$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/088C9298981611EFBE510B59C4F9AE02.roa File: 088C9298981611EFBE510B59C4F9AE02.roa (raw, json) Hash identifier: qXlLmIEo6DdPF2wbC+hI8xTl9OfbwJAdMpbZ+ukL71g= Subject key identifier: BE:F5:3A:D8:11:66:94:BB:D6:FC:46:17:B6:FC:79:42:65:9D:40:EF Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: 02 Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/088C9298981611EFBE510B59C4F9AE02.roa Signing time: Fri 01 Nov 2024 05:56:27 +0000 ROA not before: Fri 01 Nov 2024 05:56:27 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152690 IP address blocks: 202.37.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Nov 1 05:56:27 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67246d8b-c1f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:ee:ab:cc:b3:00:fb:56:d6:30:15:06:1f: 63:c8:bd:85:b7:b6:d0:2d:7e:9d:6d:fe:d5:e9:ce: aa:4f:c5:9b:c1:34:ea:cf:e6:f9:cf:f6:80:10:dc: e0:02:2f:13:31:56:c0:ea:89:55:dc:42:6f:eb:0f: dd:ab:9d:57:82:06:1a:26:19:a0:e1:0b:b4:3c:7f: 5f:f1:11:89:85:46:7e:3b:24:26:d9:35:28:5b:0a: 5e:b2:24:d2:9a:59:dd:7d:1d:59:4f:0e:2d:45:ec: b5:a6:4d:02:0a:7d:77:2c:bf:29:da:22:18:dc:fa: 77:51:27:4d:b0:76:79:0d:59:80:a3:2c:72:ed:2d: d7:96:dc:04:28:3a:06:fa:0d:06:dc:15:7f:f1:b3: 9b:fa:aa:fa:87:c3:fa:8c:38:db:08:28:32:e4:d9: 70:1e:a4:84:db:39:cb:55:dd:59:b6:bc:88:81:d1: 1b:31:3f:e8:5b:16:20:b1:a2:1c:eb:78:38:a1:63: c2:c7:4e:cc:0d:0b:0b:9e:26:8b:30:33:d2:47:f6: 98:07:7c:b1:a1:b4:1a:22:fc:22:28:9d:f5:98:6c: e3:6f:05:55:69:f5:cc:d5:1e:12:6f:dc:b2:ef:a3: 5f:ca:0e:1e:d5:38:3b:0b:9e:ed:3a:19:44:58:0e: d7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:3A:D8:11:66:94:BB:D6:FC:46:17:B6:FC:79:42:65:9D:40:EF X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/088C9298981611EFBE510B59C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.166.0/24 Signature Algorithm: sha256WithRSAEncryption 23:2c:98:d0:d7:75:e1:55:a7:78:9f:e5:65:a4:80:28:ac:84: 2d:6f:c4:38:8c:c4:8a:72:06:f9:5d:f3:39:72:e8:a5:ec:ec: ce:8c:2b:5c:61:1b:f6:9c:c9:da:71:58:74:ef:a2:9b:3e:7c: 19:3f:47:94:0c:f1:2f:4c:f8:1a:58:de:f7:65:56:f4:2d:5c: 54:15:fe:a8:13:91:c0:57:14:d1:65:26:15:f7:c9:25:f6:b5: 32:29:ae:17:7b:21:1c:e1:28:e4:58:4c:c7:b5:5d:97:7c:b6: f2:df:41:ed:d4:54:99:3d:91:12:99:a9:f5:62:60:9e:a3:bf: 39:07:37:a5:99:f8:92:e5:9f:a8:77:c3:b0:67:98:a3:b7:68: 04:3d:21:ce:56:6c:0b:db:12:cd:0f:89:5f:db:82:b6:4f:7d: 56:46:c6:24:e4:cf:50:9b:24:4b:ff:58:5a:2d:51:4e:96:1c: 55:6e:67:53:65:ca:fd:19:c2:bc:b0:82:8f:4c:61:fb:61:c7: 36:b1:bc:fe:fa:16:08:2b:58:24:5e:25:54:1b:aa:7b:05:87: 78:9c:45:7d:77:64:9f:83:22:33:a1:25:95:6b:74:93:b2:43: e4:b4:bd:2c:eb:b0:e0:40:fb:a3:0b:72:0e:a0:c6:16:c0:91: 54:25:e7:a4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUM2MjExMC8GA1UEBRMoQ0Y4MDRBNkYzRDg2QTE5NzEzQTRFODg2RDU5N0I0REM2 NDQ1Njg2QTAeFw0yNDExMDEwNTU2MjdaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MjQ2ZDhiLWMxZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbXu6rzLMA+1bWMBUGH2PIvYW3ttAtfp1t/tXpzqpPxZvBNOrP5vnP9oAQ3OAC LxMxVsDqiVXcQm/rD92rnVeCBhomGaDhC7Q8f1/xEYmFRn47JCbZNShbCl6yJNKa Wd19HVlPDi1F7LWmTQIKfXcsvynaIhjc+ndRJ02wdnkNWYCjLHLtLdeW3AQoOgb6 DQbcFX/xs5v6qvqHw/qMONsIKDLk2XAepITbOctV3Vm2vIiB0RsxP+hbFiCxohzr eDihY8LHTswNCwueJoswM9JH9pgHfLGhtBoi/CIonfWYbONvBVVp9czVHhJv3LLv o1/KDh7VODsLnu06GURYDtdpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvvU62BFm lLvW/EYXtvx5QmWdQO8wHwYDVR0jBBgwFoAUz4BKbz2GoZcTpOiG1Ze03GRFaGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzYyLzg0RjQ2QjY4OTgx NTExRUZBNEJEM0Q1N0M0RjlBRTAyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejRCS2J6MkdvWmNUcE9pRzFaZTAzR1JGYUdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi8wODhDOTI5ODk4 MTYxMUVGQkU1MTBCNTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMolpjANBgkqhkiG9w0BAQsFAAOCAQEAIyyY0Nd14VWneJ/l ZaSAKKyELW/EOIzEinIG+V3zOXLopezszowrXGEb9pzJ2nFYdO+imz58GT9HlAzx L0z4Glje92VW9C1cVBX+qBORwFcU0WUmFffJJfa1MimuF3shHOEo5FhMx7Vdl3y2 8t9B7dRUmT2REpmp9WJgnqO/OQc3pZn4kuWfqHfDsGeYo7doBD0hzlZsC9sSzQ+J X9uCtk99VkbGJOTPUJskS/9YWi1RTpYcVW5nU2XK/RnCvLCCj0xh+2HHNrG8/voW CCtYJF4lVBuqewWHeJxFfXdkn4MiM6EllWt0k7JD5LS9LOuw4ED7owtyDqDGFsCR VCXnpA== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org