$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/21FE5D3468F911EF986C8281C4F9AE02.roa File: 21FE5D3468F911EF986C8281C4F9AE02.roa (raw, json) Hash identifier: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs= Subject key identifier: C0:81:DC:F1:CA:C9:48:4D:43:E9:74:68:0E:ED:84:82:EE:CA:43:3D Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 02EF Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/21FE5D3468F911EF986C8281C4F9AE02.roa Signing time: Wed 27 Nov 2024 01:35:10 +0000 ROA not before: Wed 27 Nov 2024 01:35:10 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45959 IP address blocks: 43.240.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Nov 27 01:35:10 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6746774e-129c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:64:f8:e4:ff:a2:75:79:df:4d:6b:72:e5:b0: bf:ff:7f:31:9f:c6:02:b0:20:42:40:88:54:2c:b2: 71:2d:d2:77:80:10:9f:97:58:d1:6a:ff:94:95:60: db:25:75:ec:a5:df:be:cb:31:b5:24:e0:85:6c:3b: 2d:ae:01:a9:85:fe:ca:40:80:34:10:1f:eb:1f:f5: 8e:2d:68:50:93:05:25:ce:a4:fa:f4:a0:ec:f3:0e: 4b:4e:6c:12:0a:4f:13:22:0c:28:81:6f:59:da:ae: 80:d8:05:d5:1a:36:1f:ae:d0:f5:95:30:68:48:d0: 9e:1a:37:9b:23:62:32:2e:74:0d:f9:32:81:14:f9: 32:c1:58:21:1a:db:22:3e:db:77:77:9a:4f:78:42: 68:8f:20:91:03:9e:11:8d:5c:b4:a2:65:09:00:70: 07:b1:43:a7:f9:c4:7f:d2:d8:51:b3:dd:d6:d3:84: c7:bd:0d:04:d1:95:59:e4:01:c3:c0:e2:28:13:54: e8:98:e6:75:42:1a:2f:15:85:8e:9d:6a:cd:6e:5b: 1d:57:22:4b:44:9d:59:6c:b2:34:11:79:95:6f:a4: 72:42:1c:a3:65:f9:2f:31:3f:f4:00:a6:17:c8:9c: 64:a0:87:99:f3:03:a3:ef:07:74:cc:dc:63:67:75: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:81:DC:F1:CA:C9:48:4D:43:E9:74:68:0E:ED:84:82:EE:CA:43:3D X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/21FE5D3468F911EF986C8281C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.115.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:37:00:43:a8:1a:e1:2d:df:eb:d7:a0:93:8d:e9:a9:9b:96: 0e:0a:20:de:e3:30:65:01:f6:db:4f:aa:39:6f:6b:a3:f1:e9: 2a:1a:b6:86:4d:63:0f:49:9e:18:44:76:ad:75:79:ee:0f:af: e6:d3:50:49:ad:21:cf:ef:20:97:a4:2e:cf:ad:d6:f4:55:7a: ce:32:e8:cb:20:25:15:6b:ec:f7:51:bb:e4:7e:7c:19:d9:4f: a8:5e:57:f1:04:ec:71:98:0c:97:14:f0:60:6b:b7:90:9c:48: b6:f8:ac:65:86:93:9f:66:a0:b2:2a:41:22:26:3a:8b:57:ac: 26:06:0e:00:ae:ad:5b:83:bd:97:b7:1c:21:5d:1f:1c:a2:dd: f9:78:50:d8:c0:99:93:da:9f:ca:3b:07:1f:d0:20:d8:41:bc: dd:d1:c2:7c:b8:b7:2e:24:eb:af:96:82:73:99:1a:4e:4b:a3: 6f:18:e5:e7:c8:c4:c4:af:2c:72:0c:66:b9:9a:56:c6:cd:87: 48:89:9c:4c:2d:cd:c8:b0:c1:f4:57:91:25:35:34:ab:cb:71: 69:75:bf:97:5e:24:a9:44:70:2a:80:ce:45:b7:8b:c1:bf:3f: 14:15:7a:6a:d9:78:0d:65:53:02:1d:c6:f5:28:7c:12:00:49: a0:66:f9:b4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQxMTI3MDEzNTEwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2Nzc0ZS0xMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGT45P+idXnfTWty5bC//38xn8YCsCBCQIhULLJxLdJ3gBCfl1jRav+UlWDb JXXspd++yzG1JOCFbDstrgGphf7KQIA0EB/rH/WOLWhQkwUlzqT69KDs8w5LTmwS Ck8TIgwogW9Z2q6A2AXVGjYfrtD1lTBoSNCeGjebI2IyLnQN+TKBFPkywVghGtsi Ptt3d5pPeEJojyCRA54RjVy0omUJAHAHsUOn+cR/0thRs93W04THvQ0E0ZVZ5AHD wOIoE1TomOZ1QhovFYWOnWrNblsdVyJLRJ1ZbLI0EXmVb6RyQhyjZfkvMT/0AKYX yJxkoIeZ8wOj7wd0zNxjZ3XL7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMCB3PHK yUhNQ+l0aA7thILuykM9MB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMjFGRTVEMzQ2 OEY5MTFFRjk4NkM4MjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr8HMwDQYJKoZIhvcNAQELBQADggEBAH83AEOoGuEt3+vX oJON6amblg4KIN7jMGUB9ttPqjlva6Px6SoatoZNYw9JnhhEdq11ee4Pr+bTUEmt Ic/vIJekLs+t1vRVes4y6MsgJRVr7PdRu+R+fBnZT6heV/EE7HGYDJcU8GBrt5Cc SLb4rGWGk59moLIqQSImOotXrCYGDgCurVuDvZe3HCFdHxyi3fl4UNjAmZPan8o7 Bx/QINhBvN3Rwny4ty4k66+WgnOZGk5Lo28Y5efIxMSvLHIMZrmaVsbNh0iJnEwt zciwwfRXkSU1NKvLcWl1v5deJKlEcCqAzkW3i8G/PxQVemrZeA1lUwIdxvUofBIA SaBm+bQ= -----END CERTIFICATE-----Generated at Sat Apr 26 09:19:49 2025 by rpki-client