$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/4A2FAA9CA91511ED9E2AC948C4F9AE02.roa File: 4A2FAA9CA91511ED9E2AC948C4F9AE02.roa (raw, json) Hash identifier: 4yfWRgYWyN+Mv4gIICmnpB2EvTMNs4jSY+Jh+PPBGG0= Subject key identifier: A4:E5:33:C3:6C:A6:7C:8F:31:30:DE:F8:3F:66:CA:BD:2E:E8:43:D7 Certificate issuer: /CN=A916DB8E/serialNumber=9DE3DA7A0AC6940D32ABB9CFFCB061F2AEE5661D Certificate serial: 0489 Authority key identifier: 9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/4A2FAA9CA91511ED9E2AC948C4F9AE02.roa Signing time: Thu 03 Apr 2025 00:25:47 +0000 ROA not before: Thu 03 Apr 2025 00:25:47 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140224 IP address blocks: 45.113.0.0/22 maxlen: 24 103.52.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB8E Validity Not Before: Apr 3 00:25:47 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67edd58a-020f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e6:bd:25:0c:59:61:e0:47:fa:a2:67:f0:63: 3c:ce:90:4d:ae:e0:30:2e:99:04:9c:be:29:83:c0: 60:b3:cc:dc:8e:a2:69:71:18:6a:9c:0c:70:a2:8c: b1:fc:e2:1a:62:f4:0f:90:d4:85:e0:06:eb:09:d7: 52:05:fe:ea:30:db:3d:69:8a:0d:46:5a:86:78:9e: f1:bc:a0:62:47:97:2e:2d:b5:c2:5c:fd:72:18:cc: 7a:fa:78:d9:b8:8e:a5:92:4a:2d:00:0a:15:c1:9f: 8c:c4:cd:b2:c7:18:5b:8b:a0:dc:e7:48:df:4e:78: 06:f8:97:93:0c:b9:32:9f:e6:bc:7e:2e:6d:6d:1e: e4:40:35:82:1c:e2:95:59:cf:4b:6b:c9:da:99:32: f6:1d:63:d3:e3:e1:1d:05:d2:71:d6:0b:08:ac:ad: 70:53:5e:a3:c0:ae:47:4a:03:5e:16:9f:68:03:97: 8b:f0:fe:84:bb:7e:41:89:37:d1:b2:b7:28:9d:52: 77:56:e6:3f:cb:e9:0f:01:e8:2c:e8:67:fc:d4:40: b0:4b:c1:52:d6:9d:34:43:25:96:3a:14:5c:4d:b5: a4:bb:18:b4:31:09:42:fd:ca:62:6b:ce:9f:5b:b7: 52:70:9e:df:41:aa:3d:37:c8:78:56:ae:6d:2b:7e: 96:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E5:33:C3:6C:A6:7C:8F:31:30:DE:F8:3F:66:CA:BD:2E:E8:43:D7 X509v3 Authority Key Identifier: keyid:9D:E3:DA:7A:0A:C6:94:0D:32:AB:B9:CF:FC:B0:61:F2:AE:E5:66:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/nePaegrGlA0yq7nP_LBh8q7lZh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nePaegrGlA0yq7nP_LBh8q7lZh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB8E/FF80276C3BCC11EC8A6BCD7EC4F9AE02/4A2FAA9CA91511ED9E2AC948C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.0.0/22 103.52.152.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:98:44:63:1a:f5:06:5a:f7:9f:dd:6f:16:ff:a9:d1:ca:65: c8:a4:df:95:37:fb:30:19:e6:7b:97:c1:1f:b0:0b:cc:dd:2c: 4e:40:67:33:90:06:c9:63:6c:71:7a:0b:c7:66:d6:1c:f3:22: c0:9f:0b:31:0b:cf:95:7b:7b:98:7b:a4:a0:cd:2d:f0:df:2a: f4:6e:dd:fa:ea:39:35:38:bc:3b:02:58:f1:af:6d:bb:29:6f: 31:28:fc:7f:7a:fc:bc:48:21:8c:8e:9c:0b:1b:e4:00:6e:01: f1:ea:bf:0c:a7:e4:62:4f:56:38:fc:cc:7e:1c:8b:c7:19:5a: bf:05:26:4e:d5:8a:d9:f1:cb:c8:01:db:69:c7:69:28:51:7c: c4:dc:ea:15:4e:df:09:89:0e:48:52:aa:f7:d6:56:72:23:fa: 2e:c6:58:c5:67:6a:a0:28:a2:a3:58:e2:14:a5:1e:30:1d:a0: f0:ce:99:20:cc:1c:eb:10:4b:1b:56:b8:45:f6:42:31:cf:21: 5f:4b:9a:95:6c:16:d5:c8:20:08:77:f2:f8:7e:fb:55:1f:73: 4f:cc:34:48:84:1f:a3:74:1b:0c:28:db:f7:5e:7b:2f:0f:e9: 5c:23:34:86:6b:db:87:7b:8f:23:55:26:a2:c8:61:ed:01:54: e1:3b:f8:d8 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCOEUxMTAvBgNVBAUTKDlERTNEQTdBMEFDNjk0MEQzMkFCQjlDRkZDQjA2MUYy QUVFNTY2MUQwHhcNMjUwNDAzMDAyNTQ3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkZDU4YS0wMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOa9JQxZYeBH+qJn8GM8zpBNruAwLpkEnL4pg8Bgs8zcjqJpcRhqnAxwooyx /OIaYvQPkNSF4AbrCddSBf7qMNs9aYoNRlqGeJ7xvKBiR5cuLbXCXP1yGMx6+njZ uI6lkkotAAoVwZ+MxM2yxxhbi6Dc50jfTngG+JeTDLkyn+a8fi5tbR7kQDWCHOKV Wc9La8namTL2HWPT4+EdBdJx1gsIrK1wU16jwK5HSgNeFp9oA5eL8P6Eu35BiTfR srconVJ3VuY/y+kPAegs6Gf81ECwS8FS1p00QyWWOhRcTbWkuxi0MQlC/cpia86f W7dScJ7fQao9N8h4Vq5tK36WgQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKTlM8Ns pnyPMTDe+D9myr0u6EPXMB8GA1UdIwQYMBaAFJ3j2noKxpQNMqu5z/ywYfKu5WYd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI4RS9GRjgwMjc2QzNC Q0MxMUVDOEE2QkNEN0VDNEY5QUUwMi9uZVBhZWdyR2xBMHlxN25QX0xCaDhxN2xa aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25lUGFlZ3JHbEEweXE3blBfTEJoOHE3bFpoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkRCOEUvRkY4MDI3NkMzQkNDMTFFQzhBNkJDRDdFQzRGOUFFMDIvNEEyRkFBOUNB OTE1MTFFRDlFMkFDOTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItcQADBAJnNJgwDQYJKoZIhvcNAQELBQADggEBAF+YRGMa 9QZa95/dbxb/qdHKZcik35U3+zAZ5nuXwR+wC8zdLE5AZzOQBsljbHF6C8dm1hzz IsCfCzELz5V7e5h7pKDNLfDfKvRu3frqOTU4vDsCWPGvbbspbzEo/H96/LxIIYyO nAsb5ABuAfHqvwyn5GJPVjj8zH4ci8cZWr8FJk7Vitnxy8gB22nHaShRfMTc6hVO 3wmJDkhSqvfWVnIj+i7GWMVnaqAooqNY4hSlHjAdoPDOmSDMHOsQSxtWuEX2QjHP IV9LmpVsFtXIIAh38vh++1Ufc0/MNEiEH6N0Gwwo2/deey8P6VwjNIZr24d7jyNV JqLIYe0BVOE7+Ng= -----END CERTIFICATE-----Generated at Sat Apr 5 12:51:18 2025 by rpki-client