$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa File: EB6B9956690E11EF9396CC48C4F9AE02.roa (raw, json) Hash identifier: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc= Subject key identifier: 28:39:EF:60:09:F5:55:DC:1D:CA:26:7A:93:66:D9:6E:D0:3B:20:C5 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 02EB Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa Signing time: Wed 27 Nov 2024 01:35:07 +0000 ROA not before: Wed 27 Nov 2024 01:35:07 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 24190 IP address blocks: 119.63.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 747 (0x2eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A Validity Not Before: Nov 27 01:35:07 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6746774a-005b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:5b:bb:f3:18:29:5d:61:09:ae:da:fe:52: e4:c9:71:c9:62:82:f6:f3:a5:08:25:0d:5f:3f:5b: 1b:65:71:6e:a9:74:94:d1:9c:1c:d6:e1:bb:48:dc: 52:03:d1:c2:41:3f:47:95:0f:d7:d8:de:2b:b8:a4: fb:72:a7:b6:63:75:ef:f0:01:65:00:36:bd:f6:c0: c0:79:0f:cc:f5:a0:91:17:73:64:ba:1a:fa:61:3d: 91:44:fb:bf:e0:cb:5e:00:39:9b:c1:aa:6c:95:bd: 6b:6b:d0:6b:cb:eb:a5:25:6a:69:b9:dc:05:63:27: 42:ea:00:d9:9a:3f:b6:d0:a9:d2:9a:19:bc:3b:bd: 09:49:26:66:6d:6a:ef:cd:9f:60:7a:b9:62:84:a0: c2:e1:d2:23:1b:37:71:4e:68:80:bf:ef:e2:8d:51: 08:96:26:f6:da:1d:88:5b:e4:d0:f9:56:84:27:15: 40:08:30:19:77:83:3f:a1:23:d8:aa:70:2d:78:c5: 0b:5a:04:cf:c0:0f:6b:b7:ff:ec:50:a7:c2:8c:94: 44:e8:f8:75:0c:62:53:cd:8b:65:cc:64:8e:97:76: 33:07:ed:47:e3:eb:07:c0:21:27:31:a8:9a:69:1e: 44:54:c4:70:39:e5:af:47:b7:66:d7:64:77:c6:39: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:39:EF:60:09:F5:55:DC:1D:CA:26:7A:93:66:D9:6E:D0:3B:20:C5 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/EB6B9956690E11EF9396CC48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.63.74.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:1a:1a:bf:21:cc:c2:31:e5:8b:ad:b6:e5:d5:a6:c2:69:74: cd:28:8d:8a:46:09:ba:5a:82:22:4d:36:26:6a:64:50:7b:53: 70:24:a6:31:92:ec:70:28:a5:f0:da:b1:38:ae:7f:59:fa:ba: 2c:7c:99:64:39:a6:34:53:a9:69:a8:67:31:ec:35:3a:f0:ab: 85:06:b5:ae:55:9b:cc:9d:f8:fb:13:02:be:09:81:e6:e3:1c: ec:06:c3:eb:a1:2f:be:b7:fb:f1:e5:84:23:c8:ba:cc:f8:57: dd:75:5c:33:7c:80:33:80:63:2c:9f:a7:6b:43:48:bb:7e:ee: d5:66:25:36:61:20:d4:d3:41:81:0a:f7:40:e8:fa:79:d4:53: 19:da:4b:42:3f:72:cc:7b:65:cd:df:94:a2:2c:5e:db:24:62: 8d:e0:65:06:4e:e6:21:3a:5e:f2:ab:e2:4e:0f:d1:6d:fe:c2: dd:b3:8e:2b:40:e7:56:ab:ae:51:07:fc:08:c9:01:76:c0:1c: b2:91:69:b8:c5:06:f0:36:21:ae:4b:aa:a1:0f:06:c8:a4:4e: ff:2a:cf:8e:e5:6c:76:28:3a:43:6b:26:2f:de:d0:14:71:31: 19:e6:57:64:12:85:d7:43:31:c4:7a:86:17:34:55:89:26:c0: b5:f2:07:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQxMTI3MDEzNTA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQ2Nzc0YS0wMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0Nbu/MYKV1hCa7a/lLkyXHJYoL286UIJQ1fP1sbZXFuqXSU0Zwc1uG7SNxS A9HCQT9HlQ/X2N4ruKT7cqe2Y3Xv8AFlADa99sDAeQ/M9aCRF3Nkuhr6YT2RRPu/ 4MteADmbwapslb1ra9Bry+ulJWppudwFYydC6gDZmj+20KnSmhm8O70JSSZmbWrv zZ9gerlihKDC4dIjGzdxTmiAv+/ijVEIlib22h2IW+TQ+VaEJxVACDAZd4M/oSPY qnAteMULWgTPwA9rt//sUKfCjJRE6Ph1DGJTzYtlzGSOl3YzB+1H4+sHwCEnMaia aR5EVMRwOeWvR7dm12R3xjmHbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCg572AJ 9VXcHcomepNm2W7QOyDFMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvRUI2Qjk5NTY2 OTBFMTFFRjkzOTZDQzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3P0owDQYJKoZIhvcNAQELBQADggEBAI0aGr8hzMIx5Yut tuXVpsJpdM0ojYpGCbpagiJNNiZqZFB7U3AkpjGS7HAopfDasTiuf1n6uix8mWQ5 pjRTqWmoZzHsNTrwq4UGta5Vm8yd+PsTAr4JgebjHOwGw+uhL763+/HlhCPIusz4 V911XDN8gDOAYyyfp2tDSLt+7tVmJTZhINTTQYEK90Do+nnUUxnaS0I/csx7Zc3f lKIsXtskYo3gZQZO5iE6XvKr4k4P0W3+wt2zjitA51arrlEH/AjJAXbAHLKRabjF BvA2Ia5LqqEPBsikTv8qz47lbHYoOkNrJi/e0BRxMRnmV2QShddDMcR6hhc0VYkm wLXyBxs= -----END CERTIFICATE-----Generated at Sun Apr 6 17:20:54 2025 by rpki-client