$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/E42A8D9016CB11EF805A073EC4F9AE02.roa File: E42A8D9016CB11EF805A073EC4F9AE02.roa (raw, json) Hash identifier: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk= Subject key identifier: F4:32:F6:C2:40:8C:C6:21:B4:61:E8:92:1F:EC:C3:D8:A2:A1:D6:05 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 05F9 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/E42A8D9016CB11EF805A073EC4F9AE02.roa Signing time: Tue 11 Mar 2025 07:11:02 +0000 ROA not before: Tue 11 Mar 2025 07:11:02 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 142565 IP address blocks: 14.128.8.0/24 maxlen: 24 103.249.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1529 (0x5f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0 Validity Not Before: Mar 11 07:11:02 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67cfe206-d9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:3d:e4:2d:f5:9e:5d:e9:2b:b3:b1:36:13: 7d:95:40:0d:67:3c:0b:97:28:ee:dc:68:84:b2:8c: a3:52:94:11:70:4f:94:d2:75:02:ea:b2:7e:fb:50: e5:3e:45:49:ea:0f:5a:1a:08:03:73:5e:0a:f0:d1: 17:6c:b0:fa:c4:ef:24:b2:d0:86:85:45:43:65:6b: 10:87:a7:7f:e0:a2:f8:dd:b5:da:1d:4d:84:36:79: 14:81:25:e5:d0:bc:62:e9:0e:2e:8c:ed:4a:1a:34: 3b:29:62:46:ca:a3:66:35:ad:02:69:9d:25:3f:8b: 36:dd:6c:5c:fe:52:a0:91:5e:48:e5:bb:5a:9e:74: fb:ee:f2:05:7d:27:55:fd:09:eb:0b:dc:c7:1e:cd: f0:04:36:68:0a:3c:ff:e1:f8:b9:45:1a:55:c5:bd: 15:24:16:2e:1c:93:35:2c:9b:0f:00:6b:ce:58:80: 62:30:b2:75:c5:32:4f:24:ae:20:f3:f1:4a:15:aa: 33:41:52:09:58:7b:c0:9e:ba:c2:34:1a:06:f1:3c: 81:69:3e:29:f8:52:29:d4:3e:d9:8d:ed:ad:79:21: 9d:52:f1:b6:88:b8:c1:93:0a:7f:62:e8:33:a7:56: cd:1e:ef:1e:47:07:9c:4b:fd:5f:fd:e1:d2:57:a0: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:32:F6:C2:40:8C:C6:21:B4:61:E8:92:1F:EC:C3:D8:A2:A1:D6:05 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/E42A8D9016CB11EF805A073EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.128.8.0/24 103.249.215.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:11:cf:81:df:22:b9:13:4a:2b:de:65:0f:66:13:d5:b9:01: 3d:ae:4e:b8:a7:2b:1b:e5:8a:4d:3e:6d:48:1a:7c:ae:f3:32: dc:27:3f:10:1a:b8:e2:d8:41:ce:22:10:ad:cb:6a:17:45:f9: 04:47:9c:de:cd:54:b4:47:1c:f5:d3:a2:45:77:57:d6:a6:3a: 3b:e9:ce:47:77:e0:22:fb:b4:51:b7:94:99:4c:20:28:80:d9: c3:0b:7d:e3:ad:ac:4f:ce:ac:57:6f:59:88:85:fe:bf:40:41: 03:14:4a:55:48:17:50:e0:c4:bc:b4:19:4a:64:47:dc:db:2e: b7:fe:5a:bc:79:20:1c:bc:1c:1d:f4:1c:32:6d:8d:9e:6c:06: 70:2e:91:bb:8b:3f:22:6d:a0:20:57:c5:f4:3b:bd:a9:70:85: 2a:09:7f:ee:4f:3c:5b:b0:65:7f:4e:92:2e:69:48:52:61:e2: ac:8b:68:88:94:40:da:d2:85:90:62:16:f4:40:7f:a5:51:75: aa:7a:a5:25:3d:cc:9b:3c:2f:db:d7:cf:74:64:0f:f1:f8:f1: 7d:f2:55:ad:71:b4:20:bc:9f:a0:f2:ef:17:fd:9a:9a:50:d8: 5a:a3:bd:83:64:a1:bc:ba:b5:99:8f:6a:86:e5:a5:42:59:bc: 6e:6c:48:67 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwMzExMDcxMTAyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NmZTIwNi1kOWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+c95C31nl3pK7OxNhN9lUANZzwLlyju3GiEsoyjUpQRcE+U0nUC6rJ++1Dl PkVJ6g9aGggDc14K8NEXbLD6xO8kstCGhUVDZWsQh6d/4KL43bXaHU2ENnkUgSXl 0Lxi6Q4ujO1KGjQ7KWJGyqNmNa0CaZ0lP4s23Wxc/lKgkV5I5btannT77vIFfSdV /QnrC9zHHs3wBDZoCjz/4fi5RRpVxb0VJBYuHJM1LJsPAGvOWIBiMLJ1xTJPJK4g 8/FKFaozQVIJWHvAnrrCNBoG8TyBaT4p+FIp1D7Zje2teSGdUvG2iLjBkwp/Yugz p1bNHu8eRwecS/1f/eHSV6C3mwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPQy9sJA jMYhtGHokh/sw9iiodYFMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ2QjAvMzJFOTg3M0NCRkM4MTFFQkI5RTRFQjZFQzRGOUFFMDIvRTQyQThEOTAx NkNCMTFFRjgwNUEwNzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAOgAgDBABn+dcwDQYJKoZIhvcNAQELBQADggEBAF8Rz4Hf IrkTSiveZQ9mE9W5AT2uTrinKxvlik0+bUgafK7zMtwnPxAauOLYQc4iEK3LahdF +QRHnN7NVLRHHPXTokV3V9amOjvpzkd34CL7tFG3lJlMICiA2cMLfeOtrE/OrFdv WYiF/r9AQQMUSlVIF1DgxLy0GUpkR9zbLrf+Wrx5IBy8HB30HDJtjZ5sBnAukbuL PyJtoCBXxfQ7valwhSoJf+5PPFuwZX9Oki5pSFJh4qyLaIiUQNrShZBiFvRAf6VR dap6pSU9zJs8L9vXz3RkD/H48X3yVa1xtCC8n6Dy7xf9mppQ2FqjvYNkoby6tZmP aoblpUJZvG5sSGc= -----END CERTIFICATE-----Generated at Sat Apr 5 12:29:09 2025 by rpki-client