$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/76BF7682061B11EAAD56521BC4F9AE02.roa File: 76BF7682061B11EAAD56521BC4F9AE02.roa (raw, json) Hash identifier: 5k3lhIIOE5jK/yOHyIZ8i0wDdX2SrJVnqaK6Nl9SYpA= Subject key identifier: 90:29:12:01:F5:F3:37:53:DA:08:3A:32:60:F0:88:F9:2A:FE:06:2B Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0C71 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/76BF7682061B11EAAD56521BC4F9AE02.roa Signing time: Wed 12 Feb 2025 19:27:05 +0000 ROA not before: Wed 12 Feb 2025 19:27:05 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 21859 IP address blocks: 45.119.4.0/23 maxlen: 23 45.119.4.0/24 maxlen: 24 45.119.5.0/24 maxlen: 24 103.133.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3185 (0xc71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5 Validity Not Before: Feb 12 19:27:05 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67acf609-49b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:34:9e:86:2d:b1:c9:89:57:1a:bd:ff:2b: fd:b8:fc:f4:da:19:b8:3d:6a:d7:eb:6c:b5:4e:c4: 46:74:c7:b6:f1:9f:fd:c4:48:61:22:8e:e2:0f:07: 67:84:de:1a:08:7a:c2:51:da:23:8b:89:de:63:7a: 96:f5:1f:82:5d:8d:73:09:aa:fc:8c:4e:c7:08:08: 08:89:fe:fe:e0:f9:a0:78:db:08:97:2c:f5:7a:f5: 7e:2e:4d:1c:02:5a:35:4c:0d:5d:c7:22:d0:03:f0: 85:be:8a:cf:1f:b7:b5:b5:b5:d1:45:eb:4d:cc:b1: 61:0f:71:42:34:dd:22:74:55:d3:df:16:05:b8:8a: dd:27:33:37:b6:77:16:b8:e0:62:2f:dc:cd:d9:54: 97:f8:95:d0:07:9c:78:2b:aa:77:48:cc:b3:bf:c4: 3b:34:c3:d5:be:8c:12:9a:20:72:e7:81:5d:97:a8: c4:35:6d:c4:81:8c:37:9b:8a:eb:84:d0:77:f3:39: b7:a9:6e:c5:ab:e2:1b:0b:9d:23:81:27:39:c1:d6: 5f:a0:c0:1b:05:39:d7:4d:65:09:c1:5a:73:af:ed: 1b:a0:64:65:3b:b7:ca:e6:11:d5:89:b3:fd:07:5c: 29:91:82:9e:bd:20:ff:54:12:8e:6f:40:de:01:70: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:29:12:01:F5:F3:37:53:DA:08:3A:32:60:F0:88:F9:2A:FE:06:2B X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/76BF7682061B11EAAD56521BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.4.0/23 103.133.93.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ca:0c:ea:02:b6:2c:6a:bc:c1:41:ea:fe:e1:67:ae:e6:83: 0a:e7:a1:45:43:6e:55:95:a8:7b:d1:41:51:70:01:51:e3:65: 76:52:75:a1:df:d7:91:16:01:82:81:8c:22:5d:23:7b:82:18: 55:5f:a6:af:9d:27:9e:24:73:c0:02:23:1f:cb:3a:b6:f7:95: 26:c8:18:e5:9b:74:7b:1e:31:4a:f1:dc:31:e1:10:0e:4b:3d: 2e:7e:f2:4d:bb:25:17:ed:20:33:3a:e8:8c:b9:1b:43:18:18: 83:f3:80:6c:3c:ad:f3:4f:3e:69:f3:94:7f:71:b9:a4:1e:13: 74:40:41:5a:31:5e:c7:d0:45:48:8d:cb:65:0b:33:ba:12:ae: 74:a1:7a:36:5d:5c:1f:ae:27:58:96:ea:b3:1c:c5:c0:16:ca: f2:7d:d3:df:b7:37:ca:67:26:af:59:b7:c5:19:ff:24:0c:5f: 75:ba:4b:cb:37:4f:a9:8f:7f:f9:2d:62:c5:aa:d2:55:41:04: 83:a0:77:ec:8d:8b:aa:3c:7e:e3:61:d4:9a:9d:ea:1d:b1:d9: a3:ab:d5:5e:bb:96:4c:c8:41:a6:49:22:e3:a7:24:b6:e1:52: 27:50:23:16:4b:a1:c7:66:83:16:95:ec:88:ea:2d:8c:d5:fb: 0f:22:9a:87 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjUwMjEyMTkyNzA1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FjZjYwOS00OWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseI0noYtscmJVxq9/yv9uPz02hm4PWrX62y1TsRGdMe28Z/9xEhhIo7iDwdn hN4aCHrCUdoji4neY3qW9R+CXY1zCar8jE7HCAgIif7+4PmgeNsIlyz1evV+Lk0c Alo1TA1dxyLQA/CFvorPH7e1tbXRRetNzLFhD3FCNN0idFXT3xYFuIrdJzM3tncW uOBiL9zN2VSX+JXQB5x4K6p3SMyzv8Q7NMPVvowSmiBy54Fdl6jENW3EgYw3m4rr hNB38zm3qW7Fq+IbC50jgSc5wdZfoMAbBTnXTWUJwVpzr+0boGRlO7fK5hHVibP9 B1wpkYKevSD/VBKOb0DeAXCw6wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJApEgH1 8zdT2gg6MmDwiPkq/gYrMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzRFQjUvQUZFQTI5QzIwNjE5MTFFQTg1NEEzNTE2QzRGOUFFMDIvNzZCRjc2ODIw NjFCMTFFQUFENTY1MjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEtdwQDBABnhV0wDQYJKoZIhvcNAQELBQADggEBAE3KDOoC tixqvMFB6v7hZ67mgwrnoUVDblWVqHvRQVFwAVHjZXZSdaHf15EWAYKBjCJdI3uC GFVfpq+dJ54kc8ACIx/LOrb3lSbIGOWbdHseMUrx3DHhEA5LPS5+8k27JRftIDM6 6Iy5G0MYGIPzgGw8rfNPPmnzlH9xuaQeE3RAQVoxXsfQRUiNy2ULM7oSrnShejZd XB+uJ1iW6rMcxcAWyvJ909+3N8pnJq9Zt8UZ/yQMX3W6S8s3T6mPf/ktYsWq0lVB BIOgd+yNi6o8fuNh1Jqd6h2x2aOr1V67lkzIQaZJIuOnJLbhUidQIxZLocdmgxaV 7IjqLYzV+w8imoc= -----END CERTIFICATE-----Generated at Sat Apr 5 15:20:24 2025 by rpki-client