$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/42EBE8D08DB811E98ACC9F7EC4F9AE02.roa File: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: FSsmkLJ70j/LoQlK6EvnfSTcsUCXKKUSfAS4HphN87g= Subject key identifier: 87:4B:62:5E:BB:A9:FD:08:68:8D:01:90:64:2B:90:5F:FD:BB:75:9C Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 34E0 Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/42EBE8D08DB811E98ACC9F7EC4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:27 +0000 ROA not before: Mon 22 Jul 2024 14:40:27 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 23644 IP address blocks: 203.155.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13536 (0x34e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA Validity Not Before: Jul 22 14:40:27 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f5b-9dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:06:36:5f:3d:bb:db:6a:d3:d7:fd:01:4d: 84:ad:0d:72:ce:49:c2:80:2d:6d:0f:0a:1a:11:c1: 2d:c3:ff:3b:84:27:f1:77:21:a8:02:6e:1b:ae:e1: 80:4a:da:49:46:92:25:2b:e6:b7:b2:8a:31:20:4d: 66:c8:ad:bc:37:fa:a1:6e:9d:61:30:c8:2c:14:5d: e3:a0:9a:4f:b8:93:c9:31:90:1a:de:22:5b:77:6f: 28:f3:d5:2a:d2:90:34:53:8d:11:24:6f:2f:30:55: 86:8b:86:d7:2b:a5:b0:04:4f:0a:6f:9c:98:ad:b3: 0b:0a:74:bf:62:08:fc:20:79:8f:a9:c7:a4:aa:0b: 7b:f7:b7:87:54:f3:8d:75:73:4a:82:a8:11:2d:18: ec:69:fe:7f:74:2a:f8:44:04:4f:fd:c0:3f:26:75: 5b:98:2d:1a:be:28:19:d4:59:8d:60:63:f9:63:76: da:c4:5b:07:b3:58:ac:56:71:89:c1:f5:26:5e:cd: ed:7e:1a:7d:5e:2e:60:57:47:c5:38:a0:98:56:28: 43:04:eb:3a:09:7b:58:c3:8d:95:0c:92:f5:e6:a7: 09:e4:61:8a:f2:ea:61:22:20:fd:8b:ba:b5:ba:cd: 06:94:07:ea:38:e7:0a:be:51:82:40:3a:9c:c4:88: 62:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:62:5E:BB:A9:FD:08:68:8D:01:90:64:2B:90:5F:FD:BB:75:9C X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/42EBE8D08DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.155.238.0/24 Signature Algorithm: sha256WithRSAEncryption 15:2c:ee:a5:e8:6d:d4:7a:e7:18:ff:61:eb:77:a6:95:d9:7e: ed:6c:53:67:35:9d:2b:ff:9c:b0:b8:60:95:c2:a8:0a:06:bc: 6c:e8:ce:b6:09:32:ae:7a:3c:31:e1:35:77:42:ea:0e:98:50: bb:9d:5f:e0:58:36:1f:14:17:3c:4a:4e:35:b4:c6:d6:c9:a2: 72:df:72:8c:99:29:88:18:e8:5d:a2:e4:ce:8e:be:60:a3:46: f7:32:09:8d:6e:a6:55:78:33:ea:4c:da:d8:d9:ac:30:d6:8e: 02:13:92:2e:b6:b0:bd:aa:ac:d7:f0:b7:c1:a0:60:72:c2:80: 96:7a:bd:3d:58:da:5a:d5:0d:7c:31:76:8f:39:88:42:15:fd: eb:31:d1:5c:8c:06:02:4c:b2:91:3f:c3:5f:03:a4:79:36:74: f3:fc:f7:cd:ba:5e:7e:0c:08:db:43:4a:ca:12:d0:59:6f:ea: 27:5d:cd:58:67:61:74:5d:63:82:60:1e:ab:e0:2b:1d:55:71: 02:a0:4d:da:5f:17:95:18:f1:2e:25:a9:32:7a:92:2a:b5:fe: 77:94:46:23:45:f4:0d:a8:6b:56:cc:b1:2d:02:2c:66:6b:d4: b3:f0:ad:ee:29:42:20:27:85:6a:46:5c:25:96:d5:b6:b2:df: 8b:1f:ad:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjQwNzIyMTQ0MDI3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY1Yi05ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmAGNl89u9tq09f9AU2ErQ1yzknCgC1tDwoaEcEtw/87hCfxdyGoAm4bruGA StpJRpIlK+a3sooxIE1myK28N/qhbp1hMMgsFF3joJpPuJPJMZAa3iJbd28o89Uq 0pA0U40RJG8vMFWGi4bXK6WwBE8Kb5yYrbMLCnS/Ygj8IHmPqcekqgt797eHVPON dXNKgqgRLRjsaf5/dCr4RARP/cA/JnVbmC0avigZ1FmNYGP5Y3baxFsHs1isVnGJ wfUmXs3tfhp9Xi5gV0fFOKCYVihDBOs6CXtYw42VDJL15qcJ5GGK8uphIiD9i7q1 us0GlAfqOOcKvlGCQDqcxIhi2QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIdLYl67 qf0IaI0BkGQrkF/9u3WcMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDJFQkU4RDA4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLm+4wDQYJKoZIhvcNAQELBQADggEBABUs7qXobdR65xj/ Yet3ppXZfu1sU2c1nSv/nLC4YJXCqAoGvGzozrYJMq56PDHhNXdC6g6YULudX+BY Nh8UFzxKTjW0xtbJonLfcoyZKYgY6F2i5M6OvmCjRvcyCY1uplV4M+pM2tjZrDDW jgITki62sL2qrNfwt8GgYHLCgJZ6vT1Y2lrVDXwxdo85iEIV/esx0VyMBgJMspE/ w18DpHk2dPP89826Xn4MCNtDSsoS0Flv6iddzVhnYXRdY4JgHqvgKx1VcQKgTdpf F5UY8S4lqTJ6kiq1/neURiNF9A2oa1bMsS0CLGZr1LPwre4pQiAnhWpGXCWW1bay 34sfrV0= -----END CERTIFICATE-----Generated at Sun Feb 16 22:26:51 2025 by rpki-client