$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa File: BA007060162D11EEB79F703CC4F9AE02.roa (raw, json) Hash identifier: i9EBn86mLgOFoT0s7Sga+CIh82Sy/UwirM5LdXIelBE= Subject key identifier: 6C:D4:FF:85:90:E7:65:4A:AC:5D:A3:7D:07:9A:02:10:48:A1:E0:57 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 24CF Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa Signing time: Wed 22 Jan 2025 01:08:23 +0000 ROA not before: Wed 22 Jan 2025 01:08:23 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 142424 IP address blocks: 120.28.32.0/24 maxlen: 24 222.127.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9423 (0x24cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jan 22 01:08:23 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67904506-4824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:be:a2:11:ce:e7:38:60:86:ee:4f:00:c1: eb:23:5a:04:04:6f:02:22:9f:b6:93:12:9a:a5:e9: 43:f6:ec:fa:5b:02:f4:6e:b9:08:47:a2:52:58:bb: 0f:c1:cb:5a:95:6a:bf:e1:dc:fe:7d:07:b8:8e:50: 9d:dd:4c:4c:90:3c:f6:e1:e0:56:91:54:2e:34:2c: 77:16:3c:9a:b9:34:c4:0f:76:3a:37:8e:c1:ca:5c: 9c:cf:7b:47:55:89:00:8e:76:05:41:44:6d:5f:dc: 61:0b:7e:dc:e8:eb:1b:63:41:bc:0d:92:da:39:9f: 09:40:cc:91:25:3c:e7:27:32:f4:49:af:b4:32:91: 40:6f:32:fe:c5:f8:85:97:79:1e:1d:68:90:3a:7b: d2:4f:b8:0e:51:ba:b6:33:62:27:7a:56:48:25:39: d9:55:f5:92:0a:3b:98:5d:bf:3d:fc:b2:ef:5f:46: ac:93:56:76:f9:76:97:74:9e:bf:a6:d5:1d:9a:3c: b8:37:b8:95:a7:e7:1f:1e:91:58:46:f9:d0:6d:1d: 7d:ba:d1:80:74:b3:ea:0a:ad:98:f6:39:69:4d:82: 31:df:2b:7b:a2:50:a4:09:9a:98:cc:b9:25:01:9d: d9:42:72:53:87:93:07:fa:a2:db:41:9d:5a:f8:06: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D4:FF:85:90:E7:65:4A:AC:5D:A3:7D:07:9A:02:10:48:A1:E0:57 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/BA007060162D11EEB79F703CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.32.0/24 222.127.99.0/24 Signature Algorithm: sha256WithRSAEncryption a9:42:11:4b:43:0a:53:39:97:20:98:a4:36:72:f1:51:2b:bc: b9:90:c3:24:71:fd:05:93:85:92:84:42:31:20:9d:04:b0:d6: 52:14:03:ee:17:2e:28:20:6f:41:09:cf:0d:64:cc:7e:b2:1a: cb:10:01:56:ce:14:7b:cb:32:d9:ce:25:36:0b:2c:fc:f1:a3: ff:43:8e:d1:99:ed:42:2d:7c:54:7d:8a:2a:42:02:8d:9e:cf: a7:25:3d:24:90:89:92:99:a5:13:8e:cb:48:42:9c:a1:a5:d8: 59:be:65:33:57:a5:91:39:1d:0f:ed:bf:ff:7c:df:23:43:e2: 35:b6:2c:93:24:98:17:05:f9:f6:26:38:e0:96:09:7e:0c:1b: ec:23:ae:9a:77:ab:98:89:e0:b3:32:4e:9c:1f:79:36:47:d0: 7c:26:b6:4c:24:01:64:f3:56:f9:b1:7f:1a:9b:8d:2c:9e:02: d4:84:f4:03:1c:f5:44:91:6a:26:7b:70:9e:67:69:40:52:6c: 15:9d:12:73:98:f6:0a:2b:5b:96:04:85:53:c9:ac:e4:ca:dd: 7c:a1:a6:f3:8f:6e:86:93:6b:fc:d2:f9:db:cd:bb:d0:3c:f0: 37:48:af:18:d0:aa:bf:57:f7:83:cd:f9:72:72:e2:7e:4c:d9: bb:72:7c:02 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICJM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjUwMTIyMDEwODIzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzkwNDUwNi00ODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkq+ohHO5zhghu5PAMHrI1oEBG8CIp+2kxKapelD9uz6WwL0brkIR6JSWLsP wctalWq/4dz+fQe4jlCd3UxMkDz24eBWkVQuNCx3FjyauTTED3Y6N47Bylycz3tH VYkAjnYFQURtX9xhC37c6OsbY0G8DZLaOZ8JQMyRJTznJzL0Sa+0MpFAbzL+xfiF l3keHWiQOnvST7gOUbq2M2InelZIJTnZVfWSCjuYXb89/LLvX0ask1Z2+XaXdJ6/ ptUdmjy4N7iVp+cfHpFYRvnQbR19utGAdLPqCq2Y9jlpTYIx3yt7olCkCZqYzLkl AZ3ZQnJTh5MH+qLbQZ1a+AYHCQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGzU/4WQ 52VKrF2jfQeaAhBIoeBXMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQkEwMDcwNjAx NjJEMTFFRUI3OUY3MDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB4HCADBADef2MwDQYJKoZIhvcNAQELBQADggEBAKlCEUtD ClM5lyCYpDZy8VErvLmQwyRx/QWThZKEQjEgnQSw1lIUA+4XLiggb0EJzw1kzH6y GssQAVbOFHvLMtnOJTYLLPzxo/9DjtGZ7UItfFR9iipCAo2ez6clPSSQiZKZpROO y0hCnKGl2Fm+ZTNXpZE5HQ/tv/983yND4jW2LJMkmBcF+fYmOOCWCX4MG+wjrpp3 q5iJ4LMyTpwfeTZH0HwmtkwkAWTzVvmxfxqbjSyeAtSE9AMc9USRaiZ7cJ5naUBS bBWdEnOY9gorW5YEhVPJrOTK3XyhpvOPboaTa/zS+dvNu9A88DdIrxjQqr9X94PN +XJy4n5M2btyfAI= -----END CERTIFICATE-----Generated at Sat Apr 26 08:09:29 2025 by rpki-client