$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa File: 384962A2709511EFB3C2992DC4F9AE02.roa (raw, json) Hash identifier: 2qRtl+2vbaSdK6Wey0VbloBnqojKQ9B99jR5Bas2V80= Subject key identifier: E4:DA:08:1D:0C:91:0A:2C:99:03:16:B4:91:F1:C6:C1:87:32:46:5E Certificate issuer: /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344 Certificate serial: 22C3 Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa Signing time: Wed 11 Sep 2024 23:36:09 +0000 ROA not before: Wed 11 Sep 2024 23:36:09 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45282 IP address blocks: 123.176.56.0/24 maxlen: 24 123.176.57.0/24 maxlen: 24 123.176.59.0/24 maxlen: 24 202.129.192.0/22 maxlen: 22 202.129.192.0/24 maxlen: 24 202.129.193.0/24 maxlen: 24 202.129.194.0/24 maxlen: 24 202.129.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8899 (0x22c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344 Validity Not Before: Sep 11 23:36:09 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e22969-2e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:3d:cd:c7:6e:22:21:c7:a9:6f:15:20:00: 2d:34:98:60:a0:9f:f8:96:3b:25:09:1a:86:f2:e9: f4:10:a0:2b:5d:d8:d4:88:27:d9:84:6f:7f:62:10: f5:9a:f0:b8:c2:09:11:b8:4f:65:57:79:4f:ff:61: b9:b0:88:71:46:4c:f6:1b:05:00:57:e5:88:d6:40: 73:51:1a:23:4e:a5:2f:2c:e7:33:56:3c:e3:2d:3a: e9:c7:e6:1c:fb:b6:fe:92:43:d4:29:43:76:c1:b8: b0:62:7c:2d:1c:0a:23:81:05:77:7d:cc:80:c5:bf: 4b:f5:01:03:10:68:02:3e:23:d7:c8:a3:00:11:ae: da:25:7f:68:98:94:9b:88:fa:19:08:ed:c8:af:7d: 3c:38:4d:26:77:bf:9b:98:3a:a0:37:00:ee:9e:63: d5:24:dc:46:f9:7a:71:a9:de:31:cb:0b:59:d4:fc: 5b:58:98:04:7a:76:f2:aa:ad:a2:63:ee:93:05:4f: 62:7e:a2:96:12:91:8f:9a:52:37:3e:56:fa:1c:4d: 5f:43:89:96:8d:f8:08:5d:e0:20:25:a9:57:27:c5: 55:44:43:e8:73:e5:49:c6:68:81:64:9b:b1:92:28: 33:e4:58:21:19:ae:7b:88:8c:87:67:1c:d8:d8:2b: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:08:1D:0C:91:0A:2C:99:03:16:B4:91:F1:C6:C1:87:32:46:5E X509v3 Authority Key Identifier: keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/384962A2709511EFB3C2992DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.176.56.0/23 123.176.59.0/24 202.129.192.0/22 Signature Algorithm: sha256WithRSAEncryption aa:1e:c4:90:c4:6f:2d:a4:ac:c2:84:ea:12:d1:b4:42:dd:c4: 4c:73:1d:9e:21:5f:f7:ac:04:d5:e3:10:36:13:9b:f3:12:09: 6b:d7:d6:9c:5d:82:b4:23:57:38:0f:43:71:f0:fc:dd:8f:ef: c5:f7:33:22:41:81:df:a4:69:5d:d0:fa:05:bb:28:75:ca:06: 18:36:c7:dc:7b:d7:7d:e5:8d:9a:d9:47:a7:ca:7d:c8:e5:d4: b7:bb:92:90:ca:f4:9b:37:11:18:b4:3d:a4:87:af:ff:28:c7: 3b:6c:4e:b8:08:87:ae:12:af:e5:7f:72:e8:8c:49:03:98:44: b3:62:1a:0e:dd:5d:cf:f4:d2:42:b9:d3:f1:95:76:3f:2a:05: 8d:52:94:a7:c2:cf:63:5f:5e:ea:ec:1e:ed:49:0c:d0:9b:2d: 33:e8:58:b5:72:a7:72:7f:a3:d1:e2:17:81:93:90:86:c0:ed: a1:cf:e4:03:23:14:cb:03:50:86:b1:d6:dd:83:7c:2f:fc:36: 48:9f:b4:23:4c:9a:ae:07:dd:7c:b6:b5:b4:93:34:7e:4b:ab: 77:6f:e2:00:e2:48:49:ea:ce:ca:93:8f:df:ed:71:89:1c:99: ef:2d:7c:ae:10:3e:21:7c:5e:a1:e3:5c:2f:b7:b4:e2:39:95: 4a:87:ce:64 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5OTIxMTAvBgNVBAUTKDc5MDE0QTVGMDczMTlGMDQ2MEZDRDA0RkM0QUFBQkND RTA5RUQzNDQwHhcNMjQwOTExMjMzNjA5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUyMjk2OS0yZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaA9zcduIiHHqW8VIAAtNJhgoJ/4ljslCRqG8un0EKArXdjUiCfZhG9/YhD1 mvC4wgkRuE9lV3lP/2G5sIhxRkz2GwUAV+WI1kBzURojTqUvLOczVjzjLTrpx+Yc +7b+kkPUKUN2wbiwYnwtHAojgQV3fcyAxb9L9QEDEGgCPiPXyKMAEa7aJX9omJSb iPoZCO3Ir308OE0md7+bmDqgNwDunmPVJNxG+Xpxqd4xywtZ1PxbWJgEenbyqq2i Y+6TBU9ifqKWEpGPmlI3Plb6HE1fQ4mWjfgIXeAgJalXJ8VVREPoc+VJxmiBZJux kigz5FghGa57iIyHZxzY2CtVsQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOTaCB0M kQosmQMWtJHxxsGHMkZeMB8GA1UdIwQYMBaAFHkBSl8HMZ8EYPzQT8Sqq8zgntNE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODk5Mi9GQURCQzU2Qzg3 QTExMUU1QUVCNDdGNERDNEY5QUUwMi9lUUZLWHdjeG53UmdfTkJQeEtxcnpPQ2Uw MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VRRktYd2N4bndSZ19OQlB4S3Fyek9DZTAwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjg5OTIvRkFEQkM1NkM4N0ExMTFFNUFFQjQ3RjREQzRGOUFFMDIvMzg0OTYyQTI3 MDk1MTFFRkIzQzI5OTJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAF7sDgDBAB7sDsDBALKgcAwDQYJKoZIhvcNAQELBQADggEB AKoexJDEby2krMKE6hLRtELdxExzHZ4hX/esBNXjEDYTm/MSCWvX1pxdgrQjVzgP Q3Hw/N2P78X3MyJBgd+kaV3Q+gW7KHXKBhg2x9x7133ljZrZR6fKfcjl1Le7kpDK 9Js3ERi0PaSHr/8oxztsTrgIh64Sr+V/cuiMSQOYRLNiGg7dXc/00kK50/GVdj8q BY1SlKfCz2NfXursHu1JDNCbLTPoWLVyp3J/o9HiF4GTkIbA7aHP5AMjFMsDUIax 1t2DfC/8NkiftCNMmq4H3Xy2tbSTNH5Lq3dv4gDiSEnqzsqTj9/tcYkcme8tfK4Q PiF8XqHjXC+3tOI5lUqHzmQ= -----END CERTIFICATE-----Generated at Sun Nov 24 17:19:58 2024 by rpki-client on console-fra.rpki-client.org