNbnMtSJPX3XBswBX5MquFGm3N3lTGyTlPepKc5nAeM1Iuv neQsDHHtMFq6FM9WVxkvrjcr8QIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFI5X3q5k EZAxKa/Iaq8VBA9Ilr6lMB8GA1UdIwQYMBaAFDz5FggiaBnD6dqE0RlbUyb5JJ+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUFFNC9FNUQ2RDBBQzA2 NTMxMUVEODI3QkVGNTRDNEY5QUUwMi9QUGtXQ0NKb0djUHAyb1RSR1Z0VEp2a2tu NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQa1dDQ0pvR2NQcDJvVFJHVnRUSnZra243MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTVBRTQvRTVENkQwQUMwNjUzMTFFRDgyN0JFRjU0QzRGOUFFMDIvRTgzNDNBMTQy ODBBMTFFRDgwRUI3RjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MDsEAgABMDUDBAPKCvADBAHLERowDAMEAMsS7QMEBMsS4DALAwMByxYDBADL FgIwDAMEAcsWCgMEBMsWADANBgkqhkiG9w0BAQsFAAOCAQEAv4/M/u9hyAoxOCMT oyFXMceivPHTUuXvYkW2xBTNzBqt5bI+ZqQ/Dus5LGOe+vX3YdZ58FgnWxUuVXOF MVyx6F/J08xxaze7zSKlPcEzUKy6XqXIHPxhwNPn4YTtfXztNdg/Wdc7cUqG5neY SD46t+tmVzyJeCsG7bugEiZ115HNjNof6PGyXyVdTgjRJvIINeq30t7OvXfB2HGo dWLI4Z5Uzh/4FitgFDbEmj3n0NWBJ2FzgHKBW4eLJytyU2yp+Lg4ceoEscx1x6dL mBUb3WE7qiVhTaPIkThTFd9xBINLb8R/HuCAC19XPJPs3rmdMpXgFbQ6diOJCMmp yz+arQ== -----END CERTIFICATE-----Generated at Sat Apr 5 01:42:39 2025 by rpki-client