$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa File: C2D9F4BCD24311EF92066413C4F9AE02.roa (raw, json) Hash identifier: 5iS11kL+9pqleb9zxECVMM1xJvDR+Jn2NVybTvOLDAM= Subject key identifier: B2:ED:C4:97:A2:66:FC:33:F2:31:3B:6F:F0:95:10:DF:7C:76:78:95 Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595 Certificate serial: 07A5 Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa Signing time: Tue 14 Jan 2025 06:49:55 +0000 ROA not before: Tue 14 Jan 2025 06:49:55 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 147040 IP address blocks: 61.4.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912176D Validity Not Before: Jan 14 06:49:55 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67860912-cfb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:4b:7a:45:0c:6e:8c:c2:56:88:59:ab:78: 63:67:b9:5b:01:65:63:a3:2a:12:91:04:d7:db:24: 85:3d:02:b5:16:cc:07:38:44:a0:a3:44:24:d5:df: 78:f8:a8:36:d3:d0:b8:77:d1:3b:4d:b6:31:4e:0b: a0:f5:6a:f2:02:cf:98:e4:53:a0:4c:b0:a6:54:f8: 16:e3:e8:3d:22:10:74:c4:77:89:ae:52:16:9b:ee: 66:15:39:9e:a5:3c:60:bc:26:5e:51:64:3f:0f:c2: 48:8b:1e:bf:12:36:13:11:47:56:6c:01:78:1f:04: b9:eb:fd:df:86:06:b5:b0:2d:b0:4c:cb:82:83:30: eb:9c:ab:f3:f3:40:e6:af:9a:d2:99:65:e5:8d:7c: 01:4f:84:67:2f:e9:b3:58:66:a1:68:2d:c3:c2:b0: be:e3:f2:bc:61:3d:4a:77:4d:99:65:f7:fa:a1:eb: ab:26:83:22:4d:b5:b4:b9:b8:72:6a:cd:73:77:b3: 57:65:5f:c6:18:65:47:ca:dd:d1:c3:09:6e:24:dd: 40:c3:e7:5c:8f:00:09:53:3b:dd:ca:43:c0:41:4e: be:09:66:de:59:83:3a:4e:07:99:c5:99:68:91:af: 77:89:c7:de:df:fc:af:60:95:ef:8c:63:ad:3f:38: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:ED:C4:97:A2:66:FC:33:F2:31:3B:6F:F0:95:10:DF:7C:76:78:95 X509v3 Authority Key Identifier: keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/C2D9F4BCD24311EF92066413C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.4.108.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:78:34:77:01:1f:11:fc:74:8e:5f:67:fb:7b:ce:51:0f:d4: e8:04:a0:cd:ac:44:ae:6c:d0:8a:38:73:5f:c2:4d:93:b8:cf: 14:cc:89:3e:43:e5:d1:b6:5b:a0:22:d4:84:d3:82:3c:a0:e1: fc:31:b9:bb:c4:34:9a:b6:ce:01:fd:0a:76:42:7f:74:a1:a5: 0b:01:d1:b1:dd:7c:66:c4:73:24:8d:e5:33:d9:55:ef:92:a8: 8f:d6:88:1d:06:f2:f4:93:40:45:85:3e:e2:5c:0e:bb:39:21: cb:2b:33:18:a1:ad:86:9d:a8:10:e4:12:2e:c0:cf:e4:c3:1b: 4f:69:3f:20:fe:2a:47:cc:19:02:4b:11:6a:28:53:76:5a:f4: 1e:d2:3c:8c:f6:dd:0f:95:05:34:92:29:29:6f:63:28:03:9b: 4a:01:2b:6f:16:13:98:52:92:2c:c0:12:18:3b:43:78:93:4b: 74:d4:62:30:24:00:7c:9a:80:c8:d6:90:26:b0:c6:85:23:e3: 03:b4:d9:3e:b1:a1:15:4f:a0:d6:76:c6:fa:fa:a2:7c:76:e5: ee:77:cc:a2:7c:d4:cc:46:fb:e5:17:ce:3f:37:2f:8b:26:68: 2d:3b:f6:41:dc:1b:aa:12:28:41:03:72:fb:56:a4:c8:ed:86: 40:86:e9:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1 MzIzM0U1OTUwHhcNMjUwMTE0MDY0OTU1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2MDkxMi1jZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvktLekUMbozCVohZq3hjZ7lbAWVjoyoSkQTX2ySFPQK1FswHOESgo0Qk1d94 +Kg209C4d9E7TbYxTgug9WryAs+Y5FOgTLCmVPgW4+g9IhB0xHeJrlIWm+5mFTme pTxgvCZeUWQ/D8JIix6/EjYTEUdWbAF4HwS56/3fhga1sC2wTMuCgzDrnKvz80Dm r5rSmWXljXwBT4RnL+mzWGahaC3DwrC+4/K8YT1Kd02ZZff6oeurJoMiTbW0ubhy as1zd7NXZV/GGGVHyt3RwwluJN1Aw+dcjwAJUzvdykPAQU6+CWbeWYM6TgeZxZlo ka93icfe3/yvYJXvjGOtPzi1wQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLLtxJei Zvwz8jE7b/CVEN98dniVMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2 QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1 WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvQzJEOUY0QkNE MjQzMTFFRjkyMDY2NDEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA9BGwwDQYJKoZIhvcNAQELBQADggEBAJp4NHcBHxH8dI5f Z/t7zlEP1OgEoM2sRK5s0Io4c1/CTZO4zxTMiT5D5dG2W6Ai1ITTgjyg4fwxubvE NJq2zgH9CnZCf3ShpQsB0bHdfGbEcySN5TPZVe+SqI/WiB0G8vSTQEWFPuJcDrs5 IcsrMxihrYadqBDkEi7Az+TDG09pPyD+KkfMGQJLEWooU3Za9B7SPIz23Q+VBTSS KSlvYygDm0oBK28WE5hSkizAEhg7Q3iTS3TUYjAkAHyagMjWkCawxoUj4wO02T6x oRVPoNZ2xvr6onx25e53zKJ81MxG++UXzj83L4smaC079kHcG6oSKEEDcvtWpMjt hkCG6XA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:09:48 2025 by rpki-client