$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa File: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (raw, json) Hash identifier: jSX8BBXcDhKRO02h61flDcL9PRKVJzf27mu274wCdhk= Subject key identifier: F6:D3:57:C5:55:1D:2D:C0:F2:56:B2:9B:D7:12:97:43:09:48:73:4A Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: F6 Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa Signing time: Fri 03 Jan 2025 03:47:13 +0000 ROA not before: Fri 03 Jan 2025 03:47:13 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138015 IP address blocks: 203.57.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: Jan 3 03:47:13 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67775dc1-6c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:ee:73:f9:94:c5:a0:91:35:e0:7c:3e:16: a9:af:59:4a:e2:49:60:5d:fa:46:3a:6d:04:ae:a3: 37:d4:4a:42:34:c0:b0:bc:2c:f9:ac:6c:04:40:34: ea:2e:24:c6:d9:cd:a6:60:be:a5:cd:2b:d7:26:22: 85:81:13:60:be:12:3a:c7:ee:3a:f2:2e:0c:02:ac: 66:f1:d2:fd:83:16:96:92:38:73:4f:04:8b:6b:8f: 4c:ae:e6:ef:7d:85:d1:dc:15:64:bb:b0:21:10:a8: f1:0f:5e:9e:69:fc:d5:0a:07:63:b4:0b:13:d8:a6: ba:b9:f5:26:47:6f:2a:41:ef:b6:ca:f4:0b:a0:05: a6:8e:b0:e8:ad:c0:10:d9:a2:96:2a:ef:67:a7:85: f0:e1:55:5c:22:f0:93:de:4b:ab:1c:85:a1:df:cf: f4:06:72:44:c9:17:f3:84:fc:87:b8:a0:6e:4f:0d: 6f:09:e1:59:5d:f1:c4:a9:b3:f7:1c:ee:5d:58:e3: 63:e2:00:d7:24:47:34:31:77:a7:17:40:9d:71:fa: cc:c4:54:4e:6e:28:82:96:df:fd:35:4a:05:4e:95: 06:f0:f7:dd:d6:8d:33:87:eb:59:a8:8f:43:ff:e6: bc:ae:2a:e6:cd:f2:2c:d0:51:d0:d8:48:31:bc:23: 7b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D3:57:C5:55:1D:2D:C0:F2:56:B2:9B:D7:12:97:43:09:48:73:4A X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/E39F4ED65C2411EEB54C4F43C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.57.29.0/24 Signature Algorithm: sha256WithRSAEncryption 07:b3:b4:64:5b:e8:fe:02:4b:2a:71:fa:44:75:6d:df:7e:23: 73:2b:8e:73:3a:e6:11:43:17:31:f6:bb:80:bf:17:c8:64:d8: 25:07:db:08:ff:92:ef:60:75:4f:9d:01:71:dc:77:9f:07:a6: 3f:0e:2a:ca:04:7a:c2:91:4d:00:16:4f:3e:5b:7f:55:ad:75: a5:d6:11:dd:12:a1:9b:9d:d7:34:37:7f:22:75:ec:47:5d:36: 5b:17:4f:d8:63:82:70:94:59:76:43:56:7a:06:3f:77:b2:fe: 16:a8:61:1a:6d:42:d4:8f:e2:c5:65:c7:ff:c3:2a:e2:4e:7e: 3e:16:cf:66:65:ff:13:dd:c4:21:a3:29:2c:8a:ed:24:8d:b4: f9:ba:7b:b4:88:55:b8:5b:df:b6:17:3a:1a:f4:4a:a8:b8:c6: 73:79:ac:25:23:99:a8:88:b0:6e:37:c3:a1:c5:c4:e2:62:44: 6a:b1:5f:7b:ea:f1:b9:d2:4e:82:29:17:d1:d4:59:ab:72:e5: 6e:b5:bc:e2:30:1b:fd:33:37:c6:b3:c7:23:2e:cc:fa:37:94: 3b:fc:99:59:38:72:d6:e4:51:14:e5:68:70:10:b9:18:d0:bb: a6:b5:e0:d6:a8:12:28:d8:03:ae:3c:aa:82:f0:08:50:2b:c3: 14:80:03:6b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5RTgxMTAvBgNVBAUTKDg1Mjk5RjBEQjE0QzhGMEE1M0QyNDQ2RUZEQjBDQzA1 OUMxNTI0QkYwHhcNMjUwMTAzMDM0NzEzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc3NWRjMS02YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FLuc/mUxaCRNeB8Phapr1lK4klgXfpGOm0ErqM31EpCNMCwvCz5rGwEQDTq LiTG2c2mYL6lzSvXJiKFgRNgvhI6x+468i4MAqxm8dL9gxaWkjhzTwSLa49Mrubv fYXR3BVku7AhEKjxD16eafzVCgdjtAsT2Ka6ufUmR28qQe+2yvQLoAWmjrDorcAQ 2aKWKu9np4Xw4VVcIvCT3kurHIWh38/0BnJEyRfzhPyHuKBuTw1vCeFZXfHEqbP3 HO5dWONj4gDXJEc0MXenF0CdcfrMxFRObiiClt/9NUoFTpUG8Pfd1o0zh+tZqI9D /+a8rirmzfIs0FHQ2EgxvCN7awIDAQABo4IClTCCApEwHQYDVR0OBBYEFPbTV8VV HS3A8laym9cSl0MJSHNKMB8GA1UdIwQYMBaAFIUpnw2xTI8KU9JEbv2wzAWcFSS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzlFOC9GREY2NzMwNjU4 RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3cFQwa1J1X2JETUJad1ZK TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM5RTgvRkRGNjczMDY1OEZEMTFFRTlEMkQyMzc2QzRGOUFFMDIvRTM5RjRFRDY1 QzI0MTFFRUI1NEM0RjQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLOR0wDQYJKoZIhvcNAQELBQADggEBAAeztGRb6P4CSypx +kR1bd9+I3MrjnM65hFDFzH2u4C/F8hk2CUH2wj/ku9gdU+dAXHcd58Hpj8OKsoE esKRTQAWTz5bf1WtdaXWEd0SoZud1zQ3fyJ17EddNlsXT9hjgnCUWXZDVnoGP3ey /haoYRptQtSP4sVlx//DKuJOfj4Wz2Zl/xPdxCGjKSyK7SSNtPm6e7SIVbhb37YX Ohr0Sqi4xnN5rCUjmaiIsG43w6HFxOJiRGqxX3vq8bnSToIpF9HUWaty5W61vOIw G/0zN8azxyMuzPo3lDv8mVk4ctbkURTlaHAQuRjQu6a14NaoEijYA648qoLwCFAr wxSAA2s= -----END CERTIFICATE-----Generated at Mon May 12 18:57:24 2025 by rpki-client