$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa File: 2A9845DE691411EF8D868864C4F9AE02.roa (raw, json) Hash identifier: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c= Subject key identifier: 05:0C:3C:31:55:59:82:92:FF:36:05:60:B8:48:0F:51:B4:3B:5A:E2 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 02E8 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa Signing time: Wed 27 Nov 2024 01:35:02 +0000 ROA not before: Wed 27 Nov 2024 01:35:02 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 151780 IP address blocks: 202.94.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 744 (0x2e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A Validity Not Before: Nov 27 01:35:02 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67467745-04dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4e:1f:fe:d6:96:4c:cc:57:46:67:63:16:3e: b3:c3:fb:26:d1:ae:6d:f1:0f:66:5e:41:c4:66:d9: 07:32:ea:e3:ee:d6:3e:74:49:91:c8:b0:43:34:1e: 86:4e:1b:7b:d7:09:87:b7:96:a9:1d:8c:37:b8:30: e9:b0:12:fd:db:92:aa:69:cd:5c:82:c2:eb:14:59: da:32:d3:54:60:a4:66:48:b7:1c:34:58:a7:35:f0: fb:c0:2c:2b:a2:08:0d:b0:ff:f6:e6:4c:0a:56:56: 73:3c:9d:d8:1b:eb:a2:0e:f5:c0:92:08:0e:ef:95: 93:c7:d5:28:71:95:49:64:f5:c2:56:8b:24:bc:40: 89:a4:d6:49:ca:26:3a:42:75:14:27:b9:da:44:3a: 8f:12:ad:cc:e5:44:e9:0b:61:62:d2:04:9c:42:e4: 20:3c:ea:6d:36:28:a1:90:a9:5f:f5:83:f5:7d:2c: e4:a6:31:8e:4b:3e:ac:91:67:bc:3d:7a:c2:9a:88: 29:d0:f0:f8:03:a9:84:c1:85:9e:91:c4:47:32:5c: c7:27:62:fc:d7:32:8b:53:60:c4:21:bf:88:6c:57: fc:95:f5:79:7c:06:4a:50:cc:b3:c1:c1:28:43:c8: a7:e3:87:88:40:a8:ad:73:6d:70:2a:0e:33:7f:6d: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0C:3C:31:55:59:82:92:FF:36:05:60:B8:48:0F:51:B4:3B:5A:E2 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/2A9845DE691411EF8D868864C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.94.247.0/24 Signature Algorithm: sha256WithRSAEncryption 50:b8:04:e6:55:af:a7:e1:d6:7b:d8:9a:08:8d:31:70:e7:10: 2e:d7:d9:d8:44:5b:d1:78:f7:9b:c9:03:02:d7:7a:4d:fa:c9: 3e:c3:20:9f:28:52:7a:67:11:ae:66:ce:44:3c:f2:88:95:29: 4b:f0:e4:7f:b7:8b:85:0a:1a:d8:f9:2f:e5:44:87:75:a7:93: c7:1a:e5:04:38:5e:01:f7:a6:53:bd:c9:7b:0b:1c:84:50:5c: a2:6a:a2:70:f6:90:79:89:1d:bc:dc:13:51:90:e2:f6:51:ba: 73:48:82:67:95:2e:52:73:8d:c2:61:4d:e9:80:ae:a6:71:a2: 11:70:07:e4:72:ff:7c:a3:43:5a:fe:b2:7e:73:5e:7f:d2:46: 0b:f2:c7:d5:7e:03:8f:53:2c:78:3d:f3:6b:02:ee:7d:d4:4e: 2d:08:16:9a:a5:92:e0:58:b3:28:f7:2e:2e:ce:b2:30:44:59: 04:76:e1:5c:50:75:12:b4:ae:d2:05:53:e3:47:a3:81:89:70: 71:59:34:30:7a:25:64:ee:c0:ff:e1:71:cb:02:34:8f:01:88: 14:cb:b1:07:5c:c5:68:30:aa:2a:a1:7e:47:59:15:cb:c0:d4: b2:3d:01:ac:57:69:1e:3c:09:e9:05:b1:d6:0c:e2:d1:29:a9: da:39:20:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQxMTI3MDEzNTAyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2Nzc0NS0wNGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E4f/taWTMxXRmdjFj6zw/sm0a5t8Q9mXkHEZtkHMurj7tY+dEmRyLBDNB6G Tht71wmHt5apHYw3uDDpsBL925Kqac1cgsLrFFnaMtNUYKRmSLccNFinNfD7wCwr oggNsP/25kwKVlZzPJ3YG+uiDvXAkggO75WTx9UocZVJZPXCVoskvECJpNZJyiY6 QnUUJ7naRDqPEq3M5UTpC2Fi0gScQuQgPOptNiihkKlf9YP1fSzkpjGOSz6skWe8 PXrCmogp0PD4A6mEwYWekcRHMlzHJ2L81zKLU2DEIb+IbFf8lfV5fAZKUMyzwcEo Q8in44eIQKitc21wKg4zf23TKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAUMPDFV WYKS/zYFYLhID1G0O1riMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvMkE5ODQ1REU2 OTE0MTFFRjhEODY4ODY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKXvcwDQYJKoZIhvcNAQELBQADggEBAFC4BOZVr6fh1nvY mgiNMXDnEC7X2dhEW9F495vJAwLXek36yT7DIJ8oUnpnEa5mzkQ88oiVKUvw5H+3 i4UKGtj5L+VEh3Wnk8ca5QQ4XgH3plO9yXsLHIRQXKJqonD2kHmJHbzcE1GQ4vZR unNIgmeVLlJzjcJhTemArqZxohFwB+Ry/3yjQ1r+sn5zXn/SRgvyx9V+A49TLHg9 82sC7n3UTi0IFpqlkuBYsyj3Li7OsjBEWQR24VxQdRK0rtIFU+NHo4GJcHFZNDB6 JWTuwP/hccsCNI8BiBTLsQdcxWgwqiqhfkdZFcvA1LI9AaxXaR48CekFsdYM4tEp qdo5INU= -----END CERTIFICATE-----Generated at Sun Apr 6 17:33:08 2025 by rpki-client