$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa File: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (raw, json) Hash identifier: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg= Subject key identifier: 31:96:D7:CC:32:CC:FC:7C:21:1F:FF:74:DF:83:30:71:1C:81:F9:0A Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2D4E Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa Signing time: Thu 06 Mar 2025 15:32:12 +0000 ROA not before: Thu 06 Mar 2025 15:32:12 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 131227 IP address blocks: 58.84.48.0/22 maxlen: 22 58.84.48.0/24 maxlen: 24 58.84.49.0/24 maxlen: 24 58.84.50.0/24 maxlen: 24 58.84.51.0/24 maxlen: 24 103.240.152.0/22 maxlen: 22 103.240.152.0/24 maxlen: 24 103.240.153.0/24 maxlen: 24 103.240.154.0/24 maxlen: 24 103.240.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11598 (0x2d4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468 Validity Not Before: Mar 6 15:32:12 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c9bffc-ad50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9c:6d:62:bb:9b:77:3d:b6:da:ab:18:a5:b4: cb:22:04:e5:f7:13:8d:2b:6f:d7:b9:14:97:cb:8d: dc:fe:60:74:f7:3e:51:c9:a8:4d:a4:9c:21:9d:db: 44:65:e8:1d:10:df:08:5f:7f:3d:05:aa:41:bd:4c: 4c:12:0c:49:b7:40:3e:c3:33:75:42:3d:a8:81:8f: 60:4c:ca:4a:60:e1:6e:2f:97:56:0c:78:5f:16:58: 3c:a3:74:28:3c:48:41:fe:03:e9:d8:fb:d2:4b:34: 90:ad:26:40:98:d3:64:72:cd:1c:dd:9d:42:28:8b: 0d:09:26:ab:98:3a:31:d5:9f:af:fd:88:c6:c6:0f: a8:88:18:61:41:9c:c3:37:ad:81:e6:d9:86:65:48: 24:83:8c:ed:7c:52:0d:21:ca:84:09:ff:98:70:b1: ad:59:32:6d:ac:74:51:b1:e3:ed:01:57:6f:49:44: 1d:df:66:b4:be:bb:ed:53:2d:15:1a:c5:cd:e8:0b: 25:9d:98:73:46:da:f7:35:09:83:b8:85:0f:d4:31: a5:35:22:69:49:b8:c2:fe:d6:34:ad:52:ae:9d:e1: 36:51:c7:24:c4:2c:6b:ae:de:78:b2:70:4b:ea:e2: fd:f1:01:d2:64:15:7e:37:0b:38:d2:bc:53:26:49: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:96:D7:CC:32:CC:FC:7C:21:1F:FF:74:DF:83:30:71:1C:81:F9:0A X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/2E9087A831D811ECA3C4CE3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.84.48.0/22 103.240.152.0/22 Signature Algorithm: sha256WithRSAEncryption 07:b3:35:eb:cc:e4:e5:0a:ed:8a:20:e7:83:7f:5f:a3:f6:56: ff:7e:84:e9:f0:6a:10:1a:09:fd:b3:e1:7e:a3:60:13:db:04: 30:cf:fb:10:f8:71:d8:b8:72:21:84:86:c1:cb:05:0c:e6:83: 17:80:57:2d:38:a5:76:d8:18:bd:15:bb:02:55:fd:99:16:82: ca:36:1c:71:c1:c6:2b:e7:84:49:ec:5e:d0:c5:12:60:b5:36: a4:f5:35:4a:50:31:19:28:2e:ef:c9:f6:ba:a8:9f:33:58:f9: f4:c8:94:1f:b0:79:86:71:f3:51:5f:db:6b:02:88:e8:d5:24: 5f:bb:76:c7:ee:39:08:ca:4b:e4:3a:7e:dd:87:ba:a4:fe:19: 9d:ad:a9:a0:73:a0:ee:04:88:f1:26:66:32:c2:df:e8:c0:7d: c8:1b:7b:9f:d7:d8:a2:79:75:fd:23:93:1a:46:16:ea:30:e3: ae:7a:bc:13:04:2a:a3:ef:5c:00:17:bf:b9:78:87:c9:8a:5e: 2a:82:14:a1:c6:64:ba:34:c3:aa:dd:32:1f:f6:d0:3c:dd:c3: ee:7f:c8:bb:a3:c0:83:8c:0b:0e:4e:83:45:91:bb:89:28:a4: df:77:e5:4f:88:19:1f:93:d1:8c:f9:ff:97:c9:82:e6:12:ad: 15:d0:68:08 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwMzA2MTUzMjEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5YmZmYy1hZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJxtYrubdz222qsYpbTLIgTl9xONK2/XuRSXy43c/mB09z5RyahNpJwhndtE ZegdEN8IX389BapBvUxMEgxJt0A+wzN1Qj2ogY9gTMpKYOFuL5dWDHhfFlg8o3Qo PEhB/gPp2PvSSzSQrSZAmNNkcs0c3Z1CKIsNCSarmDox1Z+v/YjGxg+oiBhhQZzD N62B5tmGZUgkg4ztfFINIcqECf+YcLGtWTJtrHRRsePtAVdvSUQd32a0vrvtUy0V GsXN6AslnZhzRtr3NQmDuIUP1DGlNSJpSbjC/tY0rVKuneE2UcckxCxrrt54snBL 6uL98QHSZBV+Nws40rxTJklmWwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDGW18wy zPx8IR//dN+DMHEcgfkKMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E0NjgvQ0U0OTQzNzY4QzNBMTFFM0JBMEVBRDJDNTkxMUVBMzIvMkU5MDg3QTgz MUQ4MTFFQ0EzQzRDRTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAI6VDADBAJn8JgwDQYJKoZIhvcNAQELBQADggEBAAezNevM 5OUK7Yog54N/X6P2Vv9+hOnwahAaCf2z4X6jYBPbBDDP+xD4cdi4ciGEhsHLBQzm gxeAVy04pXbYGL0VuwJV/ZkWgso2HHHBxivnhEnsXtDFEmC1NqT1NUpQMRkoLu/J 9rqonzNY+fTIlB+weYZx81Ff22sCiOjVJF+7dsfuOQjKS+Q6ft2HuqT+GZ2tqaBz oO4EiPEmZjLC3+jAfcgbe5/X2KJ5df0jkxpGFuow4656vBMEKqPvXAAXv7l4h8mK XiqCFKHGZLo0w6rdMh/20Dzdw+5/yLujwIOMCw5Og0WRu4kopN935U+IGR+T0Yz5 /5fJguYSrRXQaAg= -----END CERTIFICATE-----Generated at Sat Apr 5 07:12:26 2025 by rpki-client