$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa File: 8659FCFEB12811EE98786F82C4F9AE02.roa (raw, json) Hash identifier: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc= Subject key identifier: 04:6C:20:81:6C:DF:A4:5D:6C:72:D7:75:1C:D9:6A:D4:82:05:D7:C8 Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Certificate serial: 24F9 Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa Signing time: Tue 31 Dec 2024 15:53:36 +0000 ROA not before: Tue 31 Dec 2024 15:53:36 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 133848 IP address blocks: 147.50.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9465 (0x24f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54 Validity Not Before: Dec 31 15:53:36 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67741380-6f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:39:9c:5d:9d:b9:8e:c1:c4:bc:f9:2e:99: 81:83:46:9d:7c:0d:4d:bd:1c:c9:fc:57:39:f0:0d: a6:9f:f5:88:0f:1f:cc:5b:eb:97:1e:18:b3:b1:06: 14:2f:e7:4c:4d:1a:05:3a:c9:48:c1:5f:30:66:d3: 4d:5d:11:b2:ee:f0:f1:de:45:82:51:bc:19:8d:da: f7:60:05:23:4e:47:a4:23:66:b3:67:30:af:e5:72: dd:77:05:df:ab:2d:58:24:0d:35:6b:f7:28:57:08: c4:9a:14:90:4f:5a:88:af:ac:12:c5:0c:7f:06:78: f5:13:95:fe:c2:92:3b:98:ca:0c:0a:02:bd:7f:1a: 20:80:4c:24:48:af:b0:9d:54:b1:27:c5:44:80:e3: 29:6b:59:43:a3:aa:a6:fa:c2:46:cd:2c:d9:c0:b4: 44:47:b2:dd:d7:11:2d:9d:71:58:30:0d:32:b1:3a: d5:fc:45:59:bd:e6:85:ef:7c:28:23:1b:97:a1:12: ed:62:ce:40:b5:57:4b:ec:9a:f8:fc:e0:c9:88:75: f1:31:1e:fd:f5:d8:c6:e8:1d:f3:56:76:6f:6e:10: 3c:bf:ba:6d:e8:12:b4:9b:26:9d:50:76:fe:00:12: de:12:98:e0:96:da:d1:ff:63:9c:21:87:7f:07:84: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6C:20:81:6C:DF:A4:5D:6C:72:D7:75:1C:D9:6A:D4:82:05:D7:C8 X509v3 Authority Key Identifier: keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/8659FCFEB12811EE98786F82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.50.98.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:7c:1a:07:46:51:a5:5a:57:18:4e:1c:4c:35:cb:4d:3f:ef: 9b:5d:49:62:bd:df:15:1e:3d:47:f7:ed:62:4a:f8:50:6d:89: f9:ef:04:55:82:e4:8e:0f:5f:e3:fb:76:3d:cc:36:2f:88:a4: c8:f3:ca:b0:4f:fc:d4:a5:75:cc:8a:7c:56:a0:fe:a9:bc:a2: db:d0:e2:ec:cd:4f:9c:17:6f:02:36:0a:3b:ea:3f:50:19:9a: de:56:7c:1d:6a:c8:37:cb:1e:11:fb:45:38:17:2e:85:4a:27: 13:8a:41:60:77:26:5f:b8:20:7b:93:6f:3d:3a:a2:73:f8:88: cd:3a:fc:79:5a:91:64:d1:3c:3a:dc:96:26:d4:86:58:8a:25: 03:db:b6:e5:f3:07:53:56:6a:9c:7f:97:99:90:9a:8b:0d:1a: 7f:73:dd:b0:00:8a:3b:60:f0:96:48:61:26:e3:d5:84:52:42: c7:84:d0:3b:d4:3d:51:bf:da:cc:75:da:43:45:55:64:7b:2d: e5:02:2d:1d:ef:92:05:49:57:c5:e8:ee:5d:1c:b4:d5:a7:88: ea:96:1f:6e:15:a3:78:5e:fb:31:14:63:69:10:2c:2c:a8:55: ae:4a:3a:a6:27:dc:d8:ae:c8:2b:11:4f:fc:83:a1:a2:43:e5: 40:57:28:a5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx NDhDNkI0RkEwHhcNMjQxMjMxMTU1MzM2WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc0MTM4MC02ZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7k5nF2duY7BxLz5LpmBg0adfA1NvRzJ/Fc58A2mn/WIDx/MW+uXHhizsQYU L+dMTRoFOslIwV8wZtNNXRGy7vDx3kWCUbwZjdr3YAUjTkekI2azZzCv5XLddwXf qy1YJA01a/coVwjEmhSQT1qIr6wSxQx/Bnj1E5X+wpI7mMoMCgK9fxoggEwkSK+w nVSxJ8VEgOMpa1lDo6qm+sJGzSzZwLRER7Ld1xEtnXFYMA0ysTrV/EVZveaF73wo IxuXoRLtYs5AtVdL7Jr4/ODJiHXxMR799djG6B3zVnZvbhA8v7pt6BK0myadUHb+ ABLeEpjgltrR/2OcIYd/B4SEzwIDAQABo4IClTCCApEwHQYDVR0OBBYEFARsIIFs 36RdbHLXdRzZatSCBdfIMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0 UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvODY1OUZDRkVC MTI4MTFFRTk4Nzg2RjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACTMmIwDQYJKoZIhvcNAQELBQADggEBABt8GgdGUaVaVxhO HEw1y00/75tdSWK93xUePUf37WJK+FBtifnvBFWC5I4PX+P7dj3MNi+IpMjzyrBP /NSldcyKfFag/qm8otvQ4uzNT5wXbwI2CjvqP1AZmt5WfB1qyDfLHhH7RTgXLoVK JxOKQWB3Jl+4IHuTbz06onP4iM06/HlakWTRPDrclibUhliKJQPbtuXzB1NWapx/ l5mQmosNGn9z3bAAijtg8JZIYSbj1YRSQseE0DvUPVG/2sx12kNFVWR7LeUCLR3v kgVJV8Xo7l0ctNWniOqWH24Vo3he+zEUY2kQLCyoVa5KOqYn3NiuyCsRT/yDoaJD 5UBXKKU= -----END CERTIFICATE-----Generated at Sun Apr 6 04:00:12 2025 by rpki-client