$ rpki-client -vvf rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa File: 525850829D5111EC9F57A656C4F9AE02.roa (raw, json) Hash identifier: UPlqEQ+6yrfO8QwofkgwsJWjOy3datbbZML+kp3Ld7c= Subject key identifier: C7:89:99:42:1F:F8:49:40:75:BD:BF:F4:A9:F2:B6:42:68:A9:AC:B7 Certificate issuer: /CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Certificate serial: 089B Authority key identifier: A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa Signing time: Sat 28 Sep 2024 20:39:50 +0000 ROA not before: Sat 28 Sep 2024 20:39:50 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9441 IP address blocks: 202.58.252.0/24 maxlen: 24 202.58.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174685/serialNumber=A5F065FCC9EDA11DCA4D0DFC6D7C99075298D7FF Validity Not Before: Sep 28 20:39:50 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f86996-5dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:bb:f5:30:59:a0:4b:54:fd:e2:68:4a:cd: ef:9a:13:f2:9c:ef:cb:3b:66:f9:48:32:a8:d6:f4: d1:4c:b1:b9:1e:29:88:b3:56:4b:0f:b3:24:24:bc: 95:08:8a:36:0f:a4:ee:0c:49:7c:95:b7:7f:ba:b5: 0f:2b:69:4a:9f:5e:82:e3:4a:97:e2:bc:78:d0:5d: ed:14:c7:2a:ec:86:85:43:be:07:4d:ec:33:90:57: 1e:68:e1:f5:8b:0c:d2:cf:d8:48:51:2f:e1:9b:1a: a7:ab:fa:9f:9d:46:11:c3:fd:f3:17:1e:d5:73:5a: 9a:57:a5:66:4d:db:4a:9c:3a:1d:7d:4d:0e:9c:bb: 9d:3c:a5:a7:e5:74:b3:fd:b7:cc:01:28:e4:42:da: 86:12:37:f3:c2:25:41:29:52:d0:4a:67:04:24:10: ad:9e:b6:1b:f2:32:64:3d:70:21:29:30:5f:ad:7f: 52:3c:d0:29:6d:20:ce:cb:86:ed:3c:47:ca:a4:b9: fd:78:2f:b2:0f:e6:84:33:e6:b5:88:06:29:9a:98: b4:16:41:d8:9a:9b:ff:44:5a:44:89:40:46:55:f6: 02:e6:73:82:4d:64:39:01:19:ca:0a:28:46:19:50: 05:0b:75:0b:7d:97:1f:ec:d1:b4:c1:ef:7c:39:79: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:89:99:42:1F:F8:49:40:75:BD:BF:F4:A9:F2:B6:42:68:A9:AC:B7 X509v3 Authority Key Identifier: keyid:A5:F0:65:FC:C9:ED:A1:1D:CA:4D:0D:FC:6D:7C:99:07:52:98:D7:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/pfBl_MntoR3KTQ38bXyZB1KY1_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfBl_MntoR3KTQ38bXyZB1KY1_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174685/2D159182A97311EA9AABE923C4F9AE02/525850829D5111EC9F57A656C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.252.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:e3:9e:c1:11:08:60:29:6b:a1:bf:91:d8:28:08:aa:60:d3: fb:86:43:20:22:1c:6b:a1:19:04:4f:73:9d:b5:a2:f9:1d:99: ae:5d:df:82:ae:78:1b:d2:93:a3:9a:43:4e:47:ad:14:99:7d: fe:fd:ee:bf:b9:95:72:1d:36:aa:c6:21:74:24:7b:52:c2:ae: e9:b8:3f:33:b2:97:0f:9c:89:b6:8c:34:a3:5a:c0:08:4a:7f: a2:5b:7f:d4:f6:33:cc:91:f2:c4:82:33:4a:c2:d5:a3:0d:c7: fa:42:06:1f:fd:0a:87:96:2d:1b:d7:9d:48:51:53:cd:8c:83: 93:68:84:61:b0:60:40:96:5b:02:9b:ea:b9:c1:4b:a7:bb:2f: e0:0a:5d:d6:bc:7b:bd:93:84:47:9a:08:8b:03:53:d3:34:67: 08:ff:fd:39:6e:5d:46:a5:63:d0:55:03:8e:31:5a:0b:b5:95: 24:8e:fe:c1:be:e5:5f:21:34:81:42:06:84:06:a7:6c:ad:c0: 00:06:d4:4a:9f:73:36:73:0f:08:d0:3e:48:06:ac:c8:59:78: 25:81:45:1a:a9:c0:64:47:e9:4e:6b:86:85:e7:7a:5a:d7:fd: 61:76:e7:65:77:00:54:0d:bd:a5:9e:e2:f0:04:2b:11:16:3b: fa:a5:bd:1b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ2ODUxMTAvBgNVBAUTKEE1RjA2NUZDQzlFREExMURDQTREMERGQzZEN0M5OTA3 NTI5OEQ3RkYwHhcNMjQwOTI4MjAzOTUwWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4Njk5Ni01ZGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAore79TBZoEtU/eJoSs3vmhPynO/LO2b5SDKo1vTRTLG5HimIs1ZLD7MkJLyV CIo2D6TuDEl8lbd/urUPK2lKn16C40qX4rx40F3tFMcq7IaFQ74HTewzkFceaOH1 iwzSz9hIUS/hmxqnq/qfnUYRw/3zFx7Vc1qaV6VmTdtKnDodfU0OnLudPKWn5XSz /bfMASjkQtqGEjfzwiVBKVLQSmcEJBCtnrYb8jJkPXAhKTBfrX9SPNApbSDOy4bt PEfKpLn9eC+yD+aEM+a1iAYpmpi0FkHYmpv/RFpEiUBGVfYC5nOCTWQ5ARnKCihG GVAFC3ULfZcf7NG0we98OXmGmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMeJmUIf +ElAdb2/9KnytkJoqay3MB8GA1UdIwQYMBaAFKXwZfzJ7aEdyk0N/G18mQdSmNf/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDY4NS8yRDE1OTE4MkE5 NzMxMUVBOUFBQkU5MjNDNEY5QUUwMi9wZkJsX01udG9SM0tUUTM4Ylh5WkIxS1kx XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BmQmxfTW50b1IzS1RRMzhiWHlaQjFLWTFfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzQ2ODUvMkQxNTkxODJBOTczMTFFQTlBQUJFOTIzQzRGOUFFMDIvNTI1ODUwODI5 RDUxMTFFQzlGNTdBNjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHKOvwwDQYJKoZIhvcNAQELBQADggEBAD3jnsERCGApa6G/ kdgoCKpg0/uGQyAiHGuhGQRPc521ovkdma5d34KueBvSk6OaQ05HrRSZff797r+5 lXIdNqrGIXQke1LCrum4PzOylw+cibaMNKNawAhKf6Jbf9T2M8yR8sSCM0rC1aMN x/pCBh/9CoeWLRvXnUhRU82Mg5NohGGwYECWWwKb6rnBS6e7L+AKXda8e72ThEea CIsDU9M0Zwj//TluXUalY9BVA44xWgu1lSSO/sG+5V8hNIFCBoQGp2ytwAAG1Eqf czZzDwjQPkgGrMhZeCWBRRqpwGRH6U5rhoXnelrX/WF252V3AFQNvaWe4vAEKxEW O/qlvRs= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:30 2024 by rpki-client on console-ams.rpki-client.org