$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa File: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (raw, json) Hash identifier: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI= Subject key identifier: 9E:06:0F:4B:E2:8F:34:16:E6:13:AD:5C:48:C8:40:25:B0:2D:17:7F Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 35FE Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa Signing time: Fri 16 Aug 2024 14:40:36 +0000 ROA not before: Fri 16 Aug 2024 14:40:36 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 9286 IP address blocks: 121.78.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13822 (0x35fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E Validity Not Before: Aug 16 14:40:36 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66bf64e3-44c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:16:71:a3:ea:1f:9e:90:44:24:04:72:5c: ef:a8:4b:51:b8:26:5f:bc:14:99:be:a4:c6:4d:1d: 4f:61:93:2e:fc:c5:23:53:a3:6f:9f:63:d1:c6:d4: 09:6b:04:94:91:75:2e:97:f1:79:a9:68:30:d8:b8: 18:ad:c6:9c:bb:54:23:71:ab:f7:c2:49:8f:73:92: 47:36:a4:5b:10:59:67:c1:9f:0d:64:03:2c:39:2c: 78:92:30:13:48:63:f9:ff:88:4f:cd:15:7e:b1:cd: aa:03:fb:0c:3a:98:e3:85:65:90:21:6f:1c:65:92: 06:b2:33:75:85:d9:bb:33:46:1f:fd:75:38:d6:ec: ce:75:c4:2c:5a:4e:57:bb:4c:a3:4f:45:30:8e:8f: da:cf:e0:bc:b2:04:a8:9a:96:70:1e:9a:e1:ff:42: ae:1f:08:f3:c8:29:5b:a1:80:4d:bb:54:49:f2:72: 5b:cf:13:79:c2:36:c5:da:c6:a0:7f:e0:e2:6f:23: 7f:66:53:fd:6b:16:ec:23:66:ec:28:4b:91:32:cf: e1:8f:13:02:09:a9:1e:e3:1f:0c:05:e7:36:36:bd: c3:15:ae:1a:a7:29:e5:7d:8c:a9:23:87:57:42:5d: 09:78:c8:91:ed:38:ff:f8:d9:e1:e9:f0:e9:8a:94: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:06:0F:4B:E2:8F:34:16:E6:13:AD:5C:48:C8:40:25:B0:2D:17:7F X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/83F06CF2DF1211EDB91D5C61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.78.35.0/24 Signature Algorithm: sha256WithRSAEncryption e1:0a:a5:9c:ec:fb:78:a2:56:a6:d1:f8:ab:9c:6b:07:52:81: c4:98:aa:57:06:f1:3a:80:b9:63:9e:97:b9:a1:54:a0:e5:0a: af:f9:17:25:ac:23:f1:48:89:9b:f0:e0:4a:21:72:45:d6:3e: 45:26:00:0a:87:48:cf:43:98:c0:c8:e7:4c:ed:84:23:a7:8a: 93:54:cf:c9:8b:61:0c:ab:0c:bd:43:f9:cb:58:af:ff:04:c3: aa:88:c6:10:56:bf:e3:1d:80:dc:e4:e0:ed:ba:b8:36:36:d6: 1b:83:5a:cc:b4:78:94:bb:76:0e:be:c7:d6:db:25:02:c5:fd: 64:14:a9:06:b8:b0:bf:44:54:aa:1b:df:5f:62:9d:8e:3c:ac: 6a:81:ba:6f:6b:e5:f3:c3:e7:9e:62:ec:a7:64:0f:44:ae:eb: e1:fd:16:34:ca:9b:f9:cd:c8:d9:1f:5c:32:6e:95:28:87:68: ee:35:97:25:ff:7b:22:d9:3d:c0:4a:ea:d7:6f:5f:8b:0f:50: 08:2a:ef:36:fd:29:e6:37:54:74:71:62:28:65:c9:24:85:54: 89:ef:81:b7:95:c9:e6:5f:35:21:aa:78:ca:c6:39:26:db:25: d8:a3:c3:b1:a8:f9:a1:c1:22:d6:4c:be:3b:4a:18:25:01:dc: 41:c2:68:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjQwODE2MTQ0MDM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJmNjRlMy00NGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5egWcaPqH56QRCQEclzvqEtRuCZfvBSZvqTGTR1PYZMu/MUjU6Nvn2PRxtQJ awSUkXUul/F5qWgw2LgYrcacu1Qjcav3wkmPc5JHNqRbEFlnwZ8NZAMsOSx4kjAT SGP5/4hPzRV+sc2qA/sMOpjjhWWQIW8cZZIGsjN1hdm7M0Yf/XU41uzOdcQsWk5X u0yjT0Uwjo/az+C8sgSompZwHprh/0KuHwjzyClboYBNu1RJ8nJbzxN5wjbF2sag f+DibyN/ZlP9axbsI2bsKEuRMs/hjxMCCake4x8MBec2Nr3DFa4apynlfYypI4dX Ql0JeMiR7Tj/+Nnh6fDpipQd5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ4GD0vi jzQW5hOtXEjIQCWwLRd/MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvODNGMDZDRjJE RjEyMTFFREI5MUQ1QzYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB5TiMwDQYJKoZIhvcNAQELBQADggEBAOEKpZzs+3iiVqbR +KucawdSgcSYqlcG8TqAuWOel7mhVKDlCq/5FyWsI/FIiZvw4EohckXWPkUmAAqH SM9DmMDI50zthCOnipNUz8mLYQyrDL1D+ctYr/8Ew6qIxhBWv+MdgNzk4O26uDY2 1huDWsy0eJS7dg6+x9bbJQLF/WQUqQa4sL9EVKob319inY48rGqBum9r5fPD555i 7KdkD0Su6+H9FjTKm/nNyNkfXDJulSiHaO41lyX/eyLZPcBK6tdvX4sPUAgq7zb9 KeY3VHRxYihlySSFVInvgbeVyeZfNSGqeMrGOSbbJdijw7Go+aHBItZMvjtKGCUB 3EHCaDc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:25:25 2025 by rpki-client