$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/99A281E8BC3411EE878F6918C4F9AE02.roa File: 99A281E8BC3411EE878F6918C4F9AE02.roa (raw, json) Hash identifier: oGFYSGC8X9PFJDcDOqUf4dhMGV5pBPgKlEs3PwERVuo= Subject key identifier: 09:34:4B:5B:54:4E:47:C2:C2:BE:CF:AE:6E:E2:62:10:EE:1B:CE:B0 Certificate issuer: /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA Certificate serial: CB Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/99A281E8BC3411EE878F6918C4F9AE02.roa Signing time: Tue 25 Jun 2024 06:22:18 +0000 ROA not before: Tue 25 Jun 2024 06:22:18 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 152445 IP address blocks: 119.110.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 03:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C Validity Not Before: Jun 25 06:22:18 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667a621a-f76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:19:c0:53:8b:86:41:55:74:48:bb:b6:5e: ef:04:87:dc:00:fe:26:b7:18:4c:78:ed:e3:ec:9c: ec:79:00:41:5a:43:d9:77:5e:b4:51:88:1e:30:fb: 60:e5:4f:02:67:c3:9f:06:d0:92:d1:37:25:04:ab: 87:59:4b:86:fe:67:95:b3:99:4a:36:8a:3a:d0:58: 7b:1c:d9:d3:51:24:3b:41:68:ab:68:51:3c:0e:7e: 98:3d:03:95:63:11:77:79:26:5f:56:28:14:3b:8d: cc:a8:4d:87:3d:4f:b4:43:4b:1d:ae:88:92:fd:31: c8:40:37:6b:f6:15:b8:64:b7:60:d3:ec:ba:4a:74: f0:a4:82:84:d8:cb:f4:b9:da:98:5d:38:b1:d3:b6: bd:05:47:c9:e8:e0:a4:45:c5:77:90:bd:3f:8e:60: 8f:fd:06:32:9a:1f:a3:ff:a7:53:c0:d7:43:96:00: da:e5:42:c3:9f:bb:3f:11:50:f7:e0:7f:72:9b:67: b2:f1:ba:6e:6e:cf:58:39:e8:df:ec:6b:17:ed:50: 9a:b4:60:00:b8:94:c2:fd:34:f2:e3:67:8a:94:c1: 74:86:3f:48:6b:94:01:f5:5e:87:6e:f7:b9:4b:d0: 15:a1:bc:6f:fe:cf:f6:b8:cd:86:ae:24:4b:0e:d5: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:34:4B:5B:54:4E:47:C2:C2:BE:CF:AE:6E:E2:62:10:EE:1B:CE:B0 X509v3 Authority Key Identifier: keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/99A281E8BC3411EE878F6918C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.110.240.0/24 Signature Algorithm: sha256WithRSAEncryption a3:0e:c6:0f:ab:b1:b0:1e:88:a0:65:fc:0c:81:5b:b3:d1:84: a1:cd:e4:73:22:f8:5c:c3:12:87:c3:b5:fb:e3:a8:9f:ab:e8: 47:05:15:e5:2a:6a:f6:2f:b6:78:58:53:90:71:80:0d:6b:36: 65:47:f8:c7:24:24:19:0d:04:79:1f:0b:09:f1:39:96:78:fb: 97:34:1c:29:39:8c:bd:55:06:e4:ba:db:39:7e:75:aa:db:85: 0d:d6:bd:a8:f0:be:fa:5b:75:9c:54:c5:cc:94:d7:a0:32:5c: d4:12:67:c9:f0:84:81:61:08:d8:3b:c6:c9:84:85:fd:90:72: 92:0c:5b:57:c5:49:8c:53:77:24:16:c9:43:6c:ea:a7:3b:5b: 79:83:70:af:7d:be:f1:c1:28:aa:c7:b4:7c:12:d6:3d:5a:b0: ac:39:34:1e:97:5a:76:c7:15:ad:7b:6d:b4:ff:77:b8:9b:60: 1a:d5:f6:8d:2e:f8:ac:46:0a:38:d4:3b:02:3e:df:1a:94:13: f2:fb:b4:cd:35:00:1c:aa:70:9e:4c:1a:e8:82:e9:5b:00:a5: ed:88:ff:7c:2c:d9:d0:ca:91:b2:0c:39:73:22:bd:45:2d:32: 23:4e:fb:57:d0:b1:47:2f:0c:65:56:b8:87:b9:9e:8f:82:fe: d0:3c:cb:1f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKDQ4ODk3MDUwNjI2NEVGOTZEODFFQzEyRTZBQkQyNTZE QjMwRkRDRkEwHhcNMjQwNjI1MDYyMjE4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdhNjIxYS1mNzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2+AZwFOLhkFVdEi7tl7vBIfcAP4mtxhMeO3j7JzseQBBWkPZd160UYgeMPtg 5U8CZ8OfBtCS0TclBKuHWUuG/meVs5lKNoo60Fh7HNnTUSQ7QWiraFE8Dn6YPQOV YxF3eSZfVigUO43MqE2HPU+0Q0sdroiS/THIQDdr9hW4ZLdg0+y6SnTwpIKE2Mv0 udqYXTix07a9BUfJ6OCkRcV3kL0/jmCP/QYymh+j/6dTwNdDlgDa5ULDn7s/EVD3 4H9ym2ey8bpubs9YOejf7GsX7VCatGAAuJTC/TTy42eKlMF0hj9Ia5QB9V6Hbve5 S9AVobxv/s/2uM2GriRLDtVZjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAk0S1tU TkfCwr7Prm7iYhDuG86wMB8GA1UdIwQYMBaAFEiJcFBiZO+W2B7BLmq9JW2zD9z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83RTREODQ2MDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9TSWx3VUdKazc1YllIc0V1YXIwbGJiTVAz UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NJbHdVR0prNzViWUhzRXVhcjBsYmJNUDNQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvN0U0RDg0NjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvOTlBMjgxRThC QzM0MTFFRTg3OEY2OTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3bvAwDQYJKoZIhvcNAQELBQADggEBAKMOxg+rsbAeiKBl /AyBW7PRhKHN5HMi+FzDEofDtfvjqJ+r6EcFFeUqavYvtnhYU5BxgA1rNmVH+Mck JBkNBHkfCwnxOZZ4+5c0HCk5jL1VBuS62zl+darbhQ3WvajwvvpbdZxUxcyU16Ay XNQSZ8nwhIFhCNg7xsmEhf2QcpIMW1fFSYxTdyQWyUNs6qc7W3mDcK99vvHBKKrH tHwS1j1asKw5NB6XWnbHFa17bbT/d7ibYBrV9o0u+KxGCjjUOwI+3xqUE/L7tM01 AByqcJ5MGuiC6VsApe2I/3ws2dDKkbIMOXMivUUtMiNO+1fQsUcvDGVWuIe5no+C /tA8yx8= -----END CERTIFICATE-----Generated at Wed Apr 9 02:34:03 2025 by rpki-client