$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/AF4301D4CF8511EF94856A41C4F9AE02.roa File: AF4301D4CF8511EF94856A41C4F9AE02.roa (raw, json) Hash identifier: Tyg27Srmq+wBuXC9F9mURa1viQP5KB2HJeFABkYn42g= Subject key identifier: 91:8D:69:55:8C:9E:7C:72:B2:45:C9:D8:6E:83:28:16:A2:35:A6:BB Certificate issuer: /CN=A911CA82/serialNumber=68413D41F6005E0316E0E2576F226C2188AA156F Certificate serial: 03 Authority key identifier: 68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/AF4301D4CF8511EF94856A41C4F9AE02.roa Signing time: Fri 10 Jan 2025 19:04:15 +0000 ROA not before: Fri 10 Jan 2025 19:04:15 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139628 IP address blocks: 146.88.200.0/23 maxlen: 24 167.179.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Feb 2025 22:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA82 Validity Not Before: Jan 10 19:04:15 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67816f2f-be1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:dd:d4:ac:68:d8:ff:28:87:bc:68:f8:fe: 24:5a:2d:3f:29:de:26:46:f2:6e:96:00:f7:3f:0c: d6:90:96:27:a5:c3:16:ce:37:cf:a8:53:7e:83:5d: 21:ed:4c:e8:a6:7a:69:2a:06:f2:ce:70:32:47:9e: 09:3f:e9:0d:76:5b:ff:b0:5a:27:7b:2e:1e:30:d8: 1a:e8:b4:ef:93:95:0e:09:3b:65:cc:86:18:5b:a5: eb:95:47:1a:71:66:0a:5f:3b:08:33:4f:08:0b:2d: 4a:12:2a:ee:ef:2b:fb:e3:2f:9f:fd:01:40:b5:8f: bd:4a:58:a2:8b:e5:76:72:7d:c5:aa:25:66:6a:71: e4:46:7f:17:be:b4:e4:37:6c:7e:40:1f:bb:35:e7: a5:69:4c:a9:23:d7:0e:a1:ab:bf:41:fa:64:c3:28: 70:8b:d8:55:70:51:55:f7:db:a8:29:30:3b:e5:05: 6c:c0:b4:98:76:60:48:06:99:27:ab:04:2b:1e:61: f0:49:47:7b:22:35:83:93:8b:24:62:61:24:f8:40: c4:bc:42:74:15:d8:b4:87:a1:4d:27:82:e2:df:3a: d8:26:a3:8c:4b:b1:f6:db:c0:69:c8:0f:2a:2e:47: 40:d4:e3:58:42:3a:ee:43:08:ba:04:ce:f2:43:2a: 5d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8D:69:55:8C:9E:7C:72:B2:45:C9:D8:6E:83:28:16:A2:35:A6:BB X509v3 Authority Key Identifier: keyid:68:41:3D:41:F6:00:5E:03:16:E0:E2:57:6F:22:6C:21:88:AA:15:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/aEE9QfYAXgMW4OJXbyJsIYiqFW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEE9QfYAXgMW4OJXbyJsIYiqFW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA82/F699E354CF1211EF8F1D205BC4F9AE02/AF4301D4CF8511EF94856A41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.200.0/23 167.179.20.0/23 Signature Algorithm: sha256WithRSAEncryption 77:dc:c2:7c:d5:a3:68:41:c7:91:c7:4a:b3:e4:d2:10:d1:62: 88:66:cd:03:b3:e8:a6:8e:c9:67:40:e2:d6:dd:c5:41:d1:ce: bc:b2:01:6e:14:bc:26:47:50:fa:1b:ed:39:8c:44:14:a8:2f: fd:88:02:a9:8c:5c:88:f0:13:e4:2c:5d:75:5d:63:43:bc:e4: 45:80:c1:a7:98:1f:45:63:46:b9:13:6b:62:1d:5f:c0:7e:97: 2d:0d:5a:e1:02:f7:51:5c:e1:ab:d9:0b:13:f9:67:41:f4:d2: 0c:df:87:21:95:5a:d9:cb:a3:4e:61:ac:f7:14:a5:84:c0:08: 6f:3c:94:57:39:f7:98:80:ee:10:63:d8:a5:3f:73:d8:0f:8f: f7:df:ff:7e:90:54:88:f0:9d:3b:de:c8:9d:f6:74:a7:c3:9f: 57:d5:ac:0f:cd:35:f7:bc:70:c9:4d:cd:c8:92:77:5c:39:0f: 50:93:c8:c5:62:51:fb:38:4b:e6:1d:48:6f:b6:06:ce:09:26: a2:27:e4:00:84:56:e3:62:2e:d6:f9:25:03:0b:7c:7d:fc:71: da:7b:a5:be:74:83:67:1e:24:21:5c:3b:35:61:dd:44:a0:62: 3a:be:64:36:3a:e5:3f:9e:b7:eb:a1:51:c1:73:f5:8a:3b:c3: 4e:d6:5c:83 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0E4MjExMC8GA1UEBRMoNjg0MTNENDFGNjAwNUUwMzE2RTBFMjU3NkYyMjZDMjE4 OEFBMTU2RjAeFw0yNTAxMTAxOTA0MTVaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODE2ZjJmLWJlMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDRt3UrGjY/yiHvGj4/iRaLT8p3iZG8m6WAPc/DNaQlielwxbON8+oU36DXSHt TOimemkqBvLOcDJHngk/6Q12W/+wWid7Lh4w2BrotO+TlQ4JO2XMhhhbpeuVRxpx ZgpfOwgzTwgLLUoSKu7vK/vjL5/9AUC1j71KWKKL5XZyfcWqJWZqceRGfxe+tOQ3 bH5AH7s156VpTKkj1w6hq79B+mTDKHCL2FVwUVX326gpMDvlBWzAtJh2YEgGmSer BCseYfBJR3siNYOTiyRiYST4QMS8QnQV2LSHoU0nguLfOtgmo4xLsfbbwGnIDyou R0DU41hCOu5DCLoEzvJDKl3pAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUkY1pVYye fHKyRcnYboMoFqI1prswHwYDVR0jBBgwFoAUaEE9QfYAXgMW4OJXbyJsIYiqFW8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQTgyL0Y2OTlFMzU0Q0Yx MjExRUY4RjFEMjA1QkM0RjlBRTAyL2FFRTlRZllBWGdNVzRPSlhieUpzSVlpcUZX OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYUVFOVFmWUFYZ01XNE9KWGJ5SnNJWWlxRlc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0E4Mi9GNjk5RTM1NENGMTIxMUVGOEYxRDIwNUJDNEY5QUUwMi9BRjQzMDFENENG ODUxMUVGOTQ4NTZBNDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAZJYyAMEAaezFDANBgkqhkiG9w0BAQsFAAOCAQEAd9zCfNWj aEHHkcdKs+TSENFiiGbNA7Popo7JZ0Di1t3FQdHOvLIBbhS8JkdQ+hvtOYxEFKgv /YgCqYxciPAT5CxddV1jQ7zkRYDBp5gfRWNGuRNrYh1fwH6XLQ1a4QL3UVzhq9kL E/lnQfTSDN+HIZVa2cujTmGs9xSlhMAIbzyUVzn3mIDuEGPYpT9z2A+P99//fpBU iPCdO97InfZ0p8OfV9WsD80197xwyU3NyJJ3XDkPUJPIxWJR+zhL5h1Ib7YGzgkm oifkAIRW42Iu1vklAwt8ffxx2nulvnSDZx4kIVw7NWHdRKBiOr5kNjrlP56366FR wXP1ijvDTtZcgw== -----END CERTIFICATE-----Generated at Wed Feb 5 23:05:43 2025 by rpki-client