$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa File: 3DB4E04ED0E411EB9695B157C4F9AE02.roa (raw, json) Hash identifier: W1o2XhZTvE+zfafvvvo1BgPOskJBsiv1jg8bPM2h8CQ= Subject key identifier: AC:0A:6C:C1:AE:BB:58:D4:B5:DA:61:9C:45:65:60:FF:66:33:6C:D0 Certificate issuer: /CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Certificate serial: 0545 Authority key identifier: 26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa Signing time: Wed 04 Dec 2024 23:22:10 +0000 ROA not before: Wed 04 Dec 2024 23:22:10 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 8283 IP address blocks: 203.56.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Dec 2024 23:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1349 (0x545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD85/serialNumber=264CFC02F671ACA92F40582EB18CDB6CF9644FF5 Validity Not Before: Dec 4 23:22:10 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6750e422-3343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:58:97:eb:00:e9:9a:bc:0c:2b:cb:d7:bd: ff:28:7f:3a:5c:56:52:7f:ce:dd:cf:1f:4c:4e:ae: ce:ba:df:76:a4:a8:57:9e:9a:8b:46:f8:5f:51:92: 58:e8:6d:a4:d3:f3:fe:e8:c4:1e:80:52:2d:2c:7e: 9b:dc:75:d8:6a:26:09:1b:90:74:b3:76:23:77:ef: 55:55:c9:54:c5:a9:4c:9a:e5:c6:53:66:31:e4:bb: cc:d7:02:3e:f2:c0:1c:6c:35:eb:af:98:ff:62:6a: 05:73:ce:05:8d:4d:60:bd:c8:9d:ab:3c:77:7d:68: d2:fe:3a:57:41:30:93:61:25:56:6d:60:dd:68:af: b4:90:cd:be:f1:a8:4f:3b:84:0a:7f:39:a0:82:a9: a3:ac:46:5f:45:f4:1a:a0:ca:94:25:68:d3:80:ed: 0b:b6:94:9b:3a:e3:c6:36:a1:b8:3a:82:66:1e:2a: 03:dd:92:bd:35:44:0a:6c:ba:ee:74:4b:a6:2e:ff: 97:cf:90:ac:60:d8:59:4a:8e:09:a9:5c:ba:45:d3: 6a:d2:3c:f4:5b:2b:d8:72:58:51:6d:2c:92:fa:66: f8:cf:fa:62:63:fd:37:5d:e4:17:e5:46:65:57:b2: 25:2a:6e:14:eb:7e:2d:fc:6f:db:7a:c5:bc:e5:9a: bd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0A:6C:C1:AE:BB:58:D4:B5:DA:61:9C:45:65:60:FF:66:33:6C:D0 X509v3 Authority Key Identifier: keyid:26:4C:FC:02:F6:71:AC:A9:2F:40:58:2E:B1:8C:DB:6C:F9:64:4F:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/Jkz8AvZxrKkvQFgusYzbbPlkT_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jkz8AvZxrKkvQFgusYzbbPlkT_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD85/A8D4AFECD0E111EB95A1FF55C4F9AE02/3DB4E04ED0E411EB9695B157C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.56.44.0/24 Signature Algorithm: sha256WithRSAEncryption 08:3e:e8:50:f0:81:22:fb:98:1a:7d:8c:64:d3:65:11:bf:73: d2:99:20:d9:61:7e:50:ab:eb:5a:bc:fc:8d:fc:b3:bc:b6:f0: f4:2f:3c:76:56:44:8a:bf:5d:ad:5e:f4:b6:9b:4a:0e:f5:30: b4:0f:07:31:5e:ac:d2:64:f4:19:24:4c:73:9d:7f:51:e4:c2: f9:e9:a1:3c:00:25:08:8f:ef:48:68:f7:31:19:08:ba:a0:37: 79:5a:b2:0d:56:dc:41:19:80:36:ff:06:66:8b:7c:01:c1:0e: 0b:c9:dd:46:4b:2c:b7:4d:44:19:45:db:a1:e9:82:70:11:95: 44:d0:51:3a:08:60:2a:df:1a:67:9d:5b:18:65:39:f8:a3:ba: 98:8f:d2:76:41:10:2d:ef:e5:ea:d0:73:df:d6:bd:53:5f:96: 89:9b:c1:29:d5:ad:b6:92:5e:4e:50:0b:d7:28:64:01:ab:49: df:ef:e7:af:8d:cc:be:0e:fd:db:7b:1a:e4:35:25:6e:1b:af: c6:2c:50:cf:77:5d:d5:0a:d1:39:92:71:4e:f3:35:04:0c:bf: 3b:4f:43:d5:a7:fe:4e:d9:e3:93:cc:a8:31:f6:0a:51:3b:04: af:a9:14:ce:69:29:83:87:cf:b5:33:76:ed:92:41:06:5b:a3: ab:14:bd:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZEODUxMTAvBgNVBAUTKDI2NENGQzAyRjY3MUFDQTkyRjQwNTgyRUIxOENEQjZD Rjk2NDRGRjUwHhcNMjQxMjA0MjMyMjEwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUwZTQyMi0zMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTVYl+sA6Zq8DCvL173/KH86XFZSf87dzx9MTq7Out92pKhXnpqLRvhfUZJY 6G2k0/P+6MQegFItLH6b3HXYaiYJG5B0s3Yjd+9VVclUxalMmuXGU2Yx5LvM1wI+ 8sAcbDXrr5j/YmoFc84FjU1gvcidqzx3fWjS/jpXQTCTYSVWbWDdaK+0kM2+8ahP O4QKfzmggqmjrEZfRfQaoMqUJWjTgO0LtpSbOuPGNqG4OoJmHioD3ZK9NUQKbLru dEumLv+Xz5CsYNhZSo4JqVy6RdNq0jz0WyvYclhRbSyS+mb4z/piY/03XeQX5UZl V7IlKm4U634t/G/besW85Zq9SQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKwKbMGu u1jUtdphnEVlYP9mM2zQMB8GA1UdIwQYMBaAFCZM/AL2caypL0BYLrGM22z5ZE/1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkQ4NS9BOEQ0QUZFQ0Qw RTExMUVCOTVBMUZGNTVDNEY5QUUwMi9Ka3o4QXZaeHJLa3ZRRmd1c1l6YmJQbGtU X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0prejhBdlp4cktrdlFGZ3VzWXpiYlBsa1RfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEZEODUvQThENEFGRUNEMEUxMTFFQjk1QTFGRjU1QzRGOUFFMDIvM0RCNEUwNEVE MEU0MTFFQjk2OTVCMTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLOCwwDQYJKoZIhvcNAQELBQADggEBAAg+6FDwgSL7mBp9 jGTTZRG/c9KZINlhflCr61q8/I38s7y28PQvPHZWRIq/Xa1e9LabSg71MLQPBzFe rNJk9BkkTHOdf1HkwvnpoTwAJQiP70ho9zEZCLqgN3lasg1W3EEZgDb/BmaLfAHB DgvJ3UZLLLdNRBlF26HpgnARlUTQUToIYCrfGmedWxhlOfijupiP0nZBEC3v5erQ c9/WvVNflombwSnVrbaSXk5QC9coZAGrSd/v56+NzL4O/dt7GuQ1JW4br8YsUM93 XdUK0TmScU7zNQQMvztPQ9Wn/k7Z45PMqDH2ClE7BK+pFM5pKYOHz7Uzdu2SQQZb o6sUvR0= -----END CERTIFICATE-----Generated at Wed Dec 11 00:45:58 2024 by rpki-client on console-fra.rpki-client.org