$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/CEF77C10FB3811EF8D87CD5DC4F9AE02.roa File: CEF77C10FB3811EF8D87CD5DC4F9AE02.roa (raw, json) Hash identifier: XlrGroWLq2F8K9TNvUILoHbQClBvuar5myCI5h2ZPFM= Subject key identifier: 4C:71:C5:5F:5C:F5:A1:8B:AA:FC:69:DB:7E:40:97:84:F2:48:E7:E0 Certificate issuer: /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA Certificate serial: 6F Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/CEF77C10FB3811EF8D87CD5DC4F9AE02.roa Signing time: Fri 07 Mar 2025 09:44:48 +0000 ROA not before: Fri 07 Mar 2025 09:44:48 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153494 IP address blocks: 59.152.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917928F Validity Not Before: Mar 7 09:44:48 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67cac010-39bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:a8:96:88:d1:be:e0:71:5b:03:d9:3a:0a: 47:e8:da:6e:04:ae:d1:3f:ba:52:31:d2:64:17:81: 79:9b:56:81:a6:a0:a1:bf:db:5f:9a:1a:c2:63:bf: 65:7b:a4:c0:e5:ac:03:90:64:d5:5f:05:86:40:ec: 0f:bc:7a:b3:07:1c:0f:0a:f1:25:34:6f:7b:00:9e: 02:22:43:24:21:fb:a4:bf:10:64:e8:a0:ae:fd:ee: 95:25:7f:c9:75:66:a0:57:f3:55:0f:7b:8f:99:b6: d7:95:f2:20:f2:52:e8:3b:8f:66:45:9d:90:f7:0e: 6d:a5:28:be:34:a0:83:b5:75:53:12:c1:79:88:6c: b1:c1:3e:f7:58:7b:62:46:6d:56:d5:c9:91:48:54: 5c:07:59:02:c6:ff:52:a6:9f:42:2d:bb:6c:e1:bf: a6:fb:7c:62:a0:e1:ff:89:17:84:2e:a9:69:88:3e: f6:57:42:6b:c6:80:d9:c8:bd:c8:86:78:1a:ee:95: d1:91:65:d3:9e:22:63:8b:54:10:ac:8c:91:a4:3f: d8:78:90:b7:65:4b:63:86:34:0c:65:bc:c0:bc:6d: 5c:62:ba:18:43:25:ae:58:71:e9:d8:d8:74:bb:ad: e9:11:c7:b7:db:d5:b1:e0:85:43:a6:72:34:e0:0b: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:71:C5:5F:5C:F5:A1:8B:AA:FC:69:DB:7E:40:97:84:F2:48:E7:E0 X509v3 Authority Key Identifier: keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/CEF77C10FB3811EF8D87CD5DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.48.0/22 Signature Algorithm: sha256WithRSAEncryption a0:34:57:ab:ba:d3:da:22:65:35:4b:df:c5:82:8c:00:ed:ca: df:9f:62:27:24:b1:99:cb:74:95:61:73:37:78:43:f9:e7:7c: a6:e9:82:7e:5b:b7:0a:27:1d:a6:fb:eb:ce:6b:ad:8b:70:5b: 9c:e4:16:06:65:b6:6b:41:3d:18:3a:00:29:5e:79:72:bd:6a: b8:b1:77:31:ce:c3:a5:d8:8f:37:17:7c:c2:e0:bb:ee:c3:b7: 28:31:a5:37:3e:c4:7e:d1:1d:e3:28:f6:ad:54:1c:53:2a:ff: 1c:2e:51:06:c6:f9:79:7e:8f:0b:97:c8:33:5b:3f:d6:1e:04: f5:e6:a5:1b:93:0b:8f:15:05:a5:79:cf:49:65:a0:62:1b:32: 07:4a:0f:f0:b5:f4:f1:ca:e9:39:22:5c:c1:e2:16:ed:83:ed: 2c:af:da:b0:8e:bf:29:27:26:08:cc:a1:dd:ad:36:7a:dd:bb: 09:b9:2f:4b:16:ea:87:88:31:7b:94:66:88:60:be:42:f0:6f: 37:f1:ef:97:58:be:98:c0:da:00:74:46:04:a9:23:cf:5e:f7: 2f:d6:66:48:bd:e9:95:06:cc:e1:61:67:bf:4b:6f:6b:c6:5f: ae:f9:bc:52:84:2f:ff:18:48:e4:ec:b9:fb:0e:ad:7e:24:45: c8:8c:97:5f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OTI4RjExMC8GA1UEBRMoNTUwQjE2MEZGNEY1REQ3RDg0QUMzRThCOTU5REQ3OUE0 MkZCNTdEQTAeFw0yNTAzMDcwOTQ0NDhaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2FjMDEwLTM5YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ0qiWiNG+4HFbA9k6Ckfo2m4ErtE/ulIx0mQXgXmbVoGmoKG/21+aGsJjv2V7 pMDlrAOQZNVfBYZA7A+8erMHHA8K8SU0b3sAngIiQyQh+6S/EGTooK797pUlf8l1 ZqBX81UPe4+ZtteV8iDyUug7j2ZFnZD3Dm2lKL40oIO1dVMSwXmIbLHBPvdYe2JG bVbVyZFIVFwHWQLG/1Kmn0Itu2zhv6b7fGKg4f+JF4QuqWmIPvZXQmvGgNnIvciG eBruldGRZdOeImOLVBCsjJGkP9h4kLdlS2OGNAxlvMC8bVxiuhhDJa5YcenY2HS7 rekRx7fb1bHghUOmcjTgCykNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTHHFX1z1 oYuq/GnbfkCXhPJI5+AwHwYDVR0jBBgwFoAUVQsWD/T13X2ErD6LlZ3XmkL7V9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc5MjhGLzE2RkY1RjgyNUI5 RDExRUZCMUQ0MjE0NkM0RjlBRTAyL1ZRc1dEX1QxM1gyRXJENkxsWjNYbWtMN1Y5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlFzV0RfVDEzWDJFckQ2TGxaM1hta0w3VjlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTI4Ri8xNkZGNUY4MjVCOUQxMUVGQjFENDIxNDZDNEY5QUUwMi9DRUY3N0MxMEZC MzgxMUVGOEQ4N0NENURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAjuYMDANBgkqhkiG9w0BAQsFAAOCAQEAoDRXq7rT2iJlNUvf xYKMAO3K359iJySxmct0lWFzN3hD+ed8pumCflu3Cicdpvvrzmuti3BbnOQWBmW2 a0E9GDoAKV55cr1quLF3Mc7DpdiPNxd8wuC77sO3KDGlNz7EftEd4yj2rVQcUyr/ HC5RBsb5eX6PC5fIM1s/1h4E9ealG5MLjxUFpXnPSWWgYhsyB0oP8LX08crpOSJc weIW7YPtLK/asI6/KScmCMyh3a02et27CbkvSxbqh4gxe5RmiGC+QvBvN/Hvl1i+ mMDaAHRGBKkjz173L9ZmSL3plQbM4WFnv0tva8Zfrvm8UoQv/xhI5Oy5+w6tfiRF yIyXXw== -----END CERTIFICATE-----Generated at Sun Apr 6 01:30:26 2025 by rpki-client