$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa File: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (raw, json) Hash identifier: kyaeP4GnWsbXlxCp4D/6i9NXeFHyku6R/a5qytSPkww= Subject key identifier: F0:B2:47:14:F9:8B:AC:94:61:E9:80:8F:BC:7F:23:E1:B3:1C:86:66 Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Certificate serial: 07F5 Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa Signing time: Sat 02 Mar 2024 21:59:49 +0000 ROA not before: Sat 02 Mar 2024 21:59:49 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 55707 IP address blocks: 119.63.200.0/21 maxlen: 24 202.45.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F Validity Not Before: Mar 2 21:59:49 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e3a155-22a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:43:7f:48:61:a0:49:a0:23:2d:b7:56:4b:2a: bd:25:43:72:c7:b4:e5:e5:4a:ca:7b:14:1d:ee:59: 72:04:6b:9f:22:ef:49:69:52:78:9c:ce:1c:61:7e: c0:d7:68:9c:30:6b:1c:d6:40:d3:f1:14:d8:34:f0: 7c:99:e4:05:fe:0d:be:23:7a:1b:ff:6b:d6:cb:08: d7:89:24:60:a4:75:8c:df:45:fe:05:6d:7e:74:18: fd:2a:b0:bf:72:8c:56:4d:8a:83:fb:d8:a9:b3:52: d8:6f:19:5b:a6:33:cf:c9:54:be:ff:3a:5e:c0:ea: 0e:22:ce:e1:1c:65:34:5e:a2:1f:b7:16:20:29:5c: 18:5b:1a:84:14:60:6f:d5:a9:74:35:53:df:a2:19: 1b:29:c1:4a:ba:aa:ee:eb:1c:b5:98:0a:dd:2e:45: 24:82:eb:20:32:a6:a6:81:d5:6b:7e:98:5c:83:62: d0:47:c6:fc:4a:b8:4b:6a:0c:57:85:30:34:3b:83: 1e:3b:7a:8b:84:b7:03:30:ed:87:cb:ea:c9:46:40: 47:6f:69:ce:28:08:59:03:5a:df:6d:8d:d3:44:ad: d9:09:45:73:a6:d8:d8:e1:1b:de:14:fe:eb:4a:b4: 1d:3d:e8:29:92:49:f9:5d:a2:e7:9c:63:3a:e2:9d: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B2:47:14:F9:8B:AC:94:61:E9:80:8F:BC:7F:23:E1:B3:1C:86:66 X509v3 Authority Key Identifier: keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/DFC21CD8B1CF11EAA8732709C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.63.200.0/21 202.45.152.0/22 Signature Algorithm: sha256WithRSAEncryption 23:09:cb:e7:02:ab:48:ed:73:8e:a6:ff:07:3e:55:73:57:74: 2a:d9:cc:b6:0b:e9:0d:c8:4c:0e:37:51:af:da:8f:4a:10:02: 37:08:59:bf:0d:94:36:16:3d:37:37:e6:6b:c3:b5:ce:93:5c: e1:40:0a:ae:a4:c9:6b:e4:87:a6:f7:01:d3:7b:be:93:c3:6f: 6d:b3:02:3d:86:98:6c:e4:50:9a:bf:c3:2f:a6:70:b9:db:5e: 94:cd:1f:e3:6b:9e:86:6a:49:c4:f0:42:c9:d2:ad:81:dc:67: 02:74:64:4f:22:f1:93:5a:11:44:f1:24:58:38:4d:00:98:3e: 24:6e:d3:ea:69:65:62:c7:df:55:f2:0e:98:4e:6f:c3:95:06: 71:8e:e3:db:8e:fc:38:4a:10:44:68:92:d8:3e:81:b9:98:64: a5:b8:f3:4c:df:38:2e:47:67:6c:c1:d4:3b:fa:7a:9c:52:69: 84:74:56:ce:ae:0d:55:1b:a3:4f:68:4a:f1:49:55:1a:01:9e: 37:9c:20:79:52:91:0e:bf:19:cf:0b:5a:c0:7d:a7:b6:16:27: 51:0f:81:02:4f:a6:59:57:19:98:0b:42:44:67:92:22:46:a9: 5d:d6:c9:31:c2:2f:8f:47:fa:7c:34:bc:ae:01:42:2c:74:3f: 9b:e0:3c:4e -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUyNjIxMTAvBgNVBAUTKDU1MTRGQ0U0Mzg2M0Y1MTgxQUYzNDkzODJEMzg0MTRF OTYwRjA5NkYwHhcNMjQwMzAyMjE1OTQ5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzYTE1NS0yMmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6UN/SGGgSaAjLbdWSyq9JUNyx7Tl5UrKexQd7llyBGufIu9JaVJ4nM4cYX7A 12icMGsc1kDT8RTYNPB8meQF/g2+I3ob/2vWywjXiSRgpHWM30X+BW1+dBj9KrC/ coxWTYqD+9ips1LYbxlbpjPPyVS+/zpewOoOIs7hHGU0XqIftxYgKVwYWxqEFGBv 1al0NVPfohkbKcFKuqru6xy1mArdLkUkgusgMqamgdVrfphcg2LQR8b8SrhLagxX hTA0O4MeO3qLhLcDMO2Hy+rJRkBHb2nOKAhZA1rfbY3TRK3ZCUVzptjY4RveFP7r SrQdPegpkkn5XaLnnGM64p1a7wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPCyRxT5 i6yUYemAj7x/I+GzHIZmMB8GA1UdIwQYMBaAFFUU/OQ4Y/UYGvNJOC04QU6WDwlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTI2Mi9GN0E2RDU5Q0Iw RkMxMUVBOTIyODlDNDFDNEY5QUUwMi9WUlQ4NURoajlSZ2E4MGs0TFRoQlRwWVBD VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZSVDg1RGhqOVJnYTgwazRMVGhCVHBZUENXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUyNjIvRjdBNkQ1OUNCMEZDMTFFQTkyMjg5QzQxQzRGOUFFMDIvREZDMjFDRDhC MUNGMTFFQUE4NzMyNzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAN3P8gDBALKLZgwDQYJKoZIhvcNAQELBQADggEBACMJy+cC q0jtc46m/wc+VXNXdCrZzLYL6Q3ITA43Ua/aj0oQAjcIWb8NlDYWPTc35mvDtc6T XOFACq6kyWvkh6b3AdN7vpPDb22zAj2GmGzkUJq/wy+mcLnbXpTNH+NrnoZqScTw QsnSrYHcZwJ0ZE8i8ZNaEUTxJFg4TQCYPiRu0+ppZWLH31XyDphOb8OVBnGO49uO /DhKEERoktg+gbmYZKW480zfOC5HZ2zB1Dv6epxSaYR0Vs6uDVUbo09oSvFJVRoB njecIHlSkQ6/Gc8LWsB9p7YWJ1EPgQJPpllXGZgLQkRnkiJGqV3WyTHCL49H+nw0 vK4BQix0P5vgPE4= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org