$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/FAC35354610611EFB6324A30C4F9AE02.roa File: FAC35354610611EFB6324A30C4F9AE02.roa (raw, json) Hash identifier: 3fkGbyflBIYBaEGX9UwZRIaOP3YpNHP6p1lJeAeN+Pc= Subject key identifier: 63:D6:8A:D8:AB:65:0D:72:5C:2A:6E:6D:EC:2D:28:E3:C8:1D:20:21 Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: F2 Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/FAC35354610611EFB6324A30C4F9AE02.roa Signing time: Fri 23 Aug 2024 04:20:08 +0000 ROA not before: Fri 23 Aug 2024 04:20:08 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 152727 IP address blocks: 161.82.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Feb 2025 05:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C Validity Not Before: Aug 23 04:20:08 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66c80df7-c20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:22:dd:ee:fc:4b:6b:9f:5e:49:a6:71:5a:9d: 9e:fa:c6:d8:23:07:0c:ea:4c:47:bc:5a:31:04:fb: 6b:c7:6b:4d:62:b0:3c:9f:18:e6:87:41:35:78:75: 7a:eb:84:68:87:4c:00:91:50:2e:61:9c:b0:74:46: d3:f4:73:35:86:10:16:a7:24:2b:72:7b:90:27:ab: d3:e5:dc:eb:a4:f8:22:10:9a:77:98:74:b8:5e:f9: fc:80:42:e0:5b:8f:ba:60:23:80:ca:39:70:9e:d5: b7:85:31:c3:ba:ed:4c:0b:81:51:9a:56:96:3e:95: 5d:40:d9:dc:d3:5d:4f:62:ee:93:cc:14:fd:6b:d0: 69:77:a3:20:51:54:e9:e7:ad:8c:61:be:d9:d8:da: d3:4b:be:c6:27:11:09:bc:36:3a:20:90:36:f1:e0: 50:4e:5a:ae:71:74:50:21:3d:54:da:d8:84:48:a0: d6:32:44:9f:63:3d:60:64:a3:7e:6f:a4:be:d8:ba: 10:21:7e:75:14:d8:00:c7:cf:38:4a:91:83:d6:64: 93:cf:75:25:ba:d4:d1:15:46:c3:cb:a0:f5:b3:ce: 36:fa:4a:8a:b1:21:f2:06:5e:ce:54:5f:ba:d7:97: 9f:29:d4:0e:38:3e:10:ef:f2:08:95:73:96:4c:3d: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D6:8A:D8:AB:65:0D:72:5C:2A:6E:6D:EC:2D:28:E3:C8:1D:20:21 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/FAC35354610611EFB6324A30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.82.138.0/24 Signature Algorithm: sha256WithRSAEncryption 03:c2:76:5e:2c:e6:ee:69:1b:d7:1e:33:87:dc:e2:6e:17:fc: b3:58:f9:93:ed:8a:7c:06:25:be:4b:d2:38:83:32:7b:c1:19: 8f:5a:20:3d:dc:2f:91:db:d8:1e:8e:18:c6:57:f5:07:ad:2c: e2:27:62:c3:9a:42:8d:15:26:22:b2:82:51:38:b6:1e:f1:d6: 25:c9:17:30:76:d4:7a:b8:71:63:ac:e2:58:76:2e:71:1c:cf: c6:b3:46:17:57:b4:d8:05:a0:d3:1d:dc:39:5c:b5:5b:a5:5f: a5:e2:fe:c3:3b:a4:87:87:86:71:7b:5e:4b:b3:35:d9:c2:3c: 93:7c:39:f3:7d:9a:7d:df:50:9d:c2:1d:aa:4d:0d:32:08:99: 91:b0:41:1c:65:8b:df:01:82:51:6e:47:33:19:ad:a6:47:ef: 8f:46:ba:44:48:6a:cc:56:06:87:3b:36:9a:c5:73:17:e0:29: 04:fb:a6:58:4d:67:d3:f5:bf:e9:6b:4c:1a:04:1e:1f:1b:21: 0f:fd:a6:32:bc:8f:76:3a:8d:35:b0:3a:29:59:cb:be:62:04: 3f:24:69:62:f2:d5:9d:a0:ec:82:be:46:d8:83:13:d9:36:aa: a1:d0:62:f2:a1:df:78:60:8a:4a:e4:06:65:b8:71:4d:09:3a: 09:a0:20:52 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjQwODIzMDQyMDA4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM4MGRmNy1jMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCLd7vxLa59eSaZxWp2e+sbYIwcM6kxHvFoxBPtrx2tNYrA8nxjmh0E1eHV6 64Roh0wAkVAuYZywdEbT9HM1hhAWpyQrcnuQJ6vT5dzrpPgiEJp3mHS4Xvn8gELg W4+6YCOAyjlwntW3hTHDuu1MC4FRmlaWPpVdQNnc011PYu6TzBT9a9Bpd6MgUVTp 562MYb7Z2NrTS77GJxEJvDY6IJA28eBQTlqucXRQIT1U2tiESKDWMkSfYz1gZKN+ b6S+2LoQIX51FNgAx884SpGD1mSTz3UlutTRFUbDy6D1s842+kqKsSHyBl7OVF+6 15efKdQOOD4Q7/IIlXOWTD2EpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGPWitir ZQ1yXCpubewtKOPIHSAhMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvRkFDMzUzNTQ2 MTA2MTFFRkI2MzI0QTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAChUoowDQYJKoZIhvcNAQELBQADggEBAAPCdl4s5u5pG9ce M4fc4m4X/LNY+ZPtinwGJb5L0jiDMnvBGY9aID3cL5Hb2B6OGMZX9QetLOInYsOa Qo0VJiKyglE4th7x1iXJFzB21Hq4cWOs4lh2LnEcz8azRhdXtNgFoNMd3DlctVul X6Xi/sM7pIeHhnF7XkuzNdnCPJN8OfN9mn3fUJ3CHapNDTIImZGwQRxli98BglFu RzMZraZH749GukRIasxWBoc7NprFcxfgKQT7plhNZ9P1v+lrTBoEHh8bIQ/9pjK8 j3Y6jTWwOilZy75iBD8kaWLy1Z2g7IK+RtiDE9k2qqHQYvKh33hgikrkBmW4cU0J OgmgIFI= -----END CERTIFICATE-----Generated at Wed Feb 19 20:42:26 2025 by rpki-client