$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/0878844205F511EEBB8E1062C4F9AE02.roa File: 0878844205F511EEBB8E1062C4F9AE02.roa (raw, json) Hash identifier: X82qAyT8/61wVP2kDNOcBKWAMfutmgdSPtnosWaKfos= Subject key identifier: 4F:2A:8B:37:96:00:AF:E7:27:39:06:4C:D5:2B:56:5D:23:48:FF:64 Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0A30 Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/0878844205F511EEBB8E1062C4F9AE02.roa Signing time: Wed 14 Aug 2024 20:18:04 +0000 ROA not before: Wed 14 Aug 2024 20:18:04 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 14618 IP address blocks: 117.120.16.0/24 maxlen: 24 117.120.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2608 (0xa30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D Validity Not Before: Aug 14 20:18:04 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66bd10fc-f9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ab:26:e2:08:7a:ac:91:a2:75:30:e4:b0:21: 2e:08:51:33:50:6e:f2:b2:be:bd:d3:6c:95:94:34: 77:40:0c:12:a7:b2:f5:70:d0:b9:fc:fc:48:e0:bb: 96:8d:06:69:02:35:ac:9a:de:a9:cd:7c:ae:8d:df: 6f:8a:0c:d5:eb:e0:45:d5:cb:7c:76:0e:4b:36:55: 3d:9a:89:f4:05:08:c6:72:1b:75:91:2a:d6:af:d7: 41:da:26:d0:e4:d4:df:91:87:36:e3:d7:b7:d9:d6: 61:df:4f:48:49:e5:05:79:12:68:2d:39:dd:69:82: 8c:0e:14:2b:a9:6d:b8:43:df:52:08:ba:d8:26:e4: 6f:e3:4b:82:41:e9:7d:36:44:cf:b0:76:d0:4b:c7: c1:e1:ef:69:f0:ed:35:fa:4b:a2:56:bf:3c:67:04: ba:e1:cc:9b:45:c2:18:a1:57:32:e1:ce:be:1a:d3: 25:41:69:f2:e1:81:62:d6:d2:9f:7c:d9:f1:82:f6: 05:25:7f:03:6e:cd:94:e5:c5:4f:da:b6:92:c3:0c: 6c:02:8f:71:c8:ab:73:49:59:d6:d9:58:f4:95:90: 97:4e:88:c5:d9:24:19:79:12:70:66:9f:55:09:1f: da:2e:5c:a9:28:07:83:ed:8e:6e:3c:27:d1:f8:b5: 95:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2A:8B:37:96:00:AF:E7:27:39:06:4C:D5:2B:56:5D:23:48:FF:64 X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/0878844205F511EEBB8E1062C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.120.16.0/23 Signature Algorithm: sha256WithRSAEncryption 96:e6:1b:48:76:8d:47:ec:6f:aa:9c:75:3a:e9:b9:3c:0e:f1: 8e:bc:03:e3:7b:8d:cb:d5:b9:65:e7:1d:41:97:97:c1:f7:6d: 85:8b:31:4e:a5:b7:51:c8:71:25:87:f8:2f:54:16:19:59:02: 55:b4:f5:0c:4b:94:bf:0a:1d:d8:87:c4:96:fd:bd:38:fe:a4: 55:6f:0f:a3:27:9e:1e:57:be:ea:26:e2:45:7c:68:8a:1d:bf: 77:e6:e1:e9:84:9e:ca:b2:f3:d9:73:fd:9f:34:80:f9:30:dc: b7:1d:80:da:ab:d7:fa:b0:32:e5:d9:a3:82:3c:06:b8:e2:3d: 25:58:d2:ad:e6:c0:6e:7e:3e:86:fd:fa:5c:eb:66:99:6c:db: 44:55:73:e4:7c:0b:ed:57:42:27:7b:8a:8a:38:ad:f8:d8:97: 1d:06:b9:66:19:9d:c1:35:79:0b:19:9d:d5:0e:06:a4:0c:d6: 33:9d:5d:1d:30:4a:12:95:69:55:87:80:16:69:6f:d3:76:fa: 5f:14:a5:53:6c:96:f9:f3:ba:e8:ab:d9:af:59:c2:f0:45:1c: b7:43:43:0d:83:7a:00:1c:6b:02:c9:e5:30:5b:b4:d2:6a:ec: 23:99:02:0c:d1:ff:72:12:54:f5:12:f8:a0:b2:2b:44:46:16: 91:57:2c:2b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjQwODE0MjAxODA0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJkMTBmYy1mOWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwasm4gh6rJGidTDksCEuCFEzUG7ysr6902yVlDR3QAwSp7L1cNC5/PxI4LuW jQZpAjWsmt6pzXyujd9vigzV6+BF1ct8dg5LNlU9mon0BQjGcht1kSrWr9dB2ibQ 5NTfkYc249e32dZh309ISeUFeRJoLTndaYKMDhQrqW24Q99SCLrYJuRv40uCQel9 NkTPsHbQS8fB4e9p8O01+kuiVr88ZwS64cybRcIYoVcy4c6+GtMlQWny4YFi1tKf fNnxgvYFJX8Dbs2U5cVP2raSwwxsAo9xyKtzSVnW2Vj0lZCXTojF2SQZeRJwZp9V CR/aLlypKAeD7Y5uPCfR+LWVRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE8qizeW AK/nJzkGTNUrVl0jSP9kMB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjk4NkQvQTAwNzREMTg1MzNCMTFFQUJBQTc1QjNBQzRGOUFFMDIvMDg3ODg0NDIw NUY1MTFFRUJCOEUxMDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF1eBAwDQYJKoZIhvcNAQELBQADggEBAJbmG0h2jUfsb6qc dTrpuTwO8Y68A+N7jcvVuWXnHUGXl8H3bYWLMU6lt1HIcSWH+C9UFhlZAlW09QxL lL8KHdiHxJb9vTj+pFVvD6Mnnh5Xvuom4kV8aIodv3fm4emEnsqy89lz/Z80gPkw 3LcdgNqr1/qwMuXZo4I8BrjiPSVY0q3mwG5+Pob9+lzrZpls20RVc+R8C+1XQid7 ioo4rfjYlx0GuWYZncE1eQsZndUOBqQM1jOdXR0wShKVaVWHgBZpb9N2+l8UpVNs lvnzuuir2a9ZwvBFHLdDQw2DegAcawLJ5TBbtNJq7COZAgzR/3ISVPUS+KCyK0RG FpFXLCs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:03 2025 by rpki-client