$ rpki-client -vvf rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/2C49CD02723D11EB8F298B41C4F9AE02.roa File: 2C49CD02723D11EB8F298B41C4F9AE02.roa (raw, json) Hash identifier: M+qrH+d4hQUO8WoGFe8+wMrHk3LjUTfGpHtbU5q49ds= Subject key identifier: E5:A2:1C:9B:BB:F1:00:99:9C:4D:1C:4B:3A:9E:31:A8:AB:3A:B7:D1 Certificate issuer: /CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Certificate serial: 3428 Authority key identifier: B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/2C49CD02723D11EB8F298B41C4F9AE02.roa Signing time: Wed 06 Nov 2024 15:31:02 +0000 ROA not before: Wed 06 Nov 2024 15:31:02 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 7467 IP address blocks: 202.134.50.0/24 maxlen: 24 2001:df0:be::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:08:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13352 (0x3428) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177EF0/serialNumber=B5A1D01F7BA2DD454CCBECD3186CE147AFFE1BAE Validity Not Before: Nov 6 15:31:02 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672b8bb6-71b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:61:6f:4a:01:a8:f9:27:bf:e7:32:c3:5e: 16:ad:96:f7:29:bf:40:fd:aa:28:09:e3:81:3e:cd: 7e:f5:1c:f3:dd:31:4a:00:7a:ec:58:b4:da:96:d5: d5:ab:47:0e:7f:36:53:b6:76:df:96:59:d0:c6:9a: 8f:04:62:2d:d3:b9:38:be:27:70:7b:fe:16:71:45: f6:da:73:d1:d6:6e:ed:3f:48:c4:b7:b8:ab:9e:81: 95:9a:32:d1:59:53:1a:5d:1a:d6:f8:25:7b:28:85: ec:cf:b2:d1:ec:07:ac:ca:35:dc:9a:d8:fe:62:98: d2:38:99:a1:28:c7:d9:4d:b9:09:d1:1c:62:c4:31: ad:18:c4:ce:37:c1:d8:cb:12:f4:69:27:39:53:b1: e4:97:8c:cb:d2:92:2d:1e:6e:35:b0:2f:69:d5:9a: 92:12:2d:d9:82:b9:7b:d0:7d:91:58:38:ce:b0:8a: eb:c9:21:ad:a9:35:53:27:ca:d8:3a:80:66:e6:62: 26:1a:e9:dc:4e:2d:10:f6:12:ac:fa:f4:a6:14:23: 33:b3:7d:e2:82:96:e6:bb:ef:8b:7f:04:d7:3f:8a: cb:a0:84:9e:07:46:b1:dd:b8:7c:4d:53:b7:41:17: 1b:9c:6f:6e:3f:d1:0b:8c:b0:16:a2:5c:04:67:a5: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A2:1C:9B:BB:F1:00:99:9C:4D:1C:4B:3A:9E:31:A8:AB:3A:B7:D1 X509v3 Authority Key Identifier: keyid:B5:A1:D0:1F:7B:A2:DD:45:4C:CB:EC:D3:18:6C:E1:47:AF:FE:1B:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/taHQH3ui3UVMy-zTGGzhR6_-G64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/taHQH3ui3UVMy-zTGGzhR6_-G64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177EF0/C0BEF3C01DA211E2AA639E9708B02CD2/2C49CD02723D11EB8F298B41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.134.50.0/24 IPv6: 2001:df0:be::/48 Signature Algorithm: sha256WithRSAEncryption 75:2f:27:ea:df:72:1c:10:b2:77:d5:30:ff:ed:76:39:8c:d8: 64:51:ce:18:f0:54:97:25:cb:54:0b:10:3b:d7:19:48:f4:dd: 9a:9d:11:b4:43:4d:36:cc:2f:2e:23:90:d6:ba:d8:1f:cc:a7: dd:1c:7e:9f:74:e1:c9:03:3d:f8:08:6f:1a:f0:1b:67:0d:1a: ae:08:2d:7d:e6:6f:16:98:de:62:93:26:27:c3:a5:00:b6:eb: 94:d2:0a:a7:3e:5b:5a:d9:3f:5c:98:c1:9d:17:16:86:78:e8: 9c:92:8e:53:fd:5b:fe:51:19:96:b9:02:bd:3f:c8:bb:a3:03: 36:17:7f:21:d9:b4:1a:63:00:71:78:c2:79:81:98:2d:36:8c: 2e:f4:63:6d:e0:8d:12:15:ac:a8:0c:10:5f:0d:49:60:a6:1b: b9:4d:92:8b:c3:5a:83:5a:18:bc:a6:13:84:bc:f2:b5:a1:05: 25:0c:3b:90:4f:98:b8:f6:e8:8b:7a:51:4a:5d:31:8b:80:05: 70:7f:53:c8:30:74:8c:4d:30:83:bc:ee:74:a3:e1:14:38:bd: 8f:4f:d8:56:49:ad:b5:f2:15:d2:f2:7f:be:ee:22:ac:29:c0: 22:ca:98:67:e3:d7:2e:fe:59:11:dd:1c:88:7f:99:fb:a6:6a: 4a:14:19:51 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzdFRjAxMTAvBgNVBAUTKEI1QTFEMDFGN0JBMkRENDU0Q0NCRUNEMzE4NkNFMTQ3 QUZGRTFCQUUwHhcNMjQxMTA2MTUzMTAyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiOGJiNi03MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV5hb0oBqPknv+cyw14WrZb3Kb9A/aooCeOBPs1+9Rzz3TFKAHrsWLTaltXV q0cOfzZTtnbfllnQxpqPBGIt07k4vidwe/4WcUX22nPR1m7tP0jEt7irnoGVmjLR WVMaXRrW+CV7KIXsz7LR7AesyjXcmtj+YpjSOJmhKMfZTbkJ0RxixDGtGMTON8HY yxL0aSc5U7Hkl4zL0pItHm41sC9p1ZqSEi3Zgrl70H2RWDjOsIrrySGtqTVTJ8rY OoBm5mImGuncTi0Q9hKs+vSmFCMzs33igpbmu++LfwTXP4rLoISeB0ax3bh8TVO3 QRcbnG9uP9ELjLAWolwEZ6W7TwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFOWiHJu7 8QCZnE0cSzqeMairOrfRMB8GA1UdIwQYMBaAFLWh0B97ot1FTMvs0xhs4Uev/huu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3N0VGMC9DMEJFRjNDMDFE QTIxMUUyQUE2MzlFOTcwOEIwMkNEMi90YUhRSDN1aTNVVk15LXpUR0d6aFI2Xy1H NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RhSFFIM3VpM1VWTXktelRHR3poUjZfLUc2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzdFRjAvQzBCRUYzQzAxREEyMTFFMkFBNjM5RTk3MDhCMDJDRDIvMkM0OUNEMDI3 MjNEMTFFQjhGMjk4QjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKhjIwDwQCAAIwCQMHACABDfAAvjANBgkqhkiG9w0BAQsF AAOCAQEAdS8n6t9yHBCyd9Uw/+12OYzYZFHOGPBUlyXLVAsQO9cZSPTdmp0RtENN NswvLiOQ1rrYH8yn3Rx+n3ThyQM9+AhvGvAbZw0arggtfeZvFpjeYpMmJ8OlALbr lNIKpz5bWtk/XJjBnRcWhnjonJKOU/1b/lEZlrkCvT/Iu6MDNhd/Idm0GmMAcXjC eYGYLTaMLvRjbeCNEhWsqAwQXw1JYKYbuU2Si8Nag1oYvKYThLzytaEFJQw7kE+Y uPboi3pRSl0xi4AFcH9TyDB0jE0wg7zudKPhFDi9j0/YVkmttfIV0vJ/vu4irCnA IsqYZ+PXLv5ZEd0ciH+Z+6ZqShQZUQ== -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:22 2024 by rpki-client on console-ams.rpki-client.org