$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa File: A75964A28E4B11EA8A347A3EC4F9AE02.roa (raw, json) Hash identifier: KqNlQBgDzVn6oYtQRMX2oZuYkDyyOGts1nvV6+UnhlU= Subject key identifier: C6:4C:4D:5B:B7:1E:00:FD:1D:4E:8A:7B:35:7D:D0:DB:2A:49:85:F8 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1C54 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa Signing time: Mon 28 Oct 2024 14:40:35 +0000 ROA not before: Mon 28 Oct 2024 14:40:35 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 131471 IP address blocks: 119.30.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7252 (0x1c54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568 Validity Not Before: Oct 28 14:40:35 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=671fa262-0282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:76:32:43:0f:f9:78:c6:a2:fd:4d:45:3f: 26:8b:77:4a:1f:19:b7:76:61:08:04:3e:cd:d5:e0: 94:70:a2:13:d4:fe:de:43:e7:10:89:a9:8c:02:be: 67:5a:59:7f:ff:87:54:97:21:54:2b:76:03:21:91: f5:84:be:f9:e6:31:7e:3e:74:36:a6:a9:2e:b4:d2: 16:f5:a2:aa:1d:49:5b:91:4d:a6:29:99:4d:15:70: 45:3a:5f:6f:a3:6b:6a:69:b6:9e:cc:b0:97:f0:e9: 8a:5d:3b:72:7c:2d:ac:06:79:3b:59:25:4f:b6:6e: 91:17:71:72:2c:b5:db:e6:62:59:32:68:7a:79:ca: 8d:9d:10:d8:3e:b6:1a:85:44:fc:98:cb:7c:33:5e: 57:9e:13:af:56:01:72:e1:60:a5:00:f8:83:48:8a: 8b:6c:53:11:da:a9:e8:c9:2b:74:75:4b:64:3f:67: 79:84:cc:eb:7c:5f:f4:c0:ec:dd:09:56:d6:eb:16: 28:97:b9:59:05:19:e8:9f:3f:6b:56:c1:c9:df:15: 4f:af:9c:87:7e:53:68:08:d3:62:2f:57:a4:37:c2: fd:10:ed:1e:bd:03:c6:27:70:f4:a4:24:fc:f5:65: 6c:57:b9:6e:73:c5:55:32:66:c2:36:ae:c8:ea:47: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4C:4D:5B:B7:1E:00:FD:1D:4E:8A:7B:35:7D:D0:DB:2A:49:85:F8 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/A75964A28E4B11EA8A347A3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.30.85.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:c0:77:ef:12:cd:28:a8:a4:f1:bc:26:02:09:a6:cd:fb:b0: d2:da:c5:70:76:6e:7b:7f:19:b1:46:c2:07:27:28:e7:23:b0: 66:b5:07:53:82:df:d8:78:51:cf:a6:dc:98:55:57:e7:84:13: ae:4c:4b:64:df:d3:fb:c8:14:f7:9f:e2:18:e0:a6:8b:13:e7: 6e:bb:87:46:6b:e9:a2:93:8d:9b:10:89:26:15:9e:ed:0f:c4: b3:9f:6c:2b:20:55:cf:3e:cd:d0:90:08:67:45:84:62:9c:57: 01:eb:9e:f8:7d:0e:a7:62:19:26:a7:b5:e8:33:33:e2:24:40: 72:e8:29:94:5d:99:8e:20:2e:c7:20:9b:38:db:13:b6:dc:27: 49:f6:97:5f:a6:74:1a:7f:3e:41:ce:1f:67:00:5a:be:ec:3c: 64:46:20:4e:bf:5e:c5:f7:92:ca:13:a2:38:92:23:b7:77:a6: 55:64:92:08:af:62:cc:84:e7:c7:67:03:1a:d4:97:a2:9d:1f: f5:e6:e9:27:9c:c9:98:6d:0c:32:26:e9:4c:64:a6:16:13:99: 09:1d:7f:74:0d:f0:e3:57:45:65:b8:25:62:40:ed:9d:90:fd: 9c:13:10:43:f6:34:f4:92:65:c0:0f:3c:16:6a:a5:65:b2:dd: 0c:e5:e5:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjQxMDI4MTQ0MDM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmYTI2Mi0wMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbJ2MkMP+XjGov1NRT8mi3dKHxm3dmEIBD7N1eCUcKIT1P7eQ+cQiamMAr5n Wll//4dUlyFUK3YDIZH1hL755jF+PnQ2pqkutNIW9aKqHUlbkU2mKZlNFXBFOl9v o2tqabaezLCX8OmKXTtyfC2sBnk7WSVPtm6RF3FyLLXb5mJZMmh6ecqNnRDYPrYa hUT8mMt8M15XnhOvVgFy4WClAPiDSIqLbFMR2qnoySt0dUtkP2d5hMzrfF/0wOzd CVbW6xYol7lZBRnonz9rVsHJ3xVPr5yHflNoCNNiL1ekN8L9EO0evQPGJ3D0pCT8 9WVsV7luc8VVMmbCNq7I6kd5OwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMZMTVu3 HgD9HU6KezV90NsqSYX4MB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvQTc1OTY0QTI4 RTRCMTFFQThBMzQ3QTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3HlUwDQYJKoZIhvcNAQELBQADggEBACvAd+8SzSiopPG8 JgIJps37sNLaxXB2bnt/GbFGwgcnKOcjsGa1B1OC39h4Uc+m3JhVV+eEE65MS2Tf 0/vIFPef4hjgposT5267h0Zr6aKTjZsQiSYVnu0PxLOfbCsgVc8+zdCQCGdFhGKc VwHrnvh9DqdiGSantegzM+IkQHLoKZRdmY4gLscgmzjbE7bcJ0n2l1+mdBp/PkHO H2cAWr7sPGRGIE6/XsX3ksoTojiSI7d3plVkkgivYsyE58dnAxrUl6KdH/Xm6Sec yZhtDDIm6UxkphYTmQkdf3QN8ONXRWW4JWJA7Z2Q/ZwTEEP2NPSSZcAPPBZqpWWy 3Qzl5ag= -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:27 2025 by rpki-client