$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/89EA22F0C67011EFAE929D0DC4F9AE02.roa File: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (raw, json) Hash identifier: u5vjYU67JaqqsoNZI0S6g4tD4PgUnrgAcxaVH+69TsM= Subject key identifier: BF:C9:5B:48:46:33:58:4C:46:99:F2:D8:34:E0:24:59:06:2B:83:09 Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5 Certificate serial: 02 Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/89EA22F0C67011EFAE929D0DC4F9AE02.roa Signing time: Mon 30 Dec 2024 05:40:12 +0000 ROA not before: Mon 30 Dec 2024 05:40:12 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135609 IP address blocks: 161.248.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 06:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F281 Validity Not Before: Dec 30 05:40:12 2024 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6772323c-99db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:9c:24:7e:7a:c9:bf:62:11:3a:00:62:85: 13:fa:d7:31:59:5b:3c:9a:e1:a0:eb:f3:2a:80:d7: 55:c5:a6:c3:1d:06:eb:bf:d3:7a:9d:fa:76:ec:82: 68:a1:86:aa:c6:41:8b:fa:ef:35:62:dd:65:f0:c5: 28:ba:d6:15:c5:91:30:2b:d8:da:95:8b:2c:c7:63: 54:4a:db:c8:a9:63:cb:4e:b9:52:5b:59:32:2a:02: e9:f1:d8:8d:57:5b:08:22:df:5c:f8:a3:97:d8:0b: ce:ee:37:b3:6b:50:49:7d:04:ce:fe:30:f1:33:a3: 12:e2:36:11:aa:e9:3f:02:8b:76:8a:a4:a8:1f:0c: eb:0d:ac:22:a1:07:35:4a:29:8f:f0:9c:4e:1b:1d: ac:8d:fd:13:d0:ef:75:93:52:97:6f:88:66:e0:09: 62:1b:26:73:c1:2f:61:92:b9:42:f2:6d:19:dc:75: 79:fc:bb:61:8f:71:35:58:6b:35:0d:dd:99:64:57: 02:29:f2:ca:29:2a:47:7a:54:80:bb:de:32:34:06: 2c:1e:ec:5e:e6:eb:22:c3:cb:48:25:bd:81:79:51: 13:7b:9d:55:bb:eb:d5:05:44:93:36:12:d7:d5:ff: 96:d2:8a:ae:4d:94:83:8e:96:5a:0c:7c:4f:5c:61: b2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C9:5B:48:46:33:58:4C:46:99:F2:D8:34:E0:24:59:06:2B:83:09 X509v3 Authority Key Identifier: keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/89EA22F0C67011EFAE929D0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.8.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:bc:22:c3:41:53:1c:b7:e0:e4:dc:f6:57:04:f8:56:1c:e9: 72:49:e0:c8:03:bd:2c:c9:d1:c2:62:43:c5:34:55:13:75:df: 96:f7:95:b1:d2:1c:bd:92:17:74:2f:34:d4:16:82:65:cb:02: a0:14:83:a8:48:1c:09:66:42:dc:c9:ec:20:86:86:23:02:83: 49:79:b2:d2:2f:2d:6b:d7:c1:2e:51:5a:d2:16:37:9a:55:58: 79:9c:3a:10:65:1a:b7:6a:73:58:e8:41:8a:ca:27:67:ad:16: e3:67:de:e0:5d:7e:46:9a:3c:bc:09:66:eb:85:0d:27:1d:55: dd:19:37:5b:a6:ba:71:15:32:47:b7:7c:12:fa:eb:3e:77:c9: 5c:10:7f:c4:60:31:27:1d:1a:67:cb:67:06:6b:a0:55:5b:a3: fa:43:1f:a0:c9:7e:3f:1f:54:94:65:ad:86:ba:41:06:8e:83: 65:6f:99:e2:fb:e7:53:31:69:12:eb:b1:8b:89:20:1f:52:a7: 4b:34:05:05:e5:89:66:be:9b:06:ce:b2:00:63:4a:0d:7b:22: c9:d2:cc:00:4e:3a:15:e4:51:c2:25:c8:f8:0c:3e:50:7a:6f: 58:ce:67:45:fc:0c:6b:43:4f:71:93:59:a7:03:4d:54:47:23: 5e:ce:7f:be -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjI4MTExMC8GA1UEBRMoQkNENUFCRDlDOTFDQTFFN0YyQzQ1NTU3MDVCMjk0MDRG NTA1QkRDNTAeFw0yNDEyMzAwNTQwMTJaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NzIzMjNjLTk5ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4XpwkfnrJv2IROgBihRP61zFZWzya4aDr8yqA11XFpsMdBuu/03qd+nbsgmih hqrGQYv67zVi3WXwxSi61hXFkTAr2NqViyzHY1RK28ipY8tOuVJbWTIqAunx2I1X Wwgi31z4o5fYC87uN7NrUEl9BM7+MPEzoxLiNhGq6T8Ci3aKpKgfDOsNrCKhBzVK KY/wnE4bHayN/RPQ73WTUpdviGbgCWIbJnPBL2GSuULybRncdXn8u2GPcTVYazUN 3ZlkVwIp8sopKkd6VIC73jI0Biwe7F7m6yLDy0glvYF5URN7nVW769UFRJM2EtfV /5bSiq5NlIOOlloMfE9cYbJvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUv8lbSEYz WExGmfLYNOAkWQYrgwkwHwYDVR0jBBgwFoAUvNWr2ckcoefyxFVXBbKUBPUFvcUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMjgxLzEyREU4QTVFQzY2 RTExRUZBNzg3Rjg2NUM0RjlBRTAyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZj VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdk5XcjJja2NvZWZ5eEZWWEJiS1VCUFVGdmNVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjI4MS8xMkRFOEE1RUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi84OUVBMjJGMEM2 NzAxMUVGQUU5MjlEMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKH4CDANBgkqhkiG9w0BAQsFAAOCAQEAPLwiw0FTHLfg5Nz2 VwT4VhzpckngyAO9LMnRwmJDxTRVE3XflveVsdIcvZIXdC801BaCZcsCoBSDqEgc CWZC3MnsIIaGIwKDSXmy0i8ta9fBLlFa0hY3mlVYeZw6EGUat2pzWOhBisonZ60W 42fe4F1+Rpo8vAlm64UNJx1V3Rk3W6a6cRUyR7d8EvrrPnfJXBB/xGAxJx0aZ8tn BmugVVuj+kMfoMl+Px9UlGWthrpBBo6DZW+Z4vvnUzFpEuuxi4kgH1KnSzQFBeWJ Zr6bBs6yAGNKDXsiydLMAE46FeRRwiXI+Aw+UHpvWM5nRfwMa0NPcZNZpwNNVEcj Xs5/vg== -----END CERTIFICATE-----Generated at Wed Feb 5 23:06:21 2025 by rpki-client