$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/69CB6C488A3111EF85E56411C4F9AE02.roa File: 69CB6C488A3111EF85E56411C4F9AE02.roa (raw, json) Hash identifier: RrQUwCJzT2EZ+f5R+zSU4Z2FKFB6tYF+gr6XKMCqEE8= Subject key identifier: D7:74:C5:72:5E:A7:67:71:4F:A3:1B:6F:36:FB:E1:8F:2E:3B:05:8B Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8 Certificate serial: 2678 Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/69CB6C488A3111EF85E56411C4F9AE02.roa Signing time: Mon 14 Oct 2024 13:37:10 +0000 ROA not before: Mon 14 Oct 2024 13:37:10 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 206804 IP address blocks: 116.93.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:48:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9848 (0x2678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145446 Validity Not Before: Oct 14 13:37:10 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670d1e86-4213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fc:7b:1d:c1:37:fc:21:f8:7f:2d:b5:24:c6: 2e:45:0e:ba:ea:a2:d5:6c:fb:ae:24:51:91:50:b5: 8e:aa:44:06:a0:e7:91:30:2a:86:e0:a5:e0:d7:98: ec:d7:e0:dd:cc:44:5d:c9:2f:82:24:17:d9:b3:ae: 17:95:05:1d:bf:93:1c:b1:5a:c6:84:4b:f6:eb:d0: 15:a9:e5:1d:3a:8c:06:5f:92:2a:48:7c:22:58:e0: d1:90:98:00:1f:c3:8a:4e:ca:a5:72:69:02:a2:10: 27:03:0a:8b:9f:97:fd:20:06:5c:b7:e9:6b:12:b8: f1:f9:68:aa:dc:cc:08:3e:87:7d:15:e2:ac:bf:23: 2c:60:3c:63:a6:d3:01:19:07:6a:d0:ab:05:6c:f2: cd:4d:6f:d9:aa:96:59:00:d2:4d:92:91:04:48:b5: 22:db:ba:5e:cd:cf:ad:3c:dd:de:7b:c2:e0:6e:0e: 2f:e6:58:1d:13:c5:b4:35:cd:32:26:04:c8:a9:20: 45:d3:79:10:b1:d8:9c:40:60:07:61:24:bc:03:43: f0:17:8b:8a:01:1b:76:69:cc:e0:4b:36:e6:ac:bc: ae:fe:db:46:77:c2:f7:d8:39:63:4e:c9:29:c9:90: d1:5f:75:66:cb:dc:9c:5a:60:63:ed:18:a6:e5:6e: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:C5:72:5E:A7:67:71:4F:A3:1B:6F:36:FB:E1:8F:2E:3B:05:8B X509v3 Authority Key Identifier: keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/69CB6C488A3111EF85E56411C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.93.53.0/24 Signature Algorithm: sha256WithRSAEncryption 42:0c:cb:fa:6c:ea:a9:f5:3c:16:d4:d7:f4:12:51:b2:52:2b: 32:55:b9:af:09:89:51:8d:0d:5c:8a:99:82:8a:3a:d6:46:0c: 3b:36:fc:d5:8a:70:28:30:42:ab:23:5e:c0:03:15:b6:81:a7: 9e:b1:25:ab:10:8f:5c:65:c7:7a:f3:95:a6:71:79:00:ca:c1: ec:af:c1:3a:55:b4:ed:23:5a:6f:4c:e0:73:00:a4:d7:f6:85: 6c:3c:1f:15:35:c9:02:06:cd:3b:e3:51:47:20:6b:8a:27:d8: 0f:51:c9:5f:64:b5:7a:13:a1:96:68:98:d9:c6:3d:3d:45:9c: 1f:ad:eb:bf:e7:9f:f3:3f:ca:46:e6:ae:54:c5:e5:31:92:7a: 15:18:35:f2:46:e2:cc:44:cd:79:ae:44:df:e8:bb:c3:29:cb: 4d:d2:99:24:6d:00:09:92:1a:b4:cc:86:45:94:9f:1a:97:47: ff:a2:1f:a1:29:3c:1f:90:f3:49:0d:2e:63:3d:5b:60:25:81: 9b:b1:6d:7c:5b:d8:f8:b9:d6:c0:32:3f:f2:a7:ca:48:cc:cc: 17:31:29:05:1d:b5:38:4d:70:2a:d7:9b:96:d8:5f:87:12:a0: c2:d3:20:cc:82:df:01:2c:b8:75:29:b1:db:aa:ad:a2:dd:d8: a8:64:a5:11 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0NDYxMTAvBgNVBAUTKDdENjVFQkUxNEMzMDQ2RTczRTM5ODY5NTczMDJBMjZF MDgxRjFBRjgwHhcNMjQxMDE0MTMzNzEwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkMWU4Ni00MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/x7HcE3/CH4fy21JMYuRQ666qLVbPuuJFGRULWOqkQGoOeRMCqG4KXg15js 1+DdzERdyS+CJBfZs64XlQUdv5McsVrGhEv269AVqeUdOowGX5IqSHwiWODRkJgA H8OKTsqlcmkCohAnAwqLn5f9IAZct+lrErjx+Wiq3MwIPod9FeKsvyMsYDxjptMB GQdq0KsFbPLNTW/ZqpZZANJNkpEESLUi27pezc+tPN3ee8Lgbg4v5lgdE8W0Nc0y JgTIqSBF03kQsdicQGAHYSS8A0PwF4uKARt2aczgSzbmrLyu/ttGd8L32DljTskp yZDRX3Vmy9ycWmBj7Rim5W6g/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNd0xXJe p2dxT6Mbbzb74Y8uOwWLMB8GA1UdIwQYMBaAFH1l6+FMMEbnPjmGlXMCom4IHxr4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTQ0Ni9BQ0EyRTc1QzFG QzUxMUU1QjQ1MERENjJDNEY5QUUwMi9mV1hyNFV3d1J1Yy1PWWFWY3dLaWJnZ2ZH dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZXWHI0VXd3UnVjLU9ZYVZjd0tpYmdnZkd2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDU0NDYvQUNBMkU3NUMxRkM1MTFFNUI0NTBERDYyQzRGOUFFMDIvNjlDQjZDNDg4 QTMxMTFFRjg1RTU2NDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB0XTUwDQYJKoZIhvcNAQELBQADggEBAEIMy/ps6qn1PBbU 1/QSUbJSKzJVua8JiVGNDVyKmYKKOtZGDDs2/NWKcCgwQqsjXsADFbaBp56xJasQ j1xlx3rzlaZxeQDKweyvwTpVtO0jWm9M4HMApNf2hWw8HxU1yQIGzTvjUUcga4on 2A9RyV9ktXoToZZomNnGPT1FnB+t67/nn/M/ykbmrlTF5TGSehUYNfJG4sxEzXmu RN/ou8Mpy03SmSRtAAmSGrTMhkWUnxqXR/+iH6EpPB+Q80kNLmM9W2AlgZuxbXxb 2Pi51sAyP/KnykjMzBcxKQUdtThNcCrXm5bYX4cSoMLTIMyC3wEsuHUpsduqraLd 2KhkpRE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:13:59 2025 by rpki-client