$ rpki-client -vvf rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa File: E45745342AC411F0B2B1822CC4F9AE02.roa (raw, json) Hash identifier: vV4viCWjAxoxyHSeBD7Bmq6t4EgnYb1F/xaDHHxFuCE= Subject key identifier: 8C:0F:95:B2:76:BA:B9:2C:DB:40:94:C1:A2:9B:C4:F5:67:82:EA:0E Certificate issuer: /CN=A914CDF9/serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Certificate serial: 02 Authority key identifier: AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa Signing time: Tue 06 May 2025 21:55:58 +0000 ROA not before: Tue 06 May 2025 21:55:58 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45189 IP address blocks: 122.99.124.0/22 maxlen: 24 203.175.176.0/24 maxlen: 24 203.185.191.0/24 maxlen: 24 223.26.32.0/20 maxlen: 24 2407:3400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CDF9, serialNumber=AAE8A68811D77156AF48E07814CA8FD6623D98BE Validity Not Before: May 6 21:55:58 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681a856e-2945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:fd:81:5d:4a:3f:cd:81:7c:b4:fe:3b:b6: 4c:8b:76:f1:a2:48:45:5b:29:01:a0:58:65:6b:d5: ab:0b:e2:fe:08:c8:8d:ed:8f:8f:8d:cd:78:13:d5: fd:80:ab:47:b9:97:c5:a9:fc:42:ea:6c:95:e2:ef: 61:c5:3e:1c:0a:96:8c:67:2c:dd:85:c6:73:12:82: fb:ed:41:52:fe:9d:84:04:35:05:97:ab:7f:1f:97: 07:60:0e:ca:d3:d9:c4:06:fb:48:eb:60:6a:85:7d: 03:ff:2b:98:06:fe:10:32:33:51:d2:05:5c:5a:54: 9b:e8:0f:e7:4b:2c:5e:57:4f:a7:61:68:69:f5:11: ca:3f:9a:2e:b5:7f:93:86:73:e9:13:12:f9:37:8e: 88:72:28:02:57:fa:08:ae:16:5b:94:7a:f0:21:7d: ec:ec:79:00:82:ad:40:37:cc:43:9b:08:22:99:1c: e4:31:9c:d9:4f:88:e8:63:5f:5e:30:7d:91:25:4f: da:be:b0:b8:cd:b6:31:32:2f:4d:3e:df:33:51:42: 77:2f:d0:22:73:d1:51:51:6f:d2:b6:ae:32:e4:80: 45:cc:eb:c8:b7:1c:8e:1a:f1:cb:8b:10:b9:f8:9c: 95:50:28:c9:d5:a9:ec:50:20:c9:1d:72:e9:f4:99: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0F:95:B2:76:BA:B9:2C:DB:40:94:C1:A2:9B:C4:F5:67:82:EA:0E X509v3 Authority Key Identifier: keyid:AA:E8:A6:88:11:D7:71:56:AF:48:E0:78:14:CA:8F:D6:62:3D:98:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/quimiBHXcVavSOB4FMqP1mI9mL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/quimiBHXcVavSOB4FMqP1mI9mL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CDF9/016497362AC411F0874B0E2AC4F9AE02/E45745342AC411F0B2B1822CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.99.124.0/22 203.175.176.0/24 203.185.191.0/24 223.26.32.0/20 IPv6: 2407:3400::/32 Signature Algorithm: sha256WithRSAEncryption ab:7a:4e:e9:a9:a3:e3:ef:e1:58:80:32:26:01:44:9f:c0:2f: 58:f9:63:d1:bf:e0:70:07:c7:1f:40:8a:bb:83:8b:ee:d0:d6: 7c:0d:75:f7:c6:d4:3a:3e:56:d1:08:d3:f3:4c:1b:39:4f:b0: a2:b2:93:d7:3f:f8:96:2f:e6:16:b4:29:ce:26:e2:56:bb:9f: 08:8a:c5:4f:53:3e:c7:04:08:7d:06:b7:ca:48:35:72:09:76: c5:8f:3e:d0:6b:77:9c:c0:a4:28:e9:bf:44:a5:63:ce:b2:e8: 19:c4:8b:87:5e:f1:0c:64:bc:b3:88:a2:55:a9:b2:31:25:c5: 89:b0:1b:1a:d0:5a:dd:d9:d8:73:ea:5e:a6:22:e3:b5:22:5b: 15:55:20:1a:9f:a3:c7:25:67:93:9a:9d:1d:3b:12:3e:64:c2: 59:a2:94:e4:d5:ce:3f:ed:4c:50:c6:97:42:6a:99:02:52:41: a7:63:0b:43:a9:84:11:0e:aa:a6:86:8b:40:5f:2d:a6:64:8c: e4:ce:dd:f3:bf:f8:eb:ea:c2:90:88:58:59:a5:d8:b9:63:3d: cb:42:e7:72:cc:63:d3:03:d9:0f:a1:16:64:22:86:b5:58:37: b0:66:c0:33:80:84:99:70:9e:5a:43:e2:80:b4:5b:20:3f:02: bf:ed:95:c8 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Q0RGOTExMC8GA1UEBRMoQUFFOEE2ODgxMUQ3NzE1NkFGNDhFMDc4MTRDQThGRDY2 MjNEOThCRTAeFw0yNTA1MDYyMTU1NThaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MWE4NTZlLTI5NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/z/2BXUo/zYF8tP47tkyLdvGiSEVbKQGgWGVr1asL4v4IyI3tj4+NzXgT1f2A q0e5l8Wp/ELqbJXi72HFPhwKloxnLN2FxnMSgvvtQVL+nYQENQWXq38flwdgDsrT 2cQG+0jrYGqFfQP/K5gG/hAyM1HSBVxaVJvoD+dLLF5XT6dhaGn1Eco/mi61f5OG c+kTEvk3johyKAJX+giuFluUevAhfezseQCCrUA3zEObCCKZHOQxnNlPiOhjX14w fZElT9q+sLjNtjEyL00+3zNRQncv0CJz0VFRb9K2rjLkgEXM68i3HI4a8cuLELn4 nJVQKMnVqexQIMkdcun0mYCnAgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUjA+Vsna6 uSzbQJTBopvE9WeC6g4wHwYDVR0jBBgwFoAUquimiBHXcVavSOB4FMqP1mI9mL4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDREY5LzAxNjQ5NzM2MkFD NDExRjA4NzRCMEUyQUM0RjlBRTAyL3F1aW1pQkhYY1ZhdlNPQjRGTXFQMW1JOW1M NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcXVpbWlCSFhjVmF2U09CNEZNcVAxbUk5bUw0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0RGOS8wMTY0OTczNjJBQzQxMUYwODc0QjBFMkFDNEY5QUUwMi9FNDU3NDUzNDJB QzQxMUYwQjJCMTgyMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBABggrBgEFBQcBBwEB/wQx MC8wHgQCAAEwGAMEAnpjfAMEAMuvsAMEAMu5vwMEBN8aIDANBAIAAjAHAwUAJAc0 ADANBgkqhkiG9w0BAQsFAAOCAQEAq3pO6amj4+/hWIAyJgFEn8AvWPlj0b/gcAfH H0CKu4OL7tDWfA1198bUOj5W0QjT80wbOU+worKT1z/4li/mFrQpzibiVrufCIrF T1M+xwQIfQa3ykg1cgl2xY8+0Gt3nMCkKOm/RKVjzrLoGcSLh17xDGS8s4iiVamy MSXFibAbGtBa3dnYc+pepiLjtSJbFVUgGp+jxyVnk5qdHTsSPmTCWaKU5NXOP+1M UMaXQmqZAlJBp2MLQ6mEEQ6qpoaLQF8tpmSM5M7d87/46+rCkIhYWaXYuWM9y0Ln csxj0wPZD6EWZCKGtVg3sGbAM4CEmXCeWkPigLRbID8Cv+2VyA== -----END CERTIFICATE-----Generated at Thu May 15 20:16:00 2025 by rpki-client