$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/C013D3A4B2B511EF81703019C4F9AE02.roa File: C013D3A4B2B511EF81703019C4F9AE02.roa (raw, json) Hash identifier: slFLF/nNcRmvVbWzDwxxPzlcrLH2s/Zde9GjVjPqlO0= Subject key identifier: DE:94:62:1C:6D:25:FA:62:5D:22:CD:D2:34:BB:FE:5E:E1:25:26:E7 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 07CC Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/C013D3A4B2B511EF81703019C4F9AE02.roa Signing time: Thu 05 Dec 2024 03:05:15 +0000 ROA not before: Thu 05 Dec 2024 03:05:15 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 55933 IP address blocks: 114.134.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 22:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F Validity Not Before: Dec 5 03:05:15 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=6751186b-78c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:88:0e:d1:56:f0:cf:ae:23:4d:c0:34:3c:d6: a0:c6:1d:de:97:d4:0e:4a:ed:b8:18:fe:ba:f5:a2: 09:c0:26:08:63:22:3c:0b:c3:40:2d:a5:03:df:f0: 5f:b0:82:04:85:f6:f9:76:2a:fe:a5:da:ec:f8:1c: 56:61:93:c6:b9:6c:ff:d9:29:d6:ea:ed:b6:08:93: 92:34:4d:93:e3:13:51:3e:33:dc:cb:1e:bf:63:52: a0:39:5d:88:93:84:f5:af:c5:20:f4:89:9f:aa:4d: cf:88:47:96:b1:ef:fd:27:4e:54:a2:00:62:a4:48: bf:f5:77:90:59:ea:54:fd:0e:44:a2:89:aa:35:23: ac:93:3e:10:a6:2d:8d:37:11:79:53:41:f5:7b:e2: 60:5f:0d:6f:21:7d:19:07:81:7c:85:04:da:3b:02: 31:eb:d9:fc:c6:f6:0a:ea:33:69:c8:e4:46:cc:b2: 3e:2d:9e:bc:3d:dc:59:70:8d:7b:f0:ee:64:46:e9: 0d:8a:98:24:99:8e:b5:9b:f9:cd:ab:c8:e7:16:fb: b5:5a:bf:2b:36:8e:08:41:c0:32:f4:ca:2a:88:08: 3d:b5:8a:56:c5:3c:89:39:d9:2a:8f:92:d2:22:2b: a3:66:f2:11:58:63:03:26:28:31:84:f8:e6:cb:55: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:94:62:1C:6D:25:FA:62:5D:22:CD:D2:34:BB:FE:5E:E1:25:26:E7 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/C013D3A4B2B511EF81703019C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.134.188.0/24 Signature Algorithm: sha256WithRSAEncryption b5:44:00:cc:bc:37:ef:c3:8a:f2:69:6c:4b:a5:d2:e7:d8:b2: b2:bc:fb:dd:84:ac:bb:d9:40:ee:a2:3d:29:0b:62:85:4b:64: 87:ec:23:5b:87:1b:f6:6b:f1:e4:c5:47:ed:45:8c:83:05:98: 2b:50:07:9f:bd:ee:a4:46:27:5b:ac:62:98:3a:b5:32:88:47: c9:6e:34:b9:4c:3e:b4:9a:0d:f7:a5:fd:1c:e3:ad:5c:14:36: 0e:9c:d8:c8:df:4f:66:28:a4:cd:25:aa:53:2e:18:4a:71:54: f7:8e:cf:fc:3a:1b:8d:95:c4:7d:ee:90:29:b7:41:9e:fa:60: 88:e0:6c:cb:96:e4:c9:f2:29:ed:bb:58:1e:1a:84:3f:88:f4: 88:d8:aa:d3:4a:7a:55:60:f0:e2:e7:cc:cf:2d:4e:89:20:e0: 66:1c:c0:d9:39:ea:97:64:62:5d:c9:2a:e7:9d:9b:a0:3b:69: e5:18:c3:82:64:64:08:86:2a:b7:72:0e:60:5e:7b:93:a3:87: a0:1a:32:f4:32:44:f1:0f:fb:3e:3d:49:b5:fb:18:d1:db:21: 2f:53:94:fa:a1:7a:b3:71:98:ed:36:27:60:e2:20:25:e8:52: 5e:d6:31:de:82:74:5d:c6:46:0e:11:60:1c:77:6a:95:69:84: e2:b3:11:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjQxMjA1MDMwNTE1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzUxMTg2Yi03OGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ogO0Vbwz64jTcA0PNagxh3el9QOSu24GP669aIJwCYIYyI8C8NALaUD3/Bf sIIEhfb5dir+pdrs+BxWYZPGuWz/2SnW6u22CJOSNE2T4xNRPjPcyx6/Y1KgOV2I k4T1r8Ug9Imfqk3PiEeWse/9J05UogBipEi/9XeQWepU/Q5EoomqNSOskz4Qpi2N NxF5U0H1e+JgXw1vIX0ZB4F8hQTaOwIx69n8xvYK6jNpyORGzLI+LZ68PdxZcI17 8O5kRukNipgkmY61m/nNq8jnFvu1Wr8rNo4IQcAy9MoqiAg9tYpWxTyJOdkqj5LS IiujZvIRWGMDJigxhPjmy1Wm4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFN6UYhxt JfpiXSLN0jS7/l7hJSbnMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvQzAxM0QzQTRC MkI1MTFFRjgxNzAzMDE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAByhrwwDQYJKoZIhvcNAQELBQADggEBALVEAMy8N+/DivJp bEul0ufYsrK8+92ErLvZQO6iPSkLYoVLZIfsI1uHG/Zr8eTFR+1FjIMFmCtQB5+9 7qRGJ1usYpg6tTKIR8luNLlMPrSaDfel/RzjrVwUNg6c2MjfT2YopM0lqlMuGEpx VPeOz/w6G42VxH3ukCm3QZ76YIjgbMuW5MnyKe27WB4ahD+I9IjYqtNKelVg8OLn zM8tTokg4GYcwNk56pdkYl3JKuedm6A7aeUYw4JkZAiGKrdyDmBee5Ojh6AaMvQy RPEP+z49SbX7GNHbIS9TlPqherNxmO02J2DiICXoUl7WMd6CdF3GRg4RYBx3apVp hOKzEYQ= -----END CERTIFICATE-----Generated at Wed Feb 19 21:58:38 2025 by rpki-client