$ rpki-client -vvf rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa File: 42D4C3BC0D0611EFA3ECB057C4F9AE02.roa (raw, json) Hash identifier: +Bi7MtB+7NPx8cFWrjp/h07cFO2J6YI/bpEdCFFKQe0= Subject key identifier: 05:A7:2A:BC:2C:FA:A4:E0:77:61:B4:B2:1B:A9:90:08:25:FF:D8:DF Certificate issuer: /CN=A9161099/serialNumber=03A02E2F5DABF0FF3938628BC4FF5FB61653F045 Certificate serial: B2 Authority key identifier: 03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa Signing time: Wed 05 Feb 2025 05:34:43 +0000 ROA not before: Wed 05 Feb 2025 05:34:43 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 14618 IP address blocks: 121.127.32.0/24 maxlen: 24 202.157.180.0/23 maxlen: 24 2401:cb60::/48 maxlen: 48 2401:cb60:1::/48 maxlen: 48 2401:cb60:2::/48 maxlen: 48 2401:cb60:3::/48 maxlen: 48 2401:cb60:4::/48 maxlen: 48 2401:cb60:5::/48 maxlen: 48 2401:cb60:6::/48 maxlen: 48 2401:cb60:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161099 Validity Not Before: Feb 5 05:34:43 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67a2f873-fc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:8d:c9:9a:62:a3:64:e3:e9:b6:38:45:f5: d8:b2:c0:59:e0:cc:4d:96:bd:a5:9a:ea:e9:e0:c2: 18:f8:3e:68:65:f1:c9:82:27:28:66:dd:71:ff:89: ba:d8:2f:94:eb:29:b9:43:63:70:7e:d1:2a:2f:e2: 82:68:45:ae:8d:ae:34:34:00:fd:c9:65:ba:cd:4b: c0:a9:26:39:b8:34:4b:b3:89:ff:7b:9b:c6:3d:86: 5c:0f:c5:f1:b7:35:83:5b:4f:ae:db:36:2b:ba:f7: 20:9b:2b:77:3e:43:38:f0:3f:63:ed:11:fc:04:5d: 8d:f5:19:99:1a:85:3d:a2:67:e8:77:43:a5:9f:ba: 68:fd:c5:7f:f1:66:7f:88:93:d6:8d:e5:d6:57:1d: 8c:14:61:6d:cd:7d:df:f5:d9:0b:c7:c5:e9:17:74: b0:8e:36:54:de:8d:6d:25:23:dc:51:c6:ef:b9:f4: 0a:12:ca:2e:eb:60:b5:69:8b:69:70:70:74:6e:a2: 31:e2:35:b2:4a:9f:02:4b:21:f2:be:33:68:4c:86: 71:d3:51:01:62:96:b2:4e:4f:d7:9d:98:4e:bb:e1: cc:7c:56:0c:8a:74:fb:a2:79:4b:f9:6c:98:42:ef: ca:d6:37:26:4b:ec:3f:21:65:9f:42:f0:ee:7b:6e: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A7:2A:BC:2C:FA:A4:E0:77:61:B4:B2:1B:A9:90:08:25:FF:D8:DF X509v3 Authority Key Identifier: keyid:03:A0:2E:2F:5D:AB:F0:FF:39:38:62:8B:C4:FF:5F:B6:16:53:F0:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/A6AuL12r8P85OGKLxP9fthZT8EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6AuL12r8P85OGKLxP9fthZT8EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161099/FD367C700D0411EF85E46F55C4F9AE02/42D4C3BC0D0611EFA3ECB057C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.127.32.0/24 202.157.180.0/23 IPv6: 2401:cb60::/45 Signature Algorithm: sha256WithRSAEncryption b7:25:99:97:2f:be:19:1d:dc:1c:5c:ad:e3:3c:c4:2e:1e:8d: 68:b5:00:1e:31:d7:fc:7c:bc:79:30:f4:32:6f:00:af:df:ea: 4f:77:dc:2b:78:76:23:c5:4f:0d:d0:7f:02:d5:9c:2d:9e:0a: 0b:97:62:ca:77:36:69:17:4d:16:c7:81:19:0c:dd:1d:81:87: ee:50:c5:44:2c:93:90:8d:ef:1a:d6:dc:d5:dd:b5:e2:a4:5b: ef:23:29:d2:2b:40:f4:ca:96:8e:a2:15:b1:6a:56:9c:b7:be: 4d:45:67:10:b2:8b:5d:76:06:37:76:16:dd:9c:72:63:0c:8d: 8c:47:ac:66:77:1f:d8:53:32:ea:ed:f6:66:9b:ee:4e:2f:2d: 60:3d:a8:05:a7:0b:03:78:2a:7a:f6:39:72:2c:ae:36:5b:e8: d3:80:06:27:98:d8:41:5d:4c:12:7e:25:fe:98:a0:b3:10:a7: e0:aa:32:f6:37:56:08:5f:34:53:e3:c7:df:23:44:b7:20:f0: 22:61:f4:ba:b8:93:2c:47:53:f4:ec:82:7e:b8:53:11:7b:0b: 09:d4:bc:3b:1a:bd:c4:26:52:ab:dc:3e:1f:81:6d:16:66:61: 0c:4e:4e:dd:9b:db:3b:06:31:5c:c6:1d:30:28:31:89:55:e8: 63:b9:99:b1 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwOTkxMTAvBgNVBAUTKDAzQTAyRTJGNURBQkYwRkYzOTM4NjI4QkM0RkY1RkI2 MTY1M0YwNDUwHhcNMjUwMjA1MDUzNDQzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyZjg3My1mYzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFaNyZpio2Tj6bY4RfXYssBZ4MxNlr2lmurp4MIY+D5oZfHJgicoZt1x/4m6 2C+U6ym5Q2NwftEqL+KCaEWuja40NAD9yWW6zUvAqSY5uDRLs4n/e5vGPYZcD8Xx tzWDW0+u2zYruvcgmyt3PkM48D9j7RH8BF2N9RmZGoU9omfod0Oln7po/cV/8WZ/ iJPWjeXWVx2MFGFtzX3f9dkLx8XpF3SwjjZU3o1tJSPcUcbvufQKEsou62C1aYtp cHB0bqIx4jWySp8CSyHyvjNoTIZx01EBYpayTk/XnZhOu+HMfFYMinT7onlL+WyY Qu/K1jcmS+w/IWWfQvDue27a7QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFAWnKrws +qTgd2G0shupkAgl/9jfMB8GA1UdIwQYMBaAFAOgLi9dq/D/OThii8T/X7YWU/BF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTA5OS9GRDM2N0M3MDBE MDQxMUVGODVFNDZGNTVDNEY5QUUwMi9BNkF1TDEycjhQODVPR0tMeFA5ZnRoWlQ4 RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2QXVMMTJyOFA4NU9HS0x4UDlmdGhaVDhFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjEwOTkvRkQzNjdDNzAwRDA0MTFFRjg1RTQ2RjU1QzRGOUFFMDIvNDJENEMzQkMw RDA2MTFFRkEzRUNCMDU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAB5fyADBAHKnbQwDwQCAAIwCQMHAyQBy2AAADANBgkqhkiG 9w0BAQsFAAOCAQEAtyWZly++GR3cHFyt4zzELh6NaLUAHjHX/Hy8eTD0Mm8Ar9/q T3fcK3h2I8VPDdB/AtWcLZ4KC5diync2aRdNFseBGQzdHYGH7lDFRCyTkI3vGtbc 1d214qRb7yMp0itA9MqWjqIVsWpWnLe+TUVnELKLXXYGN3YW3ZxyYwyNjEesZncf 2FMy6u32ZpvuTi8tYD2oBacLA3gqevY5ciyuNlvo04AGJ5jYQV1MEn4l/pigsxCn 4Koy9jdWCF80U+PH3yNEtyDwImH0uriTLEdT9OyCfrhTEXsLCdS8Oxq9xCZSq9w+ H4FtFmZhDE5O3ZvbOwYxXMYdMCgxiVXoY7mZsQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:45 2025 by rpki-client