$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E6EA5626B3A311EF9D9F7429C4F9AE02.roa File: E6EA5626B3A311EF9D9F7429C4F9AE02.roa (raw, json) Hash identifier: 5MZ9veHGyaXeOyXtrCjxvwY/A+cD12Cktg7B3S+6l+A= Subject key identifier: 47:16:C7:12:FE:51:E1:98:41:AF:C5:83:E7:F0:32:25:7F:55:0D:0C Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2204 Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E6EA5626B3A311EF9D9F7429C4F9AE02.roa Signing time: Fri 07 Mar 2025 11:24:49 +0000 ROA not before: Fri 07 Mar 2025 11:24:49 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 834 IP address blocks: 180.210.221.0/24 maxlen: 24 180.210.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8708 (0x2204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6 Validity Not Before: Mar 7 11:24:49 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67cad780-8f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b5:07:59:22:ae:1e:ee:95:26:c2:51:9f:66: 3d:89:c7:f1:c1:e9:51:b0:cd:45:2a:95:75:60:30: 2a:b6:13:17:db:82:56:6f:1a:66:ff:b1:f0:30:6e: 99:4d:d1:9e:20:73:50:f1:e4:17:ff:e1:81:77:ba: 1c:c9:a6:00:66:b5:88:ab:0d:f9:64:80:11:c4:ba: 44:f6:10:60:f0:f4:eb:77:d9:4b:aa:63:44:c8:49: aa:22:61:ef:74:c6:71:69:81:49:91:6f:a2:f3:ab: 12:41:46:4e:de:9b:70:ea:59:f3:f2:e6:82:e2:96: b4:cb:d5:ec:d0:2f:15:2b:78:c9:2c:c7:85:87:41: 76:9c:fa:75:be:f8:5d:74:ab:fa:0c:e4:33:e7:0f: 91:fb:f9:1f:31:01:eb:fa:3b:60:da:90:84:26:55: 85:4f:a4:7d:b0:61:b5:af:23:3d:71:79:98:e8:e1: c5:d6:cd:60:80:71:43:98:74:f3:1b:9d:b8:e1:ac: 31:f1:ef:c4:30:63:7d:1a:c1:ef:6f:da:94:2c:3a: 63:b2:c3:e0:b3:dd:ec:58:63:ae:a7:2e:f3:7a:ce: a9:dd:3f:e4:bd:db:e0:f7:75:ed:a3:48:c5:38:d1: b8:ac:c0:36:84:54:5a:44:1c:05:dd:4b:6b:ab:90: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:16:C7:12:FE:51:E1:98:41:AF:C5:83:E7:F0:32:25:7F:55:0D:0C X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/E6EA5626B3A311EF9D9F7429C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.210.221.0/24 180.210.223.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:ce:13:d7:23:88:ed:4d:7d:14:8c:d6:59:e9:6f:20:0e:a4: b5:7e:b1:72:35:99:aa:8e:3a:d3:21:76:68:de:44:cd:fa:12: b4:e6:db:1f:ce:83:9c:0c:c9:64:e9:2f:ab:4d:b7:0e:0f:3d: 49:49:d7:6a:82:7b:80:59:20:0d:26:6f:fc:1d:09:fb:5d:9a: db:07:a0:5f:ed:99:59:55:e8:dc:17:4a:1d:4f:af:46:50:09: 3c:a7:ac:8b:60:98:4a:f6:37:f3:bf:6e:59:9f:79:fd:42:42: f7:a2:5c:b2:a2:d6:5e:27:ad:83:96:55:3e:dd:3c:33:fa:bf: 84:de:aa:d4:7b:0e:79:92:aa:95:53:17:b7:9f:a1:92:3c:f2: 16:21:c5:75:4f:fd:27:b8:f9:17:ae:1d:06:32:1b:82:23:a5: 83:7d:27:09:ca:9b:3b:b1:c2:20:1c:75:57:5c:fc:3e:8a:46: fc:f7:0c:3e:09:df:22:e8:ba:f4:b8:73:ff:3b:35:f2:4b:1e: 0d:de:fe:75:92:c9:f8:f2:fd:86:37:d6:83:05:0c:64:f4:52: 24:f7:8c:bd:a0:5d:a3:32:80:cc:6f:0b:ab:d8:f0:e8:21:75: 56:ca:bf:9f:4f:43:1a:da:65:8a:35:72:66:e9:bb:36:8f:27: c8:67:3e:68 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICIgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjUwMzA3MTEyNDQ5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2NhZDc4MC04ZjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4rUHWSKuHu6VJsJRn2Y9icfxwelRsM1FKpV1YDAqthMX24JWbxpm/7HwMG6Z TdGeIHNQ8eQX/+GBd7ocyaYAZrWIqw35ZIARxLpE9hBg8PTrd9lLqmNEyEmqImHv dMZxaYFJkW+i86sSQUZO3ptw6lnz8uaC4pa0y9Xs0C8VK3jJLMeFh0F2nPp1vvhd dKv6DOQz5w+R+/kfMQHr+jtg2pCEJlWFT6R9sGG1ryM9cXmY6OHF1s1ggHFDmHTz G5244awx8e/EMGN9GsHvb9qULDpjssPgs93sWGOupy7zes6p3T/kvdvg93Xto0jF ONG4rMA2hFRaRBwF3Utrq5DDUQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEcWxxL+ UeGYQa/Fg+fwMiV/VQ0MMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDRDYvMUU5RTFBQUNEMkVBMTFFNUFGQjFFMjRDQzRGOUFFMDIvRTZFQTU2MjZC M0EzMTFFRjlEOUY3NDI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAC00t0DBAC00t8wDQYJKoZIhvcNAQELBQADggEBAC7OE9cj iO1NfRSM1lnpbyAOpLV+sXI1maqOOtMhdmjeRM36ErTm2x/Og5wMyWTpL6tNtw4P PUlJ12qCe4BZIA0mb/wdCftdmtsHoF/tmVlV6NwXSh1Pr0ZQCTynrItgmEr2N/O/ blmfef1CQveiXLKi1l4nrYOWVT7dPDP6v4TeqtR7DnmSqpVTF7efoZI88hYhxXVP /Se4+ReuHQYyG4IjpYN9JwnKmzuxwiAcdVdc/D6KRvz3DD4J3yLouvS4c/87NfJL Hg3e/nWSyfjy/YY31oMFDGT0UiT3jL2gXaMygMxvC6vY8OghdVbKv59PQxraZYo1 cmbpuzaPJ8hnPmg= -----END CERTIFICATE-----Generated at Fri Apr 4 22:27:25 2025 by rpki-client