$ rpki-client -vvf rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/EA5A9A32BDAA11ED92995562C4F9AE02.roa File: EA5A9A32BDAA11ED92995562C4F9AE02.roa (raw, json) Hash identifier: la16kPDMZ0PGNGFfbiOJE4nU4r91VONeRM7xfP7lGe4= Subject key identifier: A8:AE:2C:5B:6E:14:F4:E3:C0:9C:2F:ED:AF:F5:DB:EC:80:68:4D:01 Certificate issuer: /CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Certificate serial: 0128 Authority key identifier: 28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/EA5A9A32BDAA11ED92995562C4F9AE02.roa Signing time: Mon 23 Sep 2024 03:17:09 +0000 ROA not before: Mon 23 Sep 2024 03:17:09 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 45748 IP address blocks: 202.14.70.0/23 maxlen: 24 202.43.118.0/24 maxlen: 24 202.43.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158650/serialNumber=2817D4A8644AEC419ADCCEE30C4E87A24D2FF57B Validity Not Before: Sep 23 03:17:09 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f0ddb4-1130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c9:09:1f:8b:59:06:92:e1:fd:b3:2e:1e:0c: 45:93:8f:19:f0:5c:28:ca:3d:a9:5f:e3:fb:7b:dc: 16:b5:a7:3c:9d:af:30:f9:99:6c:30:1e:7a:c7:44: 4a:e9:c0:e2:27:e1:e1:af:2f:0e:a1:96:d5:cf:c4: 27:07:51:97:48:b7:ea:67:ba:c5:07:f4:54:20:d8: 3a:9e:62:81:e9:4d:28:d8:01:32:78:e9:41:9c:47: 4f:da:9c:e2:91:bd:24:e7:6e:f2:64:f7:2a:4b:0b: 75:75:33:ad:35:05:17:ff:d4:d2:f2:d1:1f:a4:d6: cd:b9:9c:0b:ed:3a:51:5a:28:b9:80:75:b5:d6:36: ec:31:a9:63:ef:35:0c:a0:0d:1c:68:99:0f:06:bf: b0:3b:27:01:9e:6a:e4:35:87:fd:04:5b:26:46:4a: e2:e9:7e:e0:8d:12:b6:75:4e:15:21:80:02:d1:51: db:3e:b9:77:85:15:be:d1:cc:52:2a:ec:a1:d3:d1: 03:a0:96:b0:5c:fd:4a:ae:34:89:2c:2f:81:28:3b: 79:ad:58:e4:09:dc:28:8b:b1:05:50:b3:89:9e:22: 15:27:05:6a:c1:3c:d0:9c:46:ec:15:d9:5c:6d:5a: 53:12:3b:36:bd:13:3c:36:41:ff:65:5c:d5:d4:8e: b7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AE:2C:5B:6E:14:F4:E3:C0:9C:2F:ED:AF:F5:DB:EC:80:68:4D:01 X509v3 Authority Key Identifier: keyid:28:17:D4:A8:64:4A:EC:41:9A:DC:CE:E3:0C:4E:87:A2:4D:2F:F5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KBfUqGRK7EGa3M7jDE6Hok0v9Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158650/7758D2C2BDA711EDAECD4A5DC4F9AE02/EA5A9A32BDAA11ED92995562C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.14.70.0/23 202.43.118.0/23 Signature Algorithm: sha256WithRSAEncryption 16:f9:e8:da:f1:97:7a:c3:6e:e3:7c:dd:bc:f5:b5:32:48:2f: dc:db:b0:0a:a7:2a:b3:08:86:4d:10:62:6a:d1:bd:cf:64:c9: 0c:51:e7:3b:1e:9e:0f:1a:b7:02:01:7b:87:f3:b2:af:29:11: 86:54:6f:bc:a6:ce:71:78:57:cb:05:c9:32:13:e6:43:68:82: 40:14:f2:39:36:1e:6c:62:07:ba:e9:df:46:43:5d:7e:41:af: 81:7d:d6:80:8d:bd:96:f4:e1:08:90:8a:cf:9b:d6:8d:fe:b0: 29:41:fa:73:39:14:d9:da:f0:f3:de:ef:2c:cb:28:30:02:b3: 89:33:07:be:4d:8d:df:a0:12:8d:ff:df:7e:e0:1f:f6:91:d5: 92:f4:7c:75:3b:c3:48:3f:89:cc:88:b3:72:5c:a4:e5:b7:fc: 69:d7:0a:4e:0b:59:28:9e:ae:9c:cf:3f:bd:6b:5e:a0:23:6a: c6:66:a6:43:df:87:7d:0e:38:d8:e6:64:f0:cf:af:ca:be:3b: f8:98:ae:59:33:44:b0:2c:fb:ed:fe:24:9a:d3:c1:d9:14:db: 4c:aa:63:7f:69:bf:dd:04:12:40:a7:79:4f:f9:80:ef:6a:a9: af:10:a9:0b:ee:25:b1:61:09:8d:84:5a:e0:82:8c:56:a2:86: 32:19:61:5c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg2NTAxMTAvBgNVBAUTKDI4MTdENEE4NjQ0QUVDNDE5QURDQ0VFMzBDNEU4N0Ey NEQyRkY1N0IwHhcNMjQwOTIzMDMxNzA5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYwZGRiNC0xMTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ckJH4tZBpLh/bMuHgxFk48Z8Fwoyj2pX+P7e9wWtac8na8w+ZlsMB56x0RK 6cDiJ+Hhry8OoZbVz8QnB1GXSLfqZ7rFB/RUINg6nmKB6U0o2AEyeOlBnEdP2pzi kb0k527yZPcqSwt1dTOtNQUX/9TS8tEfpNbNuZwL7TpRWii5gHW11jbsMalj7zUM oA0caJkPBr+wOycBnmrkNYf9BFsmRkri6X7gjRK2dU4VIYAC0VHbPrl3hRW+0cxS Kuyh09EDoJawXP1KrjSJLC+BKDt5rVjkCdwoi7EFULOJniIVJwVqwTzQnEbsFdlc bVpTEjs2vRM8NkH/ZVzV1I63CwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKiuLFtu FPTjwJwv7a/12+yAaE0BMB8GA1UdIwQYMBaAFCgX1KhkSuxBmtzO4wxOh6JNL/V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODY1MC83NzU4RDJDMkJE QTcxMUVEQUVDRDRBNURDNEY5QUUwMi9LQmZVcUdSSzdFR2EzTTdqREU2SG9rMHY5 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tCZlVxR1JLN0VHYTNNN2pERTZIb2swdjlYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg2NTAvNzc1OEQyQzJCREE3MTFFREFFQ0Q0QTVEQzRGOUFFMDIvRUE1QTlBMzJC REFBMTFFRDkyOTk1NTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAHKDkYDBAHKK3YwDQYJKoZIhvcNAQELBQADggEBABb56Nrx l3rDbuN83bz1tTJIL9zbsAqnKrMIhk0QYmrRvc9kyQxR5zseng8atwIBe4fzsq8p EYZUb7ymznF4V8sFyTIT5kNogkAU8jk2HmxiB7rp30ZDXX5Br4F91oCNvZb04QiQ is+b1o3+sClB+nM5FNna8PPe7yzLKDACs4kzB75Njd+gEo3/337gH/aR1ZL0fHU7 w0g/icyIs3JcpOW3/GnXCk4LWSierpzPP71rXqAjasZmpkPfh30OONjmZPDPr8q+ O/iYrlkzRLAs++3+JJrTwdkU20yqY39pv90EEkCneU/5gO9qqa8QqQvuJbFhCY2E WuCCjFaihjIZYVw= -----END CERTIFICATE-----Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org