$ rpki-client -vvf rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/01804686B48E11EF81F55F3CC4F9AE02.roa File: 01804686B48E11EF81F55F3CC4F9AE02.roa (raw, json) Hash identifier: DZexhviKSVjUz0wtVaAtdHsphj1mTjOP+0tLYZS1w4g= Subject key identifier: C7:B0:F7:34:0F:38:9F:24:47:92:7E:2D:A9:D7:BC:17:90:DE:19:89 Certificate issuer: /CN=A9199885/serialNumber=438D823EC3344B4BF1C99E11DE0F56F842EFD98E Certificate serial: 2077 Authority key identifier: 43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/01804686B48E11EF81F55F3CC4F9AE02.roa Signing time: Fri 31 Jan 2025 15:20:50 +0000 ROA not before: Fri 31 Jan 2025 15:20:50 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 14618 IP address blocks: 203.34.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Feb 2025 14:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8311 (0x2077) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199885 Validity Not Before: Jan 31 15:20:50 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679cea51-796d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:11:0c:c4:ce:dc:52:42:34:b6:39:6d:9a: c3:f5:95:df:4c:80:44:2c:2b:20:e3:7a:7c:a6:04: 58:61:c2:fe:a7:39:6c:e2:29:79:0b:74:64:e2:74: 22:aa:aa:d4:20:62:31:d1:25:82:e1:73:01:e8:fc: d8:3c:02:f7:18:a0:01:6a:25:ab:46:2f:a9:2f:89: 29:a3:1d:ef:8d:cc:2b:06:b4:d0:08:ed:8e:e1:b9: e0:31:7d:6e:37:5e:85:bd:7b:02:f8:3c:ef:c1:e9: 6d:cd:46:f8:cc:0a:f7:38:fc:84:5f:7b:c7:e3:c3: 69:9c:31:b0:1f:f7:33:14:9b:9c:06:7c:8e:46:6e: 89:f6:9b:28:47:ab:30:19:25:24:a2:dc:65:67:7b: ed:41:3c:03:6d:20:92:c4:2c:cb:a2:ba:e1:2c:37: 79:99:96:13:b3:a1:98:eb:d2:71:4a:56:3b:49:91: cd:5e:56:2b:9b:15:a2:e1:fd:7c:70:51:c4:99:cf: 49:5e:5e:9d:5a:89:99:e5:99:52:4f:06:5b:64:31: d2:24:36:e4:df:6b:97:c6:e7:c5:4c:d0:0e:92:55: ac:68:d4:ed:51:11:1e:6a:08:af:52:cf:84:e5:3d: 17:eb:7c:bf:37:52:a1:66:43:5d:86:aa:e9:e4:92: d1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B0:F7:34:0F:38:9F:24:47:92:7E:2D:A9:D7:BC:17:90:DE:19:89 X509v3 Authority Key Identifier: keyid:43:8D:82:3E:C3:34:4B:4B:F1:C9:9E:11:DE:0F:56:F8:42:EF:D9:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q42CPsM0S0vxyZ4R3g9W-ELv2Y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199885/D050685A1D9811E2AE6B1F8308B02CD2/01804686B48E11EF81F55F3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.34.100.0/24 Signature Algorithm: sha256WithRSAEncryption 65:64:f7:41:34:ed:25:2a:6c:85:f2:4f:15:d8:39:8f:94:2d: 97:9d:37:7f:ba:bd:cb:5c:c1:9d:01:43:8e:32:26:9a:39:70: f4:18:ce:ad:1c:cd:62:6e:a3:f9:48:d3:f4:66:f6:81:8d:0d: 04:a7:9f:3f:6a:7c:fa:ee:8e:c1:60:62:c5:d3:f7:fd:a1:80: 41:5a:b7:f4:8e:d4:c6:50:4c:b8:a4:50:36:d1:a9:0b:ba:41: 38:cd:31:6d:6c:99:6c:00:73:c7:e6:4c:95:96:c5:59:19:d1: 3e:8e:36:f9:fb:14:10:eb:79:0d:3f:35:0a:ff:d6:1a:39:04: a4:c2:6e:73:eb:11:92:5d:03:06:ce:9d:c6:02:8a:69:0d:22: 88:9a:49:3f:f3:e3:5f:6f:a2:21:fe:d1:15:b6:22:7c:33:0f: 54:54:c7:1e:50:58:cc:31:59:8d:bd:86:90:8d:81:ce:54:3b: 8c:ce:bc:38:0f:af:c5:00:d5:e0:73:00:72:0d:81:9c:f6:56: f2:97:75:70:71:09:fd:ca:b1:fe:1d:28:f7:14:f3:76:95:bc: b2:52:b4:1e:d4:e0:e1:fd:90:f7:fb:cb:80:f8:38:59:12:a5: c1:ac:74:5e:79:77:de:9a:36:87:b6:04:86:60:b7:b4:08:5d: 57:04:99:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICIHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4ODUxMTAvBgNVBAUTKDQzOEQ4MjNFQzMzNDRCNEJGMUM5OUUxMURFMEY1NkY4 NDJFRkQ5OEUwHhcNMjUwMTMxMTUyMDUwWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljZWE1MS03OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g8RDMTO3FJCNLY5bZrD9ZXfTIBELCsg43p8pgRYYcL+pzls4il5C3Rk4nQi qqrUIGIx0SWC4XMB6PzYPAL3GKABaiWrRi+pL4kpox3vjcwrBrTQCO2O4bngMX1u N16FvXsC+DzvweltzUb4zAr3OPyEX3vH48NpnDGwH/czFJucBnyORm6J9psoR6sw GSUkotxlZ3vtQTwDbSCSxCzLorrhLDd5mZYTs6GY69JxSlY7SZHNXlYrmxWi4f18 cFHEmc9JXl6dWomZ5ZlSTwZbZDHSJDbk32uXxufFTNAOklWsaNTtUREeagivUs+E 5T0X63y/N1KhZkNdhqrp5JLRPQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMew9zQP OJ8kR5J+LanXvBeQ3hmJMB8GA1UdIwQYMBaAFEONgj7DNEtL8cmeEd4PVvhC79mO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg4NS9EMDUwNjg1QTFE OTgxMUUyQUU2QjFGODMwOEIwMkNEMi9RNDJDUHNNMFMwdnh5WjRSM2c5Vy1FTHYy WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E0MkNQc00wUzB2eHlaNFIzZzlXLUVMdjJZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTk4ODUvRDA1MDY4NUExRDk4MTFFMkFFNkIxRjgzMDhCMDJDRDIvMDE4MDQ2ODZC NDhFMTFFRjgxRjU1RjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLImQwDQYJKoZIhvcNAQELBQADggEBAGVk90E07SUqbIXy TxXYOY+ULZedN3+6vctcwZ0BQ44yJpo5cPQYzq0czWJuo/lI0/Rm9oGNDQSnnz9q fPrujsFgYsXT9/2hgEFat/SO1MZQTLikUDbRqQu6QTjNMW1smWwAc8fmTJWWxVkZ 0T6ONvn7FBDreQ0/NQr/1ho5BKTCbnPrEZJdAwbOncYCimkNIoiaST/z419voiH+ 0RW2InwzD1RUxx5QWMwxWY29hpCNgc5UO4zOvDgPr8UA1eBzAHINgZz2VvKXdXBx Cf3Ksf4dKPcU83aVvLJStB7U4OH9kPf7y4D4OFkSpcGsdF55d96aNoe2BIZgt7QI XVcEmT0= -----END CERTIFICATE-----Generated at Wed Feb 5 09:46:38 2025 by rpki-client