$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa File: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (raw, json) Hash identifier: fBbrGPpyBqHG5VjMBpwa+Y1+AP7kUm89FdDIYPNDwG8= Subject key identifier: E9:D7:CD:22:90:35:38:6E:F0:A5:6C:37:B3:7E:7B:A6:94:A8:3F:CF Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 08A4 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa Signing time: Tue 04 Feb 2025 20:19:37 +0000 ROA not before: Tue 04 Feb 2025 20:19:37 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 55707 IP address blocks: 119.63.200.0/21 maxlen: 24 202.45.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2212 (0x8a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Feb 4 20:19:37 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67a27659-f5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:fa:35:96:35:af:86:ec:7e:6c:85:bd:ea: 5a:ab:a4:cb:f8:81:44:e0:ef:5a:1a:34:7e:9f:4b: 6e:b9:a4:5f:0f:2f:8c:56:1b:07:de:41:ab:68:be: aa:2a:83:0f:0b:c6:da:02:26:e8:ac:7f:ef:68:b3: 95:2a:1f:64:b1:76:4e:c1:21:f9:1c:4e:4b:84:97: 83:12:72:06:21:7a:9a:45:fc:e1:57:5d:b8:a8:9a: b7:be:72:5b:fa:88:50:52:76:54:cf:ad:58:d3:b3: 56:87:32:0b:33:57:01:4f:93:9b:57:5a:77:ba:ae: 5a:81:b3:31:10:ff:0d:48:7c:dc:56:f8:6f:fa:d8: 3b:ef:0a:a4:5f:8d:50:db:d7:3b:c8:97:20:da:e9: 7e:4c:f8:91:f0:00:53:ff:6e:0d:60:6e:d2:9b:72: 8b:10:02:ee:ea:f0:2c:48:f0:f9:35:5a:e2:fb:67: 06:f2:0b:44:27:83:fc:0c:c9:cd:28:85:9e:8b:46: 2a:fd:d5:a0:31:bf:df:5a:18:fd:88:72:64:5a:35: b0:0e:da:86:67:7c:6c:c2:ca:84:0c:db:2f:8c:0d: 40:16:0e:8e:cd:b6:60:4e:3e:13:7c:ef:c0:c9:57: db:4b:21:4b:4e:8e:5c:82:3a:f7:6a:c3:3c:7d:2a: f6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D7:CD:22:90:35:38:6E:F0:A5:6C:37:B3:7E:7B:A6:94:A8:3F:CF X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.63.200.0/21 202.45.152.0/22 Signature Algorithm: sha256WithRSAEncryption 96:f0:e8:73:ad:0c:7b:40:30:46:d6:78:aa:38:03:56:45:e2: 20:01:2b:7c:07:16:f8:00:6b:51:ec:db:63:ed:7b:eb:e8:18: ee:5e:c5:19:fa:1b:1e:9d:91:0f:47:7f:78:a7:a3:78:1c:df: ab:dc:92:37:69:e7:e4:09:7c:9c:56:f0:cd:7c:22:85:23:e5: 77:18:a2:41:9b:0f:e6:43:4a:6b:9a:a6:f0:90:6e:38:da:a5: 9a:86:3a:22:da:f2:14:45:4f:fc:6c:5f:c4:73:a8:d8:77:b6: e2:23:77:80:8c:20:7d:ce:c1:df:6e:f6:6d:0a:c9:40:2c:7f: 32:a8:19:00:64:8f:bd:f5:e1:f6:2e:45:45:24:c6:37:45:83: 9d:db:12:76:73:91:8e:44:e7:23:c5:e5:7c:3a:ac:6b:01:da: 85:a8:c0:55:96:97:c6:0f:82:b5:8b:56:7d:c8:c5:7c:dd:f1: 67:25:71:96:21:c6:30:bd:20:6f:76:3d:bd:f4:40:33:fb:9a: 96:eb:3c:e5:1a:0b:76:fd:69:2d:9c:68:42:af:bd:64:04:e1: 36:0e:ec:bb:d3:46:51:11:5a:bd:7b:6c:60:16:79:d2:5e:85: fa:18:3a:a5:98:93:15:78:ad:6e:1c:08:c3:af:16:98:fc:eb: e2:3e:5e:bb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjUwMjA0MjAxOTM3WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyNzY1OS1mNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnX6NZY1r4bsfmyFvepaq6TL+IFE4O9aGjR+n0tuuaRfDy+MVhsH3kGraL6q KoMPC8baAiborH/vaLOVKh9ksXZOwSH5HE5LhJeDEnIGIXqaRfzhV124qJq3vnJb +ohQUnZUz61Y07NWhzILM1cBT5ObV1p3uq5agbMxEP8NSHzcVvhv+tg77wqkX41Q 29c7yJcg2ul+TPiR8ABT/24NYG7Sm3KLEALu6vAsSPD5NVri+2cG8gtEJ4P8DMnN KIWei0Yq/dWgMb/fWhj9iHJkWjWwDtqGZ3xswsqEDNsvjA1AFg6OzbZgTj4TfO/A yVfbSyFLTo5cgjr3asM8fSr27QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOnXzSKQ NThu8KVsN7N+e6aUqD/PMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUyNjIvRjdBNkQ1OUNCMEZDMTFFQTkyMjg5QzQxQzRGOUFFMDIvREZDMjFDRDhC MUNGMTFFQUE4NzMyNzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAN3P8gDBALKLZgwDQYJKoZIhvcNAQELBQADggEBAJbw6HOt DHtAMEbWeKo4A1ZF4iABK3wHFvgAa1Hs22Pte+voGO5exRn6Gx6dkQ9Hf3ino3gc 36vckjdp5+QJfJxW8M18IoUj5XcYokGbD+ZDSmuapvCQbjjapZqGOiLa8hRFT/xs X8RzqNh3tuIjd4CMIH3Owd9u9m0KyUAsfzKoGQBkj7314fYuRUUkxjdFg53bEnZz kY5E5yPF5Xw6rGsB2oWowFWWl8YPgrWLVn3IxXzd8WclcZYhxjC9IG92Pb30QDP7 mpbrPOUaC3b9aS2caEKvvWQE4TYO7LvTRlERWr17bGAWedJehfoYOqWYkxV4rW4c CMOvFpj86+I+Xrs= -----END CERTIFICATE-----Generated at Tue Apr 22 14:18:34 2025 by rpki-client