$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa File: 8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa (raw, json) Hash identifier: z8WFNNSCDShP5sJws5ME7jFozduDfbcnSPakTQjuffM= Subject key identifier: 5A:9D:07:2F:54:B5:14:5C:09:A4:BE:D6:84:C0:D7:34:59:72:E8:21 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 040E Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa Signing time: Mon 02 Dec 2024 09:26:48 +0000 ROA not before: Mon 02 Dec 2024 09:26:48 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 1239 IP address blocks: 113.20.48.0/20 maxlen: 20 223.29.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:38:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73, serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Dec 2 09:26:48 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=674d7d58-5c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:45:b8:f9:46:6d:f3:f7:91:d7:91:eb:78: 90:53:a4:2c:57:e0:d8:c3:7b:ea:b8:79:b4:cf:8c: 80:85:36:68:19:28:96:1d:03:79:d5:e1:db:2d:92: d0:c9:75:78:33:6b:a9:07:20:59:d6:8f:25:44:e3: 3b:b9:ea:85:3d:8f:e5:e2:90:7a:01:02:af:aa:10: d6:f3:f4:b2:33:c2:f8:94:64:bf:1f:42:74:5c:24: ad:23:ba:75:db:89:3f:60:ef:fd:f7:f5:52:ad:de: eb:9e:43:4b:11:bf:1b:14:cc:9a:e3:8c:b3:f4:32: 33:43:ca:e3:c7:dd:c6:dc:d9:a5:90:9e:9e:fe:0f: bd:75:39:e7:4c:d6:eb:ce:70:6b:6c:64:be:a2:0e: bb:fb:40:0d:ab:61:65:2b:7c:33:0a:b7:12:ec:bf: a2:e0:f6:b9:5d:d4:cd:7a:2f:03:0d:79:d0:b1:e1: ef:bd:76:b2:c4:98:0e:b1:25:21:6a:cb:77:72:f2: 3b:86:5b:f3:c6:4d:3a:5e:62:02:34:50:11:ca:f1: e3:0b:ce:81:56:0a:18:1e:6d:30:99:fa:4b:fd:2a: f4:58:15:88:e1:48:48:04:34:92:fd:be:78:16:fe: 46:9e:8c:62:5f:73:af:26:de:de:30:69:16:e4:81: 00:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:07:2F:54:B5:14:5C:09:A4:BE:D6:84:C0:D7:34:59:72:E8:21 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8E1079DEB08F11EF8E3C4F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.48.0/20 223.29.128.0/19 Signature Algorithm: sha256WithRSAEncryption 6a:96:7d:fb:39:55:74:c4:f5:5c:ac:b3:03:76:3d:2e:0c:08: 82:0c:ee:06:9c:b5:2d:0f:3d:67:ce:da:37:03:b2:97:c7:db: ed:76:70:66:bf:07:95:8e:f8:aa:9a:96:86:c3:1f:7d:11:21: b3:98:f5:fd:67:5c:a7:65:ab:07:72:30:d9:6b:48:d2:4a:f4: 63:d9:de:4b:e7:2a:d4:20:f4:9a:34:d9:e0:31:7c:07:59:9b: d2:e3:e0:1d:78:a5:70:a0:9d:04:cc:5b:2c:a5:25:fa:94:97: e0:be:85:13:60:a7:05:b4:db:7f:73:61:11:9f:c9:75:a7:b4: dc:e6:bb:8a:06:1b:ab:2d:11:1e:c6:16:fa:24:18:12:78:5f: ca:92:59:fe:79:36:97:c5:74:98:23:54:ed:61:1c:5b:fa:27: d4:07:91:d5:c9:e9:bb:a1:53:ec:99:47:e4:6f:14:08:57:70: f6:70:bf:40:e3:8b:86:ff:10:a6:cd:3e:58:a5:7e:33:81:30: e3:72:bd:bc:4b:22:c2:0d:fe:8d:a5:ab:fc:8d:26:1f:82:f9: 0c:e6:5e:c1:f8:86:46:25:04:09:70:e3:ee:db:6d:af:c6:4e: 94:1f:93:fa:54:f1:ab:bf:1e:49:1f:9d:98:b1:e7:af:8f:7d: 94:9b:ec:f6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjQxMjAyMDkyNjQ4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkN2Q1OC01YzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaBFuPlGbfP3kdeR63iQU6QsV+DYw3vquHm0z4yAhTZoGSiWHQN51eHbLZLQ yXV4M2upByBZ1o8lROM7ueqFPY/l4pB6AQKvqhDW8/SyM8L4lGS/H0J0XCStI7p1 24k/YO/99/VSrd7rnkNLEb8bFMya44yz9DIzQ8rjx93G3NmlkJ6e/g+9dTnnTNbr znBrbGS+og67+0ANq2FlK3wzCrcS7L+i4Pa5XdTNei8DDXnQseHvvXayxJgOsSUh ast3cvI7hlvzxk06XmICNFARyvHjC86BVgoYHm0wmfpL/Sr0WBWI4UhIBDSS/b54 Fv5GnoxiX3OvJt7eMGkW5IEA7QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFqdBy9U tRRcCaS+1oTA1zRZcughMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvOEUxMDc5REVC MDhGMTFFRjhFM0M0RjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBARxFDADBAXfHYAwDQYJKoZIhvcNAQELBQADggEBAGqWffs5 VXTE9VysswN2PS4MCIIM7gactS0PPWfO2jcDspfH2+12cGa/B5WO+KqalobDH30R IbOY9f1nXKdlqwdyMNlrSNJK9GPZ3kvnKtQg9Jo02eAxfAdZm9Lj4B14pXCgnQTM WyylJfqUl+C+hRNgpwW0239zYRGfyXWntNzmu4oGG6stER7GFvokGBJ4X8qSWf55 NpfFdJgjVO1hHFv6J9QHkdXJ6buhU+yZR+RvFAhXcPZwv0Dji4b/EKbNPlilfjOB MONyvbxLIsIN/o2lq/yNJh+C+QzmXsH4hkYlBAlw4+7bba/GTpQfk/pU8au/Hkkf nZix56+PfZSb7PY= -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:48 2025 by rpki-client