$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/CA9C08E07C7E11EFBDC93555C4F9AE02.roa File: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (raw, json) Hash identifier: B9gXP8wVYa4nzRdqoTryX/TqkLwtBQMA1wTvqei6JOM= Subject key identifier: 4D:85:54:4C:AE:5F:A7:FE:2C:1B:6A:1D:3C:C7:EA:CD:61:01:BC:13 Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33 Certificate serial: 06BC Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/CA9C08E07C7E11EFBDC93555C4F9AE02.roa Signing time: Mon 02 Dec 2024 22:31:47 +0000 ROA not before: Mon 02 Dec 2024 22:31:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 62468 IP address blocks: 43.250.172.0/22 maxlen: 24 103.42.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1724 (0x6bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919ECE7 Validity Not Before: Dec 2 22:31:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=674e3553-f980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:29:c6:4c:b9:05:c2:77:9d:90:d4:85:30: a6:e4:c6:39:98:a3:d2:65:18:5d:40:a5:d9:97:65: f0:a0:58:55:b1:45:15:19:5a:04:62:24:30:9a:ec: 8e:86:f7:10:f8:05:48:81:51:b5:5b:ce:c2:8d:41: 32:57:43:eb:60:d5:90:22:30:5d:6b:0f:e7:df:a5: 6f:77:d1:d5:71:dd:0f:fe:da:58:e1:d6:71:32:e9: 43:45:97:14:50:d7:62:58:78:db:36:9c:8e:c0:60: bb:f5:d1:96:f0:e1:07:cc:9b:af:09:44:39:de:c1: 71:3e:b6:3c:84:31:26:93:2d:88:2b:ea:f4:73:80: c9:07:bb:2f:89:d5:be:db:51:d4:4f:c6:16:35:bb: 36:10:25:1d:50:5b:ad:e7:27:9c:91:58:1a:0c:4d: 8f:34:ef:c3:e3:7d:09:ae:97:bd:62:31:7a:cc:82: 78:e5:d3:35:02:33:1d:73:9d:00:f0:d8:8a:4f:4f: be:38:34:fd:59:ff:90:72:09:0f:39:0d:91:0b:b9: 07:33:46:39:35:74:43:cd:a9:1b:8a:ea:45:b1:4d: 51:28:d1:6a:32:81:7f:ae:0f:ea:d2:78:f6:9b:0e: 69:52:ad:e7:e2:74:a5:85:89:b3:82:07:03:ce:48: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:85:54:4C:AE:5F:A7:FE:2C:1B:6A:1D:3C:C7:EA:CD:61:01:BC:13 X509v3 Authority Key Identifier: keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/CA9C08E07C7E11EFBDC93555C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.172.0/22 103.42.28.0/22 Signature Algorithm: sha256WithRSAEncryption d9:ef:2b:40:5c:8c:15:66:f9:79:09:4d:4d:5a:00:9e:1d:5a: 52:e0:2a:ed:03:07:8a:1e:ea:0f:a9:d5:e4:95:2b:0d:83:e5: bf:37:3d:e4:6f:01:1b:0d:92:c8:28:43:39:88:5b:23:a9:42: 42:1d:d0:24:90:2a:12:1d:4b:49:01:60:4a:95:96:b1:bc:31: 2e:15:0c:1d:d4:1c:f1:9a:f5:3c:f8:6d:97:8a:70:8c:f9:b0: 76:91:41:6b:2d:6d:d8:9d:82:7b:2c:8e:cd:24:d0:7e:c7:44: 60:8f:b1:c8:a0:66:fa:e7:8e:6d:3b:38:2c:1d:78:9f:f1:9f: ee:d1:18:5f:08:ed:e4:f8:0b:b1:7f:42:18:64:e1:3f:35:18: 3d:ae:91:9d:2f:7f:4c:83:8f:76:9b:41:5a:c6:cd:56:6d:45: 35:85:aa:bc:51:57:52:3d:ee:d0:66:b2:01:cc:e3:fb:77:85: 23:4f:28:a8:35:df:6a:e0:26:3a:d9:cb:3a:b6:4b:ce:51:4f: 10:21:52:2c:78:7b:45:d8:7e:2e:a6:c2:15:55:5c:83:e5:5c: 21:79:20:d2:ff:65:ef:72:56:ae:cf:cd:44:fb:ad:c6:3b:7c: a7:eb:ad:57:bb:2d:5d:ac:11:47:50:7a:fc:1a:b5:7d:cd:e2: 6a:9a:75:99 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF QjZENDBFMzMwHhcNMjQxMjAyMjIzMTQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzRlMzU1My1mOTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwccpxky5BcJ3nZDUhTCm5MY5mKPSZRhdQKXZl2XwoFhVsUUVGVoEYiQwmuyO hvcQ+AVIgVG1W87CjUEyV0PrYNWQIjBdaw/n36Vvd9HVcd0P/tpY4dZxMulDRZcU UNdiWHjbNpyOwGC79dGW8OEHzJuvCUQ53sFxPrY8hDEmky2IK+r0c4DJB7svidW+ 21HUT8YWNbs2ECUdUFut5yeckVgaDE2PNO/D430Jrpe9YjF6zIJ45dM1AjMdc50A 8NiKT0++ODT9Wf+QcgkPOQ2RC7kHM0Y5NXRDzakbiupFsU1RKNFqMoF/rg/q0nj2 mw5pUq3n4nSlhYmzggcDzkjjEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFE2FVEyu X6f+LBtqHTzH6s1hAbwTMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVDRTcvNUUwNURCQTQ1RkFDMTFFQjg0OTQ0NTJGQzRGOUFFMDIvQ0E5QzA4RTA3 QzdFMTFFRkJEQzkzNTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+qwDBAJnKhwwDQYJKoZIhvcNAQELBQADggEBANnvK0Bc jBVm+XkJTU1aAJ4dWlLgKu0DB4oe6g+p1eSVKw2D5b83PeRvARsNksgoQzmIWyOp QkId0CSQKhIdS0kBYEqVlrG8MS4VDB3UHPGa9Tz4bZeKcIz5sHaRQWstbdidgnss js0k0H7HRGCPscigZvrnjm07OCwdeJ/xn+7RGF8I7eT4C7F/Qhhk4T81GD2ukZ0v f0yDj3abQVrGzVZtRTWFqrxRV1I97tBmsgHM4/t3hSNPKKg132rgJjrZyzq2S85R TxAhUix4e0XYfi6mwhVVXIPlXCF5INL/Ze9yVq7PzUT7rcY7fKfrrVe7LV2sEUdQ evwatX3N4mqadZk= -----END CERTIFICATE-----Generated at Fri Apr 4 23:29:05 2025 by rpki-client