$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DD84920268FA11EFB2CB6E60C4F9AE02.roa File: DD84920268FA11EFB2CB6E60C4F9AE02.roa (raw, json) Hash identifier: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI= Subject key identifier: 19:8E:E4:AB:40:B5:1E:EF:1F:D1:65:03:A8:12:8A:59:C4:18:05:F3 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 02DA Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DD84920268FA11EFB2CB6E60C4F9AE02.roa Signing time: Wed 27 Nov 2024 01:34:50 +0000 ROA not before: Wed 27 Nov 2024 01:34:50 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 134100 IP address blocks: 43.251.205.0/24 maxlen: 24 223.27.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A Validity Not Before: Nov 27 01:34:50 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6746773a-cffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:81:bd:f4:b9:d7:12:1b:82:a4:71:07:4c: df:5f:76:c0:41:cb:83:ea:3f:af:0d:24:56:71:08: 77:0f:b2:90:4b:83:00:b1:3e:f5:df:fd:77:7f:c5: 8d:c3:a9:fe:ed:1f:fe:7f:c6:cd:d7:f6:31:49:f3: c5:c7:63:6b:6e:06:44:1a:40:af:15:92:cc:f2:f0: 21:54:6b:4b:85:80:18:0d:69:09:e3:80:1e:0e:f5: ec:bc:bd:74:69:eb:94:d0:8e:6d:e8:ba:2f:8c:4f: c7:c2:93:86:4b:17:d5:f0:a8:6e:ec:93:71:76:c2: 75:f8:e0:c5:69:4b:dd:ad:12:1d:64:8e:a6:dc:a7: 68:3a:3e:4c:7f:4b:ab:24:71:06:dd:f9:37:0e:41: a5:78:05:3b:5f:1e:55:e3:86:1f:ea:d1:3c:91:4b: 5e:a4:30:4f:4c:81:af:2c:3d:a9:d1:22:42:8e:d5: 99:d2:f1:56:53:c6:de:e1:3a:26:4a:09:21:aa:e9: 40:a8:d1:5d:dd:eb:cb:a8:b3:fb:48:77:99:f0:15: 42:34:77:0d:37:1d:6b:b0:bd:cb:7a:61:ad:e7:39: d6:6e:5a:7b:ba:cf:8e:41:97:4f:f2:32:f0:09:82: 46:3c:3c:da:e5:15:b0:a4:92:e1:80:c5:61:5d:76: 61:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8E:E4:AB:40:B5:1E:EF:1F:D1:65:03:A8:12:8A:59:C4:18:05:F3 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DD84920268FA11EFB2CB6E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.205.0/24 223.27.224.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:90:91:ef:9a:5e:c2:ed:d7:dc:6a:c2:82:6d:f0:42:e3:ac: f1:02:48:f9:be:13:a4:92:4b:17:fb:f3:6c:5c:03:0d:a9:65: 78:a4:b5:6f:ef:3c:4e:69:34:c7:59:9f:6e:ed:8f:2b:26:0d: 53:21:2c:61:81:d2:3b:c6:8a:7d:d8:70:0f:a4:dc:17:9c:17: d0:03:86:86:fa:6a:da:98:90:25:e9:ab:f5:4d:a0:f8:7a:2e: 09:d6:87:09:c4:ca:0f:3b:98:e7:8a:f8:67:70:d1:39:b6:19: 4b:66:3b:10:83:78:92:2c:25:4a:64:82:3a:de:ad:c2:bd:27: 68:10:c4:cd:7e:63:34:43:b6:0c:4e:c2:95:25:18:ff:3f:6d: 42:d5:88:32:00:e3:e9:bb:8c:73:0b:52:2e:fc:5b:4b:5b:92: 99:da:75:ce:d5:92:4b:98:20:31:87:60:54:64:2c:3b:ab:f1: 59:34:ce:b1:ec:3d:8e:d0:6c:23:eb:99:6a:19:9d:0c:fd:28: 93:db:0e:33:c3:e9:08:20:28:dd:ff:20:57:fa:4a:68:a0:6f: 78:a3:05:f9:5f:a0:61:1e:79:6d:2e:96:75:7b:c7:7b:63:04: 40:d8:ec:80:e1:05:09:3d:33:0c:3b:b1:41:07:76:24:2a:40: 1b:35:15:c1 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQxMTI3MDEzNDUwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2NzczYS1jZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVWBvfS51xIbgqRxB0zfX3bAQcuD6j+vDSRWcQh3D7KQS4MAsT713/13f8WN w6n+7R/+f8bN1/YxSfPFx2NrbgZEGkCvFZLM8vAhVGtLhYAYDWkJ44AeDvXsvL10 aeuU0I5t6LovjE/HwpOGSxfV8Khu7JNxdsJ1+ODFaUvdrRIdZI6m3KdoOj5Mf0ur JHEG3fk3DkGleAU7Xx5V44Yf6tE8kUtepDBPTIGvLD2p0SJCjtWZ0vFWU8be4Tom SgkhqulAqNFd3evLqLP7SHeZ8BVCNHcNNx1rsL3LemGt5znWblp7us+OQZdP8jLw CYJGPDza5RWwpJLhgMVhXXZhoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBmO5KtA tR7vH9FlA6gSilnEGAXzMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvREQ4NDkyMDI2 OEZBMTFFRkIyQ0I2RTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAr+80DBADfG+AwDQYJKoZIhvcNAQELBQADggEBAF6Qke+a XsLt19xqwoJt8ELjrPECSPm+E6SSSxf782xcAw2pZXiktW/vPE5pNMdZn27tjysm DVMhLGGB0jvGin3YcA+k3BecF9ADhob6atqYkCXpq/VNoPh6LgnWhwnEyg87mOeK +Gdw0Tm2GUtmOxCDeJIsJUpkgjrercK9J2gQxM1+YzRDtgxOwpUlGP8/bULViDIA 4+m7jHMLUi78W0tbkpnadc7VkkuYIDGHYFRkLDur8Vk0zrHsPY7QbCPrmWoZnQz9 KJPbDjPD6QggKN3/IFf6Smigb3ijBflfoGEeeW0ulnV7x3tjBEDY7IDhBQk9Mww7 sUEHdiQqQBs1FcE= -----END CERTIFICATE-----Generated at Fri Apr 11 07:03:25 2025 by rpki-client