$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2CDC448608D811EF8DFDE781C4F9AE02.roa File: 2CDC448608D811EF8DFDE781C4F9AE02.roa (raw, json) Hash identifier: MTTFGh5YkmdwhwwN1nHMTKtVnxi1AywOBLIUbo7ublw= Subject key identifier: 6D:1D:24:42:F0:23:47:91:48:0B:37:73:E3:D2:8A:EC:4C:06:CA:1E Certificate issuer: /CN=A9179F22/serialNumber=063BAF3ED7B41071A90D9FAE410FF47888F0BEDF Certificate serial: F2 Authority key identifier: 06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2CDC448608D811EF8DFDE781C4F9AE02.roa Signing time: Thu 27 Feb 2025 06:29:45 +0000 ROA not before: Thu 27 Feb 2025 06:29:45 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 204.145.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F22 Validity Not Before: Feb 27 06:29:45 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c00659-8c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:69:de:ea:2d:7a:e4:a6:48:50:d7:f9:08: 83:e1:9d:4a:6f:7c:3d:df:6c:49:6c:f6:58:79:05: 31:af:bd:51:50:57:f5:e2:fc:9c:7c:1d:e0:d3:ea: 1a:af:67:e4:8a:88:5b:d3:5c:d8:72:7f:69:40:0c: 4c:bb:41:d4:0e:2e:7b:8e:77:0e:4f:02:89:d1:0f: 99:af:1e:9e:9f:cf:20:d6:71:6e:84:09:a8:f2:63: 43:3f:75:8c:67:08:47:f9:40:b1:b5:32:75:3d:02: 0a:88:bc:38:8f:57:a6:31:d0:c4:70:3d:29:03:8f: 38:40:c0:5a:48:9c:14:ac:61:80:2a:f1:3c:81:c7: a2:5f:00:c2:8f:ba:4f:a3:52:bf:6d:81:49:77:76: 20:ea:c4:ad:51:5d:56:69:5b:e1:be:6a:77:00:94: d7:0d:90:3d:9e:bb:c1:73:52:bb:f7:2d:be:69:d8: d6:04:dc:9e:5e:b1:ca:e2:9b:72:d1:73:5c:fc:d7: f9:d1:c4:07:cc:d9:a3:e1:05:47:de:94:b1:0b:48: a6:29:7a:f9:2e:f7:96:8b:8c:5e:52:f1:9d:df:55: 87:af:b1:20:6f:5e:e6:0b:73:0b:00:39:55:ba:7f: 1b:16:51:60:54:d5:a3:3e:6a:d7:a3:47:67:8b:6f: cd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1D:24:42:F0:23:47:91:48:0B:37:73:E3:D2:8A:EC:4C:06:CA:1E X509v3 Authority Key Identifier: keyid:06:3B:AF:3E:D7:B4:10:71:A9:0D:9F:AE:41:0F:F4:78:88:F0:BE:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BjuvPte0EHGpDZ-uQQ_0eIjwvt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F22/C6F55FA88F2F11EE9CBFD961C4F9AE02/2CDC448608D811EF8DFDE781C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 204.145.97.0/24 Signature Algorithm: sha256WithRSAEncryption a9:b8:97:9d:0b:2b:c0:4d:b4:9d:5f:d7:e9:a4:48:5c:9f:f2: 21:71:03:99:1e:05:f6:3c:fb:17:9a:42:bc:fb:8d:f9:28:08: 87:1e:88:e4:72:a1:39:b1:90:3f:1b:9b:1a:86:dc:f2:ac:6b: d5:5b:66:3f:51:db:1e:b3:e6:2c:d3:30:f9:14:8c:91:12:65: 02:fe:2a:da:a6:20:e4:85:8c:94:ea:ec:d9:18:9d:d7:79:ee: eb:18:01:89:1d:41:06:2b:6d:50:18:a1:8e:76:f2:f8:c1:80: fe:ce:e4:68:5c:d1:22:25:66:e0:61:44:8f:b6:5a:95:82:4b: 8b:14:ba:ee:50:34:3f:07:2f:21:fc:79:86:04:84:51:06:69: 9b:f8:37:14:0f:6f:f8:5b:89:6a:22:61:25:a8:b1:75:16:88: 9d:52:ff:ab:ad:b3:34:32:2b:6a:f6:3a:31:09:bb:cd:35:19: e5:00:d8:d2:0e:3f:9a:85:a7:1b:b0:d2:f5:02:23:df:5a:6a: e5:25:ac:57:09:3c:71:d6:23:dd:4f:89:33:df:5c:ff:cf:1d: 4f:7b:12:cd:ba:32:12:e2:92:15:d7:78:e4:ae:1e:b9:45:df: 79:4b:10:9d:29:e5:06:0e:ad:a5:78:3d:4a:25:1e:2d:0e:23: 39:6b:98:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGMjIxMTAvBgNVBAUTKDA2M0JBRjNFRDdCNDEwNzFBOTBEOUZBRTQxMEZGNDc4 ODhGMEJFREYwHhcNMjUwMjI3MDYyOTQ1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MwMDY1OS04YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYpp3uoteuSmSFDX+QiD4Z1Kb3w932xJbPZYeQUxr71RUFf14vycfB3g0+oa r2fkiohb01zYcn9pQAxMu0HUDi57jncOTwKJ0Q+Zrx6en88g1nFuhAmo8mNDP3WM ZwhH+UCxtTJ1PQIKiLw4j1emMdDEcD0pA484QMBaSJwUrGGAKvE8gceiXwDCj7pP o1K/bYFJd3Yg6sStUV1WaVvhvmp3AJTXDZA9nrvBc1K79y2+adjWBNyeXrHK4pty 0XNc/Nf50cQHzNmj4QVH3pSxC0imKXr5LveWi4xeUvGd31WHr7Egb17mC3MLADlV un8bFlFgVNWjPmrXo0dni2/NBQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG0dJELw I0eRSAs3c+PSiuxMBsoeMB8GA1UdIwQYMBaAFAY7rz7XtBBxqQ2frkEP9HiI8L7f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUYyMi9DNkY1NUZBODhG MkYxMUVFOUNCRkQ5NjFDNEY5QUUwMi9CanV2UHRlMEVIR3BEWi11UVFfMGVJand2 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JqdXZQdGUwRUhHcERaLXVRUV8wZUlqd3Z0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzlGMjIvQzZGNTVGQTg4RjJGMTFFRTlDQkZEOTYxQzRGOUFFMDIvMkNEQzQ0ODYw OEQ4MTFFRjhERkRFNzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADMkWEwDQYJKoZIhvcNAQELBQADggEBAKm4l50LK8BNtJ1f 1+mkSFyf8iFxA5keBfY8+xeaQrz7jfkoCIceiORyoTmxkD8bmxqG3PKsa9VbZj9R 2x6z5izTMPkUjJESZQL+KtqmIOSFjJTq7NkYndd57usYAYkdQQYrbVAYoY528vjB gP7O5Ghc0SIlZuBhRI+2WpWCS4sUuu5QND8HLyH8eYYEhFEGaZv4NxQPb/hbiWoi YSWosXUWiJ1S/6utszQyK2r2OjEJu801GeUA2NIOP5qFpxuw0vUCI99aauUlrFcJ PHHWI91PiTPfXP/PHU97Es26MhLikhXXeOSuHrlF33lLEJ0p5QYOraV4PUolHi0O IzlrmIU= -----END CERTIFICATE-----Generated at Sat Apr 5 00:00:32 2025 by rpki-client