$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa File: 8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa (raw, json) Hash identifier: /YjY7P9L0E8WjaWx4AfDlm8Dw/xWaWys/adkujHGYsI= Subject key identifier: A3:83:7F:1A:65:8E:DB:66:41:25:D2:ED:81:5E:A6:C4:69:0F:AB:52 Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 0410 Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa Signing time: Mon 02 Dec 2024 09:26:51 +0000 ROA not before: Mon 02 Dec 2024 09:26:51 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 399989 IP address blocks: 113.20.48.0/22 maxlen: 22 113.20.52.0/22 maxlen: 22 113.20.56.0/22 maxlen: 22 113.20.60.0/22 maxlen: 22 223.29.128.0/22 maxlen: 22 223.29.132.0/22 maxlen: 22 223.29.136.0/22 maxlen: 22 223.29.140.0/22 maxlen: 22 223.29.144.0/22 maxlen: 22 223.29.148.0/22 maxlen: 22 223.29.152.0/22 maxlen: 22 223.29.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1040 (0x410) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73 Validity Not Before: Dec 2 09:26:51 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=674d7d5b-26da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:11:93:01:48:17:d0:80:72:62:6e:f7:9a: 5d:1a:1d:f2:84:03:8b:75:a6:10:89:8a:21:3f:fb: 89:91:42:83:52:d8:74:b3:70:6e:eb:8d:0e:7c:77: 67:ee:79:d7:12:41:ab:45:0f:61:b9:88:0b:24:d9: 74:a2:c2:d6:10:1c:36:0d:6d:4e:8f:56:e2:d6:21: 76:dd:c8:c1:54:81:45:41:c1:0f:d7:55:9e:02:45: d4:1b:dd:6e:b0:ad:7d:fd:af:e3:a3:06:17:48:34: 96:7f:6e:bc:8d:a1:be:8d:9a:69:8c:b9:cb:3b:9c: 3c:94:08:13:9e:6f:97:ff:d6:0e:d1:6c:02:d7:0e: f3:e0:26:cb:c1:6e:b3:93:d0:02:17:6c:f7:6c:5a: dd:21:ee:ff:da:fb:ee:59:7e:bc:b7:0b:37:89:16: 4d:1f:fc:62:85:29:21:f4:dd:25:3d:c0:a7:e2:3f: ab:13:23:93:7b:7d:af:71:73:ac:54:4d:fc:71:ae: a2:bb:f6:3a:f0:04:1c:4b:f9:f0:32:23:ce:24:1d: 48:61:ae:69:9e:da:cc:f8:67:d6:fc:d4:f3:ff:c7: 04:71:71:80:07:8e:10:a4:75:22:eb:30:18:06:f4: 3f:00:a0:71:f3:5d:c7:f8:7b:ed:73:48:67:93:62: 6b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:83:7F:1A:65:8E:DB:66:41:25:D2:ED:81:5E:A6:C4:69:0F:AB:52 X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/8F9F0B1CB08F11EF8E3C4F2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.20.48.0/20 223.29.128.0/19 Signature Algorithm: sha256WithRSAEncryption b1:35:1d:f7:ee:47:49:23:df:84:27:ff:d1:11:03:a5:0d:78: 3b:41:00:e1:cc:09:ad:fa:2c:f9:de:05:91:67:2b:76:fc:59: 64:fe:f2:ba:05:64:dd:a9:c2:42:44:76:c1:13:62:60:3f:02: 31:49:0d:b2:e9:78:9d:83:9c:80:ed:c7:5b:94:c3:c4:b2:72: a1:e9:e7:47:ec:f1:b3:6a:aa:db:5f:ff:19:c0:48:02:64:59: 81:e5:cb:1b:56:fb:19:8b:dd:25:ca:70:46:f5:18:b6:c8:fe: 71:4a:30:25:4d:bd:61:64:ff:9c:c9:e1:18:f5:4f:b8:ed:2a: 40:c8:70:28:91:f2:63:7b:2d:0f:ed:a4:4f:90:41:72:33:6d: 17:36:8c:9e:56:8c:ce:82:be:dd:04:b8:76:dc:10:26:6e:56: db:7b:98:86:05:2d:ac:f9:39:4e:0a:d4:c9:d5:0f:16:b4:aa: c1:a6:80:18:e8:17:28:d1:0c:cf:31:eb:c9:ae:e3:7e:84:f0: 1d:b6:ec:d8:5b:af:9e:da:a8:db:51:aa:5f:6e:a8:71:63:5a: ee:68:66:40:d4:ad:d7:05:27:f8:e8:f1:b0:c9:30:b4:eb:74: 49:24:91:54:9e:dc:b8:24:14:c4:31:11:12:0b:a5:95:d6:4d: 73:de:86:b0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBBAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjQxMjAyMDkyNjUxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRkN2Q1Yi0yNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOARkwFIF9CAcmJu95pdGh3yhAOLdaYQiYohP/uJkUKDUth0s3Bu640OfHdn 7nnXEkGrRQ9huYgLJNl0osLWEBw2DW1Oj1bi1iF23cjBVIFFQcEP11WeAkXUG91u sK19/a/jowYXSDSWf268jaG+jZppjLnLO5w8lAgTnm+X/9YO0WwC1w7z4CbLwW6z k9ACF2z3bFrdIe7/2vvuWX68tws3iRZNH/xihSkh9N0lPcCn4j+rEyOTe32vcXOs VE38ca6iu/Y68AQcS/nwMiPOJB1IYa5pntrM+GfW/NTz/8cEcXGAB44QpHUi6zAY BvQ/AKBx813H+Hvtc0hnk2JrywIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKODfxpl jttmQSXS7YFepsRpD6tSMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvOEY5RjBCMUNC MDhGMTFFRjhFM0M0RjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBARxFDADBAXfHYAwDQYJKoZIhvcNAQELBQADggEBALE1Hffu R0kj34Qn/9ERA6UNeDtBAOHMCa36LPneBZFnK3b8WWT+8roFZN2pwkJEdsETYmA/ AjFJDbLpeJ2DnIDtx1uUw8SycqHp50fs8bNqqttf/xnASAJkWYHlyxtW+xmL3SXK cEb1GLbI/nFKMCVNvWFk/5zJ4Rj1T7jtKkDIcCiR8mN7LQ/tpE+QQXIzbRc2jJ5W jM6Cvt0EuHbcECZuVtt7mIYFLaz5OU4K1MnVDxa0qsGmgBjoFyjRDM8x68mu436E 8B227Nhbr57aqNtRql9uqHFjWu5oZkDUrdcFJ/jo8bDJMLTrdEkkkVSe3LgkFMQx ERILpZXWTXPehrA= -----END CERTIFICATE-----Generated at Sat Apr 5 01:52:43 2025 by rpki-client