$ rpki-client -vvf rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa File: B1334FD4522011ECB0594C2BC4F9AE02.roa (raw, json) Hash identifier: /FpsHXLPYXsoHcGNcebXfdYyitx9/IlpkTRLrZlFe1o= Subject key identifier: 8C:87:2D:63:E9:56:14:39:53:33:0F:A5:11:9C:B7:57:D0:0D:67:09 Certificate issuer: /CN=A9151265/serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Certificate serial: 0409 Authority key identifier: 91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa Signing time: Thu 19 Dec 2024 00:33:35 +0000 ROA not before: Thu 19 Dec 2024 00:33:35 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132695 IP address blocks: 202.6.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151265, serialNumber=91A9323CB34426F3D9C890E3978020D417B359F5 Validity Not Before: Dec 19 00:33:35 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=676369df-0e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:de:2f:a6:69:52:03:30:33:5e:1d:56:aa: 1c:9e:a4:9c:c1:ad:c5:3a:8d:97:16:7f:8c:0d:86: 7a:cc:11:37:a0:f8:b5:87:d4:bb:7e:37:df:c6:d5: 8d:4c:5d:4c:0f:b4:6d:6f:1a:f4:30:37:b0:16:07: 35:be:c6:75:cd:be:db:47:d9:a9:08:d8:d3:a5:08: dd:59:f0:b5:42:93:a1:d0:e7:ea:0c:b3:d5:e9:4c: 62:6a:b4:ca:f3:a2:4f:12:de:57:50:1a:bb:4e:0c: 83:e8:76:1e:f2:36:f6:f0:06:23:a9:fd:e0:e2:da: 7c:08:11:ab:3a:47:4d:55:12:f8:2f:c8:d4:e2:44: eb:45:d8:fe:b3:34:dd:0c:2a:f9:93:ed:a9:5e:24: 0b:02:58:8b:74:80:d9:7a:71:7c:14:98:95:41:d6: 33:b2:04:fb:c8:33:c8:d3:36:97:53:8a:cc:b1:3a: 0d:31:96:b2:ad:9e:92:51:35:bd:bc:29:ba:a2:b4: eb:5f:5b:bd:8e:15:ce:16:bc:93:e5:18:56:cc:62: 38:8b:7f:51:a7:8f:9a:66:d6:50:b0:a7:ef:25:8b: 7c:16:c1:db:dd:c8:94:48:1b:51:b2:d6:a4:02:d5: 19:92:c5:c8:ff:55:87:91:28:8d:97:5b:af:54:9c: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:87:2D:63:E9:56:14:39:53:33:0F:A5:11:9C:B7:57:D0:0D:67:09 X509v3 Authority Key Identifier: keyid:91:A9:32:3C:B3:44:26:F3:D9:C8:90:E3:97:80:20:D4:17:B3:59:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/kakyPLNEJvPZyJDjl4Ag1BezWfU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kakyPLNEJvPZyJDjl4Ag1BezWfU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151265/05709AEA521F11ECB3D0192BC4F9AE02/B1334FD4522011ECB0594C2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.6.84.0/24 Signature Algorithm: sha256WithRSAEncryption a5:44:27:96:50:df:67:2d:62:4c:48:ea:41:de:fa:5a:f2:eb: c9:f0:1c:da:3a:35:87:08:be:60:59:16:7a:b8:e6:5f:62:28: 15:ec:82:e8:fc:aa:c3:09:0c:c7:58:46:38:d3:46:7d:8c:50: 37:bf:16:1b:51:76:fd:35:44:bf:55:eb:53:b0:c1:9e:49:0f: cc:6b:28:f5:e5:0a:5c:71:a6:c5:17:3c:c6:bc:ab:7d:54:7c: 50:0c:13:12:d1:51:14:58:0e:b8:c8:8a:00:4a:20:6b:60:4e: 9f:75:0c:84:94:60:30:30:17:7b:f3:16:63:8c:c6:d7:b2:aa: e7:20:19:89:41:94:58:8c:af:00:41:d4:2c:f3:5c:23:1c:7b: 7c:ea:87:a3:e2:1f:cb:e7:dd:6a:45:8c:c2:16:04:c1:2b:cc: a1:4f:b2:c1:28:2c:f8:f7:61:f0:ad:e7:e3:25:70:b9:a8:c1: b8:0d:58:50:01:4b:97:55:0b:d5:03:3d:b0:a7:7b:7a:53:69: ba:e8:07:b1:e1:56:06:91:69:e3:3a:0b:2b:82:f8:e8:17:05: 74:59:91:af:ac:07:1d:66:c8:c2:82:d9:22:67:76:02:e8:87: 7b:51:87:e3:c9:c5:d5:5c:b5:ed:b9:39:17:eb:61:62:6c:8e: de:8c:68:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNjUxMTAvBgNVBAUTKDkxQTkzMjNDQjM0NDI2RjNEOUM4OTBFMzk3ODAyMEQ0 MTdCMzU5RjUwHhcNMjQxMjE5MDAzMzM1WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYzNjlkZi0wZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypneL6ZpUgMwM14dVqocnqScwa3FOo2XFn+MDYZ6zBE3oPi1h9S7fjffxtWN TF1MD7Rtbxr0MDewFgc1vsZ1zb7bR9mpCNjTpQjdWfC1QpOh0OfqDLPV6UxiarTK 86JPEt5XUBq7TgyD6HYe8jb28AYjqf3g4tp8CBGrOkdNVRL4L8jU4kTrRdj+szTd DCr5k+2pXiQLAliLdIDZenF8FJiVQdYzsgT7yDPI0zaXU4rMsToNMZayrZ6SUTW9 vCm6orTrX1u9jhXOFryT5RhWzGI4i39Rp4+aZtZQsKfvJYt8FsHb3ciUSBtRstak AtUZksXI/1WHkSiNl1uvVJyLyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIyHLWPp VhQ5UzMPpRGct1fQDWcJMB8GA1UdIwQYMBaAFJGpMjyzRCbz2ciQ45eAINQXs1n1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI2NS8wNTcwOUFFQTUy MUYxMUVDQjNEMDE5MkJDNEY5QUUwMi9rYWt5UExORUp2UFp5SkRqbDRBZzFCZXpX ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tha3lQTE5FSnZQWnlKRGpsNEFnMUJleldmVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEyNjUvMDU3MDlBRUE1MjFGMTFFQ0IzRDAxOTJCQzRGOUFFMDIvQjEzMzRGRDQ1 MjIwMTFFQ0IwNTk0QzJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKBlQwDQYJKoZIhvcNAQELBQADggEBAKVEJ5ZQ32ctYkxI 6kHe+lry68nwHNo6NYcIvmBZFnq45l9iKBXsguj8qsMJDMdYRjjTRn2MUDe/FhtR dv01RL9V61OwwZ5JD8xrKPXlClxxpsUXPMa8q31UfFAMExLRURRYDrjIigBKIGtg Tp91DISUYDAwF3vzFmOMxteyqucgGYlBlFiMrwBB1CzzXCMce3zqh6PiH8vn3WpF jMIWBMErzKFPssEoLPj3YfCt5+MlcLmowbgNWFABS5dVC9UDPbCne3pTabroB7Hh VgaRaeM6CyuC+OgXBXRZka+sBx1myMKC2SJndgLoh3tRh+PJxdVcte25ORfrYWJs jt6MaCk= -----END CERTIFICATE-----Generated at Sun Apr 13 04:23:11 2025 by rpki-client