$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/A17F07705FA311EAB1BB612CC4F9AE02.roa File: A17F07705FA311EAB1BB612CC4F9AE02.roa (raw, json) Hash identifier: X5h8vQiP6tB103ZWi1RDruZWJP5MBROBXJX+od9NULg= Subject key identifier: 8E:68:2B:43:FF:D8:44:03:6E:2C:B1:8A:E8:94:F8:4A:8F:16:66:70 Certificate issuer: /CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Certificate serial: 1CD8 Authority key identifier: 27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/A17F07705FA311EAB1BB612CC4F9AE02.roa Signing time: Fri 28 Jun 2024 16:35:25 +0000 ROA not before: Fri 28 Jun 2024 16:35:25 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 135407 IP address blocks: 45.249.8.0/22 maxlen: 24 103.217.176.0/22 maxlen: 24 2407:aa80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7384 (0x1cd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F95/serialNumber=27FC63D861F4694F7A2F951FB12847E07FAA9072 Validity Not Before: Jun 28 16:35:25 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667ee64c-6be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:29:b6:ce:3e:6d:a3:ad:1d:52:f5:5d:65: 9d:48:15:c8:ef:11:9b:76:0e:95:74:2d:89:c9:e5: 11:f7:e3:a1:6d:aa:43:66:19:32:50:69:86:11:fd: 03:ed:38:f5:e3:28:67:c6:e5:a4:91:7b:81:99:18: b2:5b:81:ac:5c:af:a0:ab:df:ec:00:93:b2:6d:c8: 7a:17:e5:6d:16:3e:93:c5:27:be:24:93:f4:05:c5: 4d:b0:af:ef:e2:e6:65:41:64:25:74:2d:8b:e8:26: 0e:d4:0d:46:9b:1e:e0:a1:c7:4e:3b:4d:40:e6:66: ac:e9:e8:6e:3e:db:32:29:45:76:ab:5d:bc:e4:2b: a0:cc:2e:37:d2:1e:93:66:78:9a:1c:25:c7:fb:a4: 86:67:be:93:41:8e:ac:c7:ef:c9:d3:31:6d:16:ab: 13:b9:75:27:45:57:92:9e:ac:b3:8c:47:40:1d:d7: d8:d8:c0:fb:d4:21:d1:99:60:38:57:3a:d9:4c:19: af:2b:ba:65:f5:74:07:cf:e6:89:53:d6:5c:b8:59: a5:57:55:26:cc:a5:2a:32:2f:fe:3c:cc:0e:ea:dc: fc:cf:39:2d:e1:49:6e:d2:92:2d:e5:f1:15:52:4f: aa:9a:6c:b8:ce:ba:b2:8d:b5:73:96:e3:cf:fa:01: 54:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:68:2B:43:FF:D8:44:03:6E:2C:B1:8A:E8:94:F8:4A:8F:16:66:70 X509v3 Authority Key Identifier: keyid:27:FC:63:D8:61:F4:69:4F:7A:2F:95:1F:B1:28:47:E0:7F:AA:90:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/J_xj2GH0aU96L5UfsShH4H-qkHI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_xj2GH0aU96L5UfsShH4H-qkHI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F95/CE2AFC46A27511E69EB17774C4F9AE02/A17F07705FA311EAB1BB612CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.8.0/22 103.217.176.0/22 IPv6: 2407:aa80::/32 Signature Algorithm: sha256WithRSAEncryption 80:f0:6c:b1:d8:1f:ce:b8:61:48:87:69:8e:79:76:9a:ab:4b: 6e:27:31:ff:d5:ba:78:48:cd:3b:eb:5d:b2:f7:3c:06:a0:b7: 21:1c:bc:a2:63:13:84:7e:85:0b:46:14:f2:f8:b5:ce:52:d3: 86:b6:1f:74:58:ee:7d:ae:3a:a7:ee:1e:3b:ac:b3:5b:fe:b9: 45:89:1b:ec:02:1c:b2:2a:52:21:5c:ac:e6:d5:88:46:60:58: df:ab:5c:b7:0e:0f:95:48:23:f5:28:1e:97:0f:4e:88:5a:26: d6:e2:d7:fc:41:84:ec:f1:7e:a6:5c:00:11:be:20:1f:62:60: 30:a0:67:97:32:55:d8:3b:c3:d4:5b:aa:88:e9:49:8b:c3:0d: 88:96:ff:24:6c:f9:3d:49:18:73:d2:c7:97:46:1a:f8:0b:8d: a4:cd:d9:dd:c5:5f:5c:0a:16:64:58:39:a0:f5:a2:9d:5d:d7: f5:1d:ea:f5:5e:f5:fb:ac:97:b9:07:c9:9a:bb:e5:70:fd:8e: 2c:88:5a:75:e2:98:40:71:44:16:6a:df:31:c8:50:0e:3c:49: 2f:d0:8e:46:6b:75:21:e4:11:3a:ae:62:f6:b9:c9:8a:e0:7b: 8f:26:86:80:92:7a:69:07:b7:04:3a:66:85:72:5b:1b:f8:cd: e9:f4:fd:af -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICHNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVGOTUxMTAvBgNVBAUTKDI3RkM2M0Q4NjFGNDY5NEY3QTJGOTUxRkIxMjg0N0Uw N0ZBQTkwNzIwHhcNMjQwNjI4MTYzNTI1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdlZTY0Yy02YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrYpts4+baOtHVL1XWWdSBXI7xGbdg6VdC2JyeUR9+OhbapDZhkyUGmGEf0D 7Tj14yhnxuWkkXuBmRiyW4GsXK+gq9/sAJOybch6F+VtFj6TxSe+JJP0BcVNsK/v 4uZlQWQldC2L6CYO1A1Gmx7gocdOO01A5mas6ehuPtsyKUV2q1285CugzC430h6T ZniaHCXH+6SGZ76TQY6sx+/J0zFtFqsTuXUnRVeSnqyzjEdAHdfY2MD71CHRmWA4 VzrZTBmvK7pl9XQHz+aJU9ZcuFmlV1UmzKUqMi/+PMwO6tz8zzkt4Ulu0pIt5fEV Uk+qmmy4zrqyjbVzluPP+gFUHwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFI5oK0P/ 2EQDbiyxiuiU+EqPFmZwMB8GA1UdIwQYMBaAFCf8Y9hh9GlPei+VH7EoR+B/qpBy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUY5NS9DRTJBRkM0NkEy NzUxMUU2OUVCMTc3NzRDNEY5QUUwMi9KX3hqMkdIMGFVOTZMNVVmc1NoSDRILXFr SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pfeGoyR0gwYVU5Nkw1VWZzU2hINEgtcWtISS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjVGOTUvQ0UyQUZDNDZBMjc1MTFFNjlFQjE3Nzc0QzRGOUFFMDIvQTE3RjA3NzA1 RkEzMTFFQUIxQkI2MTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIt+QgDBAJn2bAwDQQCAAIwBwMFACQHqoAwDQYJKoZIhvcN AQELBQADggEBAIDwbLHYH864YUiHaY55dpqrS24nMf/VunhIzTvrXbL3PAagtyEc vKJjE4R+hQtGFPL4tc5S04a2H3RY7n2uOqfuHjuss1v+uUWJG+wCHLIqUiFcrObV iEZgWN+rXLcOD5VII/UoHpcPTohaJtbi1/xBhOzxfqZcABG+IB9iYDCgZ5cyVdg7 w9RbqojpSYvDDYiW/yRs+T1JGHPSx5dGGvgLjaTN2d3FX1wKFmRYOaD1op1d1/Ud 6vVe9fusl7kHyZq75XD9jiyIWnXimEBxRBZq3zHIUA48SS/QjkZrdSHkETquYva5 yYrge48mhoCSemkHtwQ6ZoVyWxv4zen0/a8= -----END CERTIFICATE-----Generated at Fri Nov 22 19:49:57 2024 by rpki-client on console-ams.rpki-client.org