$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa File: 3EF600FC1E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: UYZZ85gBWHvwl3QPAXajT/WCpvpTp2JDnuZ/u4LkcBw= Subject key identifier: 6D:F2:3B:B4:16:29:0A:67:E2:A0:05:11:1C:C7:3D:90:98:DC:D5:2A Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 389E Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:54 +0000 ROA not before: Tue 16 Jul 2024 14:30:54 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 18197 IP address blocks: 58.97.37.0/24 maxlen: 24 110.170.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14494 (0x389e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC Validity Not Before: Jul 16 14:30:54 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6696841e-2ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:19:93:cd:38:d2:36:bc:a7:7d:9f:61:4c:91: f1:c4:3e:33:02:e8:a3:7f:57:3b:08:1f:30:e1:77: 62:80:c8:0e:39:dc:41:cc:32:91:af:7a:1d:11:a8: 3f:35:e5:1d:8d:e8:98:81:f4:10:c6:83:90:d4:9c: 0a:40:89:55:0c:a5:37:07:14:15:85:fe:ee:d1:74: 74:15:17:e2:73:43:be:c3:a7:28:32:e3:08:d9:84: 63:5e:e1:5e:39:15:7f:80:ef:0e:6d:8a:dd:53:0b: 94:a7:f0:14:42:d3:0e:a3:85:28:d1:e3:98:38:ac: 1f:cc:f7:61:90:ab:75:0f:95:bc:14:bb:df:24:ff: 9e:eb:3f:85:58:9d:90:4a:bb:00:e8:33:ac:5b:6a: 36:21:34:67:bf:8a:0f:78:3d:9d:f7:c7:d8:b9:1a: c9:9a:cd:51:14:03:a1:6a:6e:84:22:71:a1:83:eb: 1d:63:c9:1c:b2:5b:4e:da:2c:99:de:ef:0d:66:ff: 29:e4:96:a7:2f:05:19:5b:cb:e0:0a:d9:3d:a8:3a: cf:96:57:54:68:31:91:e2:ca:65:4f:8c:46:03:e5: af:98:5e:21:28:a1:d1:89:98:af:fb:1e:38:ad:ad: c8:9b:23:c1:82:61:53:44:9b:00:ce:6d:65:91:06: 9c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F2:3B:B4:16:29:0A:67:E2:A0:05:11:1C:C7:3D:90:98:DC:D5:2A X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EF600FC1E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.97.37.0/24 110.170.149.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:aa:98:3c:17:ab:8f:5b:92:2e:5b:64:c9:d6:64:ca:24:c4: 26:8d:85:c7:ad:91:8c:e1:fa:61:b1:31:fe:44:d1:75:2c:2f: 29:84:dd:bd:7e:30:71:fc:bb:88:34:2d:b8:49:12:27:4d:e3: 21:fb:3b:2e:2a:7d:99:36:b8:c2:0f:82:b4:ac:2e:71:bf:b5: 5e:11:2e:80:3c:5a:e1:ad:2c:de:67:68:c0:eb:5c:7c:70:cb: 99:44:a8:92:95:2b:1a:79:40:b5:f0:23:cf:c8:2b:b6:b4:5c: 98:bc:5c:9e:97:ad:7f:17:e5:11:f0:7d:24:fe:37:7a:34:48: 1e:9b:8c:75:ae:b5:89:99:1a:0c:78:ab:93:dd:86:94:0d:13: d8:1d:f1:f3:25:d1:1b:08:a5:f1:a6:9e:72:f9:c1:7f:a0:22: 86:63:5a:86:33:1b:42:a8:04:32:4f:f7:3a:cd:d1:c9:37:8d: 5a:75:16:ba:07:cd:2a:a8:ea:8c:d3:39:6f:18:66:99:ca:0e: 24:a6:5f:ee:68:3b:96:0f:d7:b7:21:7e:8e:81:13:90:a5:63: 89:6e:0c:27:41:bc:34:6e:d3:27:ba:f4:a0:ad:b5:94:dc:d9: f6:6b:bf:21:23:cf:13:be:64:66:33:70:01:03:c8:0f:13:55: cf:64:9c:54 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICOJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDU0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQxZS0yZWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hmTzTjSNrynfZ9hTJHxxD4zAuijf1c7CB8w4XdigMgOOdxBzDKRr3odEag/ NeUdjeiYgfQQxoOQ1JwKQIlVDKU3BxQVhf7u0XR0FRfic0O+w6coMuMI2YRjXuFe ORV/gO8ObYrdUwuUp/AUQtMOo4Uo0eOYOKwfzPdhkKt1D5W8FLvfJP+e6z+FWJ2Q SrsA6DOsW2o2ITRnv4oPeD2d98fYuRrJms1RFAOham6EInGhg+sdY8kcsltO2iyZ 3u8NZv8p5JanLwUZW8vgCtk9qDrPlldUaDGR4splT4xGA+WvmF4hKKHRiZiv+x44 ra3ImyPBgmFTRJsAzm1lkQacZwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFG3yO7QW KQpn4qAFERzHPZCY3NUqMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0VGNjAwRkMx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAA6YSUDBABuqpUwDQYJKoZIhvcNAQELBQADggEBAIuqmDwX q49bki5bZMnWZMokxCaNhcetkYzh+mGxMf5E0XUsLymE3b1+MHH8u4g0LbhJEidN 4yH7Oy4qfZk2uMIPgrSsLnG/tV4RLoA8WuGtLN5naMDrXHxwy5lEqJKVKxp5QLXw I8/IK7a0XJi8XJ6XrX8X5RHwfST+N3o0SB6bjHWutYmZGgx4q5PdhpQNE9gd8fMl 0RsIpfGmnnL5wX+gIoZjWoYzG0KoBDJP9zrN0ck3jVp1FroHzSqo6ozTOW8YZpnK DiSmX+5oO5YP17chfo6BE5ClY4luDCdBvDRu0ye69KCttZTc2fZrvyEjzxO+ZGYz cAEDyA8TVc9knFQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:50:17 2025 by rpki-client