$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa File: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (raw, json) Hash identifier: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko= Subject key identifier: 3F:B1:BF:36:D2:02:5D:AA:06:FC:6B:7E:6A:AB:0D:69:B9:CB:F2:6B Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 02ED Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa Signing time: Wed 27 Nov 2024 01:35:09 +0000 ROA not before: Wed 27 Nov 2024 01:35:09 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45248 IP address blocks: 116.193.150.0/23 maxlen: 24 117.121.212.0/24 maxlen: 24 117.121.213.0/24 maxlen: 24 119.63.64.0/24 maxlen: 24 119.63.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Nov 27 01:35:09 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6746774c-5d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:b1:2c:30:5a:c0:01:02:22:1e:64:1d:44:d7: dd:58:6d:70:cd:1b:d3:e5:d8:fd:31:15:56:10:37: e6:41:c2:c0:36:16:f2:53:3b:1f:8d:40:e3:f1:1f: 80:ba:5a:4f:a6:5f:c0:16:5d:1d:e0:8e:b4:f2:b5: 25:5c:17:60:1c:98:af:71:de:f6:b4:10:e8:e2:6a: 27:c2:78:67:dc:71:c2:e6:d4:23:9f:83:5a:ec:9d: 8a:8b:5c:7b:45:7a:c7:18:2f:52:7c:45:64:ac:4e: f9:0c:0b:0a:9f:3a:34:e3:aa:38:26:36:4c:a7:d6: 1a:45:bd:d1:82:39:8f:57:fc:04:61:a8:71:15:21: 01:f6:04:de:c1:45:93:c9:e3:8e:6d:04:1e:97:6e: dd:c1:88:5e:a7:7d:2d:46:e0:56:9c:d5:2f:20:7d: 63:fc:2e:9a:43:af:6e:d0:c3:92:f9:0b:7e:9e:5a: 16:3d:e8:03:5c:ca:41:4d:5f:11:eb:67:71:97:28: 5b:45:96:04:48:23:9d:b1:47:b9:d2:5e:c3:fe:0a: 79:a7:cd:14:1e:3f:0e:91:d6:2c:a5:58:77:ec:e9: 77:52:f2:d6:03:c9:77:31:52:98:65:23:3b:14:d0: 5d:7a:78:55:62:3e:fe:80:19:6f:49:d5:c7:6e:81: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B1:BF:36:D2:02:5D:AA:06:FC:6B:7E:6A:AB:0D:69:B9:CB:F2:6B X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.150.0/23 117.121.212.0/23 119.63.64.0/24 119.63.71.0/24 Signature Algorithm: sha256WithRSAEncryption 94:15:18:35:65:2d:53:27:95:d7:8e:0c:13:4d:c7:d6:c7:b4: 3f:17:84:25:bc:e0:87:7b:76:56:3f:91:ab:33:35:ef:13:8a: 20:77:9c:4f:0e:fa:3b:0c:cc:8f:54:bb:e3:17:5b:7b:37:fa: 26:d5:49:81:7a:8f:e7:ec:26:ac:71:4a:95:18:38:a6:c7:45: 79:6b:99:1e:d4:a8:59:36:ab:85:71:07:05:a8:c9:7f:77:69: 13:6c:ef:3e:f8:12:ef:38:11:6d:62:4e:fd:c0:03:2f:99:fe: 82:01:dc:d1:74:c3:39:f1:c5:3c:27:94:7b:93:7c:c0:bb:1d: 72:da:fc:da:92:8f:67:2a:f4:3b:ad:c9:4a:6d:67:5e:60:80: df:9a:5c:bc:6b:81:6b:b2:47:f6:9c:11:2c:5f:e3:31:47:ed: 66:2f:a0:80:ce:70:9f:2f:65:d3:b1:63:39:6c:2e:9b:8b:57: 68:12:40:cf:f1:fc:1b:a1:2e:df:ff:6c:ce:cf:2b:b9:3d:81: 2c:42:bd:e8:b9:f1:d1:da:65:ff:c8:a8:ac:bd:e4:f4:3a:8a: d4:8c:75:7b:82:be:0d:f0:46:07:62:a1:c7:75:a6:44:2e:bc: 34:9c:9c:5a:51:f6:81:dc:b3:d1:86:70:4f:27:60:3a:70:3c: fe:6a:d6:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQxMTI3MDEzNTA5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2Nzc0Yy01ZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/LEsMFrAAQIiHmQdRNfdWG1wzRvT5dj9MRVWEDfmQcLANhbyUzsfjUDj8R+A ulpPpl/AFl0d4I608rUlXBdgHJivcd72tBDo4monwnhn3HHC5tQjn4Na7J2Ki1x7 RXrHGC9SfEVkrE75DAsKnzo046o4JjZMp9YaRb3RgjmPV/wEYahxFSEB9gTewUWT yeOObQQel27dwYhep30tRuBWnNUvIH1j/C6aQ69u0MOS+Qt+nloWPegDXMpBTV8R 62dxlyhbRZYESCOdsUe50l7D/gp5p80UHj8OkdYspVh37Ol3UvLWA8l3MVKYZSM7 FNBdenhVYj7+gBlvSdXHboEJ1QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFD+xvzbS Al2qBvxrfmqrDWm5y/JrMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvREZCN0ExRkU2 OEZBMTFFRkIyQ0I2RTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAF0wZYDBAF1edQDBAB3P0ADBAB3P0cwDQYJKoZIhvcNAQEL BQADggEBAJQVGDVlLVMnldeODBNNx9bHtD8XhCW84Id7dlY/kaszNe8TiiB3nE8O +jsMzI9Uu+MXW3s3+ibVSYF6j+fsJqxxSpUYOKbHRXlrmR7UqFk2q4VxBwWoyX93 aRNs7z74Eu84EW1iTv3AAy+Z/oIB3NF0wznxxTwnlHuTfMC7HXLa/NqSj2cq9Dut yUptZ15ggN+aXLxrgWuyR/acESxf4zFH7WYvoIDOcJ8vZdOxYzlsLpuLV2gSQM/x /BuhLt//bM7PK7k9gSxCvei58dHaZf/IqKy95PQ6itSMdXuCvg3wRgdiocd1pkQu vDScnFpR9oHcs9GGcE8nYDpwPP5q1qs= -----END CERTIFICATE-----Generated at Sat Apr 26 08:31:47 2025 by rpki-client