$ rpki-client -vvf rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa File: 8A9A4734854211EB9DAFD045C4F9AE02.roa (raw, json) Hash identifier: OdpDVRPMiwvBv2VnWCmR20QhCb+9V28fTRtt1gt/10I= Subject key identifier: 93:E9:1B:C4:53:7C:B7:6E:D6:B5:FB:D8:32:06:B2:B5:2B:B3:87:27 Certificate issuer: /CN=A9175AFD/serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Certificate serial: 0604 Authority key identifier: C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa Signing time: Fri 06 Dec 2024 22:41:37 +0000 ROA not before: Fri 06 Dec 2024 22:41:37 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 55861 IP address blocks: 49.143.224.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175AFD, serialNumber=C2C9DB4CD6D09F8A41A8D2931F0B2B667BA1A983 Validity Not Before: Dec 6 22:41:37 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67537da1-7644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:fd:7f:95:b7:81:8a:ae:51:78:22:10:5e: 3c:c0:66:b6:a0:41:0d:23:3d:35:3f:48:f4:1e:76: ee:54:b8:a5:81:49:d0:d7:58:05:55:a8:26:de:1f: af:3b:cf:f6:d5:d5:7a:99:25:5b:bb:56:ab:e0:20: f3:ff:79:31:a6:80:d4:bb:aa:1a:fe:f9:76:e7:f3: 21:d1:fd:8f:4e:a6:f9:d7:06:10:84:c1:b3:9a:81: c7:8f:c7:af:e5:6d:df:19:00:8b:99:8e:f9:10:3d: 9b:3c:ca:71:e0:1d:c2:c2:0b:92:b4:4c:3a:61:f5: c2:51:9f:6c:9d:6b:bf:be:4a:3b:75:b1:12:d8:f6: e8:93:ea:c5:7f:7f:76:fa:e1:bb:0a:1d:32:e1:55: 6b:bd:f4:06:7b:19:b7:a7:8a:be:ec:f2:6e:1c:b0: 39:97:6e:71:e8:a9:9d:4d:11:bb:c6:13:b4:f8:cb: b3:f7:e1:ab:93:c5:65:9e:a1:5b:40:eb:05:fb:b5: 5e:76:f0:2d:d8:f1:f8:67:0a:5d:5b:60:d3:c4:85: 75:c4:aa:7d:14:b4:a5:0f:47:da:e6:db:67:13:8b: 0a:7b:c0:4a:d2:84:50:73:32:9d:fd:ea:74:a7:fc: a9:e0:6c:61:3e:61:3c:d2:87:de:93:d0:d6:d4:81: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:1B:C4:53:7C:B7:6E:D6:B5:FB:D8:32:06:B2:B5:2B:B3:87:27 X509v3 Authority Key Identifier: keyid:C2:C9:DB:4C:D6:D0:9F:8A:41:A8:D2:93:1F:0B:2B:66:7B:A1:A9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/wsnbTNbQn4pBqNKTHwsrZnuhqYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wsnbTNbQn4pBqNKTHwsrZnuhqYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175AFD/12ACF07C851611EBB6AE734DC4F9AE02/8A9A4734854211EB9DAFD045C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.143.224.0/22 Signature Algorithm: sha256WithRSAEncryption a4:67:7f:18:cd:32:0a:f3:bb:80:09:19:28:24:ec:b2:2c:0a: ae:32:23:e6:51:45:fa:8b:e1:62:3f:5a:d3:e9:22:c3:57:3b: 64:ac:f4:c1:e3:45:04:91:6c:2d:bc:99:af:69:a0:1c:c2:3d: 30:29:f3:7f:fc:d5:5f:5e:82:69:9f:0b:29:9b:0e:e6:a4:01: b9:4b:31:dc:3f:a7:79:5e:2b:04:8e:1d:29:a3:5f:53:f0:da: ec:c6:a6:22:04:66:dc:fb:7d:a5:0d:3a:62:39:0c:e3:dd:d6: df:c6:e5:19:37:bb:9a:79:48:32:4f:3d:81:7a:d5:81:82:57: 1a:b1:9a:e0:dc:d2:b0:58:6b:aa:8c:9c:85:c6:25:29:7f:65: bf:e4:99:0a:53:c9:bb:97:7f:6f:af:05:c1:31:9c:5c:cf:26: b2:55:24:f4:ec:f3:ab:bc:91:8e:be:94:93:2a:c5:9b:13:f7: 3d:b5:03:22:3f:d3:e5:3e:c0:df:7b:4b:f8:e8:24:c3:d4:4f: dd:e1:83:ae:42:af:8f:88:3a:5b:89:fe:93:43:11:a7:a1:16: 57:63:b7:b2:c6:87:e3:85:0b:f5:f5:4d:97:a1:59:7d:0c:11: 3e:0b:56:2c:92:75:a1:d6:fe:1b:26:a0:82:61:84:83:9d:aa: f0:cd:09:20 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVBRkQxMTAvBgNVBAUTKEMyQzlEQjRDRDZEMDlGOEE0MUE4RDI5MzFGMEIyQjY2 N0JBMUE5ODMwHhcNMjQxMjA2MjI0MTM3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUzN2RhMS03NjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPr9f5W3gYquUXgiEF48wGa2oEENIz01P0j0HnbuVLilgUnQ11gFVagm3h+v O8/21dV6mSVbu1ar4CDz/3kxpoDUu6oa/vl25/Mh0f2PTqb51wYQhMGzmoHHj8ev 5W3fGQCLmY75ED2bPMpx4B3CwguStEw6YfXCUZ9snWu/vko7dbES2Pbok+rFf392 +uG7Ch0y4VVrvfQGexm3p4q+7PJuHLA5l25x6KmdTRG7xhO0+Muz9+Grk8VlnqFb QOsF+7VedvAt2PH4ZwpdW2DTxIV1xKp9FLSlD0fa5ttnE4sKe8BK0oRQczKd/ep0 p/yp4GxhPmE80ofek9DW1IE8FQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJPpG8RT fLdu1rX72DIGsrUrs4cnMB8GA1UdIwQYMBaAFMLJ20zW0J+KQajSkx8LK2Z7oamD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUFGRC8xMkFDRjA3Qzg1 MTYxMUVCQjZBRTczNERDNEY5QUUwMi93c25iVE5iUW40cEJxTktUSHdzclpudWhx WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dzbmJUTmJRbjRwQnFOS1RId3NyWm51aHFZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzVBRkQvMTJBQ0YwN0M4NTE2MTFFQkI2QUU3MzREQzRGOUFFMDIvOEE5QTQ3MzQ4 NTQyMTFFQjlEQUZEMDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIxj+AwDQYJKoZIhvcNAQELBQADggEBAKRnfxjNMgrzu4AJ GSgk7LIsCq4yI+ZRRfqL4WI/WtPpIsNXO2Ss9MHjRQSRbC28ma9poBzCPTAp83/8 1V9egmmfCymbDuakAblLMdw/p3leKwSOHSmjX1Pw2uzGpiIEZtz7faUNOmI5DOPd 1t/G5Rk3u5p5SDJPPYF61YGCVxqxmuDc0rBYa6qMnIXGJSl/Zb/kmQpTybuXf2+v BcExnFzPJrJVJPTs86u8kY6+lJMqxZsT9z21AyI/0+U+wN97S/joJMPUT93hg65C r4+IOluJ/pNDEaehFldjt7LGh+OFC/X1TZehWX0MET4LViySdaHW/hsmoIJhhIOd qvDNCSA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:07 2025 by rpki-client