$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa File: CEE70E84DDFB11EFB680E25BC4F9AE02.roa (raw, json) Hash identifier: EsoL4WhYxfJHLQra6Hh/TOtCsHiKFt2d6Rdo7ihnLOo= Subject key identifier: 5D:DF:2F:E1:42:DF:49:FE:68:45:7F:61:02:30:38:2E:94:0F:5B:ED Certificate issuer: /CN=A912AC83/serialNumber=D2898BAD926791CE0933C09279DF9798D7DEB694 Certificate serial: 0F Authority key identifier: D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa Signing time: Wed 29 Jan 2025 04:45:05 +0000 ROA not before: Wed 29 Jan 2025 04:45:05 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55479 IP address blocks: 161.248.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Feb 2025 23:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83 Validity Not Before: Jan 29 04:45:05 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6799b251-aaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b9:42:0a:9e:2b:be:0c:7b:3c:c8:6a:a0:34: 70:5f:ee:80:be:6d:15:e4:64:8f:63:1b:06:d7:19: 1a:ba:c7:1b:18:7f:43:4c:bb:69:44:48:33:86:23: f9:ca:7c:a0:81:fb:cf:21:51:fa:39:0f:7f:f4:95: 5d:5b:ce:b3:70:97:56:77:0b:9f:40:8b:1a:f7:1d: 7c:85:76:b6:56:32:f6:4c:fc:a6:24:7e:01:98:2b: 22:65:57:26:be:74:f4:43:02:f5:a4:c2:2a:10:ce: 42:f2:7f:fe:ec:5d:42:31:7c:ad:5a:f0:1b:20:b8: 71:54:89:22:94:95:ce:32:03:0f:75:1b:5a:3f:68: da:5b:89:74:71:eb:4c:6f:30:45:ab:7d:d1:4a:0c: d5:b5:c4:6e:4d:87:d1:aa:4c:3e:e4:2c:b2:f6:cd: b8:d6:88:f0:8e:0e:18:e0:7e:93:8a:23:3f:91:95: 5b:74:26:0f:6e:ad:9a:2f:49:70:36:8d:19:68:20: 1f:e3:12:e7:9f:bb:1c:dd:74:e9:f5:b4:73:49:66: a9:11:6b:9a:bd:74:f1:df:3b:4a:8f:36:da:1b:11: b6:e6:e0:ac:53:00:cc:3d:32:44:6c:08:b2:9e:c8: 97:cc:20:9a:25:6d:9a:1b:85:98:0c:33:18:61:29: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DF:2F:E1:42:DF:49:FE:68:45:7F:61:02:30:38:2E:94:0F:5B:ED X509v3 Authority Key Identifier: keyid:D2:89:8B:AD:92:67:91:CE:09:33:C0:92:79:DF:97:98:D7:DE:B6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/0omLrZJnkc4JM8CSed-XmNfetpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0omLrZJnkc4JM8CSed-XmNfetpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/20A6137ECC9911EF87437E09C4F9AE02/CEE70E84DDFB11EFB680E25BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.106.0/24 Signature Algorithm: sha256WithRSAEncryption 38:c5:f9:4d:0a:d3:9e:e8:f7:c2:34:ce:48:04:f8:5c:64:3b: 02:8b:3f:f9:17:1d:49:cb:07:0e:d4:a6:71:b3:d8:47:e4:0c: 17:a0:2e:82:5f:f5:a9:52:5c:80:d6:0e:b4:7c:41:b6:f0:0b: ea:a2:7e:66:c5:f7:1a:15:d1:f0:74:88:32:8f:15:9a:65:42: 7f:92:ec:fa:c9:3b:de:bb:a6:3c:96:9c:c3:da:b9:6c:97:e2: 4d:4d:e0:96:45:1b:6f:2a:1f:15:88:66:46:16:a4:85:a6:bc: 82:9d:05:f9:ce:2b:7d:00:28:86:b3:7f:b0:28:2d:0c:c5:5a: 6e:cc:c7:84:b4:c5:4c:f8:50:41:f3:0d:d5:22:69:bb:03:90: f3:dc:f4:f6:e4:3f:81:77:7c:5c:37:81:54:4a:b9:40:8d:09: 32:9c:c7:88:78:69:3b:d7:18:b7:59:ec:e0:fc:bb:c9:51:3f: fb:a4:11:40:d7:b4:37:02:93:b9:ab:91:e5:17:e8:cd:6a:a3: 39:56:36:45:d4:46:a7:fe:74:d3:a2:63:50:ad:3f:28:41:83: 1c:3f:7c:a1:91:40:30:6b:91:23:92:48:45:a5:59:b7:e8:0b: ca:a6:d9:74:55:2a:61:1a:97:83:23:91:37:ed:e8:18:d6:bc: 01:4b:99:cd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QUM4MzExMC8GA1UEBRMoRDI4OThCQUQ5MjY3OTFDRTA5MzNDMDkyNzlERjk3OThE N0RFQjY5NDAeFw0yNTAxMjkwNDQ1MDVaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OTliMjUxLWFhZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCduUIKniu+DHs8yGqgNHBf7oC+bRXkZI9jGwbXGRq6xxsYf0NMu2lESDOGI/nK fKCB+88hUfo5D3/0lV1bzrNwl1Z3C59Aixr3HXyFdrZWMvZM/KYkfgGYKyJlVya+ dPRDAvWkwioQzkLyf/7sXUIxfK1a8BsguHFUiSKUlc4yAw91G1o/aNpbiXRx60xv MEWrfdFKDNW1xG5Nh9GqTD7kLLL2zbjWiPCODhjgfpOKIz+RlVt0Jg9urZovSXA2 jRloIB/jEuefuxzddOn1tHNJZqkRa5q9dPHfO0qPNtobEbbm4KxTAMw9MkRsCLKe yJfMIJolbZobhZgMMxhhKWq7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXd8v4ULf Sf5oRX9hAjA4LpQPW+0wHwYDVR0jBBgwFoAU0omLrZJnkc4JM8CSed+XmNfetpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBQzgzLzIwQTYxMzdFQ0M5 OTExRUY4NzQzN0UwOUM0RjlBRTAyLzBvbUxyWkpua2M0Sk04Q1NlZC1YbU5mZXRw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMG9tTHJaSm5rYzRKTThDU2VkLVhtTmZldHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My8yMEE2MTM3RUNDOTkxMUVGODc0MzdFMDlDNEY5QUUwMi9DRUU3MEU4NERE RkIxMUVGQjY4MEUyNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH4ajANBgkqhkiG9w0BAQsFAAOCAQEAOMX5TQrTnuj3wjTO SAT4XGQ7Aos/+RcdScsHDtSmcbPYR+QMF6Augl/1qVJcgNYOtHxBtvAL6qJ+ZsX3 GhXR8HSIMo8VmmVCf5Ls+sk73rumPJacw9q5bJfiTU3glkUbbyofFYhmRhakhaa8 gp0F+c4rfQAohrN/sCgtDMVabszHhLTFTPhQQfMN1SJpuwOQ89z09uQ/gXd8XDeB VEq5QI0JMpzHiHhpO9cYt1ns4Py7yVE/+6QRQNe0NwKTuauR5RfozWqjOVY2RdRG p/5006JjUK0/KEGDHD98oZFAMGuRI5JIRaVZt+gLyqbZdFUqYRqXgyORN+3oGNa8 AUuZzQ== -----END CERTIFICATE-----Generated at Wed Feb 5 22:40:03 2025 by rpki-client