$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa File: 014A2E90BC5C11EF9108934FC4F9AE02.roa (raw, json) Hash identifier: HHG06rbqXUGTVwCC0t+f2pu30l3PoUzNu4BfvZ/sQwE= Subject key identifier: 16:29:00:B5:1A:48:DF:CC:45:CA:A5:84:64:54:7C:A9:1C:93:CB:DE Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 4A Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa Signing time: Tue 17 Dec 2024 09:48:02 +0000 ROA not before: Tue 17 Dec 2024 09:48:02 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 14618 IP address blocks: 203.0.207.0/24 maxlen: 24 203.0.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 04:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12 Validity Not Before: Dec 17 09:48:02 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=676148d1-6309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b1:06:30:21:19:b8:b3:22:28:e3:34:39:8d: 8d:c3:6b:84:53:6f:06:5f:91:aa:8a:9e:c7:b3:a1: 30:18:83:30:22:94:5f:8b:5c:2c:f2:16:2e:37:1a: 50:7d:76:19:7a:f6:b8:51:b5:92:a8:6b:d7:63:de: fd:22:f6:22:85:11:32:2d:08:62:18:39:74:5d:ae: 27:82:87:d7:06:4d:02:61:df:47:d4:2b:e7:0e:85: 0d:15:b7:99:1c:71:40:ab:56:2a:cb:07:02:69:a1: 10:d2:ef:ab:b7:0e:36:f4:97:55:ff:a0:b8:3a:72: 31:ee:d5:50:7f:57:d1:3d:1f:b8:ac:52:d5:ba:c9: a0:ca:d3:c8:d4:5c:b9:6d:c8:07:4c:b6:fb:98:bb: 15:78:42:77:f1:90:40:80:09:80:dd:0d:3e:51:f9: 9b:1f:ce:77:48:ba:66:e7:37:87:aa:d1:b7:03:f7: f0:71:2b:c2:bb:9c:58:2f:fe:05:2c:a1:83:27:8a: fc:38:74:aa:d1:fc:8a:4b:31:43:a2:49:24:a7:42: fa:18:72:15:80:f5:60:c4:cc:d0:d2:58:d6:a2:40: eb:29:dc:94:c6:c9:46:18:fc:f8:b7:4b:e7:3b:ac: 23:45:22:30:48:fc:11:8c:a6:fc:7a:fd:79:13:7b: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:29:00:B5:1A:48:DF:CC:45:CA:A5:84:64:54:7C:A9:1C:93:CB:DE X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/014A2E90BC5C11EF9108934FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.0.207.0-203.0.208.255 Signature Algorithm: sha256WithRSAEncryption 9a:bd:9e:b9:eb:fd:94:68:f2:ac:00:cd:de:91:83:7f:42:b1: a1:ae:42:1d:26:2c:aa:82:9f:a5:60:3f:18:88:38:df:43:4e: bf:bd:25:57:ff:5b:b4:fc:62:d8:56:a6:4e:56:81:d3:68:58: d6:e7:aa:87:71:8c:97:75:8b:8b:b8:cc:58:4e:12:31:81:d9: 3d:df:5d:32:8c:95:b2:cd:a7:74:af:57:aa:f6:2c:e3:7f:ab: 3d:ef:15:f7:28:e0:4d:22:c8:d5:e4:3a:13:68:bf:49:78:13: da:fd:6f:1d:56:c1:e8:3b:d5:ea:90:49:0a:c4:34:47:e9:ba: a9:64:b7:7d:96:4a:62:79:71:e8:be:49:22:00:7a:d3:f1:8a: 30:30:d3:68:e7:4b:03:a3:a7:b1:a8:5f:38:23:81:96:7d:a1: d7:74:3a:a9:4f:a0:75:20:77:4d:c6:d8:99:c8:0a:32:49:cc: 89:65:18:36:46:4c:ad:68:8b:74:1f:2c:c6:b1:b9:0a:d5:17: 6a:c8:5b:da:ea:b4:11:43:6d:27:3a:ce:5a:c4:d7:0c:39:a8: 9f:99:a1:1d:51:87:9d:cb:98:a8:55:4a:41:e0:5e:50:c7:16: b3:48:28:55:b5:af:68:f6:b1:18:bf:c5:2e:96:f3:9f:a0:72: 95:5f:88:3d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0QxMjExMC8GA1UEBRMoNUE4QjYxQkM1M0EzMjREN0EyQjRGNDE1M0QwNzc0NkVD MkEzMzVEMjAeFw0yNDEyMTcwOTQ4MDJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjE0OGQxLTYzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/sQYwIRm4syIo4zQ5jY3Da4RTbwZfkaqKnsezoTAYgzAilF+LXCzyFi43GlB9 dhl69rhRtZKoa9dj3v0i9iKFETItCGIYOXRdrieCh9cGTQJh30fUK+cOhQ0Vt5kc cUCrVirLBwJpoRDS76u3Djb0l1X/oLg6cjHu1VB/V9E9H7isUtW6yaDK08jUXLlt yAdMtvuYuxV4QnfxkECACYDdDT5R+ZsfzndIumbnN4eq0bcD9/BxK8K7nFgv/gUs oYMnivw4dKrR/IpLMUOiSSSnQvoYchWA9WDEzNDSWNaiQOsp3JTGyUYY/Pi3S+c7 rCNFIjBI/BGMpvx6/XkTe/+9AgMBAAGjggKdMIICmTAdBgNVHQ4EFgQUFikAtRpI 38xFyqWEZFR8qRyTy94wHwYDVR0jBBgwFoAUWothvFOjJNeitPQVPQd0bsKjNdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDEyL0FCODkzNEYyNTJD NDExRUY4RERGRDUzRkM0RjlBRTAyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5k SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV290aHZGT2pKTmVpdFBRVlBRZDBic0tqTmRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QxMi9BQjg5MzRGMjUyQzQxMUVGOERERkQ1M0ZDNEY5QUUwMi8wMTRBMkU5MEJD NUMxMUVGOTEwODkzNEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAnBggrBgEFBQcBBwEB/wQY MBYwFAQCAAEwDjAMAwQAywDPAwQAywDQMA0GCSqGSIb3DQEBCwUAA4IBAQCavZ65 6/2UaPKsAM3ekYN/QrGhrkIdJiyqgp+lYD8YiDjfQ06/vSVX/1u0/GLYVqZOVoHT aFjW56qHcYyXdYuLuMxYThIxgdk9310yjJWyzad0r1eq9izjf6s97xX3KOBNIsjV 5DoTaL9JeBPa/W8dVsHoO9XqkEkKxDRH6bqpZLd9lkpieXHovkkiAHrT8YowMNNo 50sDo6exqF84I4GWfaHXdDqpT6B1IHdNxtiZyAoyScyJZRg2RkytaIt0HyzGsbkK 1RdqyFva6rQRQ20nOs5axNcMOaifmaEdUYedy5ioVUpB4F5QxxazSChVta9o9rEY v8UulvOfoHKVX4g9 -----END CERTIFICATE-----Generated at Wed Feb 5 09:59:09 2025 by rpki-client