$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/E4AFD636233211EE8737EE2AC4F9AE02.roa File: E4AFD636233211EE8737EE2AC4F9AE02.roa (raw, json) Hash identifier: mehZcMjFb7HT3F1ePo3UBF+1EGoPOvu0R4233be/rFs= Subject key identifier: AB:13:D7:43:3C:AE:0E:08:37:C8:B5:94:5F:4D:6E:FE:6D:2E:1B:83 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 129C Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/E4AFD636233211EE8737EE2AC4F9AE02.roa Signing time: Sat 08 Mar 2025 17:06:18 +0000 ROA not before: Sat 08 Mar 2025 17:06:18 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9902 IP address blocks: 167.179.4.0/22 maxlen: 22 167.179.4.0/24 maxlen: 24 167.179.5.0/24 maxlen: 24 167.179.6.0/24 maxlen: 24 167.179.7.0/24 maxlen: 24 167.179.8.0/21 maxlen: 21 167.179.8.0/24 maxlen: 24 167.179.9.0/24 maxlen: 24 167.179.10.0/24 maxlen: 24 167.179.11.0/24 maxlen: 24 167.179.12.0/24 maxlen: 24 167.179.13.0/24 maxlen: 24 167.179.14.0/24 maxlen: 24 167.179.15.0/24 maxlen: 24 167.179.16.0/22 maxlen: 24 167.179.28.0/22 maxlen: 22 167.179.28.0/24 maxlen: 24 167.179.29.0/24 maxlen: 24 167.179.30.0/24 maxlen: 24 167.179.31.0/24 maxlen: 24 167.179.36.0/22 maxlen: 24 167.179.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4764 (0x129c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436 Validity Not Before: Mar 8 17:06:18 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67cc7909-e45e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:d0:64:8b:e6:fb:8c:36:8f:56:a6:97:0e: 74:33:e8:fc:f5:c9:84:82:8a:0b:d9:9c:cd:6e:67: d8:71:14:54:0e:ca:9a:19:3e:5e:22:c9:5a:3f:c8: 65:c7:6d:68:bc:27:73:64:c6:23:69:d2:cb:ae:50: 4b:64:b9:9f:f7:4b:4f:d4:89:43:c3:2b:91:8a:ce: f5:3e:0a:3c:69:f7:e5:33:25:19:ac:7c:6a:ad:c1: 42:49:f7:d3:95:78:74:81:72:86:39:5f:3f:6f:b4: 0a:d2:f2:30:ba:f5:7a:34:61:1e:75:ec:55:88:ca: 18:a8:04:ad:cd:d3:a1:75:c2:a0:3d:4a:da:71:fc: a5:00:b6:08:b0:43:48:1f:c7:8d:11:60:d3:14:ab: 50:19:5d:01:82:9e:0a:85:1c:69:35:40:fa:35:a8: 0a:f8:bd:d7:70:72:62:61:30:9f:e6:0d:17:9d:88: cd:bf:db:c5:6e:b4:91:f1:a5:30:d7:33:18:89:08: f6:60:7d:1f:50:5e:41:37:ce:e6:92:5e:df:59:bd: 2f:11:13:56:84:cf:93:68:50:20:44:80:ff:95:66: a1:40:34:76:23:0b:88:e4:17:36:85:94:cf:d4:49: 95:f1:af:7f:37:4b:e6:0c:df:41:d6:49:1b:84:be: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:13:D7:43:3C:AE:0E:08:37:C8:B5:94:5F:4D:6E:FE:6D:2E:1B:83 X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/E4AFD636233211EE8737EE2AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.4.0-167.179.19.255 167.179.28.0/22 167.179.36.0-167.179.47.255 Signature Algorithm: sha256WithRSAEncryption b7:35:81:c5:35:97:36:33:6f:5f:b6:f7:2d:df:19:ff:9e:46: 0b:a9:13:d5:50:8f:f4:da:ba:36:3e:86:54:d2:6b:53:c1:f5: 6b:58:39:07:f5:8f:ad:49:39:dc:96:c3:13:6f:12:01:46:84: e5:c0:45:5c:aa:17:95:a9:5b:cb:64:dc:cd:91:3c:38:fb:db: cb:ca:32:bb:b2:30:5b:f9:0d:4a:b9:42:fd:6f:9e:76:4e:ee: 10:41:a9:da:da:ed:d5:d7:a8:7f:0d:f7:31:05:0f:cf:e4:a7: 93:62:ea:13:e7:02:67:00:1c:46:bf:e4:45:13:a6:ee:0f:f7: 0d:cf:df:1b:5b:f0:a4:fd:79:65:af:cc:05:41:f2:45:6b:58: a1:a2:ba:81:e3:40:a3:71:69:8c:ef:87:7a:32:a9:f5:f2:0a: 90:6d:2e:59:ed:07:3e:c4:55:77:63:bb:b8:45:f2:f3:eb:0a: 98:a6:0a:68:5c:be:61:83:18:d0:2e:b2:71:a5:93:91:5c:05: 84:8c:75:19:a5:99:50:d9:a2:4f:46:f2:f3:07:77:1b:39:00: 92:33:ef:29:72:82:d3:c2:00:33:4d:2a:3d:72:57:41:f0:83: c5:3d:50:d9:76:57:6a:76:ad:16:f9:cd:22:25:4c:4a:4c:bc: fc:fb:a8:b5 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICEpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjUwMzA4MTcwNjE4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2NjNzkwOS1lNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdvQZIvm+4w2j1amlw50M+j89cmEgooL2ZzNbmfYcRRUDsqaGT5eIslaP8hl x21ovCdzZMYjadLLrlBLZLmf90tP1IlDwyuRis71Pgo8afflMyUZrHxqrcFCSffT lXh0gXKGOV8/b7QK0vIwuvV6NGEedexViMoYqAStzdOhdcKgPUracfylALYIsENI H8eNEWDTFKtQGV0Bgp4KhRxpNUD6NagK+L3XcHJiYTCf5g0XnYjNv9vFbrSR8aUw 1zMYiQj2YH0fUF5BN87mkl7fWb0vERNWhM+TaFAgRID/lWahQDR2IwuI5Bc2hZTP 1EmV8a9/N0vmDN9B1kkbhL4DvQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFKsT10M8 rg4IN8i1lF9Nbv5tLhuDMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvRTRBRkQ2MzYy MzMyMTFFRTg3MzdFRTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIwDAMEAqezBAMEAqezEAMEAqezHDAMAwQCp7MkAwQEp7MgMA0G CSqGSIb3DQEBCwUAA4IBAQC3NYHFNZc2M29ftvct3xn/nkYLqRPVUI/02ro2PoZU 0mtTwfVrWDkH9Y+tSTnclsMTbxIBRoTlwEVcqheVqVvLZNzNkTw4+9vLyjK7sjBb +Q1KuUL9b552Tu4QQana2u3V16h/DfcxBQ/P5KeTYuoT5wJnABxGv+RFE6buD/cN z98bW/Ck/Xllr8wFQfJFa1ihorqB40CjcWmM74d6Mqn18gqQbS5Z7Qc+xFV3Y7u4 RfLz6wqYpgpoXL5hgxjQLrJxpZORXAWEjHUZpZlQ2aJPRvLzB3cbOQCSM+8pcoLT wgAzTSo9cldB8IPFPVDZdldqdq0W+c0iJUxKTLz8+6i1 -----END CERTIFICATE-----Generated at Mon Apr 7 00:07:00 2025 by rpki-client