$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa File: A295F860E71011E8899C3917C4F9AE02.roa (raw, json) Hash identifier: MpKbuC4p+zIoKJkZfEG3DvMzDY6zY/kK40o2YHQcwMc= Subject key identifier: 26:FB:18:D0:AD:B4:CA:D3:47:66:73:E5:01:27:29:02:C0:7F:11:B0 Certificate issuer: /CN=A919DD2D/serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Certificate serial: 1199 Authority key identifier: 8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa Signing time: Sat 30 Nov 2024 17:35:35 +0000 ROA not before: Sat 30 Nov 2024 17:35:35 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 9661 IP address blocks: 202.41.194.0/23 maxlen: 23 203.29.0.0/24 maxlen: 24 2001:df5:cc00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4505 (0x1199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DD2D, serialNumber=8CF423980FD3A7F67EC5F4A543A203A53E3CE676 Validity Not Before: Nov 30 17:35:35 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674b4ce6-15c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:ac:13:86:4c:9a:e4:d3:47:4b:10:0a:02: 0c:e4:10:7b:c1:eb:9b:e5:b7:b9:55:d1:15:f1:c3: 5d:7e:b5:90:34:8b:34:03:ec:c7:7a:72:f5:c7:85: 82:9e:2b:ad:7f:47:76:50:1d:8f:f7:e5:2d:cb:19: 75:97:fa:69:f6:f3:93:53:30:f9:53:b2:99:7b:33: 01:a7:51:c4:11:cd:ec:e9:cc:85:c4:9f:0c:31:51: 81:db:3b:9d:94:b9:d8:45:13:0a:79:99:90:b9:eb: 02:b8:52:7a:27:b6:3f:10:93:ce:4f:5d:23:1e:1a: c8:6f:e2:d9:ae:49:e5:85:cc:ce:47:e3:e6:39:61: 31:88:71:d2:d7:e0:50:76:f9:d0:75:40:1c:f5:64: f8:24:96:1e:85:3a:0e:ee:e0:de:86:10:54:79:e8: 65:c5:8a:e6:48:5a:d8:ef:8e:f0:a3:4d:29:ff:8b: 11:55:62:74:ff:bf:d8:6b:0a:fe:35:d3:f3:ab:35: b8:a2:ac:5b:f6:14:79:dc:7d:62:be:06:f4:74:37: b0:12:99:a1:44:52:9d:ff:7b:d3:f6:bc:9a:6b:6b: 18:06:b9:66:8d:b8:f6:a5:cc:ee:ae:81:a4:f4:39: 60:a6:b5:f6:ef:de:0d:68:bd:f2:ce:95:c5:b4:5a: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FB:18:D0:AD:B4:CA:D3:47:66:73:E5:01:27:29:02:C0:7F:11:B0 X509v3 Authority Key Identifier: keyid:8C:F4:23:98:0F:D3:A7:F6:7E:C5:F4:A5:43:A2:03:A5:3E:3C:E6:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPQjmA_Tp_Z-xfSlQ6IDpT485nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2D/9D12695CE70E11E89A963D11C4F9AE02/A295F860E71011E8899C3917C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.194.0/23 203.29.0.0/24 IPv6: 2001:df5:cc00::/48 Signature Algorithm: sha256WithRSAEncryption a3:19:a0:49:b3:45:5d:d1:03:de:05:33:53:9a:af:b5:01:a9: 19:06:84:bd:55:2a:b2:1b:5e:9e:4d:38:25:45:98:59:d3:61: 31:74:f3:82:da:eb:b5:db:cb:1b:2a:81:59:c3:75:33:e6:3d: 63:8c:27:81:d9:53:59:c4:d2:20:e5:b1:9c:e7:ec:81:bb:24: 4d:d7:56:84:e3:83:21:be:65:bc:ca:32:8e:e4:57:1a:b8:cb: 20:21:1e:da:5f:56:7b:e2:bb:1f:b4:b4:96:38:75:d0:f9:a4: 91:83:7a:7b:4e:73:ca:77:a0:b3:d5:e8:62:bd:ba:f0:6e:4c: 0c:01:cc:f9:fb:bd:04:34:1c:a2:6e:30:08:b6:9b:77:ea:09: 73:76:f3:b8:04:4d:56:7e:59:28:87:1b:f7:db:54:3f:a2:03: 0c:05:f7:6c:13:28:0d:94:21:c0:64:84:71:cf:91:c4:f5:54: 98:25:d4:4e:ac:66:71:4d:fc:7c:4a:3e:22:3c:32:36:60:37: af:be:7a:53:b0:ad:31:92:7c:9e:b5:76:dc:b2:58:93:a0:75: 2f:68:19:3e:03:93:a7:28:02:4d:fd:aa:ef:56:83:f0:c7:75: 42:4c:11:b2:da:bf:7e:1a:12:bb:05:2c:ca:46:77:2d:79:0e: 5a:8f:53:8b -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUREMkQxMTAvBgNVBAUTKDhDRjQyMzk4MEZEM0E3RjY3RUM1RjRBNTQzQTIwM0E1 M0UzQ0U2NzYwHhcNMjQxMTMwMTczNTM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRiNGNlNi0xNWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5OsE4ZMmuTTR0sQCgIM5BB7weub5be5VdEV8cNdfrWQNIs0A+zHenL1x4WC niutf0d2UB2P9+Utyxl1l/pp9vOTUzD5U7KZezMBp1HEEc3s6cyFxJ8MMVGB2zud lLnYRRMKeZmQuesCuFJ6J7Y/EJPOT10jHhrIb+LZrknlhczOR+PmOWExiHHS1+BQ dvnQdUAc9WT4JJYehToO7uDehhBUeehlxYrmSFrY747wo00p/4sRVWJ0/7/Yawr+ NdPzqzW4oqxb9hR53H1ivgb0dDewEpmhRFKd/3vT9ryaa2sYBrlmjbj2pczuroGk 9DlgprX2794NaL3yzpXFtFoIjwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFCb7GNCt tMrTR2Zz5QEnKQLAfxGwMB8GA1UdIwQYMBaAFIz0I5gP06f2fsX0pUOiA6U+POZ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REQyRC85RDEyNjk1Q0U3 MEUxMUU4OUE5NjNEMTFDNEY5QUUwMi9qUFFqbUFfVHBfWi14ZlNsUTZJRHBUNDg1 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pQUWptQV9UcF9aLXhmU2xRNklEcFQ0ODVuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUREMkQvOUQxMjY5NUNFNzBFMTFFODlBOTYzRDExQzRGOUFFMDIvQTI5NUY4NjBF NzEwMTFFODg5OUMzOTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAHKKcIDBADLHQAwDwQCAAIwCQMHACABDfXMADANBgkqhkiG 9w0BAQsFAAOCAQEAoxmgSbNFXdED3gUzU5qvtQGpGQaEvVUqshtenk04JUWYWdNh MXTzgtrrtdvLGyqBWcN1M+Y9Y4wngdlTWcTSIOWxnOfsgbskTddWhOODIb5lvMoy juRXGrjLICEe2l9We+K7H7S0ljh10PmkkYN6e05zynegs9XoYr268G5MDAHM+fu9 BDQcom4wCLabd+oJc3bzuARNVn5ZKIcb99tUP6IDDAX3bBMoDZQhwGSEcc+RxPVU mCXUTqxmcU38fEo+IjwyNmA3r756U7CtMZJ8nrV23LJYk6B1L2gZPgOTpygCTf2q 71aD8Md1QkwRstq/fhoSuwUsykZ3LXkOWo9Tiw== -----END CERTIFICATE-----Generated at Sat Apr 26 08:16:32 2025 by rpki-client