$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa File: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (raw, json) Hash identifier: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig= Subject key identifier: 09:A5:F2:C6:4A:F8:EE:9E:9E:43:79:73:C3:B0:7C:2D:0C:85:38:E5 Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 02AC Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa Signing time: Mon 09 Dec 2024 00:54:12 +0000 ROA not before: Mon 09 Dec 2024 00:54:12 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 131254 IP address blocks: 202.137.224.0/24 maxlen: 24 2001:df3:9e00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:03:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: Dec 9 00:54:12 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67563fb3-4120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:19:a0:ed:fa:4a:55:6b:0f:20:d9:d1:12: 35:0c:0f:68:7d:01:38:a0:0d:51:b5:c7:fd:ad:93: 76:69:b6:68:d9:16:77:f3:0b:fa:80:af:19:d4:5f: 5b:94:b8:d9:1b:eb:d8:cc:03:0a:6f:e0:ed:85:32: 00:7b:b8:9e:89:38:87:a6:e3:9c:a3:1f:85:a8:90: d1:c3:74:8e:d6:2b:48:c4:e2:c3:d2:be:c5:93:bd: 2f:6e:ef:cf:46:03:06:48:6d:f8:b4:e3:52:68:ed: 0b:8e:78:2a:b9:5d:e5:24:89:f8:54:ca:35:be:75: 16:d3:03:94:c2:c9:e5:e8:81:c5:92:f9:ce:5e:e9: e3:a7:d3:9f:3c:82:c1:82:ef:da:44:69:5d:4d:2a: 13:1e:fe:d8:e9:4a:ff:71:87:89:2e:46:4f:99:35: 91:f9:c8:e9:cf:8b:29:bc:48:67:f8:72:48:75:a5: 5e:14:b5:b0:51:d3:35:e0:21:ba:84:3c:be:00:39: 9b:60:43:59:17:a1:aa:72:17:ee:47:cd:a5:12:94: a8:ed:63:86:4c:60:0a:d6:fc:90:13:a9:55:df:a9: 15:36:54:0c:e6:25:e2:ad:ba:e6:9a:1f:19:d0:18: 8a:d1:95:e1:52:13:0c:f2:78:71:be:28:b0:5a:76: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A5:F2:C6:4A:F8:EE:9E:9E:43:79:73:C3:B0:7C:2D:0C:85:38:E5 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/6EEE50F2D7DF11EC8B75845EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.137.224.0/24 IPv6: 2001:df3:9e00::/48 Signature Algorithm: sha256WithRSAEncryption 95:76:f7:f5:67:73:b2:88:78:6e:19:13:75:43:fb:96:9b:89: 9f:e1:65:a9:e5:c8:27:15:cd:40:6c:97:f5:00:37:62:32:28: 10:9a:bc:12:fd:75:63:2d:47:a4:d7:a6:97:79:ff:48:bc:79: 4a:34:7f:88:3c:43:b0:d3:bb:3b:88:60:78:2b:1e:75:8e:99: 44:58:9a:79:03:80:cf:d9:7f:bc:e8:f2:15:d1:b9:34:11:cb: 60:21:a3:2e:5a:d9:0e:54:8d:87:6a:37:f4:b0:6e:37:1b:fb: 56:43:38:25:95:b4:39:8a:bb:83:80:2e:c0:b1:45:86:24:84: 4f:23:fc:9a:03:bd:ce:16:a1:01:f2:25:12:e1:27:ff:e1:1e: 09:69:82:a1:59:08:90:a8:ae:cf:4d:7b:14:3e:39:aa:21:b9: 3d:53:22:2e:75:5d:de:42:ce:86:09:c9:42:3a:e3:b5:62:66: 50:4f:a9:64:44:c5:cd:e4:77:0b:82:ad:4a:5b:f3:d6:e7:b6: 6c:2b:11:a0:aa:05:6d:47:7e:d6:4a:8c:20:ab:4e:80:61:f3: 2e:53:75:e8:19:2c:a0:69:26:41:21:11:fc:57:4f:41:c9:80: ee:fa:34:91:b4:e1:f4:89:67:a6:ba:50:47:84:7f:7e:e3:65: f7:49:ff:ac -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjQxMjA5MDA1NDEyWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU2M2ZiMy00MTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsewZoO36SlVrDyDZ0RI1DA9ofQE4oA1Rtcf9rZN2abZo2RZ38wv6gK8Z1F9b lLjZG+vYzAMKb+DthTIAe7ieiTiHpuOcox+FqJDRw3SO1itIxOLD0r7Fk70vbu/P RgMGSG34tONSaO0LjngquV3lJIn4VMo1vnUW0wOUwsnl6IHFkvnOXunjp9OfPILB gu/aRGldTSoTHv7Y6Ur/cYeJLkZPmTWR+cjpz4spvEhn+HJIdaVeFLWwUdM14CG6 hDy+ADmbYENZF6GqchfuR82lEpSo7WOGTGAK1vyQE6lV36kVNlQM5iXirbrmmh8Z 0BiK0ZXhUhMM8nhxviiwWnajNQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAml8sZK +O6enkN5c8OwfC0MhTjlMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTlBNzAvQ0RCQjE4OTZEN0Q5MTFFQzlDMjY1NzU0QzRGOUFFMDIvNkVFRTUwRjJE N0RGMTFFQzhCNzU4NDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKieAwDwQCAAIwCQMHACABDfOeADANBgkqhkiG9w0BAQsF AAOCAQEAlXb39Wdzsoh4bhkTdUP7lpuJn+FlqeXIJxXNQGyX9QA3YjIoEJq8Ev11 Yy1HpNeml3n/SLx5SjR/iDxDsNO7O4hgeCsedY6ZRFiaeQOAz9l/vOjyFdG5NBHL YCGjLlrZDlSNh2o39LBuNxv7VkM4JZW0OYq7g4AuwLFFhiSETyP8mgO9zhahAfIl EuEn/+EeCWmCoVkIkKiuz017FD45qiG5PVMiLnVd3kLOhgnJQjrjtWJmUE+pZETF zeR3C4KtSlvz1ue2bCsRoKoFbUd+1kqMIKtOgGHzLlN16BksoGkmQSER/FdPQcmA 7vo0kbTh9IlnprpQR4R/fuNl90n/rA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:23:52 2025 by rpki-client