$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa File: F49AA4A889C211EEADFCF27CC4F9AE02.roa (raw, json) Hash identifier: d2SHnZ0bs3Ad8y5hDn3mylfyHabzy/8uFTs+4jhjfXE= Subject key identifier: 2E:26:D0:14:FF:6F:29:9F:54:A9:79:8F:A8:19:20:41:0E:83:F5:76 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 176C Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa Signing time: Tue 30 Apr 2024 17:25:30 +0000 ROA not before: Tue 30 Apr 2024 17:25:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9287 IP address blocks: 45.125.128.0/22 maxlen: 22 45.125.128.0/24 maxlen: 24 45.125.129.0/24 maxlen: 24 45.125.131.0/24 maxlen: 24 45.252.52.0/22 maxlen: 22 45.252.52.0/24 maxlen: 24 45.252.53.0/24 maxlen: 24 45.252.54.0/24 maxlen: 24 45.252.55.0/24 maxlen: 24 103.55.1.0/24 maxlen: 24 103.55.2.0/24 maxlen: 24 103.76.196.0/22 maxlen: 22 103.76.196.0/24 maxlen: 24 103.76.197.0/24 maxlen: 24 103.76.198.0/24 maxlen: 24 103.76.199.0/24 maxlen: 24 103.115.132.0/22 maxlen: 22 103.115.132.0/24 maxlen: 24 103.115.133.0/24 maxlen: 24 103.115.134.0/24 maxlen: 24 103.115.135.0/24 maxlen: 24 2404:3280::/32 maxlen: 32 2404:3280:1::/48 maxlen: 48 2404:3280:a::/48 maxlen: 48 2404:3280:c::/48 maxlen: 48 2404:3280:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5996 (0x176c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC Validity Not Before: Apr 30 17:25:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6631298a-6266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2c:d7:96:a1:2d:55:b8:aa:a0:8c:18:5b:d6: fa:7d:a7:7b:c5:0d:9d:0a:66:b9:b1:ad:07:52:82: e4:e8:bd:dc:1e:9e:34:7b:fe:5e:f6:5c:04:1d:ab: 5b:a8:8e:21:45:2b:84:ce:45:6a:36:27:f6:ee:24: f6:5a:f2:f8:f4:2e:e8:bc:8a:bc:00:5e:f3:a2:fb: 9d:22:02:22:fa:31:ed:85:17:10:61:75:ef:5c:11: d8:ff:d0:c4:6f:fc:46:78:70:75:46:6a:e2:dd:95: 68:26:b0:cb:5e:d4:17:7a:f5:16:5d:28:84:d2:d4: 48:a8:b2:d4:21:73:a3:76:0d:00:d7:e8:11:b9:75: 85:cf:92:24:f3:0a:b5:08:49:d6:3d:0d:28:d8:0f: 40:d1:49:1a:07:25:7c:ec:c4:01:28:f5:6b:b8:10: 17:35:03:a2:16:ca:20:08:89:a2:cc:52:71:9b:52: ca:f9:56:70:cc:81:f0:a2:9b:ae:00:9f:a8:21:a1: 29:69:91:04:7f:04:bd:0f:bf:75:1f:9a:75:4a:22: 80:09:cc:f9:69:73:64:85:55:8f:73:15:b4:fd:d5: 03:78:c4:42:a1:da:64:e3:b5:03:aa:ae:21:79:8b: 3c:eb:e3:96:74:73:a3:f2:76:6e:29:85:e9:4e:45: d5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:26:D0:14:FF:6F:29:9F:54:A9:79:8F:A8:19:20:41:0E:83:F5:76 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/F49AA4A889C211EEADFCF27CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.128.0/22 45.252.52.0/22 103.55.1.0-103.55.2.255 103.76.196.0/22 103.115.132.0/22 IPv6: 2404:3280::/32 Signature Algorithm: sha256WithRSAEncryption 72:b6:13:24:2f:9c:1f:ea:69:84:03:dd:10:52:9b:d2:3a:67: 4a:01:f9:1d:23:d8:6c:73:c4:40:09:53:3d:69:f3:fb:30:8b: 3a:13:65:1e:a8:d3:3c:8f:03:05:a1:f2:13:bd:11:50:90:e2: 5b:38:86:cb:c2:53:56:c2:fe:57:79:75:d2:60:19:93:0e:b4: 97:61:5d:8c:42:9b:f3:9b:b3:5b:2b:26:b3:d4:bf:65:46:53: 5b:96:b2:88:ce:7a:59:e2:04:a4:04:f1:5f:c7:4f:43:f0:ad: eb:0a:92:26:08:01:f2:35:1f:67:ff:6b:0b:60:fc:5c:52:1e: 7e:a3:1f:26:87:90:f2:c6:c4:c2:0b:f9:ff:78:d1:fa:c3:9f: e0:17:a5:2d:71:33:a2:2c:9c:d6:12:1b:29:16:1f:64:5b:92: 37:9e:6f:d7:55:07:08:93:f5:37:8c:e1:fb:1b:63:46:4e:be: 16:fc:5d:bb:a0:b6:a0:1c:be:16:57:50:ec:f8:ca:20:28:ed: 30:c4:d8:ad:d5:e8:0a:e5:29:c7:28:f0:27:ed:59:0a:0c:63: 2c:ae:f3:35:4a:ba:3e:e2:04:4b:e1:30:d5:5e:76:bd:cd:02: 51:c2:50:44:4f:eb:84:a8:dc:9b:68:34:03:b7:c7:43:8e:de: c2:da:8c:ca -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICF2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjQwNDMwMTcyNTMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMjk4YS02MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSzXlqEtVbiqoIwYW9b6fad7xQ2dCma5sa0HUoLk6L3cHp40e/5e9lwEHatb qI4hRSuEzkVqNif27iT2WvL49C7ovIq8AF7zovudIgIi+jHthRcQYXXvXBHY/9DE b/xGeHB1Rmri3ZVoJrDLXtQXevUWXSiE0tRIqLLUIXOjdg0A1+gRuXWFz5Ik8wq1 CEnWPQ0o2A9A0UkaByV87MQBKPVruBAXNQOiFsogCImizFJxm1LK+VZwzIHwopuu AJ+oIaEpaZEEfwS9D791H5p1SiKACcz5aXNkhVWPcxW0/dUDeMRCodpk47UDqq4h eYs86+OWdHOj8nZuKYXpTkXVPwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFC4m0BT/ bymfVKl5j6gZIEEOg/V2MB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q5RkMvQzZCMDM0QUFCODk5MTFFN0IyNjlCODUwQzRGOUFFMDIvRjQ5QUE0QTg4 OUMyMTFFRUFERkNGMjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MCwEAgABMCYDBAItfYADBAIt/DQwDAMEAGc3AQMEAGc3AgMEAmdMxAMEAmdz hDANBAIAAjAHAwUAJAQygDANBgkqhkiG9w0BAQsFAAOCAQEAcrYTJC+cH+pphAPd EFKb0jpnSgH5HSPYbHPEQAlTPWnz+zCLOhNlHqjTPI8DBaHyE70RUJDiWziGy8JT VsL+V3l10mAZkw60l2FdjEKb85uzWysms9S/ZUZTW5ayiM56WeIEpATxX8dPQ/Ct 6wqSJggB8jUfZ/9rC2D8XFIefqMfJoeQ8sbEwgv5/3jR+sOf4BelLXEzoiyc1hIb KRYfZFuSN55v11UHCJP1N4zh+xtjRk6+Fvxdu6C2oBy+FldQ7PjKICjtMMTYrdXo CuUpxyjwJ+1ZCgxjLK7zNUq6PuIES+Ew1V52vc0CUcJQRE/rhKjcm2g0A7fHQ47e wtqMyg== -----END CERTIFICATE-----Generated at Sat Apr 5 03:53:58 2025 by rpki-client