$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/DA673610F51D11EFAD3D042EC4F9AE02.roa File: DA673610F51D11EFAD3D042EC4F9AE02.roa (raw, json) Hash identifier: Ditm9jS3Zsy5UK/tSQ4fwIyFAaD9ya5NTIds4DVaHEo= Subject key identifier: B7:7D:BF:1C:F4:A2:62:65:FD:CD:E1:5C:8E:DC:5E:6E:6D:BB:D8:63 Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD Certificate serial: 12 Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/DA673610F51D11EFAD3D042EC4F9AE02.roa Signing time: Thu 27 Feb 2025 15:16:44 +0000 ROA not before: Thu 27 Feb 2025 15:16:44 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149179 IP address blocks: 161.248.204.0/23 maxlen: 23 161.248.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 06:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DB66 Validity Not Before: Feb 27 15:16:44 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c081dc-e521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:02:10:26:89:e2:44:87:c3:8e:e4:4d:85: 6b:7d:43:bb:79:a7:60:72:5a:2c:6e:e9:8b:7a:ba: 4a:e2:b7:98:61:14:07:d5:b6:3c:a9:dd:32:76:a6: 8a:63:99:3c:0f:4b:fa:a5:e5:c3:ea:fc:45:fd:b2: 94:a6:0e:71:03:11:01:76:a8:45:2b:0d:50:c0:c2: c1:6b:a3:b6:2d:12:f3:20:c6:2a:83:df:cb:7e:c6: 0d:73:e6:d4:ac:e8:a9:59:ad:24:f1:02:01:35:5d: 1a:c2:94:7d:ee:4e:90:d6:f1:1f:7a:cb:0b:7e:1b: fb:30:4d:c4:38:0f:aa:8a:ab:b5:54:a7:bf:78:81: ac:74:d5:fd:42:2d:5e:a2:9f:fd:2a:40:e8:29:88: 9e:97:d6:aa:87:3b:8a:cb:86:b5:b2:22:fb:da:99: 5e:1b:db:88:fd:cc:4c:76:19:2e:96:b6:9a:05:cd: 1c:60:1c:ca:fd:41:0b:de:78:e7:41:cd:c9:35:1b: b5:21:ad:b2:ae:10:bf:c4:96:27:b1:da:49:a4:8c: b0:9b:51:50:ab:09:2f:5f:ca:59:da:7a:42:9c:e9: 20:b1:a5:78:40:04:25:19:e6:c9:93:07:fc:42:41: 3a:0e:56:2b:dd:7e:6f:db:6b:10:e7:f4:29:8f:a9: cd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7D:BF:1C:F4:A2:62:65:FD:CD:E1:5C:8E:DC:5E:6E:6D:BB:D8:63 X509v3 Authority Key Identifier: keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/DA673610F51D11EFAD3D042EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.204.0/23 Signature Algorithm: sha256WithRSAEncryption 15:d2:fc:b1:bb:ca:8e:b1:46:92:34:b7:1e:40:bc:af:10:ad: 73:d7:2c:42:e6:17:be:3b:00:d7:69:49:23:58:ff:e9:94:a8: 65:2e:a8:2d:f2:45:55:10:be:f6:a8:e9:06:80:ce:95:a1:9b: bb:61:f2:eb:2c:88:97:a4:96:d2:3b:35:13:d2:9a:11:4a:47: bf:90:d8:fa:af:90:c6:45:55:85:10:e8:ea:2e:15:03:ff:d0: d9:c0:18:17:3d:81:28:b3:8d:2e:04:7a:36:06:f9:05:55:32: 97:de:cc:48:68:0d:2e:ed:a4:8d:48:ee:cc:2a:c0:64:22:c5: 7e:00:cd:8f:c7:ab:db:7f:8e:87:a3:4a:56:65:03:67:16:6a: 8c:06:9e:44:51:00:4f:4c:67:83:4e:14:1a:f4:91:63:c0:38: f4:ca:00:b7:5f:76:05:95:88:7b:9e:d1:a5:c9:db:14:b8:ca: a1:58:6c:74:1e:67:2d:37:47:5b:d7:09:cd:e2:e4:bc:ef:4e: 4d:6a:cc:6a:c1:48:27:55:86:0a:91:db:6e:1b:31:17:6d:f6: 62:e1:83:24:d6:c8:5e:b2:a0:a3:27:57:0f:e6:18:e4:ca:23: 72:5d:af:6d:f2:f9:90:f5:7c:f8:bc:98:94:be:9a:d1:13:55: 93:c8:f8:66 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REI2NjExMC8GA1UEBRMoQkM4Qzc5Rjc4NDkxQTFENUFBNDVEQkU0MTMzQzBDMTBG NjkzNjRBRDAeFw0yNTAyMjcxNTE2NDRaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzA4MWRjLWU1MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOvgIQJoniRIfDjuRNhWt9Q7t5p2ByWixu6Yt6ukrit5hhFAfVtjyp3TJ2popj mTwPS/ql5cPq/EX9spSmDnEDEQF2qEUrDVDAwsFro7YtEvMgxiqD38t+xg1z5tSs 6KlZrSTxAgE1XRrClH3uTpDW8R96ywt+G/swTcQ4D6qKq7VUp794gax01f1CLV6i n/0qQOgpiJ6X1qqHO4rLhrWyIvvamV4b24j9zEx2GS6WtpoFzRxgHMr9QQveeOdB zck1G7UhrbKuEL/Eliex2kmkjLCbUVCrCS9fylnaekKc6SCxpXhABCUZ5smTB/xC QToOVivdfm/baxDn9CmPqc2FAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUt32/HPSi YmX9zeFcjtxebm272GMwHwYDVR0jBBgwFoAUvIx594SRodWqRdvkEzwMEPaTZK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEQjY2Lzc3QjYxOTlDRTA5 QTExRUZCNjNBODEzMEM0RjlBRTAyL3ZJeDU5NFNSb2RXcVJkdmtFendNRVBhVFpL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkl4NTk0U1JvZFdxUmR2a0V6d01FUGFUWkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REI2Ni83N0I2MTk5Q0UwOUExMUVGQjYzQTgxMzBDNEY5QUUwMi9EQTY3MzYxMEY1 MUQxMUVGQUQzRDA0MkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4zDANBgkqhkiG9w0BAQsFAAOCAQEAFdL8sbvKjrFGkjS3 HkC8rxCtc9csQuYXvjsA12lJI1j/6ZSoZS6oLfJFVRC+9qjpBoDOlaGbu2Hy6yyI l6SW0js1E9KaEUpHv5DY+q+QxkVVhRDo6i4VA//Q2cAYFz2BKLONLgR6Ngb5BVUy l97MSGgNLu2kjUjuzCrAZCLFfgDNj8er23+Oh6NKVmUDZxZqjAaeRFEAT0xng04U GvSRY8A49MoAt192BZWIe57RpcnbFLjKoVhsdB5nLTdHW9cJzeLkvO9OTWrMasFI J1WGCpHbbhsxF232YuGDJNbIXrKgoydXD+YY5Mojcl2vbfL5kPV8+LyYlL6a0RNV k8j4Zg== -----END CERTIFICATE-----Generated at Mon Apr 7 11:12:42 2025 by rpki-client