$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/7D28601A9FD211EEAC56900AC4F9AE02.roa File: 7D28601A9FD211EEAC56900AC4F9AE02.roa (raw, json) Hash identifier: zd1TDezrr156c4EY6JDMzWwdgb+33lD768j6PJBUhL8= Subject key identifier: 91:57:74:C8:EC:C9:E1:3D:4A:51:93:17:78:E0:63:87:99:59:85:D3 Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Certificate serial: AC Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/7D28601A9FD211EEAC56900AC4F9AE02.roa Signing time: Mon 11 Nov 2024 04:18:36 +0000 ROA not before: Mon 11 Nov 2024 04:18:36 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152113 IP address blocks: 203.3.88.0/23 maxlen: 23 2001:df3:740::/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501 Validity Not Before: Nov 11 04:18:36 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6731859c-7ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:58:60:42:af:a6:d2:79:c6:9c:8b:8f:14:c9: f9:b7:28:00:b4:c0:0a:c2:9d:53:d6:cb:ee:ad:e7: 48:79:94:6f:19:73:a9:67:c4:23:46:c0:97:e9:fe: 78:20:9e:f6:66:37:85:bc:00:52:5a:39:ad:d2:3c: e9:7b:e5:2a:f2:0c:9a:07:eb:dd:dd:09:58:f6:6b: 0f:8d:55:cb:d7:a6:de:45:eb:f3:c8:20:e9:66:a0: 51:67:3b:a6:bb:cc:e2:5d:77:a2:67:8a:90:12:37: 31:0f:d2:3c:0c:37:f4:68:6e:b8:a0:18:fc:90:14: dc:46:c6:0b:cd:ee:54:e0:b8:44:2d:6e:9e:82:b2: 46:b9:e0:92:a3:10:f0:85:7d:e7:7f:0d:ed:25:9d: 4f:60:08:c6:88:25:47:19:64:dd:80:af:c0:56:a2: 53:f8:57:38:99:fd:c5:55:08:f5:29:cb:04:5e:e5: 1f:14:db:27:0c:aa:75:6b:e7:2e:e3:a9:81:32:f7: 44:8b:15:be:a7:15:52:5a:08:37:f2:bb:46:40:aa: 48:1f:0d:af:7c:34:50:46:d7:25:da:16:ee:5a:e7: a9:93:94:64:6e:c4:32:3e:8b:3a:a1:7c:b1:50:cb: 4c:45:a8:c6:0c:48:7c:24:ba:ab:42:0e:c0:95:28: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:57:74:C8:EC:C9:E1:3D:4A:51:93:17:78:E0:63:87:99:59:85:D3 X509v3 Authority Key Identifier: keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/7D28601A9FD211EEAC56900AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.3.88.0/23 IPv6: 2001:df3:740::/128 Signature Algorithm: sha256WithRSAEncryption 9f:75:89:86:fe:74:a6:96:75:17:0a:ba:59:61:ee:d6:f6:c7: 3f:29:7d:c4:78:4b:2c:3d:c5:60:ea:87:33:6b:2b:a6:79:1d: 20:59:f3:30:03:f8:d3:00:3a:cd:5f:de:a3:55:47:79:24:26: 96:7a:42:95:b0:cf:ad:5c:6c:21:a3:0e:de:f0:63:79:e4:28: 9b:94:68:7d:44:80:56:60:92:22:e8:b3:68:c3:b7:e3:b4:e8: e2:1a:43:53:91:31:fe:80:04:82:be:40:4a:39:9c:91:1a:e4: 6a:5d:c9:fe:f0:be:7e:55:72:1e:f0:d0:a8:52:5e:71:1a:9f: 36:e1:b0:de:b0:65:5a:f6:72:13:0f:b4:fd:ee:ca:1d:bd:21: 10:48:1b:06:d4:ec:76:33:5c:78:a1:e7:1f:84:d4:47:78:e6: fa:28:d0:71:b4:b9:88:66:48:77:35:3d:49:f7:c4:55:8a:ac: 8c:cf:23:d5:f3:10:11:f1:1c:c4:ea:a4:2d:36:db:ae:23:6f: ad:40:62:bb:c8:90:55:69:32:eb:73:b3:0e:8f:34:83:9f:a9: 04:ef:2d:59:d0:d9:81:58:8b:39:8f:47:5b:af:c5:94:44:98: ba:5c:52:40:70:dd:76:27:71:6e:5d:30:a6:dc:57:67:33:7c: 48:45:d6:83 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhEMzAxMTAvBgNVBAUTKDBENjRDNTZFMEU2MTFBNUNDMUQzNTg4Njc2QzU3NERF MjJENTc1MDEwHhcNMjQxMTExMDQxODM2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxODU5Yy03ZWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81hgQq+m0nnGnIuPFMn5tygAtMAKwp1T1svuredIeZRvGXOpZ8QjRsCX6f54 IJ72ZjeFvABSWjmt0jzpe+Uq8gyaB+vd3QlY9msPjVXL16beRevzyCDpZqBRZzum u8ziXXeiZ4qQEjcxD9I8DDf0aG64oBj8kBTcRsYLze5U4LhELW6egrJGueCSoxDw hX3nfw3tJZ1PYAjGiCVHGWTdgK/AVqJT+Fc4mf3FVQj1KcsEXuUfFNsnDKp1a+cu 46mBMvdEixW+pxVSWgg38rtGQKpIHw2vfDRQRtcl2hbuWuepk5RkbsQyPos6oXyx UMtMRajGDEh8JLqrQg7AlShurQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJFXdMjs yeE9SlGTF3jgY4eZWYXTMB8GA1UdIwQYMBaAFA1kxW4OYRpcwdNYhnbFdN4i1XUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEQzMC9DRDgwQUFFNjlG RDExMUVFQUQ3MDQ0MDlDNEY5QUUwMi9EV1RGYmc1aEdsekIwMWlHZHNWMDNpTFZk UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RXVEZiZzVoR2x6QjAxaUdkc1YwM2lMVmRRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhEMzAvQ0Q4MEFBRTY5RkQxMTFFRUFENzA0NDA5QzRGOUFFMDIvN0QyODYwMUE5 RkQyMTFFRUFDNTY5MDBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMAwEAgABMAYDBAHLA1gwGQQCAAIwEwMRACABDfMHQAAAAAAAAAAAAAAwDQYJ KoZIhvcNAQELBQADggEBAJ91iYb+dKaWdRcKullh7tb2xz8pfcR4Syw9xWDqhzNr K6Z5HSBZ8zAD+NMAOs1f3qNVR3kkJpZ6QpWwz61cbCGjDt7wY3nkKJuUaH1EgFZg kiLos2jDt+O06OIaQ1ORMf6ABIK+QEo5nJEa5Gpdyf7wvn5Vch7w0KhSXnEanzbh sN6wZVr2chMPtP3uyh29IRBIGwbU7HYzXHih5x+E1Ed45voo0HG0uYhmSHc1PUn3 xFWKrIzPI9XzEBHxHMTqpC02264jb61AYrvIkFVpMutzsw6PNIOfqQTvLVnQ2YFY izmPR1uvxZREmLpcUkBw3XYncW5dMKbcV2czfEhF1oM= -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org