$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/F8672B3EBB5D11EEB6706D74C4F9AE02.roa File: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (raw, json) Hash identifier: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k= Subject key identifier: 51:B7:17:2E:47:60:3F:94:98:DC:BD:BD:9A:E6:AB:2A:F9:98:C0:0E Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: A4 Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/F8672B3EBB5D11EEB6706D74C4F9AE02.roa Signing time: Fri 29 Nov 2024 04:38:28 +0000 ROA not before: Fri 29 Nov 2024 04:38:28 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 141438 IP address blocks: 203.145.32.0/23 maxlen: 23 203.145.32.0/24 maxlen: 24 203.145.33.0/24 maxlen: 24 2001:df3:2640::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: Nov 29 04:38:28 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67494544-36c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:d7:7a:b7:0a:f0:94:d4:82:1c:d4:31:39: 03:10:b0:f8:da:63:43:6c:3f:ec:8e:75:e9:44:e3: 93:c6:28:55:73:5f:60:fb:52:48:91:9e:58:38:73: 9d:39:43:3c:c2:55:d9:f7:44:1c:a6:6d:d3:ad:af: 98:5c:5b:f0:40:98:27:2f:76:5e:f5:fc:eb:21:c0: 36:ea:9d:10:79:2e:e2:4d:62:a3:4f:b7:c9:c8:80: 73:45:79:db:6f:1b:ce:a1:56:bc:e4:59:0e:ae:78: fc:de:ce:4f:77:fa:57:a8:8b:2f:e1:ff:50:2d:8f: b3:9f:ff:66:a4:99:0d:2a:57:c1:ea:75:ac:ae:72: 42:be:a2:0c:97:df:16:a0:95:64:7e:7b:aa:8d:3c: 6f:f4:35:5f:9d:31:b2:bc:5a:8b:23:a7:c9:b2:e5: c6:8c:56:1e:30:75:1e:02:c7:e5:23:4a:ed:a8:00: 3b:30:28:96:4d:6f:a6:f9:bd:28:c8:55:bc:b5:8f: 94:93:ea:66:47:ff:7c:4e:4c:20:d1:dd:a3:2b:ad: 38:d8:56:a5:df:50:9c:23:52:4c:3e:ac:23:8a:d4: b5:72:29:55:3f:fd:4d:cb:ee:c3:4d:2a:2c:b5:1a: 39:55:af:3b:14:9c:bc:05:e2:cf:c1:fc:34:76:cc: 46:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B7:17:2E:47:60:3F:94:98:DC:BD:BD:9A:E6:AB:2A:F9:98:C0:0E X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/F8672B3EBB5D11EEB6706D74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.145.32.0/23 IPv6: 2001:df3:2640::/48 Signature Algorithm: sha256WithRSAEncryption 00:77:f2:12:69:a8:ab:0e:08:dd:ba:47:af:e3:55:ab:61:c2: 06:f9:7b:76:f0:a3:66:97:f6:29:27:9a:70:8b:f5:1c:73:63: cc:bb:6e:6e:77:f5:cc:47:5b:67:7f:a1:ac:68:5c:b7:ad:65: 2b:f8:ff:c3:b8:e8:18:b0:7d:8d:00:a4:c5:d6:31:de:44:52: 98:d0:48:93:74:48:7b:9d:ac:db:cd:3f:de:df:ba:75:94:e7: 53:9b:a1:84:cf:3a:d9:75:e2:f9:33:61:a0:a9:cc:8b:d4:5d: f2:d4:e4:33:65:5c:65:a8:ec:b3:43:57:3b:58:47:c8:7b:ef: 5b:0d:68:fa:0d:8a:f6:34:f0:ff:46:3b:16:7e:5b:3b:29:c7: 1b:de:8e:2a:52:4a:fa:70:64:0e:d8:e0:2e:2f:68:6b:29:89: 66:b2:c8:40:59:41:e2:dd:8b:94:72:a4:ae:f2:20:18:0f:a7: e7:98:c1:ed:11:46:86:b2:f8:f6:77:d6:b7:87:16:8e:99:5f: 18:a4:91:2d:e2:62:f7:7c:83:b3:b9:1c:0b:c1:d7:59:f6:78: 27:20:06:ae:22:3f:94:2d:7c:f8:17:35:a5:33:65:6d:ee:88: 7a:c3:e7:df:61:2c:b4:d4:3d:4b:02:61:d3:fa:18:0c:4c:20: b5:39:cc:75 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC RUY4NzhDQjgwHhcNMjQxMTI5MDQzODI4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ5NDU0NC0zNmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pbXercK8JTUghzUMTkDELD42mNDbD/sjnXpROOTxihVc19g+1JIkZ5YOHOd OUM8wlXZ90Qcpm3Tra+YXFvwQJgnL3Ze9fzrIcA26p0QeS7iTWKjT7fJyIBzRXnb bxvOoVa85FkOrnj83s5Pd/pXqIsv4f9QLY+zn/9mpJkNKlfB6nWsrnJCvqIMl98W oJVkfnuqjTxv9DVfnTGyvFqLI6fJsuXGjFYeMHUeAsflI0rtqAA7MCiWTW+m+b0o yFW8tY+Uk+pmR/98Tkwg0d2jK6042Fal31CcI1JMPqwjitS1cilVP/1Ny+7DTSos tRo5Va87FJy8BeLPwfw0dsxGfwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFFG3Fy5H YD+UmNy9vZrmqyr5mMAOMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODEzNEUvMkJGRjE0MTJCQjVEMTFFRTgzMzAyMDczQzRGOUFFMDIvRjg2NzJCM0VC QjVEMTFFRUI2NzA2RDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAHLkSAwDwQCAAIwCQMHACABDfMmQDANBgkqhkiG9w0BAQsF AAOCAQEAAHfyEmmoqw4I3bpHr+NVq2HCBvl7dvCjZpf2KSeacIv1HHNjzLtubnf1 zEdbZ3+hrGhct61lK/j/w7joGLB9jQCkxdYx3kRSmNBIk3RIe52s280/3t+6dZTn U5uhhM862XXi+TNhoKnMi9Rd8tTkM2VcZajss0NXO1hHyHvvWw1o+g2K9jTw/0Y7 Fn5bOynHG96OKlJK+nBkDtjgLi9oaymJZrLIQFlB4t2LlHKkrvIgGA+n55jB7RFG hrL49nfWt4cWjplfGKSRLeJi93yDs7kcC8HXWfZ4JyAGriI/lC18+Bc1pTNlbe6I esPn32EstNQ9SwJh0/oYDEwgtTnMdQ== -----END CERTIFICATE-----Generated at Sat Apr 26 08:09:28 2025 by rpki-client