$ rpki-client -vvf rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa File: C9E2B406804111EEA6703F81C4F9AE02.roa (raw, json) Hash identifier: Y6irjrKKHKY/zWiKAS27Fm2Vi8M6r+kieeDoyEvMRvU= Subject key identifier: 99:D3:FD:51:99:5D:75:30:4F:50:92:CF:65:4A:9A:A7:DE:55:14:30 Certificate issuer: /CN=A912CDC5/serialNumber=62620D60DBA8528AEA4212CCEDB729613A99155C Certificate serial: 02E0 Authority key identifier: 62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa Signing time: Sat 12 Oct 2024 22:32:00 +0000 ROA not before: Sat 12 Oct 2024 22:32:00 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133206 IP address blocks: 194.127.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 736 (0x2e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CDC5 Validity Not Before: Oct 12 22:32:00 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670af8e0-c952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f8:da:e7:c3:a1:ce:3f:9f:d2:71:59:bb:64: d5:96:2f:7e:c7:03:12:bb:fd:3a:3f:10:8a:65:17: 73:a6:37:f6:48:17:c7:27:a8:94:b8:be:0c:f3:c5: 70:c1:46:87:8e:31:b0:52:4a:ac:2b:3f:4f:2b:a7: 23:d5:82:b2:9b:42:2f:83:8d:f1:61:9b:6f:78:cb: c5:34:d3:3b:14:8c:a7:0f:98:cf:d3:b7:0d:c4:3b: e5:ed:b1:ad:2e:58:34:e7:ab:78:52:22:a9:db:cc: 2f:6f:23:b3:11:34:51:b6:88:27:70:55:30:f9:16: a8:d8:01:07:ed:9b:09:ec:80:f4:2f:74:24:5a:f9: 3d:cf:df:37:dd:d9:89:53:53:26:75:6b:cf:10:43: 35:54:75:32:7e:53:8c:fb:90:39:f8:dc:70:93:44: 78:9b:6d:ad:4a:6f:b3:ff:a0:b4:39:e6:87:c9:db: 4e:a8:83:5f:a2:e2:3d:e0:0b:8e:66:83:84:f8:d9: 30:13:ab:44:80:65:7b:91:94:4b:01:2f:1a:8c:b2: c0:6c:af:03:9b:35:ff:6b:7f:96:af:28:4f:12:a7: 84:b3:dd:61:a6:1f:51:c0:e7:8e:ea:4a:94:32:36: 6b:4d:0e:b1:43:0a:ce:31:cb:36:fe:68:e8:d3:fe: 7b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D3:FD:51:99:5D:75:30:4F:50:92:CF:65:4A:9A:A7:DE:55:14:30 X509v3 Authority Key Identifier: keyid:62:62:0D:60:DB:A8:52:8A:EA:42:12:CC:ED:B7:29:61:3A:99:15:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/YmINYNuoUorqQhLM7bcpYTqZFVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/YmINYNuoUorqQhLM7bcpYTqZFVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/BF1E7118BAC711EC8E6CA287C4F9AE02/C9E2B406804111EEA6703F81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 194.127.104.0/23 Signature Algorithm: sha256WithRSAEncryption 96:81:8e:83:a9:9b:fa:1f:2a:8c:b1:d7:02:9b:8c:89:cb:91: 25:ac:27:37:3f:ed:9e:41:a8:13:c4:88:71:58:1c:33:38:e2: b3:71:06:36:a4:ef:ed:aa:27:ef:d4:8e:5b:b9:30:1d:3c:98: d0:a6:3d:71:bc:16:10:1a:17:91:46:a5:f9:f9:54:a5:e3:e1: db:4a:51:2d:27:4b:58:84:d7:a1:48:96:1b:74:f1:3e:6f:67: c6:8a:1e:ab:36:19:22:a2:bb:9a:fd:9b:33:23:b5:0e:a8:58: de:e2:69:68:9f:8b:33:92:fd:e7:56:e6:d1:0b:31:32:63:cd: 63:db:9a:97:60:3d:7c:1b:1f:18:f1:0a:92:a4:76:73:e2:f9: 61:5d:84:18:84:ed:9a:3f:42:5b:00:83:94:82:7e:6b:07:84: fe:53:dd:86:0a:6f:84:0d:29:0a:9b:a5:d0:a3:e2:d1:8b:4a: bd:ab:d3:fb:1a:69:f6:f3:8b:35:ae:9e:74:fd:c5:36:c2:08: c7:37:85:1a:16:92:9d:84:e8:aa:f3:e1:07:f7:8f:9e:27:43: aa:b7:05:0b:79:a5:ad:9b:32:e2:dc:8a:c7:ad:96:cc:a7:ba: 43:c7:68:1b:bd:a4:1a:3d:c7:8f:8a:db:24:c1:14:94:98:3b: 2d:8e:af:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNEQzUxMTAvBgNVBAUTKDYyNjIwRDYwREJBODUyOEFFQTQyMTJDQ0VEQjcyOTYx M0E5OTE1NUMwHhcNMjQxMDEyMjIzMjAwWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBhZjhlMC1jOTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Pja58Ohzj+f0nFZu2TVli9+xwMSu/06PxCKZRdzpjf2SBfHJ6iUuL4M88Vw wUaHjjGwUkqsKz9PK6cj1YKym0Ivg43xYZtveMvFNNM7FIynD5jP07cNxDvl7bGt Llg056t4UiKp28wvbyOzETRRtogncFUw+Rao2AEH7ZsJ7ID0L3QkWvk9z9833dmJ U1MmdWvPEEM1VHUyflOM+5A5+Nxwk0R4m22tSm+z/6C0OeaHydtOqINfouI94AuO ZoOE+NkwE6tEgGV7kZRLAS8ajLLAbK8DmzX/a3+WryhPEqeEs91hph9RwOeO6kqU MjZrTQ6xQwrOMcs2/mjo0/57NwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJnT/VGZ XXUwT1CSz2VKmqfeVRQwMB8GA1UdIwQYMBaAFGJiDWDbqFKK6kISzO23KWE6mRVc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9CRjFFNzExOEJB QzcxMUVDOEU2Q0EyODdDNEY5QUUwMi9ZbUlOWU51b1VvcnFRaExNN2JjcFlUcVpG VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1ltSU5ZTnVvVW9ycVFoTE03YmNwWVRxWkZWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkNEQzUvQkYxRTcxMThCQUM3MTFFQzhFNkNBMjg3QzRGOUFFMDIvQzlFMkI0MDY4 MDQxMTFFRUE2NzAzRjgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHCf2gwDQYJKoZIhvcNAQELBQADggEBAJaBjoOpm/ofKoyx 1wKbjInLkSWsJzc/7Z5BqBPEiHFYHDM44rNxBjak7+2qJ+/Ujlu5MB08mNCmPXG8 FhAaF5FGpfn5VKXj4dtKUS0nS1iE16FIlht08T5vZ8aKHqs2GSKiu5r9mzMjtQ6o WN7iaWifizOS/edW5tELMTJjzWPbmpdgPXwbHxjxCpKkdnPi+WFdhBiE7Zo/QlsA g5SCfmsHhP5T3YYKb4QNKQqbpdCj4tGLSr2r0/saafbzizWunnT9xTbCCMc3hRoW kp2E6Krz4Qf3j54nQ6q3BQt5pa2bMuLcisetlsynukPHaBu9pBo9x4+K2yTBFJSY Oy2Or3k= -----END CERTIFICATE-----Generated at Wed Feb 19 22:05:22 2025 by rpki-client