$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9FB104ABBAB11EFB6075917C4F9AE02.roa File: C9FB104ABBAB11EFB6075917C4F9AE02.roa (raw, json) Hash identifier: 3XjWMxEHpHbMAGCJCWFuUa9dqlKcPBfM2kSqFbJMNrc= Subject key identifier: E9:87:F6:9F:31:FD:3B:F7:30:BF:85:D9:46:32:FD:A5:00:58:BA:69 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1C36 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9FB104ABBAB11EFB6075917C4F9AE02.roa Signing time: Mon 16 Dec 2024 12:46:38 +0000 ROA not before: Mon 16 Dec 2024 12:46:38 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45117 IP address blocks: 160.250.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7222 (0x1c36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Dec 16 12:46:38 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6760212d-2248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:02:51:1a:38:c7:81:4c:ac:47:86:e9:16: c3:01:e8:c6:12:f3:a0:8f:48:32:72:65:33:31:f3: b6:91:24:d7:3e:7b:9c:76:27:e5:5e:1d:3b:43:f9: 47:47:75:34:5a:9a:ca:88:3a:11:b0:28:1a:24:f1: b3:45:60:86:8a:4b:fd:36:91:88:7d:c9:83:15:df: 17:cb:cd:b5:8e:87:08:46:10:08:55:5e:c4:ad:e5: 90:92:91:df:38:53:31:a0:c4:0a:62:fa:c9:aa:2d: 33:ba:d5:95:df:a4:5d:e6:ab:c5:9c:15:33:00:00: 89:1c:11:48:33:7c:43:50:53:2c:f5:82:95:6f:86: d6:1c:e3:b0:9d:d2:5c:f0:9e:42:4d:1b:52:3d:22: 99:a8:69:47:41:1b:15:02:a3:36:d5:1a:55:c0:9e: 15:25:6e:fc:3c:eb:b0:e1:29:39:42:fe:da:dd:1f: 1a:ad:c9:1f:85:1b:31:b8:0a:ca:ab:d1:88:2f:66: bf:ac:d4:a8:79:fb:e9:f2:fb:fb:b3:aa:5b:9e:9c: 8e:37:80:f7:90:0a:ba:de:a6:5d:04:8f:58:b3:08: f7:cb:87:ac:74:5f:5e:a0:9a:4e:ad:3d:45:82:25: fc:7c:3e:fa:90:9a:d1:14:95:1d:85:cd:d5:2c:48: 44:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:87:F6:9F:31:FD:3B:F7:30:BF:85:D9:46:32:FD:A5:00:58:BA:69 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C9FB104ABBAB11EFB6075917C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.218.0/23 Signature Algorithm: sha256WithRSAEncryption 23:89:6c:a6:2c:1e:72:91:b6:a2:a7:75:e6:ec:d2:54:6a:ec: 95:e9:00:d8:7a:55:0e:0a:1e:e1:ac:1e:5d:ae:b3:9e:6e:d5: 8d:e8:99:15:ee:19:89:2a:2d:40:1f:c7:0d:4f:2c:44:df:73: 35:8e:d2:e6:b0:87:41:3c:fd:c5:2c:2b:02:45:28:d2:f0:82: 09:5e:fd:ce:75:02:b9:53:de:d5:35:76:82:6e:92:00:15:13: e4:5f:84:83:6f:63:34:36:02:c7:f3:e4:23:03:d4:f3:27:d2: 0a:ae:d2:3f:b0:f2:d0:60:fe:78:24:e8:39:ff:2c:7c:2d:80: 8a:dd:e8:92:0e:83:22:be:2e:82:3a:a2:cb:ed:d6:81:1e:aa: 88:38:8f:56:60:87:c8:5d:a1:fd:a5:73:00:e3:a1:93:c8:2e: a5:f1:b9:20:20:d3:57:0a:71:03:d7:0a:22:db:b2:c9:cb:ee: 08:36:c2:35:ab:8c:6c:22:58:ae:a6:95:05:c4:8a:94:09:5a: 8e:7f:b2:64:b8:c2:27:61:a0:2f:03:a4:03:2f:4e:2a:8f:e2: cb:cd:57:9f:73:29:bc:f6:5d:68:4b:21:40:77:7f:ee:16:7f: 4b:40:2a:6e:8c:9b:49:e2:97:a8:80:2d:01:7b:a3:4e:59:e0: 4b:b7:f6:40 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHDYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMjE2MTI0NjM4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYwMjEyZC0yMjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIoCURo4x4FMrEeG6RbDAejGEvOgj0gycmUzMfO2kSTXPnucdiflXh07Q/lH R3U0WprKiDoRsCgaJPGzRWCGikv9NpGIfcmDFd8Xy821jocIRhAIVV7EreWQkpHf OFMxoMQKYvrJqi0zutWV36Rd5qvFnBUzAACJHBFIM3xDUFMs9YKVb4bWHOOwndJc 8J5CTRtSPSKZqGlHQRsVAqM21RpVwJ4VJW78POuw4Sk5Qv7a3R8arckfhRsxuArK q9GIL2a/rNSoefvp8vv7s6pbnpyON4D3kAq63qZdBI9Yswj3y4esdF9eoJpOrT1F giX8fD76kJrRFJUdhc3VLEhE8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFOmH9p8x /Tv3ML+F2UYy/aUAWLppMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzlGQjEwNEFC QkFCMTFFRkI2MDc1OTE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+towDQYJKoZIhvcNAQELBQADggEBACOJbKYsHnKRtqKn debs0lRq7JXpANh6VQ4KHuGsHl2us55u1Y3omRXuGYkqLUAfxw1PLETfczWO0uaw h0E8/cUsKwJFKNLwggle/c51ArlT3tU1doJukgAVE+RfhINvYzQ2Asfz5CMD1PMn 0gqu0j+w8tBg/ngk6Dn/LHwtgIrd6JIOgyK+LoI6osvt1oEeqog4j1Zgh8hdof2l cwDjoZPILqXxuSAg01cKcQPXCiLbssnL7gg2wjWrjGwiWK6mlQXEipQJWo5/smS4 widhoC8DpAMvTiqP4svNV59zKbz2XWhLIUB3f+4Wf0tAKm6Mm0nil6iALQF7o05Z 4Eu39kA= -----END CERTIFICATE-----Generated at Sun Apr 6 00:20:00 2025 by rpki-client