$ rpki-client -vvf rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa File: 9B41336A9ABB11EC9D11861FC4F9AE02.roa (raw, json) Hash identifier: JjNvo6+sKFXJO5jB79ObwXmzISqdgMEQqhlFwLrXnJs= Subject key identifier: C5:8F:33:63:A9:D3:46:D4:CF:91:54:03:AC:E3:90:CF:69:D9:92:EB Certificate issuer: /CN=A9131D5E/serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Certificate serial: 0534 Authority key identifier: 41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa Signing time: Mon 02 Dec 2024 23:32:39 +0000 ROA not before: Mon 02 Dec 2024 23:32:39 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 4759 IP address blocks: 210.16.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131D5E, serialNumber=41E2E352064CA2FF9E21C484355AC02E4407258D Validity Not Before: Dec 2 23:32:39 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674e4397-8a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:da:c9:82:1c:75:28:86:df:a0:f7:1a:87: 4f:b3:76:03:f8:0f:3d:e9:22:60:2c:ed:23:27:6a: 81:e3:01:f2:23:8a:b1:09:ed:30:34:3c:65:34:c1: 06:ce:be:ed:3c:91:ec:bc:a2:3a:2a:d7:01:6f:b2: 5a:98:7b:90:8a:13:80:b1:e4:d1:39:ce:e4:91:b8: fa:27:7c:fc:07:35:a5:df:a0:4a:13:4a:48:44:25: ec:d0:1c:f9:be:d4:34:0e:9b:38:59:bf:c1:ef:4a: a8:ee:6a:3c:04:5b:79:90:31:36:ab:ca:77:c2:30: fd:c7:08:e1:1e:13:3d:11:50:b9:44:18:6f:f6:4e: 09:6f:e8:66:96:41:dd:11:b5:48:da:c1:64:8c:d6: 39:62:60:04:63:32:ed:a6:42:36:7e:c1:a3:54:c6: 62:e9:a3:01:ae:e5:e1:0a:e5:23:46:15:92:c2:6d: 10:52:57:b9:ce:d8:60:c8:fe:be:4d:73:68:93:34: 85:c2:07:82:88:4e:11:bf:33:92:8b:37:00:69:52: bf:fa:bf:b4:02:38:15:05:f1:49:86:45:8a:07:1b: ec:b0:37:49:c0:07:b8:08:df:eb:11:83:f0:d9:46: 57:9b:58:cd:12:ca:3c:ea:88:f4:57:98:fb:3a:e0: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8F:33:63:A9:D3:46:D4:CF:91:54:03:AC:E3:90:CF:69:D9:92:EB X509v3 Authority Key Identifier: keyid:41:E2:E3:52:06:4C:A2:FF:9E:21:C4:84:35:5A:C0:2E:44:07:25:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/QeLjUgZMov-eIcSENVrALkQHJY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeLjUgZMov-eIcSENVrALkQHJY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131D5E/56DD48DED94711EB9A1A0D71C4F9AE02/9B41336A9ABB11EC9D11861FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.16.0.0/18 Signature Algorithm: sha256WithRSAEncryption b9:7a:75:0c:13:5f:ed:e3:4d:6d:98:6f:da:f5:33:8f:8e:44: 41:4f:9d:0a:fd:1f:34:a7:c9:0e:06:cb:a2:7a:25:03:58:0d: af:fe:51:6f:9c:ea:fe:3c:fb:65:c0:ec:24:2b:f4:8b:85:c7: fb:12:5e:03:53:1d:87:e3:33:03:ba:37:9c:80:6a:2a:70:51: 88:e0:a2:f9:78:52:90:a5:78:0a:1f:93:32:9d:86:7a:87:17: 88:50:eb:fe:fe:64:10:bc:44:53:de:61:b8:72:7f:16:97:af: c3:bf:fd:71:c5:ab:6e:5b:98:ca:f2:07:4a:51:23:6f:c6:a1: 63:fb:fc:f3:c8:6c:d8:5b:f2:70:62:7b:d0:a5:a0:a7:b8:7e: 07:fe:fe:33:95:91:42:fa:5c:20:05:b1:6f:f4:f9:1e:2c:28: da:dd:6b:dd:8c:ef:1f:17:d1:29:b8:3b:25:17:94:47:ff:ab: 39:9f:ae:73:9a:57:4e:b4:9d:cc:e2:50:f4:9a:4e:b8:83:69: d7:7e:b2:48:ed:df:8c:de:09:c2:7c:d4:0c:07:f1:19:a2:79: 34:15:06:0c:6c:9a:a6:9f:2c:26:0b:22:61:5f:2d:9b:12:ee: 01:70:b4:2d:33:57:b9:ad:14:39:39:5f:c8:8a:30:d2:74:d0: ae:f5:af:c0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFENUUxMTAvBgNVBAUTKDQxRTJFMzUyMDY0Q0EyRkY5RTIxQzQ4NDM1NUFDMDJF NDQwNzI1OEQwHhcNMjQxMjAyMjMzMjM5WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlNDM5Ny04YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTnayYIcdSiG36D3GodPs3YD+A896SJgLO0jJ2qB4wHyI4qxCe0wNDxlNMEG zr7tPJHsvKI6KtcBb7JamHuQihOAseTROc7kkbj6J3z8BzWl36BKE0pIRCXs0Bz5 vtQ0Dps4Wb/B70qo7mo8BFt5kDE2q8p3wjD9xwjhHhM9EVC5RBhv9k4Jb+hmlkHd EbVI2sFkjNY5YmAEYzLtpkI2fsGjVMZi6aMBruXhCuUjRhWSwm0QUle5zthgyP6+ TXNokzSFwgeCiE4RvzOSizcAaVK/+r+0AjgVBfFJhkWKBxvssDdJwAe4CN/rEYPw 2UZXm1jNEso86oj0V5j7OuAPkQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMWPM2Op 00bUz5FUA6zjkM9p2ZLrMB8GA1UdIwQYMBaAFEHi41IGTKL/niHEhDVawC5EByWN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUQ1RS81NkRENDhERUQ5 NDcxMUVCOUExQTBENzFDNEY5QUUwMi9RZUxqVWdaTW92LWVJY1NFTlZyQUxrUUhK WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FlTGpVZ1pNb3YtZUljU0VOVnJBTGtRSEpZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzFENUUvNTZERDQ4REVEOTQ3MTFFQjlBMUEwRDcxQzRGOUFFMDIvOUI0MTMzNkE5 QUJCMTFFQzlEMTE4NjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAbSEAAwDQYJKoZIhvcNAQELBQADggEBALl6dQwTX+3jTW2Y b9r1M4+OREFPnQr9HzSnyQ4Gy6J6JQNYDa/+UW+c6v48+2XA7CQr9IuFx/sSXgNT HYfjMwO6N5yAaipwUYjgovl4UpCleAofkzKdhnqHF4hQ6/7+ZBC8RFPeYbhyfxaX r8O//XHFq25bmMryB0pRI2/GoWP7/PPIbNhb8nBie9CloKe4fgf+/jOVkUL6XCAF sW/0+R4sKNrda92M7x8X0Sm4OyUXlEf/qzmfrnOaV060ncziUPSaTriDadd+skjt 34zeCcJ81AwH8RmieTQVBgxsmqafLCYLImFfLZsS7gFwtC0zV7mtFDk5X8iKMNJ0 0K71r8A= -----END CERTIFICATE-----Generated at Sun Apr 13 18:25:09 2025 by rpki-client