$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa File: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (raw, json) Hash identifier: U4XP+q4YcB/6cfAS39rgiX5WO5DuizysSejbMFJaGr0= Subject key identifier: 4C:1E:D6:5A:D3:65:A9:15:EA:10:2B:53:7F:5C:C6:EB:A0:C5:C4:28 Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: D5 Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa Signing time: Fri 03 May 2024 06:49:37 +0000 ROA not before: Fri 03 May 2024 06:49:37 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 14618 IP address blocks: 116.197.148.0/24 maxlen: 24 116.197.150.0/24 maxlen: 24 116.197.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 02:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F Validity Not Before: May 3 06:49:37 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66348901-3616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:8a:7e:ca:5e:b8:6c:2f:82:e4:ef:bc:64: bd:28:d1:61:b5:ac:cd:4e:ad:07:ef:1b:a4:88:6b: 86:b2:13:f5:45:66:36:f8:0c:6f:75:85:77:04:1c: 78:0f:e1:08:64:a6:47:31:1b:1f:ec:eb:84:ca:5d: de:e1:69:67:f8:b1:f7:a3:5e:e1:b4:c0:15:f8:04: ad:16:9c:34:9c:f3:3b:b3:f2:8e:d9:5f:50:4d:1d: cd:74:bc:56:d9:8b:03:a8:d8:00:4c:61:12:08:9e: 90:51:52:38:fe:4c:8a:98:46:e0:2b:8e:c7:4c:11: 87:59:aa:17:62:1c:61:58:67:b8:b5:c3:9f:85:d3: f1:eb:82:0a:4e:d5:a5:37:82:b2:d7:37:10:f3:56: cc:ce:85:c4:63:c7:43:ce:03:b4:a8:7a:77:89:eb: 14:c7:75:50:02:19:5f:f5:82:9e:a1:8f:8f:99:34: 00:af:b7:11:25:81:f4:3c:0b:36:5b:c3:bc:6e:95: f0:4c:ac:b3:95:b8:9d:07:5b:23:9d:93:20:d3:3d: 17:50:2c:cd:58:39:e0:75:4d:98:fe:bf:e7:10:e8: 09:16:ae:73:1e:0c:24:55:9f:c2:8b:ec:97:4d:3a: d1:76:c4:51:86:54:df:45:07:98:8d:2a:6a:dd:16: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:1E:D6:5A:D3:65:A9:15:EA:10:2B:53:7F:5C:C6:EB:A0:C5:C4:28 X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.197.148.0/24 116.197.150.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:24:aa:8d:56:af:0c:8e:08:f1:b1:21:32:07:e7:24:e1:d9: 1b:21:2d:0e:f3:9e:b4:be:2b:9c:19:8b:e7:a4:e5:03:86:f2: 80:1e:be:fd:cb:cd:71:61:2c:6b:55:cf:d6:96:a5:4e:14:71: 5b:46:49:93:c1:e7:e3:f8:4b:fc:50:4b:a7:0a:7a:38:dd:9c: a2:d6:0a:f0:4f:45:17:2c:5d:85:be:da:af:41:7d:d1:bd:dc: 10:0e:34:bf:ad:73:2a:b5:c4:b4:18:9d:27:da:46:90:d3:f9: 50:64:c0:b4:b7:77:3c:23:83:a0:98:28:e2:35:56:38:c1:e2: 74:83:a1:9d:ee:39:38:22:07:29:5d:75:af:10:53:2e:e7:45: e6:cd:72:4e:ec:35:84:7c:18:7b:eb:bf:1b:2f:86:0f:1a:ac: 51:85:55:ed:87:e1:6f:fd:65:db:9b:2d:95:56:a4:14:42:54: 07:43:7d:fe:6f:e2:6a:9a:7d:80:ea:53:30:68:f2:3f:44:76: 1a:c6:99:35:5a:0a:b1:9d:ac:90:a7:d4:6e:94:69:f4:b9:df: c2:de:32:c9:56:93:9a:6f:47:5d:ee:d3:08:d8:d8:b3:30:ac: 20:1f:ff:1c:fe:39:3c:a4:5f:bf:6d:fb:34:97:8a:1c:01:11: 36:b8:40:51 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjQwNTAzMDY0OTM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0ODkwMS0zNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufWKfspeuGwvguTvvGS9KNFhtazNTq0H7xukiGuGshP1RWY2+AxvdYV3BBx4 D+EIZKZHMRsf7OuEyl3e4Wln+LH3o17htMAV+AStFpw0nPM7s/KO2V9QTR3NdLxW 2YsDqNgATGESCJ6QUVI4/kyKmEbgK47HTBGHWaoXYhxhWGe4tcOfhdPx64IKTtWl N4Ky1zcQ81bMzoXEY8dDzgO0qHp3iesUx3VQAhlf9YKeoY+PmTQAr7cRJYH0PAs2 W8O8bpXwTKyzlbidB1sjnZMg0z0XUCzNWDngdU2Y/r/nEOgJFq5zHgwkVZ/Ci+yX TTrRdsRRhlTfRQeYjSpq3RazTQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEwe1lrT ZakV6hArU39cxuugxcQoMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzY2NEYvMUUwODU0QUVERDdEMTFFRDkxQTA0NjREQzRGOUFFMDIvRDFEREZERUNE RDk4MTFFREIyQkJCQTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAB0xZQDBAF0xZYwDQYJKoZIhvcNAQELBQADggEBAGokqo1W rwyOCPGxITIH5yTh2RshLQ7znrS+K5wZi+ek5QOG8oAevv3LzXFhLGtVz9aWpU4U cVtGSZPB5+P4S/xQS6cKejjdnKLWCvBPRRcsXYW+2q9BfdG93BAONL+tcyq1xLQY nSfaRpDT+VBkwLS3dzwjg6CYKOI1VjjB4nSDoZ3uOTgiByldda8QUy7nRebNck7s NYR8GHvrvxsvhg8arFGFVe2H4W/9ZdubLZVWpBRCVAdDff5v4mqafYDqUzBo8j9E dhrGmTVaCrGdrJCn1G6UafS538LeMslWk5pvR13u0wjY2LMwrCAf/xz+OTykX79t +zSXihwBETa4QFE= -----END CERTIFICATE-----Generated at Thu Mar 13 21:56:16 2025 by rpki-client