$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa File: 0897E314434811EF8E76757AC4F9AE02.roa (raw, json) Hash identifier: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI= Subject key identifier: B6:4A:EC:C9:98:AC:2D:5E:E3:F9:70:D5:00:F3:DE:89:D5:AB:FD:72 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 1684 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa Signing time: Wed 04 Dec 2024 16:54:29 +0000 ROA not before: Wed 04 Dec 2024 16:54:29 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152891 IP address blocks: 110.235.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5764 (0x1684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Dec 4 16:54:29 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67508945-b88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:a7:29:2e:20:b1:46:e2:61:7c:95:d6:d2: e1:94:1b:42:51:1d:53:b7:77:a4:5d:fb:c0:07:fe: 56:c1:56:b7:6e:d0:7e:21:cc:03:d2:c4:91:70:09: ee:c6:17:37:a9:39:6e:6a:6e:06:ce:0f:ca:03:21: d9:37:2c:58:41:3f:80:fc:b9:45:2d:af:a7:35:03: 15:6a:55:56:3b:81:84:01:75:de:f3:4c:6f:c4:13: 91:2f:01:b7:68:51:dc:37:0b:b8:6b:a3:69:6b:4b: e3:33:04:41:88:ac:6e:3e:d9:91:90:e6:d9:af:31: 0b:5a:7c:b4:1d:03:d4:26:3d:48:d8:f2:38:c1:6b: bf:db:36:03:e9:14:73:2c:c9:e8:fc:63:5c:2b:f7: b1:81:4c:ba:51:d3:0c:22:0b:52:b4:dc:59:c7:63: 29:0f:47:0c:1f:1a:a9:e2:73:c6:29:5d:34:25:e6: 72:66:1b:3f:9c:ee:78:75:bb:d8:b4:be:d6:ea:c3: 16:20:2f:29:c3:38:c3:a9:dc:97:41:e4:d9:e6:da: e1:37:1f:c5:50:44:a0:11:48:7a:4b:79:fd:ce:71: 49:f4:cf:bb:99:fb:84:81:7e:26:0d:01:d3:29:7c: de:0b:47:13:39:d1:1b:bf:0b:c1:7c:7e:bc:3e:91: fa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4A:EC:C9:98:AC:2D:5E:E3:F9:70:D5:00:F3:DE:89:D5:AB:FD:72 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/0897E314434811EF8E76757AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.235.157.0/24 Signature Algorithm: sha256WithRSAEncryption 71:d5:d8:e2:64:e7:be:0e:2c:f6:b2:d1:b2:41:ca:2b:ef:45: 52:c1:cd:eb:55:09:f2:32:7e:e7:3b:fa:bc:82:2f:30:ff:d4: 97:a4:20:0e:a9:76:40:e3:3d:70:be:11:fc:8f:a6:62:6f:53: 86:12:34:73:49:db:0b:ee:88:97:d1:0d:c1:a7:a4:3d:da:fa: f8:32:4a:96:90:56:c1:fa:12:11:2a:56:d8:99:1d:69:79:80: d4:80:e7:af:29:d0:37:b3:db:0a:8d:95:68:3d:e4:4e:ec:57: 63:ed:52:db:14:61:83:84:3c:92:5d:ec:4e:4c:a7:a5:20:7e: 6c:67:af:22:6d:10:99:6a:fd:3e:cd:4d:71:7a:08:30:b7:dc: 15:ad:6f:2d:f1:2b:97:8c:4e:0a:c8:3d:4b:33:d2:4a:9e:b6: 2c:c1:65:b8:85:97:9b:a9:90:93:31:f8:f7:df:36:dd:50:0d: 74:4e:ca:7a:6d:a8:c4:9a:5d:43:52:cf:ec:6f:4d:6b:cb:06: 14:9b:9f:75:2a:16:b9:3c:15:20:97:d4:71:94:db:e2:f5:64: 50:68:64:cd:04:42:80:9c:0c:e6:2b:dc:37:8e:2b:7c:c0:28: fe:53:6b:c5:ce:15:a9:98:5c:a4:3f:f0:3d:20:0c:7c:89:0a: 91:23:a3:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjQxMjA0MTY1NDI5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwODk0NS1iODhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3qnKS4gsUbiYXyV1tLhlBtCUR1Tt3ekXfvAB/5WwVa3btB+IcwD0sSRcAnu xhc3qTluam4Gzg/KAyHZNyxYQT+A/LlFLa+nNQMValVWO4GEAXXe80xvxBORLwG3 aFHcNwu4a6Npa0vjMwRBiKxuPtmRkObZrzELWny0HQPUJj1I2PI4wWu/2zYD6RRz LMno/GNcK/exgUy6UdMMIgtStNxZx2MpD0cMHxqp4nPGKV00JeZyZhs/nO54dbvY tL7W6sMWIC8pwzjDqdyXQeTZ5trhNx/FUESgEUh6S3n9znFJ9M+7mfuEgX4mDQHT KXzeC0cTOdEbvwvBfH68PpH6lQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLZK7MmY rC1e4/lw1QDz3onVq/1yMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNEI5NThCQ0UwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvMDg5N0UzMTQ0 MzQ4MTFFRjhFNzY3NTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABu650wDQYJKoZIhvcNAQELBQADggEBAHHV2OJk574OLPay 0bJByivvRVLBzetVCfIyfuc7+ryCLzD/1JekIA6pdkDjPXC+EfyPpmJvU4YSNHNJ 2wvuiJfRDcGnpD3a+vgySpaQVsH6EhEqVtiZHWl5gNSA568p0Dez2wqNlWg95E7s V2PtUtsUYYOEPJJd7E5Mp6UgfmxnryJtEJlq/T7NTXF6CDC33BWtby3xK5eMTgrI PUsz0kqetizBZbiFl5upkJMx+PffNt1QDXROynptqMSaXUNSz+xvTWvLBhSbn3Uq Frk8FSCX1HGU2+L1ZFBoZM0EQoCcDOYr3DeOK3zAKP5Ta8XOFamYXKQ/8D0gDHyJ CpEjo+g= -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:46 2025 by rpki-client