$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/68DAAA1A749711EFB4EDA45FC4F9AE02.roa File: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (raw, json) Hash identifier: iCvDHT2InFQYFJJ9LW52qC1YqNM+jnahLgFdP507rPQ= Subject key identifier: A8:5F:6F:63:78:C4:7B:D9:2D:9D:36:36:8D:36:75:85:2E:B2:2D:E1 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 0720 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/68DAAA1A749711EFB4EDA45FC4F9AE02.roa Signing time: Tue 17 Sep 2024 01:55:07 +0000 ROA not before: Tue 17 Sep 2024 01:55:07 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 10310 IP address blocks: 27.123.33.0/24 maxlen: 24 27.123.34.0/23 maxlen: 23 183.177.76.0/22 maxlen: 22 202.43.216.0/23 maxlen: 23 202.43.216.0/24 maxlen: 24 202.43.216.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 21:17:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1824 (0x720) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB Validity Not Before: Sep 17 01:55:07 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66e8e17b-d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6d:bc:d8:38:c0:67:9f:6c:cc:0b:26:a6:22: 3a:79:51:3f:fe:63:b9:88:1a:35:0b:63:0b:28:b7: 86:da:0a:78:74:03:18:c4:78:fc:75:5b:e1:19:43: 8e:d1:63:c0:af:c7:a4:1f:3d:2d:fa:05:09:64:31: fe:8d:f9:19:8c:ad:53:80:c5:68:1b:c4:ac:cd:72: 7e:90:70:27:5f:b8:8b:22:65:c4:fc:4a:7f:e4:eb: 51:42:f5:3f:3b:17:7a:65:a8:cf:b4:c3:9f:a2:ce: c4:37:cf:67:bc:1b:a6:d3:de:5b:8f:02:09:a4:7a: 98:94:8e:ee:81:b8:b6:a4:34:9b:5e:84:f6:36:e0: 63:90:80:3f:02:eb:30:8b:c5:4c:a7:a5:de:06:9a: d6:a9:6d:bf:8b:21:03:1b:cf:d0:79:bf:c1:65:eb: b6:2c:4e:d5:0f:8b:9b:64:81:59:d0:8f:2c:49:3c: 9b:dc:08:f6:ed:49:28:1f:b2:58:30:67:74:3f:47: d4:85:a9:64:43:1c:2e:df:f8:1a:43:c7:69:6f:0c: 37:10:8c:02:df:c3:59:8c:02:b0:7a:0d:87:1f:0c: fa:6f:fd:5b:ba:b8:51:9a:6e:62:de:cb:2c:ea:84: 8b:ff:c2:c4:33:65:89:60:58:2b:e9:db:b0:51:f1: fc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5F:6F:63:78:C4:7B:D9:2D:9D:36:36:8D:36:75:85:2E:B2:2D:E1 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/68DAAA1A749711EFB4EDA45FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.33.0-27.123.35.255 183.177.76.0/22 202.43.216.0/23 Signature Algorithm: sha256WithRSAEncryption ba:c5:c3:7a:96:d8:f1:5f:5e:bb:f5:07:69:87:c0:91:d3:68: 54:f6:2e:7e:24:9c:f5:aa:d4:66:63:4f:df:0f:db:ce:5d:b1: 98:4a:bc:35:e0:7b:00:4c:5d:9d:79:15:2b:86:05:6e:85:3e: 12:ff:c6:a5:4e:36:67:20:1a:fd:6f:f4:e5:9c:fb:ec:b2:9e: 1b:43:39:75:cd:d6:aa:e2:9a:85:ed:d9:4d:2e:6b:b4:5c:e0: 64:4e:73:86:e2:c9:51:fa:ca:3e:c2:2a:44:68:85:05:90:0b: 65:2a:0f:18:12:b9:53:ff:8a:c8:90:88:25:fd:03:00:47:e9: 65:17:ac:4d:71:2e:28:f0:77:81:47:c4:bd:2b:c2:33:59:72: 92:9a:72:03:0a:9c:76:e7:d8:b0:e3:71:00:1f:b8:e4:0e:28: 21:65:9d:0b:a3:f2:6b:36:fe:1f:c3:4c:30:85:3a:25:d3:f9: 55:56:ec:76:d8:8f:a3:d3:95:9d:ec:22:84:e0:82:d6:dd:16: bd:05:a9:a1:fb:3d:07:6d:b0:2d:a8:d6:1b:07:ec:8f:27:fb: f3:56:cf:d5:16:99:23:85:3b:39:4c:d1:83:3a:0c:e5:ad:47: a3:66:14:ed:85:8f:cc:be:5d:2c:dd:54:13:eb:74:db:9a:e2: 4e:74:4a:7d -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICByAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjQwOTE3MDE1NTA3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU4ZTE3Yi1kMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2282DjAZ59szAsmpiI6eVE//mO5iBo1C2MLKLeG2gp4dAMYxHj8dVvhGUOO 0WPAr8ekHz0t+gUJZDH+jfkZjK1TgMVoG8SszXJ+kHAnX7iLImXE/Ep/5OtRQvU/ Oxd6ZajPtMOfos7EN89nvBum095bjwIJpHqYlI7ugbi2pDSbXoT2NuBjkIA/Ausw i8VMp6XeBprWqW2/iyEDG8/Qeb/BZeu2LE7VD4ubZIFZ0I8sSTyb3Aj27UkoH7JY MGd0P0fUhalkQxwu3/gaQ8dpbww3EIwC38NZjAKweg2HHwz6b/1burhRmm5i3sss 6oSL/8LEM2WJYFgr6duwUfH88QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFKhfb2N4 xHvZLZ02No02dYUusi3hMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTlEQ0IvRTRDMEY1NkMxODdGMTFFQkFFMjk2OTJFQzRGOUFFMDIvNjhEQUFBMUE3 NDk3MTFFRkI0RURBNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEABt7IQMEAht7IAMEArexTAMEAcor2DANBgkqhkiG9w0B AQsFAAOCAQEAusXDepbY8V9eu/UHaYfAkdNoVPYufiSc9arUZmNP3w/bzl2xmEq8 NeB7AExdnXkVK4YFboU+Ev/GpU42ZyAa/W/05Zz77LKeG0M5dc3WquKahe3ZTS5r tFzgZE5zhuLJUfrKPsIqRGiFBZALZSoPGBK5U/+KyJCIJf0DAEfpZResTXEuKPB3 gUfEvSvCM1lykppyAwqcdufYsONxAB+45A4oIWWdC6Pyazb+H8NMMIU6JdP5VVbs dtiPo9OVnewihOCC1t0WvQWpofs9B22wLajWGwfsjyf781bP1RaZI4U7OUzRgzoM 5a1Ho2YU7YWPzL5dLN1UE+t025riTnRKfQ== -----END CERTIFICATE-----Generated at Thu Mar 13 21:56:59 2025 by rpki-client