$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa File: 811B0DF274CB11EF941F0A71C4F9AE02.roa (raw, json) Hash identifier: 9CCdXAmyhsUIKZ6n8Wk1KKSvrNfp24roJJogpEjyBYw= Subject key identifier: 0A:B8:D1:7A:58:3A:23:6B:D7:C8:36:01:19:A3:2D:01:07:2F:5A:4C Certificate issuer: /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Certificate serial: 1427 Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa Signing time: Sat 28 Dec 2024 16:54:30 +0000 ROA not before: Sat 28 Dec 2024 16:54:30 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 9464 IP address blocks: 202.12.73.0/24 maxlen: 24 202.12.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5159 (0x1427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700 Validity Not Before: Dec 28 16:54:30 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67702d46-7949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:2b:b9:84:73:0d:d7:55:9b:d3:30:b5:9a: 6e:6f:d5:93:05:d1:72:c1:1e:68:71:83:34:67:b3: 26:a0:48:f5:a8:83:3e:da:63:18:aa:18:dc:a8:c3: 1f:fd:dd:af:46:67:c4:f2:2f:1b:09:8b:ce:96:37: 10:46:1b:8f:4c:23:91:97:a3:a5:bc:b3:2b:38:9b: 62:6c:be:c9:f4:02:ec:87:66:af:78:03:2d:05:18: 91:69:eb:1a:50:89:a4:18:7e:d7:c6:c0:8e:10:76: f2:f8:88:9f:53:ab:2c:c9:82:e9:de:ef:a4:f5:65: 15:dc:2e:74:4e:dd:e7:cc:4b:d3:d6:75:b3:fa:8d: 0f:a4:2e:d7:5e:f8:3f:a9:93:ae:71:5f:37:7c:cd: 4f:27:d3:44:c7:19:e5:48:c4:1c:43:f5:40:d1:b1: 8b:a8:18:47:a5:f7:d9:2a:ab:51:ec:27:4f:10:0a: 79:ba:36:e0:79:56:65:25:a3:93:71:f1:88:ed:dd: 02:86:2d:5f:01:50:50:3f:b8:1b:e8:22:51:11:39: 34:c1:bb:38:dd:49:c9:a9:a9:ab:42:fd:8c:60:71: f3:2a:fb:0f:c3:80:32:38:e3:65:56:e3:6d:cd:32: 2e:42:c9:fd:a9:cc:55:8b:98:84:f4:bc:b8:2f:d3: fe:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:D1:7A:58:3A:23:6B:D7:C8:36:01:19:A3:2D:01:07:2F:5A:4C X509v3 Authority Key Identifier: keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/811B0DF274CB11EF941F0A71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.73.0-202.12.74.255 Signature Algorithm: sha256WithRSAEncryption 5d:23:ba:0e:53:d7:d1:7c:6e:36:db:5f:08:2e:fa:7f:f2:8a: 17:64:cc:93:e6:3c:76:0c:20:62:93:2a:d3:e2:46:26:ca:9b: b5:ef:37:0f:f7:31:1f:87:a4:ba:5d:04:b0:c9:18:e7:5b:34: 57:61:b0:4a:7e:7a:f8:31:46:90:82:a6:96:04:e5:72:36:c3: 51:4c:7a:4a:f6:10:cd:43:82:e6:cb:2c:c6:f3:0f:17:06:81: 47:e1:f1:49:53:ab:2a:31:c9:3a:3e:57:36:59:ff:81:c2:b5: bb:58:bd:54:3e:63:cd:fd:63:ee:ed:61:f6:a6:59:81:be:16: 87:43:45:b2:28:10:38:55:21:c8:09:85:4d:0e:3c:cd:53:f6: e8:98:fa:c0:62:05:4e:4a:fd:cb:18:1c:13:d5:ab:3b:01:d7: 3c:1f:93:c9:db:48:3a:4a:df:77:02:09:a9:cb:d4:8b:5d:29: 53:3a:60:b7:83:ee:93:da:08:c2:8c:77:1e:03:ff:fd:eb:9e: f6:19:d8:1f:a9:c4:fe:cf:d3:51:3a:04:a1:a6:58:bd:e9:6d: bb:35:30:cf:3b:63:7b:97:0b:68:fb:f9:59:2a:d5:04:e9:c3: 76:f3:68:cd:c9:4f:89:6d:0f:05:2a:83:fb:ae:13:79:43:6d: 7e:0c:4d:e1 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICFCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEM5NEEwMzUwRTcwOUY1NkMyMzk2RTMwQjQ3MEM4QjVF MURGQjE3MDAwHhcNMjQxMjI4MTY1NDMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzcwMmQ0Ni03OTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshQruYRzDddVm9MwtZpub9WTBdFywR5ocYM0Z7MmoEj1qIM+2mMYqhjcqMMf /d2vRmfE8i8bCYvOljcQRhuPTCORl6OlvLMrOJtibL7J9ALsh2aveAMtBRiRaesa UImkGH7XxsCOEHby+IifU6ssyYLp3u+k9WUV3C50Tt3nzEvT1nWz+o0PpC7XXvg/ qZOucV83fM1PJ9NExxnlSMQcQ/VA0bGLqBhHpffZKqtR7CdPEAp5ujbgeVZlJaOT cfGI7d0Chi1fAVBQP7gb6CJRETk0wbs43UnJqamrQv2MYHHzKvsPw4AyOONlVuNt zTIuQsn9qcxVi5iE9Ly4L9P+WQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFAq40XpY OiNr18g2ARmjLQEHL1pMMB8GA1UdIwQYMBaAFMlKA1DnCfVsI5bjC0cMi14d+xcA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8wMjMyODM0ODY3 Q0MxMUU4QUQ4NDM5NjNDNEY5QUUwMi95VW9EVU9jSjlXd2psdU1MUnd5TFhoMzdG d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lVb0RVT2NKOVd3amx1TUxSd3lMWGgzN0Z3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzc5OTIvMDIzMjgzNDg2N0NDMTFFOEFEODQzOTYzQzRGOUFFMDIvODExQjBERjI3 NENCMTFFRjk0MUYwQTcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAMoMSQMEAMoMSjANBgkqhkiG9w0BAQsFAAOCAQEAXSO6 DlPX0XxuNttfCC76f/KKF2TMk+Y8dgwgYpMq0+JGJsqbte83D/cxH4ekul0EsMkY 51s0V2GwSn56+DFGkIKmlgTlcjbDUUx6SvYQzUOC5sssxvMPFwaBR+HxSVOrKjHJ Oj5XNln/gcK1u1i9VD5jzf1j7u1h9qZZgb4Wh0NFsigQOFUhyAmFTQ48zVP26Jj6 wGIFTkr9yxgcE9WrOwHXPB+TydtIOkrfdwIJqcvUi10pUzpgt4Puk9oIwox3HgP/ /eue9hnYH6nE/s/TUToEoaZYveltuzUwzztje5cLaPv5WSrVBOnDdvNozclPiW0P BSqD+64TeUNtfgxN4Q== -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:30 2025 by rpki-client