$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/EE2F10889B4911EFBBAB9381C4F9AE02.roa File: EE2F10889B4911EFBBAB9381C4F9AE02.roa (raw, json) Hash identifier: tGyvJQ+VHA7B7G1gS3LwI/GSq7MJrx8JwpdoWLxQjws= Subject key identifier: F5:48:26:49:43:CE:0E:C1:03:D7:76:25:85:15:E7:FF:A2:04:74:D7 Certificate issuer: /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Certificate serial: 1683 Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/EE2F10889B4911EFBBAB9381C4F9AE02.roa Signing time: Sat 10 May 2025 16:57:57 +0000 ROA not before: Sat 10 May 2025 16:57:57 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 9989 IP address blocks: 27.111.220.0/24 maxlen: 24 118.103.183.0/24 maxlen: 24 2403:b100::/33 maxlen: 33 2403:b100:7f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5763 (0x1683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F Validity Not Before: May 10 16:57:57 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681f8595-df81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f1:94:6b:e4:c2:14:3f:db:85:74:fd:1f:29: 18:87:60:f7:3b:fc:98:90:0f:8c:c5:0b:43:f1:01: 7c:ae:1f:f8:95:be:7c:31:9f:6b:73:30:74:71:b2: 70:e4:6c:a9:ed:57:2b:06:a9:d3:a2:af:43:ce:33: a9:68:8c:ed:18:00:82:1c:e9:f9:58:fc:08:9a:96: 37:cb:4c:fc:5d:a6:75:ad:df:cc:c3:07:02:83:4b: 7d:5b:31:01:ce:a5:43:5f:89:13:54:55:2d:c5:12: 60:9f:6c:02:c6:5d:7c:80:a3:0b:85:8b:bd:e3:17: 9d:98:3f:c8:be:e2:b7:68:3a:57:4f:71:0f:34:fa: 87:07:1a:f1:27:bb:39:a9:82:54:29:d1:99:39:ea: 18:25:5f:ef:43:be:6c:ee:56:83:a6:14:49:93:29: 95:fe:38:b4:ef:78:b2:e6:7d:eb:ce:58:8e:16:c0: 2b:e1:72:46:24:e1:cd:07:cd:1c:2d:0c:b3:03:24: 41:e2:97:2d:e5:14:d5:0b:59:66:9e:9e:1f:55:00: c7:15:af:24:23:53:27:a9:18:61:c0:7a:bd:98:79: 41:80:d8:fb:7e:42:fd:3e:10:bf:7f:d1:8b:fc:d7: d2:fb:a5:20:84:ce:04:07:c9:9a:89:16:32:3a:20: 1a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:48:26:49:43:CE:0E:C1:03:D7:76:25:85:15:E7:FF:A2:04:74:D7 X509v3 Authority Key Identifier: keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/EE2F10889B4911EFBBAB9381C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.111.220.0/24 118.103.183.0/24 IPv6: 2403:b100::/33 Signature Algorithm: sha256WithRSAEncryption 77:ea:dc:73:bb:df:f3:b0:c0:12:7a:9c:87:32:fd:ca:8b:25: 44:91:94:c7:4f:9d:26:36:96:a7:c6:a6:0d:cd:97:5f:f3:2b: e7:8a:e9:19:4c:98:f3:58:76:16:6d:d4:7e:a1:cb:b7:de:ac: 1e:9a:b5:01:26:4c:91:6e:15:0d:15:0b:73:fe:7f:a1:9f:ea: 6c:53:b5:86:5c:29:53:95:42:c0:40:3e:ef:dc:9f:fb:7f:5e: fe:f4:44:a9:a0:12:1e:0f:9e:7f:0f:fd:e7:af:50:20:fa:d6: 8f:09:97:ad:0d:90:c2:1b:3a:1c:f0:3a:c1:43:d5:08:71:97: f8:1d:5c:0e:32:b2:45:5f:af:73:8f:dc:8c:4d:55:cd:76:df: 46:cc:03:a4:c1:a8:86:7f:d5:0b:a3:82:1c:18:38:3d:d6:ad: af:21:fb:20:7b:0b:66:9a:e1:41:18:4a:4c:4a:f2:3a:e3:25: a0:c6:d6:ca:21:d4:f2:75:16:2f:da:23:dc:bf:14:b5:ab:df: 9b:f0:a2:d4:b9:28:69:fa:4b:e5:cd:7c:7b:3e:9f:5f:36:d9: 2e:ec:86:6f:e6:e1:3f:c1:79:cd:3f:c4:c5:8f:2f:2f:75:77: 37:5a:59:b8:67:1a:5e:db:ad:b7:7f:27:f7:ca:8e:49:52:47: eb:51:d9:30 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICFoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1NEMxMTAvBgNVBAUTKDdCM0Y2MEQ5QjFBMjgwMDJBMDc4NzVDQUI1OEEyMTQ1 NzA3M0UxN0YwHhcNMjUwNTEwMTY1NzU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmODU5NS1kZjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/GUa+TCFD/bhXT9HykYh2D3O/yYkA+MxQtD8QF8rh/4lb58MZ9rczB0cbJw 5Gyp7VcrBqnToq9DzjOpaIztGACCHOn5WPwImpY3y0z8XaZ1rd/MwwcCg0t9WzEB zqVDX4kTVFUtxRJgn2wCxl18gKMLhYu94xedmD/IvuK3aDpXT3EPNPqHBxrxJ7s5 qYJUKdGZOeoYJV/vQ75s7laDphRJkymV/ji073iy5n3rzliOFsAr4XJGJOHNB80c LQyzAyRB4pct5RTVC1lmnp4fVQDHFa8kI1MnqRhhwHq9mHlBgNj7fkL9PhC/f9GL /NfS+6UghM4EB8maiRYyOiAaGQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPVIJklD zg7BA9d2JYUV5/+iBHTXMB8GA1UdIwQYMBaAFHs/YNmxooACoHh1yrWKIUVwc+F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjU0Qy81QTU2NEQ0ODE5 RTgxMUU4Qjk2NTBDN0VDNEY5QUUwMi9lejlnMmJHaWdBS2dlSFhLdFlvaFJYQno0 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V6OWcyYkdpZ0FLZ2VIWEt0WW9oUlhCejRYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI1NEMvNUE1NjRENDgxOUU4MTFFOEI5NjUwQzdFQzRGOUFFMDIvRUUyRjEwODg5 QjQ5MTFFRkJCQUI5MzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAAbb9wDBAB2Z7cwDgQCAAIwCAMGByQDsQAAMA0GCSqGSIb3 DQEBCwUAA4IBAQB36txzu9/zsMASepyHMv3KiyVEkZTHT50mNpanxqYNzZdf8yvn iukZTJjzWHYWbdR+ocu33qwemrUBJkyRbhUNFQtz/n+hn+psU7WGXClTlULAQD7v 3J/7f17+9ESpoBIeD55/D/3nr1Ag+taPCZetDZDCGzoc8DrBQ9UIcZf4HVwOMrJF X69zj9yMTVXNdt9GzAOkwaiGf9ULo4IcGDg91q2vIfsgewtmmuFBGEpMSvI64yWg xtbKIdTydRYv2iPcvxS1q9+b8KLUuShp+kvlzXx7Pp9fNtku7IZv5uE/wXnNP8TF jy8vdXc3Wlm4Zxpe2623fyf3yo5JUkfrUdkw -----END CERTIFICATE-----Generated at Tue May 13 19:16:45 2025 by rpki-client