$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa File: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (raw, json) Hash identifier: z4vQqgZhpqZXS+GtFlO73cYGprnonSTGtg6l7U/hdMg= Subject key identifier: 48:F3:D3:CB:4C:54:51:43:1C:76:8D:4B:5F:53:FE:EA:13:9F:48:BD Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 02F1 Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa Signing time: Sat 18 Jan 2025 06:53:25 +0000 ROA not before: Sat 18 Jan 2025 06:53:25 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 153494 IP address blocks: 45.121.80.0/22 maxlen: 24 103.61.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587 Validity Not Before: Jan 18 06:53:25 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=678b4fe5-8129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:a7:e9:2b:d5:55:95:52:e7:40:2b:fb:38: 51:51:c8:cc:d5:50:39:fe:4b:56:2e:43:05:9e:06: 51:05:74:01:95:89:43:42:b3:2d:ed:7b:31:b1:54: 61:f6:40:83:be:fd:2c:d0:e0:a2:fb:05:e9:9a:63: 93:41:cc:b0:64:44:53:67:da:fb:d4:ff:06:61:6f: 63:8c:f5:81:4a:b1:25:7e:29:3f:8c:8a:b7:e3:68: e5:bc:fe:6a:4b:61:2f:3d:e9:81:e5:ef:90:b4:86: ef:da:89:dd:f8:05:f5:1b:19:9f:df:0f:b2:23:c8: 03:cd:b2:55:5a:01:b0:3a:80:30:3f:e3:b5:f2:65: 22:2f:fe:5e:cd:87:e3:6a:0c:10:19:c3:0f:85:23: 01:8e:91:e8:7d:32:f2:bc:01:67:22:30:72:01:2b: 79:18:82:06:f3:15:8f:98:c4:46:85:9f:82:22:49: e5:43:d9:88:cd:22:29:88:05:71:fa:88:73:55:b6: e6:37:a0:56:3d:4b:47:29:47:0d:8f:99:42:a7:e9: f5:86:c2:8a:f6:1c:22:60:ad:7c:35:b4:cf:8e:13: 28:81:3b:26:dc:6e:38:e4:b8:ce:4b:41:b6:d5:38: 37:d5:5b:43:89:2d:d3:e3:29:8c:f2:c7:84:7e:62: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F3:D3:CB:4C:54:51:43:1C:76:8D:4B:5F:53:FE:EA:13:9F:48:BD X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.80.0/22 103.61.168.0/22 Signature Algorithm: sha256WithRSAEncryption 57:ad:b1:6d:2f:33:7b:0d:75:2f:33:88:04:57:5e:1b:10:6b: ec:4f:64:9b:56:2d:93:94:7b:3a:91:83:19:a3:8a:6b:eb:78: ae:7c:88:7e:25:0d:0a:89:c8:5b:a8:76:de:29:04:7d:23:00: 49:74:0f:2b:21:c9:dd:44:80:6a:41:b1:81:e7:17:de:af:a5: 23:79:19:5c:5c:cc:71:1f:f2:a9:5d:dd:45:2a:2e:46:84:e9: 72:ea:5b:d4:38:46:11:a4:ef:6c:ad:1f:8e:0b:03:8e:e1:5a: c2:d8:af:46:cf:1e:63:2c:11:b9:3f:5d:47:00:37:46:ff:dc: 85:56:1e:9a:ee:a8:ef:4f:eb:e0:46:bf:b3:f0:22:3f:52:fb: 91:aa:b4:d2:37:a8:04:cc:84:20:72:fb:fb:c9:5f:d7:c9:3b: ab:8d:27:b7:06:fe:a0:f8:74:23:29:03:9c:97:a7:cb:3b:a8: 96:4d:57:43:a2:36:1e:7e:60:84:a2:48:76:5e:54:88:ba:15: 42:f1:43:d6:01:70:51:29:fa:99:4c:74:09:a5:41:e8:07:e3: 48:15:63:cd:16:55:7e:27:51:20:ff:b2:d0:50:c9:12:4d:39: 37:c9:f4:52:b7:52:7c:99:23:cd:75:11:bd:c7:68:b7:7c:3b: fa:cb:ae:c1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUwMTE4MDY1MzI1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhiNGZlNS04MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf+n6SvVVZVS50Ar+zhRUcjM1VA5/ktWLkMFngZRBXQBlYlDQrMt7XsxsVRh 9kCDvv0s0OCi+wXpmmOTQcywZERTZ9r71P8GYW9jjPWBSrElfik/jIq342jlvP5q S2EvPemB5e+QtIbv2ond+AX1Gxmf3w+yI8gDzbJVWgGwOoAwP+O18mUiL/5ezYfj agwQGcMPhSMBjpHofTLyvAFnIjByASt5GIIG8xWPmMRGhZ+CIknlQ9mIzSIpiAVx +ohzVbbmN6BWPUtHKUcNj5lCp+n1hsKK9hwiYK18NbTPjhMogTsm3G445LjOS0G2 1Tg31VtDiS3T4ymM8seEfmKebwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEjz08tM VFFDHHaNS19T/uoTn0i9MB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODM1ODcvMUE2OTc5RTJDNjA3MTFFQzlFQ0I1RTY3QzRGOUFFMDIvRTlDREU2M0NE NTY4MTFFRkI0QTBDNTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteVADBAJnPagwDQYJKoZIhvcNAQELBQADggEBAFetsW0v M3sNdS8ziARXXhsQa+xPZJtWLZOUezqRgxmjimvreK58iH4lDQqJyFuodt4pBH0j AEl0Dyshyd1EgGpBsYHnF96vpSN5GVxczHEf8qld3UUqLkaE6XLqW9Q4RhGk72yt H44LA47hWsLYr0bPHmMsEbk/XUcAN0b/3IVWHpruqO9P6+BGv7PwIj9S+5GqtNI3 qATMhCBy+/vJX9fJO6uNJ7cG/qD4dCMpA5yXp8s7qJZNV0OiNh5+YISiSHZeVIi6 FULxQ9YBcFEp+plMdAmlQegH40gVY80WVX4nUSD/stBQyRJNOTfJ9FK3UnyZI811 Eb3HaLd8O/rLrsE= -----END CERTIFICATE-----Generated at Fri Apr 4 23:54:30 2025 by rpki-client