$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/4C67EC06C68E11E983395515C4F9AE02.roa File: 4C67EC06C68E11E983395515C4F9AE02.roa (raw, json) Hash identifier: tP21nihbHvOPN0o7Q7ZnYvoB4lWQWRK3//ALxViNCn4= Subject key identifier: 01:F8:7E:67:1F:7E:FF:B8:76:C3:0C:66:D3:3D:29:0D:FC:60:9D:9E Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0D2F Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/4C67EC06C68E11E983395515C4F9AE02.roa Signing time: Mon 28 Oct 2024 18:17:35 +0000 ROA not before: Mon 28 Oct 2024 18:17:35 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 38902 IP address blocks: 202.174.92.0/23 maxlen: 23 202.174.92.0/24 maxlen: 24 202.174.93.0/24 maxlen: 24 202.174.94.0/23 maxlen: 23 202.174.94.0/24 maxlen: 24 202.174.95.0/24 maxlen: 24 2402:f100::/36 maxlen: 36 2402:f100::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 17:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3375 (0xd2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Oct 28 18:17:35 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=671fd53e-28e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:cf:72:07:b7:6b:f9:b4:06:0c:fd:e8:20: d0:cb:57:98:70:2a:b3:79:08:6d:1e:42:e7:75:cd: 15:d4:9d:33:13:2a:28:5a:64:f7:fa:fb:72:35:78: ca:89:90:8d:95:f9:b0:0d:7d:a8:40:6c:0e:a0:92: d0:73:f0:a2:a1:75:00:36:83:dc:a5:c8:84:3c:d3: 36:bf:cd:f1:7d:a5:ca:fc:fc:52:0c:04:dc:64:c8: ff:cb:e7:79:f6:43:59:c1:14:1d:4d:33:04:b1:b7: 6e:1b:6b:eb:eb:a5:56:f0:91:ee:a5:65:a3:bd:b9: d6:f4:f8:ea:be:55:e1:e3:b8:eb:94:a6:87:d9:12: 6a:08:cd:eb:c9:3a:e4:ba:4f:3c:ad:fe:a5:36:12: fe:d4:46:21:a5:74:df:76:2a:52:cf:41:4b:b7:9b: 97:d6:63:b1:01:16:be:5a:ed:ba:41:05:1f:51:65: b3:67:ed:09:27:61:17:a5:be:4c:89:c5:1b:c1:d6: 7e:ad:56:63:9c:13:be:cf:f1:52:4b:0e:b0:c7:0d: a6:4f:18:f5:54:95:7a:3c:37:5d:61:e5:e9:ad:43: 45:78:b7:b3:70:e4:40:b5:4c:6b:4c:eb:6d:22:2e: b9:bb:58:99:66:03:1f:f2:5f:7b:71:66:76:b5:77: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F8:7E:67:1F:7E:FF:B8:76:C3:0C:66:D3:3D:29:0D:FC:60:9D:9E X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/4C67EC06C68E11E983395515C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.174.92.0/22 IPv6: 2402:f100::/36 Signature Algorithm: sha256WithRSAEncryption 1a:e4:6f:67:b6:04:96:6e:87:b1:11:d0:67:5a:8d:ff:35:01: 2a:81:b6:76:2b:10:f9:4c:a5:e7:29:95:77:34:11:a6:fa:61: 3b:04:de:aa:1b:ad:23:f2:6b:0d:13:60:85:a0:5a:8a:60:f7: 42:dd:f4:c4:2a:67:5c:2f:dd:9e:47:4f:2a:d3:ce:87:2e:6c: e6:4e:39:c0:5d:e6:69:fe:12:3b:39:d8:b2:df:6b:32:43:a9: 23:25:8f:ef:f2:0b:38:df:19:4a:4b:42:14:15:ee:e1:43:d8: ca:5e:02:d1:83:0e:4a:cf:e0:39:73:c9:76:e2:09:28:c8:e2: a1:9b:6a:0c:7e:55:1e:07:27:e1:c5:18:20:32:52:6b:9a:bf: 3a:18:3c:b8:ea:51:d7:0e:e7:4c:68:e5:6e:20:bf:1c:77:a4: 39:d9:b5:9f:84:26:10:30:74:79:b8:d6:2a:73:d4:33:7e:99: e8:61:67:19:0b:1e:eb:87:4e:aa:34:e4:b9:de:1d:3f:d3:6a: 7c:1b:e2:a3:fe:d7:85:f3:28:72:ce:7b:e0:06:80:ec:0f:c7: 87:8f:a8:9d:d7:39:05:a8:13:7f:ef:bf:49:5d:88:8d:07:e8: 8a:bb:5f:3b:b5:c9:94:f9:74:57:01:08:05:5c:ce:84:95:15: 6e:40:e0:bb -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjQxMDI4MTgxNzM1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmZDUzZS0yOGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nHPcge3a/m0Bgz96CDQy1eYcCqzeQhtHkLndc0V1J0zEyooWmT3+vtyNXjK iZCNlfmwDX2oQGwOoJLQc/CioXUANoPcpciEPNM2v83xfaXK/PxSDATcZMj/y+d5 9kNZwRQdTTMEsbduG2vr66VW8JHupWWjvbnW9PjqvlXh47jrlKaH2RJqCM3ryTrk uk88rf6lNhL+1EYhpXTfdipSz0FLt5uX1mOxARa+Wu26QQUfUWWzZ+0JJ2EXpb5M icUbwdZ+rVZjnBO+z/FSSw6wxw2mTxj1VJV6PDddYeXprUNFeLezcORAtUxrTOtt Ii65u1iZZgMf8l97cWZ2tXfZwQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAH4fmcf fv+4dsMMZtM9KQ38YJ2eMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjRCRDMvMEU0RDg2N0FDNjhEMTFFOTlCNDUyRDEzQzRGOUFFMDIvNEM2N0VDMDZD NjhFMTFFOTgzMzk1NTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLwYIKwYBBQUHAQcBAf8E IDAeMAwEAgABMAYDBALKrlwwDgQCAAIwCAMGBCQC8QAAMA0GCSqGSIb3DQEBCwUA A4IBAQAa5G9ntgSWboexEdBnWo3/NQEqgbZ2KxD5TKXnKZV3NBGm+mE7BN6qG60j 8msNE2CFoFqKYPdC3fTEKmdcL92eR08q086HLmzmTjnAXeZp/hI7Odiy32syQ6kj JY/v8gs43xlKS0IUFe7hQ9jKXgLRgw5Kz+A5c8l24gkoyOKhm2oMflUeByfhxRgg MlJrmr86GDy46lHXDudMaOVuIL8cd6Q52bWfhCYQMHR5uNYqc9QzfpnoYWcZCx7r h06qNOS53h0/02p8G+Kj/teF8yhyznvgBoDsD8eHj6id1zkFqBN/779JXYiNB+iK u187tcmU+XRXAQgFXM6ElRVuQOC7 -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:56 2024 by rpki-client on console-fra.rpki-client.org