$ rpki-client -vvf rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CD843242EF5D11EFA15B580DC4F9AE02.roa File: CD843242EF5D11EFA15B580DC4F9AE02.roa (raw, json) Hash identifier: ighwwoIoB/hqwC6NEB1yaB5MkiB7uZW6ja95rSu/mC0= Subject key identifier: 72:15:CA:DA:BD:C5:26:85:95:34:75:34:09:41:36:42:76:EA:2F:13 Certificate issuer: /CN=A917C71E/serialNumber=B59B0566A82A983BDE6DF1C5DE4C582C9BCA8392 Certificate serial: 0BC2 Authority key identifier: B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CD843242EF5D11EFA15B580DC4F9AE02.roa Signing time: Thu 20 Feb 2025 07:39:23 +0000 ROA not before: Thu 20 Feb 2025 07:39:23 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136908 IP address blocks: 117.121.230.0/24 maxlen: 24 117.121.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C71E Validity Not Before: Feb 20 07:39:23 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67b6dc2b-9776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:13:8f:c2:99:c0:c2:a9:57:60:5a:26:50: 97:0d:ac:10:3a:e0:0a:3d:80:c9:d9:c2:a6:80:ca: ca:7c:02:3c:41:35:d7:59:ed:b7:fc:07:15:de:7c: 18:79:75:7f:e0:f7:c6:35:10:6b:65:ae:45:72:a0: c6:d0:1c:20:d0:db:d2:05:81:0e:31:c3:ee:74:70: 21:8a:78:fd:8c:63:c0:1e:4e:0b:9a:96:6b:e2:57: c5:fc:90:33:cc:9b:9e:e4:e2:44:bc:3f:30:f0:46: bc:08:18:d1:6b:5f:6b:23:49:35:5f:74:4e:f0:b9: af:76:cc:93:01:41:04:16:6b:fc:d9:a7:be:bf:ed: 52:6c:b8:20:b6:70:b1:ff:8f:05:44:28:42:61:2b: 8b:e8:b6:61:5e:74:0e:3a:6b:fa:84:80:7f:9d:27: 35:24:d8:55:95:45:d3:3d:fc:e7:a7:20:b6:d8:9b: 9f:2b:68:e8:b1:fc:65:76:16:e3:b0:fd:3e:41:b1: ce:74:c1:ff:72:fa:31:f2:55:6b:f5:c1:71:5d:71: 8c:fe:7c:b1:51:5b:fa:00:3e:8a:d8:3a:49:f6:61: e4:c9:9e:7c:a4:dc:a9:e3:55:75:d4:f7:ac:f5:fc: d3:4f:bc:a3:a1:ef:2e:17:a6:23:b1:f0:60:98:13: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:15:CA:DA:BD:C5:26:85:95:34:75:34:09:41:36:42:76:EA:2F:13 X509v3 Authority Key Identifier: keyid:B5:9B:05:66:A8:2A:98:3B:DE:6D:F1:C5:DE:4C:58:2C:9B:CA:83:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/tZsFZqgqmDvebfHF3kxYLJvKg5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZsFZqgqmDvebfHF3kxYLJvKg5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C71E/C78E4A721CA811EA8CBB4543C4F9AE02/CD843242EF5D11EFA15B580DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.121.230.0/24 117.121.236.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:db:5b:01:10:3e:c4:1d:33:4e:8c:e7:27:f3:83:26:bd:44: d2:38:4e:34:8a:82:2d:85:c2:b7:d2:8b:ee:e3:f2:db:fa:a8: 80:80:4f:d3:4d:1a:43:e4:b0:ce:fe:da:1f:45:bd:ff:a9:d5: bc:cf:1e:0a:83:a2:a3:5f:c1:96:85:77:73:1a:1e:dc:1d:ee: 76:52:13:d0:88:32:64:41:33:9d:e3:1d:c3:b0:e0:1d:df:61: ec:e7:ac:44:5a:db:8e:ed:16:b2:9d:b2:04:aa:80:9a:64:ed: 7b:70:06:76:ff:af:69:6a:9c:9a:cc:b3:97:75:2d:81:7a:04: f7:10:fe:c2:ee:38:8c:be:3c:96:34:34:72:cc:68:a7:ba:27: 89:c4:c0:b1:0d:bf:72:84:59:48:d5:57:dd:4b:8c:47:1e:c3: 41:dc:28:00:9b:d4:4b:0a:22:e6:32:d0:f4:41:1d:5b:77:a0: 88:88:b5:ae:21:bf:ca:d5:76:21:38:9e:f3:de:0b:07:a9:a9: 35:02:12:26:05:c2:63:84:54:58:02:11:60:03:07:82:70:c2: d6:07:d4:0c:07:e0:38:aa:28:d0:e8:57:20:38:81:a1:dd:4c: c7:4d:4e:9d:97:c4:17:fc:8e:1e:5c:bc:75:3d:21:54:a9:89: c7:31:d6:3b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MUUxMTAvBgNVBAUTKEI1OUIwNTY2QTgyQTk4M0JERTZERjFDNURFNEM1ODJD OUJDQTgzOTIwHhcNMjUwMjIwMDczOTIzWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I2ZGMyYi05Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSgTj8KZwMKpV2BaJlCXDawQOuAKPYDJ2cKmgMrKfAI8QTXXWe23/AcV3nwY eXV/4PfGNRBrZa5FcqDG0Bwg0NvSBYEOMcPudHAhinj9jGPAHk4LmpZr4lfF/JAz zJue5OJEvD8w8Ea8CBjRa19rI0k1X3RO8LmvdsyTAUEEFmv82ae+v+1SbLggtnCx /48FRChCYSuL6LZhXnQOOmv6hIB/nSc1JNhVlUXTPfznpyC22JufK2josfxldhbj sP0+QbHOdMH/cvox8lVr9cFxXXGM/nyxUVv6AD6K2DpJ9mHkyZ58pNyp41V11Pes 9fzTT7yjoe8uF6YjsfBgmBPFKwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHIVytq9 xSaFlTR1NAlBNkJ26i8TMB8GA1UdIwQYMBaAFLWbBWaoKpg73m3xxd5MWCybyoOS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxRS9DNzhFNEE3MjFD QTgxMUVBOENCQjQ1NDNDNEY5QUUwMi90WnNGWnFncW1EdmViZkhGM2t4WUxKdktn NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rac0ZacWdxbUR2ZWJmSEYza3hZTEp2S2c1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0M3MUUvQzc4RTRBNzIxQ0E4MTFFQThDQkI0NTQzQzRGOUFFMDIvQ0Q4NDMyNDJF RjVEMTFFRkExNUI1ODBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB1eeYDBAB1eewwDQYJKoZIhvcNAQELBQADggEBAA7bWwEQ PsQdM06M5yfzgya9RNI4TjSKgi2FwrfSi+7j8tv6qICAT9NNGkPksM7+2h9Fvf+p 1bzPHgqDoqNfwZaFd3MaHtwd7nZSE9CIMmRBM53jHcOw4B3fYeznrERa247tFrKd sgSqgJpk7XtwBnb/r2lqnJrMs5d1LYF6BPcQ/sLuOIy+PJY0NHLMaKe6J4nEwLEN v3KEWUjVV91LjEcew0HcKACb1EsKIuYy0PRBHVt3oIiIta4hv8rVdiE4nvPeCwep qTUCEiYFwmOEVFgCEWADB4JwwtYH1AwH4DiqKNDoVyA4gaHdTMdNTp2XxBf8jh5c vHU9IVSpiccx1js= -----END CERTIFICATE-----Generated at Sat Apr 5 01:57:58 2025 by rpki-client