$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/218211CA68F911EF986C8281C4F9AE02.roa File: 218211CA68F911EF986C8281C4F9AE02.roa (raw, json) Hash identifier: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo= Subject key identifier: 8B:D7:43:AA:A0:7D:4C:3B:32:13:27:E0:B1:70:8E:16:44:21:AF:AC Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 02E0 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/218211CA68F911EF986C8281C4F9AE02.roa Signing time: Wed 27 Nov 2024 01:34:55 +0000 ROA not before: Wed 27 Nov 2024 01:34:55 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137885 IP address blocks: 43.249.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A Validity Not Before: Nov 27 01:34:55 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6746773e-8391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:72:82:2f:4f:d0:99:81:5f:55:80:04:69: f0:a3:50:cf:c8:c1:49:b7:e6:36:4b:d6:5b:61:99: 9f:96:fb:8b:e6:ee:2e:00:e0:3b:21:a5:c9:31:c9: 9d:13:20:10:a4:07:e3:56:3d:0d:11:94:b1:21:d4: b7:65:66:b4:e7:f6:53:da:2f:72:37:d0:be:da:84: c2:dd:22:d4:4e:18:fa:1f:82:d1:0d:c2:8f:63:78: 5f:b4:d7:e6:15:01:4d:cf:b7:30:1d:c4:a3:68:73: 41:e3:e8:83:6f:5b:38:72:e9:e0:05:74:d6:fa:bd: af:e7:17:b3:33:52:89:54:4a:b9:c8:bf:b3:26:43: 9d:4c:4a:7a:e3:27:62:d9:85:7f:3f:7c:92:1d:ee: fa:02:52:83:80:eb:67:b1:dd:32:22:ed:6c:1e:c7: ef:80:50:bb:c2:07:5a:72:77:a7:fc:f2:e2:99:00: b0:29:1e:86:f2:54:bd:44:fd:0e:5f:b4:96:68:5e: 26:82:8a:79:3a:df:8a:2c:43:3e:30:79:2f:d2:32: ee:b1:2e:65:75:3a:56:2d:63:aa:d8:1e:d8:fe:d7: 6b:04:9e:98:a6:e7:b6:9c:85:8b:af:b3:3e:f0:15: 8c:42:52:6c:85:6f:0d:4d:08:2f:c4:39:be:ae:ed: a2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:43:AA:A0:7D:4C:3B:32:13:27:E0:B1:70:8E:16:44:21:AF:AC X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/218211CA68F911EF986C8281C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.249.67.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:6a:c7:6e:3a:7c:00:d1:39:50:98:0a:a8:10:21:9d:4d:a1: f1:64:07:d4:1e:12:1d:a8:6f:23:23:60:da:82:50:4d:b9:a1: 75:70:7e:92:83:d1:02:60:e1:7f:9b:70:07:80:90:59:62:df: 32:de:8d:a1:3c:a9:42:0b:ab:a4:b5:d2:0c:70:18:9f:36:cc: d4:d6:6a:e0:79:d2:12:b5:42:ff:66:c3:5d:f0:5c:9e:29:6d: e1:01:c1:57:71:3f:b5:94:d2:20:b4:60:77:60:44:2f:6a:2d: 84:57:4f:56:e5:70:d7:36:c7:a7:43:06:62:dc:69:89:5f:06: 2c:74:26:2d:25:02:0b:4d:4c:15:67:8d:3a:1f:c5:6c:3e:0c: 1a:01:49:a5:43:72:3e:a8:6e:dc:e2:b2:57:f1:cc:39:39:11: 0b:e9:54:e8:f9:7a:80:c9:93:6a:28:3e:b5:28:0c:d5:32:69: 02:89:a9:8f:97:89:3f:80:3c:9e:2c:33:a8:e4:bb:31:97:49: 16:c2:9e:bc:95:f4:5d:70:1b:f0:5a:76:30:6c:c9:71:63:54: 26:61:c0:13:af:98:66:73:20:f3:02:97:fe:7c:0b:c8:38:1a: f2:2f:41:6c:44:08:28:11:c4:fa:2b:b2:e7:ea:62:c9:fe:6e: 1c:bc:61:97 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQxMTI3MDEzNDU1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2NzczZS04MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGNygi9P0JmBX1WABGnwo1DPyMFJt+Y2S9ZbYZmflvuL5u4uAOA7IaXJMcmd EyAQpAfjVj0NEZSxIdS3ZWa05/ZT2i9yN9C+2oTC3SLUThj6H4LRDcKPY3hftNfm FQFNz7cwHcSjaHNB4+iDb1s4cungBXTW+r2v5xezM1KJVEq5yL+zJkOdTEp64ydi 2YV/P3ySHe76AlKDgOtnsd0yIu1sHsfvgFC7wgdacnen/PLimQCwKR6G8lS9RP0O X7SWaF4mgop5Ot+KLEM+MHkv0jLusS5ldTpWLWOq2B7Y/tdrBJ6Ypue2nIWLr7M+ 8BWMQlJshW8NTQgvxDm+ru2iOwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIvXQ6qg fUw7MhMn4LFwjhZEIa+sMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMjE4MjExQ0E2 OEY5MTFFRjk4NkM4MjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr+UMwDQYJKoZIhvcNAQELBQADggEBAFtqx246fADROVCY CqgQIZ1NofFkB9QeEh2obyMjYNqCUE25oXVwfpKD0QJg4X+bcAeAkFli3zLejaE8 qUILq6S10gxwGJ82zNTWauB50hK1Qv9mw13wXJ4pbeEBwVdxP7WU0iC0YHdgRC9q LYRXT1blcNc2x6dDBmLcaYlfBix0Ji0lAgtNTBVnjTofxWw+DBoBSaVDcj6obtzi slfxzDk5EQvpVOj5eoDJk2ooPrUoDNUyaQKJqY+XiT+APJ4sM6jkuzGXSRbCnryV 9F1wG/BadjBsyXFjVCZhwBOvmGZzIPMCl/58C8g4GvIvQWxECCgRxPorsufqYsn+ bhy8YZc= -----END CERTIFICATE-----Generated at Sun Apr 6 01:40:19 2025 by rpki-client