$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa File: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (raw, json) Hash identifier: CYb1AUfDdwBmZIiw43Uzz4pNurCcroPrczZ8tZZSS/s= Subject key identifier: 63:73:3B:18:0B:73:DF:0E:4A:1E:6C:AE:55:D7:16:72:BA:22:DB:02 Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 0408 Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa Signing time: Wed 18 Dec 2024 11:07:24 +0000 ROA not before: Wed 18 Dec 2024 11:07:24 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 202656 IP address blocks: 203.32.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Feb 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1032 (0x408) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75 Validity Not Before: Dec 18 11:07:24 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6762acec-8d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:ba:05:33:d2:d3:f4:d9:05:b4:4b:d3:d8: ea:a4:35:b7:ed:6a:10:3a:92:9a:1a:a0:8d:07:36: f2:95:5e:c5:2f:7c:32:b1:ff:34:d3:05:57:0e:60: 25:f0:6e:40:55:0c:83:89:7d:e6:5a:a9:64:84:5e: 1b:99:9e:87:b9:c2:44:0d:47:e3:d9:9d:17:20:98: d3:31:f2:1d:ee:2b:e8:25:4c:83:97:39:73:a0:35: 94:08:66:6b:14:6f:05:08:54:51:8e:25:cf:ac:0f: 87:a2:7c:76:24:d4:bb:44:d2:41:96:2b:a8:58:24: 38:18:60:7b:63:d2:14:3b:fa:db:eb:fe:b7:a2:ba: f6:53:7a:4e:20:c4:0f:57:23:f6:c2:f7:b8:00:a8: d1:48:3a:4a:73:f7:e3:7b:7d:38:da:34:8d:b2:b3: bb:38:23:39:82:74:44:bd:e0:86:5d:58:cd:5e:3d: a1:bf:9f:5c:d1:ea:48:b9:7b:82:24:4f:da:81:61: ed:d0:0e:f6:e6:c8:50:06:94:24:c5:59:57:39:d9: 9a:34:b7:07:86:af:57:89:b0:39:83:5b:de:0b:58: 7f:9a:a4:bf:52:e3:49:10:72:72:cc:42:58:03:e8: f0:57:86:28:b2:b3:9a:0e:88:7d:09:22:ba:2d:f3: de:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:73:3B:18:0B:73:DF:0E:4A:1E:6C:AE:55:D7:16:72:BA:22:DB:02 X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/423DBDA2BD3011EFBEFB5F49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.32.23.0/24 Signature Algorithm: sha256WithRSAEncryption 84:29:1e:f6:5d:67:71:89:27:d4:34:d0:f7:ac:12:a8:ab:7b: 17:c0:ed:e6:4b:ec:65:0c:3f:ce:d4:88:39:d1:92:72:23:31: da:26:cd:5e:d2:76:37:ee:31:be:37:fa:fa:3f:e2:1a:a8:98: 3f:db:d6:62:7b:f0:7a:ba:b4:f3:56:8b:8b:03:a2:94:1a:75: b3:4a:13:47:bb:6b:4e:1d:7f:6d:ea:73:74:15:4d:b5:87:e0: a5:f7:a8:12:fa:ce:c6:04:eb:32:de:e9:7e:b3:3a:bc:8f:b7: ac:a3:68:06:d8:2e:29:c9:b3:a1:cb:9e:a0:6e:fb:78:70:10: 4e:0a:3a:e2:49:4a:98:63:2b:31:5a:4f:5b:8f:69:23:39:94: 70:76:40:2f:2f:85:bd:f4:03:83:25:59:dc:b3:f7:5c:f1:5a: 37:3c:95:a0:13:14:cb:45:6b:a6:50:0b:57:a9:cf:d5:eb:ab: 3d:17:a0:ea:11:67:9f:c5:f3:1a:e4:51:e0:a8:ff:78:8b:41: 40:7e:ca:99:05:12:ca:12:bc:23:40:24:f6:ee:f6:32:3b:9d: 39:5b:8a:a6:61:75:3f:47:95:9d:9f:06:e6:b1:f0:27:65:e0: 78:ac:35:58:ba:e8:3c:2e:e9:d0:d6:e7:11:f7:d2:c2:3a:cd: fd:b7:66:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjQxMjE4MTEwNzI0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzYyYWNlYy04ZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx526BTPS0/TZBbRL09jqpDW37WoQOpKaGqCNBzbylV7FL3wysf800wVXDmAl 8G5AVQyDiX3mWqlkhF4bmZ6HucJEDUfj2Z0XIJjTMfId7ivoJUyDlzlzoDWUCGZr FG8FCFRRjiXPrA+Honx2JNS7RNJBliuoWCQ4GGB7Y9IUO/rb6/63orr2U3pOIMQP VyP2wve4AKjRSDpKc/fje3042jSNsrO7OCM5gnREveCGXVjNXj2hv59c0epIuXuC JE/agWHt0A725shQBpQkxVlXOdmaNLcHhq9XibA5g1veC1h/mqS/UuNJEHJyzEJY A+jwV4YosrOaDoh9CSK6LfPeoQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGNzOxgL c98OSh5srlXXFnK6ItsCMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvNDIzREJEQTJC RDMwMTFFRkJFRkI1RjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLIBcwDQYJKoZIhvcNAQELBQADggEBAIQpHvZdZ3GJJ9Q0 0PesEqirexfA7eZL7GUMP87UiDnRknIjMdomzV7SdjfuMb43+vo/4hqomD/b1mJ7 8Hq6tPNWi4sDopQadbNKE0e7a04df23qc3QVTbWH4KX3qBL6zsYE6zLe6X6zOryP t6yjaAbYLinJs6HLnqBu+3hwEE4KOuJJSphjKzFaT1uPaSM5lHB2QC8vhb30A4Ml Wdyz91zxWjc8laATFMtFa6ZQC1epz9Xrqz0XoOoRZ5/F8xrkUeCo/3iLQUB+ypkF EsoSvCNAJPbu9jI7nTlbiqZhdT9HlZ2fBuax8Cdl4HisNVi66Dwu6dDW5xH30sI6 zf23Zic= -----END CERTIFICATE-----Generated at Wed Feb 5 12:57:05 2025 by rpki-client