$ rpki-client -vvf rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/8CCF47C0E50211EE8E8A4156C4F9AE02.roa File: 8CCF47C0E50211EE8E8A4156C4F9AE02.roa (raw, json) Hash identifier: 3pAbOKyhgObL0Bji+vijkwStbniGqEsVGaDYn8G6gwQ= Subject key identifier: 3C:2E:8A:43:8E:22:44:84:17:D0:73:6C:2A:E3:46:E9:95:E5:A5:E4 Certificate issuer: /CN=A9166AFF/serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Certificate serial: 07 Authority key identifier: 35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/8CCF47C0E50211EE8E8A4156C4F9AE02.roa Signing time: Tue 19 Mar 2024 18:10:26 +0000 ROA not before: Tue 19 Mar 2024 18:10:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 152648 IP address blocks: 202.71.180.0/23 maxlen: 23 202.71.180.0/24 maxlen: 24 202.71.181.0/24 maxlen: 24 2001:df3:8e40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166AFF/serialNumber=357A179CDD0AF9A3FB03E177D6A43FB8A57754E0 Validity Not Before: Mar 19 18:10:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f9d512-5967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:f2:79:71:ff:5c:1f:23:f0:80:b6:b5:4d: d3:a2:29:8a:ee:84:c8:71:eb:5d:94:94:dd:f1:ed: ee:3b:13:a8:6b:6c:7e:58:6c:52:38:8a:fd:d7:aa: 9b:7c:b0:16:77:6e:31:2a:71:df:ca:e9:fc:01:9d: 1b:37:41:33:96:d6:b7:22:1f:d2:19:4d:56:8a:2c: c8:36:0c:28:f0:98:94:5e:c9:ff:16:cf:69:b1:6d: ee:bf:4e:26:ff:3d:e9:59:53:51:75:97:c1:08:c5: 71:ef:68:ee:f4:31:64:50:bb:de:5d:16:c9:17:03: 1a:6f:f0:a2:77:43:0d:a1:0a:b2:40:a5:9e:c7:b5: 9c:39:aa:61:e2:d2:19:aa:18:44:84:e8:11:6c:92: 53:2b:83:8b:61:66:cf:5a:31:dc:60:25:e7:ca:f1: 28:13:c2:16:d1:3b:4d:18:28:88:fa:0f:84:70:d3: 7e:d5:b5:f6:19:98:2d:d4:77:eb:b7:04:df:5b:d1: 50:2e:1b:8e:41:bb:71:da:ca:78:42:12:55:f9:0e: 33:56:20:b9:2b:f1:a8:94:67:de:9a:85:a3:5d:83: a1:3e:52:1a:e7:81:a4:3a:df:b3:4d:71:94:31:29: 69:46:48:ca:3a:1d:ed:32:97:22:f6:fe:e3:59:9d: 67:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2E:8A:43:8E:22:44:84:17:D0:73:6C:2A:E3:46:E9:95:E5:A5:E4 X509v3 Authority Key Identifier: keyid:35:7A:17:9C:DD:0A:F9:A3:FB:03:E1:77:D6:A4:3F:B8:A5:77:54:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/NXoXnN0K-aP7A-F31qQ_uKV3VOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NXoXnN0K-aP7A-F31qQ_uKV3VOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166AFF/40CD1B54E50211EE9ABF7655C4F9AE02/8CCF47C0E50211EE8E8A4156C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.71.180.0/23 IPv6: 2001:df3:8e40::/48 Signature Algorithm: sha256WithRSAEncryption a1:b0:32:b2:1d:8d:a7:3a:0f:18:01:d2:dc:0b:78:8b:ad:0d: b0:c7:91:21:90:45:a2:4d:1e:79:f6:85:c4:2c:90:15:a8:7c: 84:5f:35:65:d5:fe:42:44:a3:a8:ec:4c:3c:ef:eb:13:17:0a: 3f:c7:ce:74:ae:1e:34:7f:1d:06:9d:74:b1:34:a8:5d:01:5b: 35:f6:3e:79:f2:66:a9:89:f7:23:96:4a:f2:07:7e:7f:6f:ce: b0:bd:4c:c4:9c:3c:82:17:83:5e:f1:9a:48:50:05:41:7d:7b: e5:06:48:ed:83:9d:6f:6c:b2:95:64:2c:58:ce:ea:91:1d:85: c8:05:e7:d4:8b:e6:96:ec:6e:73:d1:01:3b:5b:5f:2e:cf:ed: 19:b7:c5:9b:61:48:24:be:de:c6:98:cb:72:18:2f:3e:0e:4c: a9:0d:9a:44:51:8e:ae:6f:c3:bb:b0:35:6f:ff:73:5e:17:19: 0c:40:85:aa:8c:b0:a3:7e:61:d6:df:7a:6e:9c:7e:48:62:19: ee:c3:47:34:ea:17:1f:41:d7:85:6b:1e:2c:00:fc:06:a8:c5: ea:70:d7:b2:27:b0:2e:e5:cc:22:2e:01:d6:79:c1:9f:da:ed: 90:1c:0d:c5:39:77:f2:8d:30:da:5d:1c:6d:80:aa:d2:22:e7: f9:9b:7d:38 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkFGRjExMC8GA1UEBRMoMzU3QTE3OUNERDBBRjlBM0ZCMDNFMTc3RDZBNDNGQjhB NTc3NTRFMDAeFw0yNDAzMTkxODEwMjZaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjlkNTEyLTU5NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXx/J5cf9cHyPwgLa1TdOiKYruhMhx612UlN3x7e47E6hrbH5YbFI4iv3Xqpt8 sBZ3bjEqcd/K6fwBnRs3QTOW1rciH9IZTVaKLMg2DCjwmJReyf8Wz2mxbe6/Tib/ PelZU1F1l8EIxXHvaO70MWRQu95dFskXAxpv8KJ3Qw2hCrJApZ7HtZw5qmHi0hmq GESE6BFsklMrg4thZs9aMdxgJefK8SgTwhbRO00YKIj6D4Rw037VtfYZmC3Ud+u3 BN9b0VAuG45Bu3HaynhCElX5DjNWILkr8aiUZ96ahaNdg6E+UhrngaQ637NNcZQx KWlGSMo6He0ylyL2/uNZnWe/AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUPC6KQ44i RIQX0HNsKuNG6ZXlpeQwHwYDVR0jBBgwFoAUNXoXnN0K+aP7A+F31qQ/uKV3VOAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2QUZGLzQwQ0QxQjU0RTUw MjExRUU5QUJGNzY1NUM0RjlBRTAyL05Yb1huTjBLLWFQN0EtRjMxcVFfdUtWM1ZP QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTlhvWG5OMEstYVA3QS1GMzFxUV91S1YzVk9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NkFGRi80MENEMUI1NEU1MDIxMUVFOUFCRjc2NTVDNEY5QUUwMi84Q0NGNDdDMEU1 MDIxMUVFOEU4QTQxNTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAcpHtDAPBAIAAjAJAwcAIAEN845AMA0GCSqGSIb3DQEBCwUA A4IBAQChsDKyHY2nOg8YAdLcC3iLrQ2wx5EhkEWiTR559oXELJAVqHyEXzVl1f5C RKOo7Ew87+sTFwo/x850rh40fx0GnXSxNKhdAVs19j558mapifcjlkryB35/b86w vUzEnDyCF4Ne8ZpIUAVBfXvlBkjtg51vbLKVZCxYzuqRHYXIBefUi+aW7G5z0QE7 W18uz+0Zt8WbYUgkvt7GmMtyGC8+DkypDZpEUY6ub8O7sDVv/3NeFxkMQIWqjLCj fmHW33punH5IYhnuw0c06hcfQdeFax4sAPwGqMXqcNeyJ7Au5cwiLgHWecGf2u2Q HA3FOXfyjTDaXRxtgKrSIuf5m304 -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org