$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa File: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (raw, json) Hash identifier: FvWwS3Spm+rRrjY0/JRXkfVlZov8/+1jHfihNOtR95E= Subject key identifier: F3:E6:8A:D9:7B:00:A7:6C:E4:C6:EF:F7:AC:73:26:1A:28:4A:C2:FE Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 24C1 Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa Signing time: Mon 02 Jun 2025 16:14:20 +0000 ROA not before: Mon 02 Jun 2025 16:14:20 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 58921 IP address blocks: 43.225.176.0/24 maxlen: 24 43.225.179.0/24 maxlen: 24 103.248.4.0/24 maxlen: 24 103.248.5.0/24 maxlen: 24 103.248.6.0/24 maxlen: 24 103.248.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9409 (0x24c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: Jun 2 16:14:20 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683dcddc-905f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:12:c0:85:f9:b3:b5:30:09:61:3a:da:34:a2: 94:b9:b7:6b:12:f2:85:1f:ee:c6:df:69:02:04:6e: c1:6c:38:65:32:c5:d3:41:48:46:9a:68:72:17:f9: bd:b8:63:93:ab:a6:9c:56:73:3c:79:34:5c:3a:12: ea:0d:6d:81:9a:b4:e1:af:67:19:97:c6:29:22:4b: a5:8d:bd:23:15:9e:97:c6:6c:cc:46:e7:ff:f0:c3: b0:e0:54:66:f1:18:4a:1e:7a:0b:b8:99:a4:ad:30: a9:18:c5:c1:f2:d5:77:e0:32:80:df:52:bf:17:01: 48:df:e9:0e:73:d5:28:76:78:54:3c:76:8d:41:3d: 3a:0b:a0:3b:8d:a1:93:1c:4d:66:f6:61:7c:cb:06: af:6a:b2:1a:ac:1d:32:ea:8d:2d:4e:8c:8b:78:52: 9b:c8:e4:24:6e:b1:1f:e9:5d:a4:8a:da:0a:14:89: e1:0d:8b:b0:5f:45:93:cb:16:b6:18:0f:3a:1b:19: 51:2a:99:9f:a0:c2:38:14:9e:a7:a3:07:bd:4d:1f: 3f:4c:56:86:ec:78:b9:ae:c7:85:e8:0b:08:b4:fa: 21:25:4c:c7:53:20:03:40:a1:e1:ad:30:2b:e4:39: 06:0d:41:6d:4d:76:a1:f8:fe:87:59:36:f6:6d:0b: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E6:8A:D9:7B:00:A7:6C:E4:C6:EF:F7:AC:73:26:1A:28:4A:C2:FE X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/E1FACBC0B10D11E5894F4D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.225.176.0/24 43.225.179.0/24 103.248.4.0/22 Signature Algorithm: sha256WithRSAEncryption ae:b9:f7:7b:d2:fb:e2:c2:89:09:70:74:70:8b:a0:0d:12:6f: 2f:9a:62:0a:0f:b3:5d:35:bc:40:0d:3a:7c:2d:7f:3d:e2:ed: 76:db:0a:36:f2:16:63:91:e4:c7:b2:f5:81:a2:a6:9b:af:c5: a0:42:88:2d:09:a8:f5:6b:93:ab:f3:46:d0:f5:01:46:7a:33: 1b:27:0a:04:9a:01:28:26:87:be:54:21:78:bd:6c:54:af:30: 4f:f4:27:dc:8c:29:1c:49:c0:4f:9b:3d:d4:63:85:a7:04:90: c7:e2:19:17:fd:7d:dc:4c:54:4b:ff:21:3e:80:2d:cb:41:57: a5:ef:85:08:5b:69:9b:6b:31:e6:e8:44:32:b4:bd:e7:26:d7: 19:63:f3:cb:4b:88:fc:ce:4d:5e:15:95:7b:b0:9e:40:86:13: e8:97:e8:0a:f1:56:11:f7:c4:1e:e6:54:c0:bb:d5:14:6e:82: e8:87:a4:b4:65:54:30:eb:b7:32:2a:31:8b:76:c8:f0:9d:0c: cd:c0:43:cc:51:02:24:ad:9b:f5:fb:d6:52:70:48:4c:ea:e3: 40:a0:1f:0a:ce:e6:93:99:31:1c:29:ee:dc:d0:3f:1a:27:3c: be:c3:9d:5f:e3:35:5c:55:21:1d:3d:46:9d:08:24:a5:a2:88: 12:5c:ef:9b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICJMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjUwNjAyMTYxNDIwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNkY2RkYy05MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvRLAhfmztTAJYTraNKKUubdrEvKFH+7G32kCBG7BbDhlMsXTQUhGmmhyF/m9 uGOTq6acVnM8eTRcOhLqDW2BmrThr2cZl8YpIkuljb0jFZ6XxmzMRuf/8MOw4FRm 8RhKHnoLuJmkrTCpGMXB8tV34DKA31K/FwFI3+kOc9UodnhUPHaNQT06C6A7jaGT HE1m9mF8ywavarIarB0y6o0tToyLeFKbyOQkbrEf6V2kitoKFInhDYuwX0WTyxa2 GA86GxlRKpmfoMI4FJ6nowe9TR8/TFaG7Hi5rseF6AsItPohJUzHUyADQKHhrTAr 5DkGDUFtTXah+P6HWTb2bQs69wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFPPmitl7 AKds5Mbv96xzJhooSsL+MB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjAyNDQvN0VBRkVDQjAzQzA3MTFFNUIxNkNFRjYzQzRGOUFFMDIvRTFGQUNCQzBC MTBEMTFFNTg5NEY0RDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr4bADBAAr4bMDBAJn+AQwDQYJKoZIhvcNAQELBQADggEB AK6593vS++LCiQlwdHCLoA0Sby+aYgoPs101vEANOnwtfz3i7XbbCjbyFmOR5Mey 9YGippuvxaBCiC0JqPVrk6vzRtD1AUZ6MxsnCgSaASgmh75UIXi9bFSvME/0J9yM KRxJwE+bPdRjhacEkMfiGRf9fdxMVEv/IT6ALctBV6XvhQhbaZtrMeboRDK0vecm 1xlj88tLiPzOTV4VlXuwnkCGE+iX6ArxVhH3xB7mVMC71RRuguiHpLRlVDDrtzIq MYt2yPCdDM3AQ8xRAiStm/X71lJwSEzq40CgHwrO5pOZMRwp7tzQPxonPL7DnV/j NVxVIR09Rp0IJKWiiBJc75s= -----END CERTIFICATE-----Generated at Thu Jul 3 14:17:20 2025 by rpki-client