$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa File: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (raw, json) Hash identifier: XhD4C1tmuOJjIi4uib9jXt7/7FR/n9zJv0iU9Ika1Yo= Subject key identifier: EC:AD:9F:40:7A:64:6D:04:AB:58:34:07:0B:9D:BC:00:C9:32:01:08 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 0493 Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa Signing time: Thu 13 Mar 2025 06:44:27 +0000 ROA not before: Thu 13 Mar 2025 06:44:27 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 963 IP address blocks: 141.193.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 00:05:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1 Validity Not Before: Mar 13 06:44:27 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67d27ecb-630f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:d4:1b:c9:24:3d:94:23:c2:61:d3:21:a0: b0:c4:da:40:1e:4d:a8:90:c2:36:fc:b2:2b:60:a5: 51:45:7e:ef:c6:d6:bc:3c:c3:82:87:cc:e4:12:04: d3:e7:12:9f:97:d7:e3:8a:82:af:04:cd:65:72:d9: 70:96:40:5d:da:43:fd:16:a8:1a:81:de:65:1c:71: 14:89:4b:5d:a6:27:40:b6:5c:2d:8d:6e:a2:fc:fc: 47:09:c7:30:dc:0b:a6:8c:6e:bd:24:c1:73:05:12: 1f:6e:c3:d7:48:49:97:42:25:c3:62:60:69:20:37: 79:29:cc:c2:9a:86:8c:22:4c:cb:f8:aa:54:5b:e8: 7b:f9:16:30:76:3e:7b:7b:15:b1:ec:2a:82:c9:22: 6a:00:b7:d4:c5:6c:e7:e5:e6:c8:6d:e0:c8:11:50: 07:54:0c:f2:da:1e:9f:40:60:d4:cd:f0:4c:10:f8: c2:fb:7e:1b:cd:78:41:00:68:90:ae:83:78:79:38: 9d:4a:b8:50:6b:2e:d9:2d:73:ec:75:49:09:06:e3: 20:7f:c7:da:f7:4a:6c:d4:51:be:e2:c0:f1:77:b5: bc:fc:8b:c8:d4:c1:a9:82:0a:6b:4f:da:7d:60:e9: 7c:6c:7b:82:c9:cc:17:4c:f1:e6:d0:5b:f7:75:3c: b3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AD:9F:40:7A:64:6D:04:AB:58:34:07:0B:9D:BC:00:C9:32:01:08 X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 141.193.152.0/21 Signature Algorithm: sha256WithRSAEncryption 89:db:c2:c1:6c:8d:65:42:50:8a:3c:98:c1:cd:d4:b4:58:54: 4f:1b:13:b7:bd:9f:bd:3b:a3:2f:70:ce:9e:c7:00:82:30:9d: ef:bd:1c:b9:37:c6:84:5e:42:90:d3:ae:99:39:00:fd:d7:31: de:3e:01:e9:28:4c:90:24:0c:2f:49:38:78:47:1e:0d:bb:0e: bf:eb:7d:15:42:33:b0:53:15:1e:b0:01:d6:cf:81:0f:78:4a: 88:15:7b:86:6e:d7:2e:d4:c4:06:bb:5e:8b:7a:ee:bc:8f:b2: 94:48:f7:03:8b:36:1f:6c:52:2b:ef:a0:1f:a0:19:9a:f0:bd: 02:5e:16:19:a1:e1:d6:d0:e2:94:63:9a:81:45:f0:31:bf:07: 7b:15:62:60:81:19:7c:83:0b:38:6e:04:3c:a4:6a:83:3c:ff: ef:38:b5:f6:b5:0d:1d:94:f2:fa:72:be:8f:00:4d:7d:0e:8a: 7b:3a:5d:73:8a:ee:cd:48:60:20:40:ec:dc:f6:a1:8a:af:be: d3:c7:e0:55:e7:7b:c1:f8:83:44:b8:06:f7:d2:ae:d5:8a:08: 57:90:68:8e:49:c6:3a:79:05:fd:96:36:ea:71:99:51:53:63: 1e:bd:ec:b7:8e:ee:48:b8:61:83:69:14:b8:9e:de:70:77:3a: 18:d6:25:d4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjUwMzEzMDY0NDI3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QyN2VjYi02MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlvUG8kkPZQjwmHTIaCwxNpAHk2okMI2/LIrYKVRRX7vxta8PMOCh8zkEgTT 5xKfl9fjioKvBM1lctlwlkBd2kP9Fqgagd5lHHEUiUtdpidAtlwtjW6i/PxHCccw 3AumjG69JMFzBRIfbsPXSEmXQiXDYmBpIDd5KczCmoaMIkzL+KpUW+h7+RYwdj57 exWx7CqCySJqALfUxWzn5ebIbeDIEVAHVAzy2h6fQGDUzfBMEPjC+34bzXhBAGiQ roN4eTidSrhQay7ZLXPsdUkJBuMgf8fa90ps1FG+4sDxd7W8/IvI1MGpggprT9p9 YOl8bHuCycwXTPHm0Fv3dTyzFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOytn0B6 ZG0Eq1g0BwudvADJMgEIMB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjBBQzEvMzU5MDY1QTYzMDk3MTFFQ0IyODVBNjRCQzRGOUFFMDIvOUJCREY1REVG RkQ2MTFFRjlBRTREMzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAONwZgwDQYJKoZIhvcNAQELBQADggEBAInbwsFsjWVCUIo8 mMHN1LRYVE8bE7e9n707oy9wzp7HAIIwne+9HLk3xoReQpDTrpk5AP3XMd4+Aeko TJAkDC9JOHhHHg27Dr/rfRVCM7BTFR6wAdbPgQ94SogVe4Zu1y7UxAa7Xot67ryP spRI9wOLNh9sUivvoB+gGZrwvQJeFhmh4dbQ4pRjmoFF8DG/B3sVYmCBGXyDCzhu BDykaoM8/+84tfa1DR2U8vpyvo8ATX0Oins6XXOK7s1IYCBA7Nz2oYqvvtPH4FXn e8H4g0S4BvfSrtWKCFeQaI5Jxjp5Bf2WNupxmVFTYx697LeO7ki4YYNpFLie3nB3 OhjWJdQ= -----END CERTIFICATE-----Generated at Sat Apr 5 05:08:19 2025 by rpki-client