$ rpki-client -vvf rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/C92F5F8077A211EDAF94D63EC4F9AE02.roa File: C92F5F8077A211EDAF94D63EC4F9AE02.roa (raw, json) Hash identifier: XEVDVSbkGW1XL4im1YgJ/xk7H57wudyi6662QWrqYro= Subject key identifier: 45:09:FB:E1:82:FB:C5:27:F9:AB:CC:7A:3A:55:7E:12:C5:F5:60:58 Certificate issuer: /CN=A9171753/serialNumber=A66DD010DA24DF8AE1706BD908CBA43BD1389631 Certificate serial: 339C Authority key identifier: A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/C92F5F8077A211EDAF94D63EC4F9AE02.roa Signing time: Fri 16 Feb 2024 15:41:10 +0000 ROA not before: Fri 16 Feb 2024 15:41:10 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 396982 IP address blocks: 45.113.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13212 (0x339c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171753 Validity Not Before: Feb 16 15:41:10 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65cf8216-62fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:5f:00:35:a1:41:5d:6f:c6:cf:a2:16:dc: 96:ea:9c:6c:4d:64:8a:c7:1f:87:9f:3d:30:34:9c: c0:d2:94:e2:8c:cc:c1:ba:de:c5:38:d6:7d:a8:90: 17:64:1d:56:6c:43:7d:08:8e:e6:30:4b:75:82:3e: 17:ec:c9:65:42:05:ed:4a:16:bd:5a:97:48:88:6b: 17:20:05:92:06:a8:48:b2:fa:85:7d:da:05:c2:9b: d6:f7:20:d4:4c:2f:6d:19:2b:60:86:ce:59:7d:d7: 94:5a:ba:a6:27:b8:84:fb:15:e7:d1:ae:53:54:22: 85:1e:6a:ac:5b:28:de:d9:f5:29:07:79:a1:c6:01: c1:f5:ca:93:36:ff:eb:f5:fc:d7:01:5d:9e:84:37: b6:6b:d4:4e:4a:47:35:ee:f1:a2:dc:82:11:d7:19: f4:df:27:05:dd:9a:f3:a6:ae:44:7a:25:d2:7d:a9: 50:f1:33:a4:6c:97:04:34:3a:63:9a:79:c4:15:6a: a0:b5:77:a0:e1:03:fc:2d:32:e3:ca:03:8b:a7:70: 73:65:a3:bf:64:cf:e3:ce:08:25:22:8f:4e:01:48: 2d:cf:fe:c5:eb:84:f6:c2:89:46:66:f1:5d:5c:c1: 73:7e:ca:0c:d4:55:25:03:ee:15:ae:2d:0e:a4:61: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:09:FB:E1:82:FB:C5:27:F9:AB:CC:7A:3A:55:7E:12:C5:F5:60:58 X509v3 Authority Key Identifier: keyid:A6:6D:D0:10:DA:24:DF:8A:E1:70:6B:D9:08:CB:A4:3B:D1:38:96:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/pm3QENok34rhcGvZCMukO9E4ljE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pm3QENok34rhcGvZCMukO9E4ljE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171753/805145901DA711E2AAA94AA108B02CD2/C92F5F8077A211EDAF94D63EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.123.0/24 Signature Algorithm: sha256WithRSAEncryption a6:34:f3:23:97:26:8b:1c:a4:8b:d7:f8:f7:11:56:ee:d0:01: d8:5b:30:a5:46:da:4d:26:36:9e:08:8f:30:20:7f:a7:c0:ad: e8:bd:25:77:1f:8a:24:61:4a:c7:1c:d0:98:de:c5:7c:02:50: 08:74:1d:12:00:c6:de:b3:cf:d1:99:e9:f7:31:47:32:f7:10: 8c:af:e1:11:12:de:74:1c:09:7b:6e:ef:58:13:45:09:c2:b7: ad:f4:ac:52:cf:ad:b3:ca:29:06:1a:28:8f:ac:27:ee:c1:26: bc:02:b8:86:76:44:26:01:eb:c9:e0:c4:da:d7:2e:ad:f0:a8: cc:7d:eb:b7:b5:dc:cb:8e:4a:3c:8c:38:74:bd:3c:f8:23:48: 29:eb:5b:95:de:6a:a8:9e:18:4b:fc:36:b2:46:9a:a6:79:33: 0d:55:bf:89:c3:3d:8a:01:04:0b:d3:a8:fb:41:84:8a:ad:84: df:15:72:f6:7c:b1:7d:d9:3e:0a:42:7d:6a:fe:23:9b:e8:cd: 50:80:58:fa:a1:db:de:60:e7:ba:33:db:12:24:4c:e1:75:92: 24:56:7e:89:1f:fe:be:90:04:87:11:a9:26:2c:bf:ba:aa:2b: 0e:2b:fa:f5:f3:f5:ae:aa:9b:db:ae:7e:b2:28:5f:d4:6d:c8: 12:95:49:8c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3NTMxMTAvBgNVBAUTKEE2NkREMDEwREEyNERGOEFFMTcwNkJEOTA4Q0JBNDNC RDEzODk2MzEwHhcNMjQwMjE2MTU0MTEwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNmODIxNi02MmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7NfADWhQV1vxs+iFtyW6pxsTWSKxx+Hnz0wNJzA0pTijMzBut7FONZ9qJAX ZB1WbEN9CI7mMEt1gj4X7MllQgXtSha9WpdIiGsXIAWSBqhIsvqFfdoFwpvW9yDU TC9tGStghs5ZfdeUWrqmJ7iE+xXn0a5TVCKFHmqsWyje2fUpB3mhxgHB9cqTNv/r 9fzXAV2ehDe2a9ROSkc17vGi3IIR1xn03ycF3Zrzpq5EeiXSfalQ8TOkbJcENDpj mnnEFWqgtXeg4QP8LTLjygOLp3BzZaO/ZM/jzgglIo9OAUgtz/7F64T2wolGZvFd XMFzfsoM1FUlA+4Vri0OpGEhAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEUJ++GC +8Un+avMejpVfhLF9WBYMB8GA1UdIwQYMBaAFKZt0BDaJN+K4XBr2QjLpDvROJYx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTc1My84MDUxNDU5MDFE QTcxMUUyQUFBOTRBQTEwOEIwMkNEMi9wbTNRRU5vazM0cmhjR3ZaQ011a085RTRs akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BtM1FFTm9rMzRyaGNHdlpDTXVrTzlFNGxqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE3NTMvODA1MTQ1OTAxREE3MTFFMkFBQTk0QUExMDhCMDJDRDIvQzkyRjVGODA3 N0EyMTFFREFGOTRENjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtcXswDQYJKoZIhvcNAQELBQADggEBAKY08yOXJoscpIvX +PcRVu7QAdhbMKVG2k0mNp4IjzAgf6fArei9JXcfiiRhSscc0JjexXwCUAh0HRIA xt6zz9GZ6fcxRzL3EIyv4RES3nQcCXtu71gTRQnCt630rFLPrbPKKQYaKI+sJ+7B JrwCuIZ2RCYB68ngxNrXLq3wqMx967e13MuOSjyMOHS9PPgjSCnrW5XeaqieGEv8 NrJGmqZ5Mw1Vv4nDPYoBBAvTqPtBhIqthN8VcvZ8sX3ZPgpCfWr+I5vozVCAWPqh 295g57oz2xIkTOF1kiRWfokf/r6QBIcRqSYsv7qqKw4r+vXz9a6qm9uufrIoX9Rt yBKVSYw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:59 2025 by rpki-client