$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4E09660FAF611EDAC2A1A50C4F9AE02.roa File: C4E09660FAF611EDAC2A1A50C4F9AE02.roa (raw, json) Hash identifier: mZeqtmhXfPhkpeIz12rvN8QXy/duERoQoy1ZqrOAbeU= Subject key identifier: 3D:3D:04:13:9D:FA:0C:06:A6:9C:08:63:82:96:A2:56:29:BD:43:CF Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 89C6 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4E09660FAF611EDAC2A1A50C4F9AE02.roa Signing time: Thu 30 May 2024 16:00:16 +0000 ROA not before: Thu 30 May 2024 16:00:15 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134864 IP address blocks: 45.250.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35270 (0x89c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: May 30 16:00:15 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a28f-9b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:ee:8c:6c:1b:bc:0d:f8:d5:49:93:4e:03: ec:c5:7a:de:6d:f9:e6:ce:5e:68:11:16:c7:b9:52: 6a:b0:a2:b2:0c:7d:76:6f:98:a5:2d:55:3f:b8:b4: 05:22:ea:11:4f:ea:52:44:ef:ca:a0:f1:4e:3e:41: 2b:ab:32:3a:f2:2b:1f:c4:ad:5a:ad:1a:63:46:fd: 3d:1d:4b:e3:d3:f6:a7:73:8b:e6:cd:0e:e2:ff:6e: 98:89:52:3a:05:ba:c6:b1:90:24:e2:57:20:57:a7: 65:81:62:ba:6a:ef:12:2b:03:05:eb:18:a3:71:1d: d4:38:70:b7:7f:e1:d2:d1:2d:ed:90:06:76:47:df: ee:32:91:25:4f:d3:94:97:ed:c8:db:f9:46:ba:a5: 50:2d:1d:60:e2:68:ab:59:f6:82:b4:0d:18:17:c3: 6b:89:06:55:d6:33:ef:a1:2c:2c:0e:52:f6:17:fa: df:6a:52:59:d6:cd:e4:fb:2a:fb:2e:89:99:51:3f: 48:a0:dd:94:ff:3d:99:34:6b:fb:a4:d7:b6:6a:95: 9a:cd:ef:57:ec:4c:b1:5d:a4:23:e1:1d:e3:54:ea: 37:37:2a:35:f5:58:73:9c:52:cb:85:57:b6:71:b3: 95:71:a2:33:41:1e:55:97:28:55:ad:9d:66:1e:74: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:04:13:9D:FA:0C:06:A6:9C:08:63:82:96:A2:56:29:BD:43:CF X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C4E09660FAF611EDAC2A1A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.250.216.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:ad:44:70:35:12:e5:08:27:73:b4:c5:ed:3f:46:15:be:72: 38:a0:c8:39:6e:63:99:4d:bd:b0:13:e0:22:c7:5f:13:7e:6b: 94:2a:f1:43:b9:f7:e7:49:0d:3c:7d:30:ac:30:15:f7:10:1e: c6:81:54:da:8c:6b:29:ad:0f:5b:aa:a9:7f:90:77:41:c7:ca: 3f:63:51:f6:f1:19:ea:9d:39:9c:c1:c7:09:dd:ba:7c:5a:db: cd:c0:82:06:e5:5e:c1:da:b2:9c:d2:e6:12:a1:45:8b:3b:a0: d5:13:dc:94:96:b4:a3:bd:dc:a2:7b:60:76:e4:71:67:b1:64: 14:8b:37:7d:80:93:f5:82:fb:06:8d:1b:d9:16:a8:29:37:f9: c0:35:ea:9f:fa:55:da:15:dc:23:ef:16:c5:fa:71:48:9a:20: 35:b8:55:38:ec:b7:13:44:01:bc:ce:d2:a4:b1:27:17:94:69: a9:16:c5:b0:1f:cc:37:e9:b6:4b:d4:26:b4:90:db:42:3e:62: 8b:68:5d:fd:35:fd:32:21:79:27:18:ed:8c:6b:63:23:7a:ef: 77:27:fd:b8:63:a8:bb:46:63:35:61:b1:ff:8e:34:4c:61:79: 1c:31:65:29:cf:ad:6f:97:9f:64:20:3c:f5:b2:b3:36:05:52: f6:54:a6:c7 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAInGMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2MDAxNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGEyOGYtOWI1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiP7oxsG7wN+NVJk04D7MV63m355s5eaBEWx7lSarCisgx9dm+YpS1VP7i0 BSLqEU/qUkTvyqDxTj5BK6syOvIrH8StWq0aY0b9PR1L49P2p3OL5s0O4v9umIlS OgW6xrGQJOJXIFenZYFiumrvEisDBesYo3Ed1Dhwt3/h0tEt7ZAGdkff7jKRJU/T lJftyNv5RrqlUC0dYOJoq1n2grQNGBfDa4kGVdYz76EsLA5S9hf632pSWdbN5Psq +y6JmVE/SKDdlP89mTRr+6TXtmqVms3vV+xMsV2kI+Ed41TqNzcqNfVYc5xSy4VX tnGzlXGiM0EeVZcoVa2dZh50n80CAwEAAaOCApUwggKRMB0GA1UdDgQWBBQ9PQQT nfoMBqacCGOClqJWKb1DzzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0M0RTA5NjYw RkFGNjExRURBQzJBMUE1MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQCLfrYMA0GCSqGSIb3DQEBCwUAA4IBAQB9rURwNRLlCCdz tMXtP0YVvnI4oMg5bmOZTb2wE+Aix18TfmuUKvFDuffnSQ08fTCsMBX3EB7GgVTa jGsprQ9bqql/kHdBx8o/Y1H28RnqnTmcwccJ3bp8WtvNwIIG5V7B2rKc0uYSoUWL O6DVE9yUlrSjvdyie2B25HFnsWQUizd9gJP1gvsGjRvZFqgpN/nANeqf+lXaFdwj 7xbF+nFImiA1uFU47LcTRAG8ztKksScXlGmpFsWwH8w36bZL1Ca0kNtCPmKLaF39 Nf0yIXknGO2Ma2Mjeu93J/24Y6i7RmM1YbH/jjRMYXkcMWUpz61vl59kIDz1srM2 BVL2VKbH -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:19 2025 by rpki-client