$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/CF946690E5E711EE89AF4E5AC4F9AE02.roa File: CF946690E5E711EE89AF4E5AC4F9AE02.roa (raw, json) Hash identifier: zy+QFw5iZEfYuF0zeVE4tfDmqgvqeWibFWaXm9tRuko= Subject key identifier: 31:06:8B:C8:47:B9:86:01:55:59:49:DE:3A:49:4B:4E:D5:BF:11:A9 Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1DBC Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/CF946690E5E711EE89AF4E5AC4F9AE02.roa Signing time: Tue 19 Mar 2024 11:57:08 +0000 ROA not before: Tue 19 Mar 2024 11:57:08 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 58659 IP address blocks: 202.179.77.0/24 maxlen: 24 202.179.78.0/24 maxlen: 24 202.179.80.0/24 maxlen: 24 202.179.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 16:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7612 (0x1dbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Mar 19 11:57:08 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65f97d94-8454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7e:1f:7a:81:49:a2:26:d9:8e:23:c9:4e:3a: b6:2c:9e:57:34:88:df:da:22:aa:14:41:52:1c:35: 87:5b:1b:88:81:7e:5a:81:99:be:22:12:e5:52:0d: f3:5d:15:d2:61:c7:18:95:ae:ae:45:b1:ec:ac:12: 0e:67:fa:37:c8:bf:71:82:ec:cc:6d:1d:d4:11:fd: ed:d2:92:eb:1a:ac:53:bd:87:22:dc:49:66:0f:45: f3:75:8e:ff:ea:7d:b0:3c:28:17:ea:ac:42:10:18: 78:fe:4b:e3:94:bd:7f:de:f6:11:ba:51:69:c5:4f: 16:85:f9:da:0c:99:2c:ba:4a:70:27:ad:81:46:d4: ca:3c:94:47:06:ca:5c:a4:c0:e6:8b:35:04:8d:ff: d2:2b:af:18:e4:3d:c3:95:52:8b:a5:9e:fa:8e:18: fb:92:16:1e:86:85:18:8d:1e:63:59:49:8c:a8:aa: 3f:c6:cd:19:c9:28:9b:86:ef:67:14:91:23:79:a7: aa:f6:91:da:0c:be:9d:c8:6b:f8:5b:81:a2:4b:ac: 23:4c:36:c8:df:68:8a:df:26:53:b5:dd:d3:d5:49: 0c:ab:14:cf:78:cb:d6:8e:80:53:22:4f:e2:b1:eb: d8:78:57:b7:5d:c3:be:67:73:6b:c7:cb:db:68:93: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:06:8B:C8:47:B9:86:01:55:59:49:DE:3A:49:4B:4E:D5:BF:11:A9 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/CF946690E5E711EE89AF4E5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.77.0-202.179.78.255 202.179.80.0/24 202.179.89.0/24 Signature Algorithm: sha256WithRSAEncryption c4:11:16:20:c8:e9:80:a7:cd:dd:ac:83:e2:a7:d7:73:13:29: 29:78:44:2e:94:26:22:95:27:da:5e:c0:36:1e:98:c6:f5:e1: 4f:2e:87:fc:2e:62:8c:17:f5:1b:3e:ef:b9:da:74:14:0c:7a: bb:0c:5e:52:d4:f5:a1:03:78:21:5d:2c:08:eb:89:b7:7b:3f: be:76:6c:f1:7e:6e:cd:e4:92:71:8e:99:ea:3d:7e:c2:f6:4a: 08:86:33:5e:30:28:c7:23:74:7a:b7:4a:40:c9:8a:8a:24:6c: ea:a6:58:e7:f6:6c:24:02:1b:7b:54:e4:74:d1:98:1b:88:27: c4:35:67:0f:23:d6:60:41:d6:5f:f0:19:21:dd:5e:92:18:29: 3d:ef:35:f5:9a:8c:f0:3d:08:cf:29:74:63:75:aa:9f:30:0f: f0:80:05:ce:64:43:25:75:e1:8c:66:dd:89:26:43:d5:b6:c3: fb:3b:23:21:f1:66:7d:b8:78:2f:86:0d:ac:bd:f1:6a:5a:68: c0:bf:5b:c1:9d:b5:8d:bb:ff:83:92:88:07:74:e7:f0:10:26: 71:49:16:e0:2c:1e:eb:66:f3:01:e7:96:26:89:13:1b:83:d1: dc:ec:ba:63:ad:9d:20:b0:c6:3e:37:30:9b:c2:c6:2f:43:e9: 6d:ad:d0:ac -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICHbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjQwMzE5MTE1NzA4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY5N2Q5NC04NDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5n4feoFJoibZjiPJTjq2LJ5XNIjf2iKqFEFSHDWHWxuIgX5agZm+IhLlUg3z XRXSYccYla6uRbHsrBIOZ/o3yL9xguzMbR3UEf3t0pLrGqxTvYci3ElmD0XzdY7/ 6n2wPCgX6qxCEBh4/kvjlL1/3vYRulFpxU8WhfnaDJksukpwJ62BRtTKPJRHBspc pMDmizUEjf/SK68Y5D3DlVKLpZ76jhj7khYehoUYjR5jWUmMqKo/xs0ZySibhu9n FJEjeaeq9pHaDL6dyGv4W4GiS6wjTDbI32iK3yZTtd3T1UkMqxTPeMvWjoBTIk/i sevYeFe3XcO+Z3Nrx8vbaJN16QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFDEGi8hH uYYBVVlJ3jpJS07VvxGpMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFFNUYvOEI3OUI2Nzg4ODUxMTFFNkE2OTJERTc4QzRGOUFFMDIvQ0Y5NDY2OTBF NUU3MTFFRTg5QUY0RTVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAMqzTQMEAMqzTgMEAMqzUAMEAMqzWTANBgkqhkiG9w0B AQsFAAOCAQEAxBEWIMjpgKfN3ayD4qfXcxMpKXhELpQmIpUn2l7ANh6YxvXhTy6H /C5ijBf1Gz7vudp0FAx6uwxeUtT1oQN4IV0sCOuJt3s/vnZs8X5uzeSScY6Z6j1+ wvZKCIYzXjAoxyN0erdKQMmKiiRs6qZY5/ZsJAIbe1TkdNGYG4gnxDVnDyPWYEHW X/AZId1ekhgpPe819ZqM8D0Izyl0Y3WqnzAP8IAFzmRDJXXhjGbdiSZD1bbD+zsj IfFmfbh4L4YNrL3xalpowL9bwZ21jbv/g5KIB3Tn8BAmcUkW4Cwe62bzAeeWJokT G4PR3Oy6Y62dILDGPjcwm8LGL0Ppba3QrA== -----END CERTIFICATE-----Generated at Fri Jun 14 18:52:09 2024 by rpki-client on console-fra.rpki-client.org