$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa File: F5A921B85BE911EF8624AA20C4F9AE02.roa (raw, json) Hash identifier: HMDK7qPjAO3ncQEJzX6SKnODDt4e7glxidti8sfhV1k= Subject key identifier: 4A:DB:9B:20:61:74:46:10:FD:A7:E8:20:62:34:CB:84:E4:E5:BA:37 Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Certificate serial: 0406 Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa Signing time: Wed 04 Dec 2024 17:25:17 +0000 ROA not before: Wed 04 Dec 2024 17:25:17 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 58867 IP address blocks: 45.129.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D Validity Not Before: Dec 4 17:25:17 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6750907d-d227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:1f:83:39:6d:45:5c:b3:ab:6a:10:2e:11: 78:fc:75:22:cb:70:20:0d:db:eb:90:80:fa:9d:45: d9:ca:54:d0:19:96:75:fb:ee:ac:77:84:6a:90:18: 0a:cc:33:07:0c:12:d2:8e:fc:fd:a7:4b:76:3b:c2: 74:c9:29:3b:ad:33:9d:ac:70:9e:6a:77:dd:13:ca: a0:e2:2c:9c:14:37:9c:c4:cc:dc:65:28:40:07:9e: 77:d8:3d:e8:8e:0b:a4:75:b0:cf:9c:e2:24:4d:e9: 1b:e4:c8:c0:83:1f:48:d1:a6:40:50:e7:cc:21:21: cb:96:df:70:7f:7b:4d:03:ef:b0:41:a9:25:45:02: 9d:6a:7e:a7:13:60:66:2d:94:a9:1d:06:ce:9a:03: 0e:3b:cf:3f:2a:b2:0a:d8:b8:98:20:cd:0d:f1:1f: 6a:ed:65:b2:ff:37:14:65:b4:07:87:a8:de:35:9b: 09:27:63:8f:e1:e2:da:52:6a:88:bf:4d:60:5d:c6: aa:c3:7a:43:01:7e:c7:43:3e:3e:de:04:49:89:a1: c8:4d:51:5f:eb:0e:1d:34:e8:12:55:9e:39:fd:b6: 66:c3:7e:92:81:1a:5c:41:b3:53:47:0c:8b:e7:0c: 84:90:a9:ae:10:d4:9c:27:4f:ab:76:3e:f0:6f:5d: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DB:9B:20:61:74:46:10:FD:A7:E8:20:62:34:CB:84:E4:E5:BA:37 X509v3 Authority Key Identifier: keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/F5A921B85BE911EF8624AA20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.129.229.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:5c:62:d7:92:b9:c3:b6:14:6b:00:7e:a2:3c:64:8c:42:17: 3e:0f:6b:99:06:b3:38:d8:ab:bd:b1:e0:f3:82:33:a5:d1:51: 50:19:ae:14:c9:7a:b9:6f:41:20:1f:11:d4:a7:a2:32:db:db: 57:37:33:be:26:09:97:db:2a:79:15:5d:53:0d:da:8e:a2:7a: 94:63:1d:5a:bf:78:a1:1f:11:29:05:2a:3b:c5:00:31:db:f1: 1e:c7:0a:ba:77:0e:10:46:0c:b5:8c:69:2e:b8:f2:89:75:12: e0:4d:1c:ff:cc:03:5f:9c:41:86:c8:5b:ed:0a:d8:db:19:ce: 6a:45:04:be:cd:75:e3:b0:3c:3a:3e:37:77:0b:b4:1b:79:b2: dd:b2:2a:61:0a:8a:b9:78:22:7a:98:27:e2:41:f4:c7:43:91: 43:0f:01:59:57:96:74:0d:d3:39:b5:34:34:a3:38:3c:31:ff: e9:7a:98:16:bc:7d:d1:e8:a2:df:81:56:f5:a3:a6:19:3c:d5: 01:72:6d:d3:9c:3a:47:b7:c6:fa:0c:9d:48:f0:c5:7d:f6:7d: 96:3e:8f:bd:e8:44:a3:a8:57:d6:e3:a9:bd:7b:3d:ce:72:3c: cb:4b:66:0f:d0:ed:39:98:e3:68:43:38:b5:a8:20:17:d2:4c: 5b:c2:7e:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKDc2MEU2QTdGMDhCNzJGRjgwRUI1NkY2NzUwMzIzQjE2 NEE3MERBMUQwHhcNMjQxMjA0MTcyNTE3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwOTA3ZC1kMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwgfgzltRVyzq2oQLhF4/HUiy3AgDdvrkID6nUXZylTQGZZ1++6sd4RqkBgK zDMHDBLSjvz9p0t2O8J0ySk7rTOdrHCeanfdE8qg4iycFDecxMzcZShAB5532D3o jgukdbDPnOIkTekb5MjAgx9I0aZAUOfMISHLlt9wf3tNA++wQaklRQKdan6nE2Bm LZSpHQbOmgMOO88/KrIK2LiYIM0N8R9q7WWy/zcUZbQHh6jeNZsJJ2OP4eLaUmqI v01gXcaqw3pDAX7HQz4+3gRJiaHITVFf6w4dNOgSVZ45/bZmw36SgRpcQbNTRwyL 5wyEkKmuENScJ0+rdj7wb11elQIDAQABo4IClTCCApEwHQYDVR0OBBYEFErbmyBh dEYQ/afoIGI0y4Tk5bo3MB8GA1UdIwQYMBaAFHYOan8Ity/4DrVvZ1AyOxZKcNod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS81QjRDNEUzNjU5 NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi9kZzVxZndpM0xfZ090VzluVURJN0ZrcHcy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdEQUUvNUI0QzRFMzY1OTY5MTFFQzk0QTNFNzcwQzRGOUFFMDIvRjVBOTIxQjg1 QkU5MTFFRjg2MjRBQTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtgeUwDQYJKoZIhvcNAQELBQADggEBAGtcYteSucO2FGsA fqI8ZIxCFz4Pa5kGszjYq72x4POCM6XRUVAZrhTJerlvQSAfEdSnojLb21c3M74m CZfbKnkVXVMN2o6iepRjHVq/eKEfESkFKjvFADHb8R7HCrp3DhBGDLWMaS648ol1 EuBNHP/MA1+cQYbIW+0K2NsZzmpFBL7NdeOwPDo+N3cLtBt5st2yKmEKirl4InqY J+JB9MdDkUMPAVlXlnQN0zm1NDSjODwx/+l6mBa8fdHoot+BVvWjphk81QFybdOc Oke3xvoMnUjwxX32fZY+j73oRKOoV9bjqb17Pc5yPMtLZg/Q7TmY42hDOLWoIBfS TFvCfsI= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:48 2025 by rpki-client