$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9DC673EE366311EEB376DC3AC4F9AE02.roa File: 9DC673EE366311EEB376DC3AC4F9AE02.roa (raw, json) Hash identifier: 2dWDYylTvBf7qUkUKq2WQpJFP4UJD1LaLQZoGDi+eMQ= Subject key identifier: 0E:F9:31:FA:43:AA:88:76:D8:DD:68:19:BD:9A:4D:9E:31:CE:76:33 Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: C7 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9DC673EE366311EEB376DC3AC4F9AE02.roa Signing time: Tue 25 Jun 2024 06:21:56 +0000 ROA not before: Tue 25 Jun 2024 06:21:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135381 IP address blocks: 161.82.175.0/24 maxlen: 24 161.82.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C Validity Not Before: Jun 25 06:21:56 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667a6204-413b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:3a:dc:86:f2:cf:af:8c:fc:83:96:44:b6: e2:99:80:9a:e8:dc:74:34:ee:13:39:7e:79:9f:32: 5a:f1:94:b8:54:16:49:43:01:16:26:7a:11:e2:bd: b8:60:6a:c3:61:22:68:9a:7b:a4:00:bd:a4:78:95: 2b:0d:e4:33:8b:95:88:19:72:7a:d0:5e:91:fd:5e: 53:98:32:fa:6a:64:d7:81:0b:b5:5a:a5:d0:e1:ea: 2c:64:64:89:84:6b:a4:c4:6f:ad:db:8b:df:db:fa: 26:95:86:5d:75:d6:0e:b9:b0:17:5a:b7:ec:f7:07: df:ae:0f:af:76:3a:33:a9:97:04:12:f9:2e:c7:02: 02:a6:d4:4c:ff:0f:a4:dc:0a:a1:2c:cf:20:24:46: 39:98:55:08:40:67:ed:d2:e0:b6:30:14:a3:6a:08: 1f:0d:6a:91:d5:61:7d:b0:5f:bf:90:12:85:da:6f: 78:3b:67:a5:db:28:4e:b9:f3:9d:a2:83:bb:e8:db: 83:fe:e0:8e:b5:24:c6:88:a4:ff:a1:e2:35:aa:bc: 92:36:69:b0:82:40:a4:dc:1a:e0:e5:3b:5b:f0:a8: 79:a4:0c:c6:c9:7d:24:32:3f:05:05:6a:72:0e:5b: 8a:5d:bf:2b:be:0f:f1:47:9c:5f:0e:36:37:01:09: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F9:31:FA:43:AA:88:76:D8:DD:68:19:BD:9A:4D:9E:31:CE:76:33 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9DC673EE366311EEB376DC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.82.175.0/24 161.82.218.0/24 Signature Algorithm: sha256WithRSAEncryption af:03:99:e9:20:0b:93:6b:98:54:52:d4:6f:5c:2f:82:72:85: 25:8f:35:cd:8b:e5:1d:6d:84:32:c0:a8:26:03:ff:1e:b2:1f: a8:d0:c0:0d:ba:9e:b9:64:ac:a4:15:fc:24:55:39:c0:48:77: b5:93:d2:e0:dc:cc:77:a6:52:5c:4c:21:7e:88:31:20:cd:04: 41:53:48:8d:60:d9:6c:cc:88:34:ff:fe:15:49:50:2b:c5:c6: fc:53:e0:96:3d:9d:80:20:a9:58:35:9e:fd:a8:34:9d:18:57: 0f:b1:c7:88:3a:09:7c:44:14:fe:99:dc:b3:5c:93:4c:b3:cd: c4:ee:f8:ac:25:95:92:52:97:fe:4a:bc:88:df:36:be:20:d2: 68:f3:81:fc:c4:64:07:58:b7:ae:22:fc:1f:b6:b5:c8:1b:dc: a6:f5:e8:f6:b5:0b:59:85:6a:a8:57:11:b0:bc:c1:fe:8f:8e: 52:5e:3d:c1:0b:17:c3:c4:04:89:3b:47:b9:3c:d7:a9:bc:cb: af:73:00:b4:cf:22:48:60:8e:9e:1b:3b:32:19:28:0b:70:a9: e2:b4:f0:67:92:05:38:ed:ad:f5:02:12:6d:fb:94:e3:74:db: 94:f3:f2:51:7a:82:ff:fc:87:08:2a:1d:88:a3:5f:b3:5a:da: d6:da:9b:10 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjQwNjI1MDYyMTU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdhNjIwNC00MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmU63Ibyz6+M/IOWRLbimYCa6Nx0NO4TOX55nzJa8ZS4VBZJQwEWJnoR4r24 YGrDYSJomnukAL2keJUrDeQzi5WIGXJ60F6R/V5TmDL6amTXgQu1WqXQ4eosZGSJ hGukxG+t24vf2/omlYZdddYOubAXWrfs9wffrg+vdjozqZcEEvkuxwICptRM/w+k 3AqhLM8gJEY5mFUIQGft0uC2MBSjaggfDWqR1WF9sF+/kBKF2m94O2el2yhOufOd ooO76NuD/uCOtSTGiKT/oeI1qrySNmmwgkCk3Brg5Ttb8Kh5pAzGyX0kMj8FBWpy DluKXb8rvg/xR5xfDjY3AQlvbwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA75MfpD qoh22N1oGb2aTZ4xznYzMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvOURDNjczRUUz NjYzMTFFRUIzNzZEQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAChUq8DBAChUtowDQYJKoZIhvcNAQELBQADggEBAK8Dmekg C5NrmFRS1G9cL4JyhSWPNc2L5R1thDLAqCYD/x6yH6jQwA26nrlkrKQV/CRVOcBI d7WT0uDczHemUlxMIX6IMSDNBEFTSI1g2WzMiDT//hVJUCvFxvxT4JY9nYAgqVg1 nv2oNJ0YVw+xx4g6CXxEFP6Z3LNck0yzzcTu+KwllZJSl/5KvIjfNr4g0mjzgfzE ZAdYt64i/B+2tcgb3Kb16Pa1C1mFaqhXEbC8wf6PjlJePcELF8PEBIk7R7k816m8 y69zALTPIkhgjp4bOzIZKAtwqeK08GeSBTjtrfUCEm37lON025Tz8lF6gv/8hwgq HYijX7Na2tbamxA= -----END CERTIFICATE-----Generated at Wed Feb 19 20:40:03 2025 by rpki-client