$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8BF60AF817DC11EE959DE671C4F9AE02.roa File: 8BF60AF817DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: 3x6ekPxI+IopTeHMSR1YdR9rYnn+GifIH1Lr1X+wUd8= Subject key identifier: CE:4C:FF:2A:5C:EB:85:F7:68:20:B6:A9:06:F0:FD:3D:23:5B:AF:1D Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0AF0 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8BF60AF817DC11EE959DE671C4F9AE02.roa Signing time: Mon 04 Dec 2023 20:08:13 +0000 ROA not before: Mon 04 Dec 2023 20:08:13 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 65001 IP address blocks: 202.188.30.0/24 maxlen: 24 202.188.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Dec 4 20:08:13 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656e31ad-5aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:57:4c:28:cb:27:51:8b:a9:ba:50:2c:ff:6b: 24:81:c1:df:4f:43:a1:67:9c:be:a7:30:34:ad:0a: 9c:92:6e:45:01:0c:ff:94:68:a4:64:43:3a:a8:8f: c8:8a:57:23:dc:65:c2:4c:29:59:34:8c:26:f8:b6: 04:96:56:77:05:13:e1:21:42:7d:34:dd:f0:c9:3f: 5b:86:37:c1:41:d8:0d:11:7c:27:37:71:90:3b:73: 7b:f0:2f:af:75:cc:28:47:07:1a:5a:dc:7b:05:18: 18:c6:ef:f7:f1:1e:4f:68:1f:6f:74:aa:2d:b6:27: 03:34:65:a4:05:97:6e:d4:47:b4:fd:90:99:2b:a4: 0e:8c:a2:01:e5:a3:9f:a6:6b:1a:c1:79:ab:eb:2f: 18:78:20:92:0f:66:75:e9:e9:f9:3d:75:82:1f:47: ab:0d:69:d3:8a:58:02:d3:e9:b9:69:88:ed:08:ee: 82:cd:ce:01:b8:47:08:b6:74:44:f0:6b:4d:73:e5: 8e:0d:17:d8:5a:aa:3e:10:0d:25:3a:c1:44:ef:1c: 80:2e:71:52:07:9e:4e:12:75:81:d8:3c:83:fc:ec: 96:4d:87:23:d0:73:f8:6d:ea:61:02:b3:33:7e:61: cb:27:a7:99:64:37:9d:38:53:35:66:c3:3c:a5:07: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4C:FF:2A:5C:EB:85:F7:68:20:B6:A9:06:F0:FD:3D:23:5B:AF:1D X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8BF60AF817DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.188.30.0/24 202.188.245.0/24 Signature Algorithm: sha256WithRSAEncryption 72:91:20:ac:a1:55:c3:7c:34:63:5d:b5:a9:8b:1c:cf:d7:40: 6b:ad:1e:08:59:78:66:eb:6f:35:d3:7b:2a:5d:71:5f:10:4d: c3:3c:4a:e5:0e:7f:22:40:29:47:9f:fc:22:b8:0a:12:37:e3: 51:3a:30:89:d3:c8:c0:d1:6c:76:4f:dc:a6:a7:ee:64:6d:ab: 19:47:9c:49:6b:a5:15:43:64:79:cf:ce:25:e0:f9:83:e9:a0: 97:f7:8d:9b:9f:ff:9f:9f:42:c2:0d:ed:f1:1b:cc:48:2e:b5: 0f:2d:3c:69:0a:9c:98:0b:4d:57:72:61:7a:6d:79:cf:0e:9f: 8f:06:96:1b:6c:92:7c:67:62:e8:5e:4a:50:32:42:75:4a:fd: 54:0b:bd:9f:fa:e8:f9:8d:56:e7:de:d3:cf:7f:84:62:1b:ea: 1f:03:2e:7b:5a:42:3a:61:25:0c:8b:f0:a6:b4:fc:01:16:94: fb:26:87:93:19:fe:f4:76:4c:e5:7e:48:fd:2a:76:9b:5e:01: bc:55:7b:36:96:05:90:8e:51:80:4e:92:32:f7:e7:24:a1:58: a7:14:7e:9a:0a:13:f1:34:bf:69:30:a6:fd:3a:c0:15:dc:89: 16:d7:62:53:65:13:cd:d7:64:22:d4:be:2e:28:6b:26:94:5d: 3a:b8:59:35 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjMxMjA0MjAwODEzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMzFhZC01YWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6FdMKMsnUYupulAs/2skgcHfT0OhZ5y+pzA0rQqckm5FAQz/lGikZEM6qI/I ilcj3GXCTClZNIwm+LYEllZ3BRPhIUJ9NN3wyT9bhjfBQdgNEXwnN3GQO3N78C+v dcwoRwcaWtx7BRgYxu/38R5PaB9vdKotticDNGWkBZdu1Ee0/ZCZK6QOjKIB5aOf pmsawXmr6y8YeCCSD2Z16en5PXWCH0erDWnTilgC0+m5aYjtCO6Czc4BuEcItnRE 8GtNc+WODRfYWqo+EA0lOsFE7xyALnFSB55OEnWB2DyD/OyWTYcj0HP4bephArMz fmHLJ6eZZDedOFM1ZsM8pQctnwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFM5M/ypc 64X3aCC2qQbw/T0jW68dMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEJGNjBBRjgx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKvB4DBADKvPUwDQYJKoZIhvcNAQELBQADggEBAHKRIKyh VcN8NGNdtamLHM/XQGutHghZeGbrbzXTeypdcV8QTcM8SuUOfyJAKUef/CK4ChI3 41E6MInTyMDRbHZP3Kan7mRtqxlHnElrpRVDZHnPziXg+YPpoJf3jZuf/5+fQsIN 7fEbzEgutQ8tPGkKnJgLTVdyYXptec8On48GlhtsknxnYuheSlAyQnVK/VQLvZ/6 6PmNVufe089/hGIb6h8DLntaQjphJQyL8Ka0/AEWlPsmh5MZ/vR2TOV+SP0qdpte AbxVezaWBZCOUYBOkjL35yShWKcUfpoKE/E0v2kwpv06wBXciRbXYlNlE83XZCLU vi4oayaUXTq4WTU= -----END CERTIFICATE-----Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org