$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F1930FBAEFE011ED81AE706DC4F9AE02.roa File: F1930FBAEFE011ED81AE706DC4F9AE02.roa (raw, json) Hash identifier: NP4Z7Tt6CY/HSXNtbW7GXldzu9mQG/LCVCiq7fXDLJ8= Subject key identifier: 2B:F3:71:9E:DD:0B:31:AA:D4:D9:A2:4E:9F:FE:B7:96:C1:96:66:E4 Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978 Certificate serial: 038B Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F1930FBAEFE011ED81AE706DC4F9AE02.roa Signing time: Thu 05 Dec 2024 01:15:11 +0000 ROA not before: Thu 05 Dec 2024 01:15:11 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 140630 IP address blocks: 150.129.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 00:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916557B Validity Not Before: Dec 5 01:15:11 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6750fe9e-c2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:de:a5:72:c0:3f:43:2a:ec:61:b6:73:72: b0:d5:2c:df:c1:27:a0:6e:54:a3:12:1c:a7:8e:ad: 1f:6b:bb:56:f2:8b:ef:b6:93:a9:7d:87:78:d5:28: 7f:23:de:56:a7:07:68:58:eb:16:29:86:2c:30:f6: 89:b7:be:7f:9d:a3:0e:e3:2b:5a:f1:05:cf:3c:6b: dd:72:e1:f8:28:6e:e9:de:79:dd:86:e1:66:e5:cd: 69:4d:1f:fb:66:5b:e0:ae:07:f6:f0:d0:b0:7b:f5: 84:7e:c0:8e:1f:5d:e7:da:eb:a4:b3:bd:89:32:37: 15:63:7d:5d:4c:d2:45:f0:e2:a8:4b:6d:d0:a3:e4: 92:a7:d5:3a:12:be:e7:4f:23:d8:2b:97:6b:fc:08: d4:3b:a3:37:a5:3b:46:83:b3:0f:3c:60:5e:af:aa: 6c:40:5d:6f:1d:6d:82:8c:6e:19:8e:7b:41:a8:f4: b7:8d:b4:1b:ba:69:18:94:78:b5:49:5e:75:99:8b: c2:b1:49:9f:d0:8b:d6:01:f9:c8:40:be:ea:69:7b: 1b:95:71:97:0b:8f:e5:57:85:a5:be:b1:d4:dc:bc: 0f:3b:ed:b5:20:29:df:24:3a:2f:0b:a2:5d:01:b7: dc:e6:c4:07:2a:c9:9e:89:56:4b:a7:91:30:1f:07: f4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F3:71:9E:DD:0B:31:AA:D4:D9:A2:4E:9F:FE:B7:96:C1:96:66:E4 X509v3 Authority Key Identifier: keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/F1930FBAEFE011ED81AE706DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.129.217.0/24 Signature Algorithm: sha256WithRSAEncryption 12:e6:49:2e:6d:d6:ad:f6:a9:0c:5e:c0:64:52:54:e2:25:7d: bc:0f:9b:84:1c:f3:05:f7:6d:40:56:92:9f:e6:45:33:30:19: 76:d8:e0:b0:16:37:7f:2d:0c:15:58:36:ed:79:61:e6:dc:b7: 56:5a:7d:2f:99:c1:78:6a:48:c1:6b:7a:65:55:b2:04:41:cb: 4b:5c:4f:1c:59:88:2e:84:52:df:14:78:49:62:e0:0f:24:a0: 67:f0:76:60:39:2f:82:dd:8b:79:55:ab:3b:c6:64:ad:31:6b: cc:2b:49:ba:45:d2:d3:ce:a6:42:e5:0a:8d:64:46:25:41:ed: 81:0b:5b:9d:40:01:d5:a2:23:d8:1a:5a:cf:41:bf:62:1d:f7: 1d:83:4d:45:52:b8:f9:ce:7c:b6:a0:90:df:40:63:94:36:3d: 29:94:3f:cb:53:e6:fc:ae:d4:98:c2:a4:ee:3a:76:46:30:c5: a4:4a:68:e4:22:87:4e:65:c0:3f:b4:37:e3:00:36:10:a1:9d: f8:c0:3f:06:bd:68:99:0a:a5:0a:57:29:81:cf:86:5d:7a:73: d6:88:b7:7b:0e:8e:7d:02:fa:30:92:be:17:db:81:d3:4e:c6: 8c:dd:89:4d:ff:94:3d:70:fe:2d:27:fb:3b:63:f0:0b:dd:0a: 4e:73:19:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE MjYwQUE5NzgwHhcNMjQxMjA1MDExNTExWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwZmU5ZS1jMmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCrepXLAP0Mq7GG2c3Kw1SzfwSegblSjEhynjq0fa7tW8ovvtpOpfYd41Sh/ I95WpwdoWOsWKYYsMPaJt75/naMO4yta8QXPPGvdcuH4KG7p3nndhuFm5c1pTR/7 Zlvgrgf28NCwe/WEfsCOH13n2uuks72JMjcVY31dTNJF8OKoS23Qo+SSp9U6Er7n TyPYK5dr/AjUO6M3pTtGg7MPPGBer6psQF1vHW2CjG4ZjntBqPS3jbQbumkYlHi1 SV51mYvCsUmf0IvWAfnIQL7qaXsblXGXC4/lV4WlvrHU3LwPO+21ICnfJDovC6Jd Abfc5sQHKsmeiVZLp5EwHwf0LQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCvzcZ7d CzGq1NmiTp/+t5bBlmbkMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1N0IvOERBNzI2NDBDMUZBMTFFQ0IzMEVFMjFBQzRGOUFFMDIvRjE5MzBGQkFF RkUwMTFFRDgxQUU3MDZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACWgdkwDQYJKoZIhvcNAQELBQADggEBABLmSS5t1q32qQxe wGRSVOIlfbwPm4Qc8wX3bUBWkp/mRTMwGXbY4LAWN38tDBVYNu15Yebct1ZafS+Z wXhqSMFremVVsgRBy0tcTxxZiC6EUt8UeEli4A8koGfwdmA5L4Ldi3lVqzvGZK0x a8wrSbpF0tPOpkLlCo1kRiVB7YELW51AAdWiI9gaWs9Bv2Id9x2DTUVSuPnOfLag kN9AY5Q2PSmUP8tT5vyu1JjCpO46dkYwxaRKaOQih05lwD+0N+MANhChnfjAPwa9 aJkKpQpXKYHPhl16c9aIt3sOjn0C+jCSvhfbgdNOxozdiU3/lD1w/i0n+ztj8Avd Ck5zGXA= -----END CERTIFICATE-----Generated at Fri Apr 11 12:31:37 2025 by rpki-client