$ rpki-client -vvf rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa File: E0CFA54EFE4D11EF8274971BC4F9AE02.roa (raw, json) Hash identifier: BP/bzVM/wZbrOI0ezn03B2cwqDCG358EDLnvWAZLbmw= Subject key identifier: A2:18:DB:94:FC:9F:87:AB:FA:AC:B3:77:CA:FE:DD:16:21:3B:51:B0 Certificate issuer: /CN=A9197ADE/serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Certificate serial: 02 Authority key identifier: D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa Signing time: Tue 11 Mar 2025 07:53:11 +0000 ROA not before: Tue 11 Mar 2025 07:53:11 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38494 IP address blocks: 123.176.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197ADE, serialNumber=D9320BFDAC0C90B3428A44FC7DCA0E2F79097741 Validity Not Before: Mar 11 07:53:11 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67cfebe7-ff32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:94:b9:a3:45:1a:fc:5e:cc:82:31:b1:88: 62:31:32:22:ec:c4:7f:5c:94:1e:53:57:a1:df:2b: 3e:a8:a9:a3:62:d0:fe:cd:ea:e3:60:b9:99:4d:dc: 9c:ce:fe:9d:67:74:73:68:d2:3a:5b:bc:a9:ee:45: 7a:2d:c5:cc:6a:b0:14:ba:11:e8:1a:e7:3d:0b:2d: 52:07:b5:99:bf:f1:d4:6f:12:e5:6b:ea:84:42:1a: d8:9d:bc:31:db:b7:e9:89:09:dc:39:25:31:a3:7d: f6:f8:1a:11:62:d4:62:d0:e1:2d:c8:5c:e8:c8:4e: b4:5b:75:aa:48:d6:1e:97:ae:d1:ff:fa:d8:95:eb: b8:53:e5:b7:0e:58:c9:15:21:2e:84:b7:27:c0:ef: e8:6c:72:24:5c:89:c9:88:46:5a:21:56:80:1a:e6: 28:5d:62:92:1a:6c:be:59:b9:c7:54:f1:dd:19:03: 75:1b:a7:1c:fb:51:64:d3:21:f1:d6:89:b8:cc:a4: 0a:28:9b:bc:94:ce:8e:77:56:fa:76:6c:66:61:bc: e1:2b:2e:c7:99:0f:13:40:90:ef:d0:1b:bc:44:35: a3:cb:1c:19:72:0c:2e:af:ee:3c:b0:13:3f:95:eb: c7:26:67:43:13:d2:0a:42:62:b4:22:0a:11:37:43: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:18:DB:94:FC:9F:87:AB:FA:AC:B3:77:CA:FE:DD:16:21:3B:51:B0 X509v3 Authority Key Identifier: keyid:D9:32:0B:FD:AC:0C:90:B3:42:8A:44:FC:7D:CA:0E:2F:79:09:77:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/2TIL_awMkLNCikT8fcoOL3kJd0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2TIL_awMkLNCikT8fcoOL3kJd0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197ADE/89A493E2FE4D11EFA1AFFC1AC4F9AE02/E0CFA54EFE4D11EF8274971BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.176.120.0/24 Signature Algorithm: sha256WithRSAEncryption 63:21:96:55:87:da:1f:71:49:32:99:12:26:66:ed:70:0a:59: 1c:b1:e6:9b:db:a7:8c:fe:5d:39:3f:53:4f:64:f5:b5:59:53: 2c:e6:b1:53:51:19:29:37:04:82:07:07:d1:e8:22:08:10:b3: 17:41:1c:04:7c:7d:2c:9b:66:33:7f:17:30:2c:a4:40:a2:93: e8:25:16:43:8f:f7:b8:a0:fa:7e:a9:70:4c:5d:6c:cd:dc:28: aa:51:a8:17:2d:60:42:77:f7:e0:fe:77:37:2f:69:2f:fb:76: 99:dd:f7:9b:e3:19:b7:fb:69:ec:3b:8c:7a:a2:37:d9:72:81: f2:e4:ac:98:32:cf:77:36:96:81:dc:78:04:37:c6:60:bc:17: 75:68:5f:f8:53:e4:7d:22:27:92:16:97:6c:8b:bd:0c:59:4e: 17:c4:ef:44:f7:24:82:bc:69:c5:8e:30:7c:4c:8a:c4:12:10: 05:c2:56:cf:f2:98:cc:40:30:b2:9e:3e:62:8d:71:2c:24:d7: 01:eb:28:dc:dd:d1:4b:67:ae:15:fe:c7:68:74:99:b1:f3:7f: f5:15:dd:11:7a:80:a8:c0:bb:db:dc:26:e2:24:15:2c:b1:79: fc:e2:16:33:a5:75:1a:f8:88:3b:87:29:b0:29:d0:8e:48:c6: 92:44:35:80 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0FERTExMC8GA1UEBRMoRDkzMjBCRkRBQzBDOTBCMzQyOEE0NEZDN0RDQTBFMkY3 OTA5Nzc0MTAeFw0yNTAzMTEwNzUzMTFaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3Y2ZlYmU3LWZmMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg95S5o0Ua/F7MgjGxiGIxMiLsxH9clB5TV6HfKz6oqaNi0P7N6uNguZlN3JzO /p1ndHNo0jpbvKnuRXotxcxqsBS6Eega5z0LLVIHtZm/8dRvEuVr6oRCGtidvDHb t+mJCdw5JTGjffb4GhFi1GLQ4S3IXOjITrRbdapI1h6XrtH/+tiV67hT5bcOWMkV IS6EtyfA7+hsciRcicmIRlohVoAa5ihdYpIabL5ZucdU8d0ZA3Ubpxz7UWTTIfHW ibjMpAoom7yUzo53Vvp2bGZhvOErLseZDxNAkO/QG7xENaPLHBlyDC6v7jywEz+V 68cmZ0MT0gpCYrQiChE3Qz71AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUohjblPyf h6v6rLN3yv7dFiE7UbAwHwYDVR0jBBgwFoAU2TIL/awMkLNCikT8fcoOL3kJd0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QURFLzg5QTQ5M0UyRkU0 RDExRUZBMUFGRkMxQUM0RjlBRTAyLzJUSUxfYXdNa0xOQ2lrVDhmY29PTDNrSmQw RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMlRJTF9hd01rTE5DaWtUOGZjb09MM2tKZDBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0FERS84OUE0OTNFMkZFNEQxMUVGQTFBRkZDMUFDNEY5QUUwMi9FMENGQTU0RUZF NEQxMUVGODI3NDk3MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHuweDANBgkqhkiG9w0BAQsFAAOCAQEAYyGWVYfaH3FJMpkS JmbtcApZHLHmm9unjP5dOT9TT2T1tVlTLOaxU1EZKTcEggcH0egiCBCzF0EcBHx9 LJtmM38XMCykQKKT6CUWQ4/3uKD6fqlwTF1szdwoqlGoFy1gQnf34P53Ny9pL/t2 md33m+MZt/tp7DuMeqI32XKB8uSsmDLPdzaWgdx4BDfGYLwXdWhf+FPkfSInkhaX bIu9DFlOF8TvRPckgrxpxY4wfEyKxBIQBcJWz/KYzEAwsp4+Yo1xLCTXAeso3N3R S2euFf7HaHSZsfN/9RXdEXqAqMC729wm4iQVLLF5/OIWM6V1GviIO4cpsCnQjkjG kkQ1gA== -----END CERTIFICATE-----Generated at Sat Apr 26 08:06:33 2025 by rpki-client