$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa File: AEDDE1EE556B11EFA5FB1569C4F9AE02.roa (raw, json) Hash identifier: 5XjH5jYQNGqgzAYgO3kN1PD7Sd1lEpbAQIK2Gn00Jgc= Subject key identifier: A1:01:E8:70:EE:36:EF:97:A9:71:29:77:45:A6:A2:E8:1F:4D:5E:71 Certificate issuer: /CN=A9173D12/serialNumber=5A8B61BC53A324D7A2B4F4153D07746EC2A335D2 Certificate serial: 4C Authority key identifier: 5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa Signing time: Tue 17 Dec 2024 09:48:05 +0000 ROA not before: Tue 17 Dec 2024 09:48:05 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 9435 IP address blocks: 203.0.207.0/24 maxlen: 24 203.0.208.0/24 maxlen: 24 203.21.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 04:50:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173D12 Validity Not Before: Dec 17 09:48:05 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=676148d5-2592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:13:30:dc:87:cd:b6:3f:02:ca:4e:6d:08:7e: f4:51:95:ff:23:c5:8d:60:43:ea:24:bf:1e:d3:4f: ef:04:9c:de:83:3e:de:b1:1d:26:62:30:9a:62:4b: ce:5d:bb:97:1d:48:be:cc:76:4c:e0:b8:c6:9c:06: 93:8c:de:be:4b:a0:74:1b:6a:e3:4b:0b:66:73:51: 94:91:e2:df:90:34:97:6b:a8:1b:3f:7f:35:be:17: 4c:53:75:0d:49:64:3e:5f:7e:40:26:0f:6e:61:f9: 28:7d:59:81:5e:9d:9d:9f:d8:be:4e:cc:c2:d9:b4: 98:3e:74:c4:bc:22:17:ff:71:1a:cc:ad:13:01:42: 92:01:2e:44:03:d4:d3:35:96:28:0f:cc:a2:e3:a0: 0a:95:33:4c:2e:88:3b:73:b2:7d:f3:bd:8d:f8:5c: 60:45:6e:78:2d:30:d8:0c:8d:71:c9:06:71:db:82: 03:e8:f5:41:04:19:de:1f:bc:6f:55:47:83:d1:2b: 75:d0:27:ec:72:17:84:bc:d5:33:fd:e2:7d:87:b1: 4a:1f:bf:2b:03:7b:08:f8:53:b1:5f:8d:51:e1:2e: 51:06:fb:d7:e2:3f:c7:3d:fc:e2:df:7d:1b:38:dc: 52:f5:88:24:48:7c:1c:a2:2f:9d:de:96:97:45:15: e1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:01:E8:70:EE:36:EF:97:A9:71:29:77:45:A6:A2:E8:1F:4D:5E:71 X509v3 Authority Key Identifier: keyid:5A:8B:61:BC:53:A3:24:D7:A2:B4:F4:15:3D:07:74:6E:C2:A3:35:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/WothvFOjJNeitPQVPQd0bsKjNdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WothvFOjJNeitPQVPQd0bsKjNdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D12/AB8934F252C411EF8DDFD53FC4F9AE02/AEDDE1EE556B11EFA5FB1569C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.0.207.0-203.0.208.255 203.21.152.0/23 Signature Algorithm: sha256WithRSAEncryption c9:e5:93:9f:cb:8e:54:cf:33:c9:10:d2:c6:5d:90:d8:00:66: c0:95:6c:90:c9:e1:e8:4e:02:34:13:79:3e:d7:8c:f1:ee:66: 58:3f:5c:08:bc:88:b2:1d:f2:dd:a6:88:83:67:1b:7f:3a:91: 40:5b:21:f2:54:b8:6e:fb:04:42:33:8d:0b:9b:ab:ff:65:ef: e7:cb:7f:d6:8d:b8:2a:51:fc:fa:d5:1a:f3:4a:13:5b:6a:5f: 22:b4:0e:42:ea:29:28:26:c3:f9:ac:3b:94:59:c1:6e:28:dd: ab:fc:cd:a8:15:17:5f:ba:d4:ca:b9:50:8b:45:28:70:8f:6f: 8c:2e:2b:1e:5d:ce:ab:c3:ea:56:97:c0:e0:81:cb:9e:c5:97: 65:79:5e:c7:dc:34:3d:f4:87:0b:cd:a7:3a:2c:69:1a:3d:de: 9a:8d:11:bf:b2:fd:40:35:1a:bf:a8:06:84:b2:6b:21:28:42: b3:ce:03:b2:31:14:8f:2e:8d:fa:4c:e8:24:95:c9:31:d8:1f: 42:08:e6:46:e1:d5:76:b5:09:44:b5:ef:24:e8:78:2c:3c:e1: fb:18:71:a2:9f:bb:0d:5b:08:be:86:f6:95:34:af:8c:1f:01: 59:c5:ae:15:94:f8:6f:5a:c9:07:3e:23:43:7f:3d:d1:70:31: 80:8f:d4:7c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 M0QxMjExMC8GA1UEBRMoNUE4QjYxQkM1M0EzMjREN0EyQjRGNDE1M0QwNzc0NkVD MkEzMzVEMjAeFw0yNDEyMTcwOTQ4MDVaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjE0OGQ1LTI1OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqEzDch822PwLKTm0IfvRRlf8jxY1gQ+okvx7TT+8EnN6DPt6xHSZiMJpiS85d u5cdSL7MdkzguMacBpOM3r5LoHQbauNLC2ZzUZSR4t+QNJdrqBs/fzW+F0xTdQ1J ZD5ffkAmD25h+Sh9WYFenZ2f2L5OzMLZtJg+dMS8Ihf/cRrMrRMBQpIBLkQD1NM1 ligPzKLjoAqVM0wuiDtzsn3zvY34XGBFbngtMNgMjXHJBnHbggPo9UEEGd4fvG9V R4PRK3XQJ+xyF4S81TP94n2HsUofvysDewj4U7FfjVHhLlEG+9fiP8c9/OLffRs4 3FL1iCRIfByiL53elpdFFeELAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQUoQHocO42 75epcSl3Raai6B9NXnEwHwYDVR0jBBgwFoAUWothvFOjJNeitPQVPQd0bsKjNdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDEyL0FCODkzNEYyNTJD NDExRUY4RERGRDUzRkM0RjlBRTAyL1dvdGh2Rk9qSk5laXRQUVZQUWQwYnNLak5k SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV290aHZGT2pKTmVpdFBRVlBRZDBic0tqTmRJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0QxMi9BQjg5MzRGMjUyQzQxMUVGOERERkQ1M0ZDNEY5QUUwMi9BRURERTFFRTU1 NkIxMUVGQTVGQjE1NjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFDAMAwQAywDPAwQAywDQAwQByxWYMA0GCSqGSIb3DQEBCwUAA4IB AQDJ5ZOfy45UzzPJENLGXZDYAGbAlWyQyeHoTgI0E3k+14zx7mZYP1wIvIiyHfLd poiDZxt/OpFAWyHyVLhu+wRCM40Lm6v/Ze/ny3/WjbgqUfz61RrzShNbal8itA5C 6ikoJsP5rDuUWcFuKN2r/M2oFRdfutTKuVCLRShwj2+MLiseXc6rw+pWl8Dggcue xZdleV7H3DQ99IcLzac6LGkaPd6ajRG/sv1ANRq/qAaEsmshKEKzzgOyMRSPLo36 TOgklckx2B9CCOZG4dV2tQlEte8k6HgsPOH7GHGin7sNWwi+hvaVNK+MHwFZxa4V lPhvWskHPiNDfz3RcDGAj9R8 -----END CERTIFICATE-----Generated at Thu Mar 13 21:52:30 2025 by rpki-client