$ rpki-client -vvf rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/E5708A82CD0E11EC8038C333C4F9AE02.roa File: E5708A82CD0E11EC8038C333C4F9AE02.roa (raw, json) Hash identifier: tZvXWmFmcU/1hd7PZK+BYRJdAPFndnrfZlPRuWQgPQA= Subject key identifier: 3D:85:FE:3E:28:36:84:94:E0:49:80:37:04:22:E2:F2:FF:A6:D1:88 Certificate issuer: /CN=A91948F2/serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Certificate serial: 02D2 Authority key identifier: 86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/E5708A82CD0E11EC8038C333C4F9AE02.roa Signing time: Tue 31 Dec 2024 01:03:37 +0000 ROA not before: Tue 31 Dec 2024 01:03:37 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 135391 IP address blocks: 43.224.64.0/22 maxlen: 24 103.43.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 00:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91948F2, serialNumber=8674D77B4037300186D38104838EECA4B81832C2 Validity Not Before: Dec 31 01:03:37 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=677342e9-b552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:11:2a:c1:4e:c6:f3:68:3f:c8:36:78:55: 91:24:ac:2f:a5:0c:cb:14:db:a7:e3:18:06:58:53: b3:88:cb:e5:61:c5:d6:0e:3b:bf:5f:67:6e:bd:a6: c9:06:40:f6:62:66:8d:a9:f4:6c:de:a4:fa:62:5c: f5:50:11:73:b7:96:1d:b3:af:f8:5f:2a:ee:e1:da: 0a:1d:57:69:40:c2:71:94:a3:80:3d:23:9c:4d:14: 25:d8:0a:78:a2:dc:7f:0c:57:42:30:73:4d:2e:5c: 85:45:01:f3:48:be:e4:67:b4:66:e3:4e:d8:f5:96: 93:55:83:75:ec:a0:3b:3a:90:96:9d:d6:ea:f7:aa: 12:11:aa:28:6a:d0:85:40:12:c5:ca:36:1a:55:ef: 25:c3:ca:fd:26:df:f4:c2:8b:18:6d:3e:b7:52:39: a6:d9:d0:00:e4:d0:20:12:33:19:f0:8b:e8:27:ca: 9d:8f:5f:dd:ad:79:8c:86:0d:4f:37:dd:3a:15:f9: 0b:6e:82:62:a3:3d:5d:2b:55:c4:3b:09:15:ac:b7: 5a:eb:0c:8b:04:a1:6c:9a:a6:f8:20:73:ce:f6:29: 1e:85:33:ba:fe:22:b0:90:78:07:78:9c:15:21:38: d7:ff:f8:63:a1:c7:f7:d3:07:cb:12:95:49:d1:9d: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:85:FE:3E:28:36:84:94:E0:49:80:37:04:22:E2:F2:FF:A6:D1:88 X509v3 Authority Key Identifier: keyid:86:74:D7:7B:40:37:30:01:86:D3:81:04:83:8E:EC:A4:B8:18:32:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/hnTXe0A3MAGG04EEg47spLgYMsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnTXe0A3MAGG04EEg47spLgYMsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91948F2/E5F2C7DACD0A11ECAE0A0C2EC4F9AE02/E5708A82CD0E11EC8038C333C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.224.64.0/22 103.43.84.0/22 Signature Algorithm: sha256WithRSAEncryption 46:7a:ea:34:64:d1:97:e8:0e:0b:a2:8a:c4:8d:ec:25:09:9b: 1b:a9:b4:b7:df:bf:17:79:51:62:63:3e:8f:74:d7:3d:f7:e4: 91:4d:fa:5a:ce:14:3a:fe:ea:a2:7e:2e:34:8d:c3:90:80:9d: 26:01:e3:90:a9:f3:88:65:cc:f2:f0:90:d0:f8:15:48:1f:69: f7:c8:28:af:d3:90:63:07:7a:55:54:e4:02:b8:dc:05:34:58: 62:7e:9a:dc:ef:4d:9b:0b:d6:85:4d:c8:ca:77:0b:14:0d:ac: 6a:b4:43:58:59:c5:db:93:43:77:91:97:91:76:f3:eb:d9:38: 2a:3b:a3:dc:95:ac:d4:08:09:68:4f:56:84:84:5d:36:04:72: 85:ce:13:b8:6e:9e:8d:0c:5a:c1:c5:8e:32:c3:7c:30:25:fc: 0e:43:85:d5:26:5d:52:d1:2c:22:2d:9b:e5:97:65:f7:10:39: 15:2f:97:61:f7:b2:79:92:6d:d1:64:28:6e:88:58:42:52:f2: 23:c5:c3:5d:1e:22:ba:bf:af:de:3a:d9:9c:85:d9:36:fb:34: 85:31:f8:01:23:15:48:9b:39:dc:a8:04:67:64:f5:f6:30:83: 10:2b:6c:30:82:ee:90:20:cc:c2:21:98:08:61:15:8d:2c:f8: 6b:1e:21:71 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQ4RjIxMTAvBgNVBAUTKDg2NzRENzdCNDAzNzMwMDE4NkQzODEwNDgzOEVFQ0E0 QjgxODMyQzIwHhcNMjQxMjMxMDEwMzM3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzczNDJlOS1iNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IMRKsFOxvNoP8g2eFWRJKwvpQzLFNun4xgGWFOziMvlYcXWDju/X2duvabJ BkD2YmaNqfRs3qT6Ylz1UBFzt5Yds6/4Xyru4doKHVdpQMJxlKOAPSOcTRQl2Ap4 otx/DFdCMHNNLlyFRQHzSL7kZ7Rm407Y9ZaTVYN17KA7OpCWndbq96oSEaooatCF QBLFyjYaVe8lw8r9Jt/0wosYbT63Ujmm2dAA5NAgEjMZ8IvoJ8qdj1/drXmMhg1P N906FfkLboJioz1dK1XEOwkVrLda6wyLBKFsmqb4IHPO9ikehTO6/iKwkHgHeJwV ITjX//hjocf30wfLEpVJ0Z1/VwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFD2F/j4o NoSU4EmANwQi4vL/ptGIMB8GA1UdIwQYMBaAFIZ013tANzABhtOBBIOO7KS4GDLC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDhGMi9FNUYyQzdEQUNE MEExMUVDQUUwQTBDMkVDNEY5QUUwMi9oblRYZTBBM01BR0cwNEVFZzQ3c3BMZ1lN c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2huVFhlMEEzTUFHRzA0RUVnNDdzcExnWU1zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTQ4RjIvRTVGMkM3REFDRDBBMTFFQ0FFMEEwQzJFQzRGOUFFMDIvRTU3MDhBODJD RDBFMTFFQzgwMzhDMzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr4EADBAJnK1QwDQYJKoZIhvcNAQELBQADggEBAEZ66jRk 0ZfoDguiisSN7CUJmxuptLffvxd5UWJjPo901z335JFN+lrOFDr+6qJ+LjSNw5CA nSYB45Cp84hlzPLwkND4FUgfaffIKK/TkGMHelVU5AK43AU0WGJ+mtzvTZsL1oVN yMp3CxQNrGq0Q1hZxduTQ3eRl5F28+vZOCo7o9yVrNQICWhPVoSEXTYEcoXOE7hu no0MWsHFjjLDfDAl/A5DhdUmXVLRLCItm+WXZfcQORUvl2H3snmSbdFkKG6IWEJS 8iPFw10eIrq/r9462ZyF2Tb7NIUx+AEjFUibOdyoBGdk9fYwgxArbDCC7pAgzMIh mAhhFY0s+GseIXE= -----END CERTIFICATE-----Generated at Mon Apr 14 05:12:16 2025 by rpki-client