$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa File: F0A6C2D0A55311EE9D25B829C4F9AE02.roa (raw, json) Hash identifier: v1oTBwLg9gGcvspoFHv4mbktoQvrnIyFHsJH3NIYtt0= Subject key identifier: 21:B8:AF:11:1B:0C:8A:6A:32:D0:60:35:8C:32:10:CF:B0:FA:AD:0C Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 02B8 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa Signing time: Mon 13 May 2024 04:08:46 +0000 ROA not before: Mon 13 May 2024 04:08:46 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 22781 IP address blocks: 43.243.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Jun 2024 04:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 13 04:08:46 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6641924e-cc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:44:0d:b7:42:5f:bb:1e:4a:be:fb:93:53: 41:92:36:a9:32:19:cc:81:d9:e7:69:1f:0f:cf:75: c0:28:27:42:d6:bb:03:59:46:91:40:ad:82:fe:3f: 67:29:2b:f1:54:e6:e9:e6:a2:38:55:80:a6:a2:09: 7f:cd:bd:58:c9:9f:bc:eb:a7:96:b7:ab:6a:5f:8c: 24:81:1e:87:35:59:83:5e:af:43:f5:6b:01:da:11: 07:2b:81:28:60:a1:86:57:66:ee:3b:39:34:16:43: 93:1c:06:3b:db:8c:0b:58:c3:b8:08:88:4a:47:10: 34:15:d6:32:b8:de:50:21:96:06:5f:72:92:fa:4f: f1:69:a5:de:16:bb:a9:37:64:75:5a:5e:ca:2c:2e: 4c:55:40:92:50:44:08:0b:13:19:c4:53:99:d2:b3: 92:1d:2c:fb:62:02:ac:ea:89:06:04:df:86:88:fa: 03:d4:0e:9e:e0:db:5f:89:3c:c0:d3:5d:4d:dd:da: c9:5f:be:a6:09:33:a7:f5:ee:48:dc:9f:e2:65:e6: 5a:70:35:a1:d3:94:c3:96:b0:4e:8f:f5:b8:2e:03: c1:bc:9a:25:ff:5d:2a:4e:4d:79:d6:99:86:16:b2: 4d:7f:f9:ca:a3:39:92:12:36:37:bd:76:c8:60:38: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B8:AF:11:1B:0C:8A:6A:32:D0:60:35:8C:32:10:CF:B0:FA:AD:0C X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.194.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:68:d2:21:64:a2:f8:bb:dd:51:23:8b:92:74:55:cb:6b:51: cb:24:f3:2a:ba:62:62:47:d8:7e:03:b0:73:a6:d4:eb:7c:32: 5b:64:17:f1:f4:06:58:53:5a:9c:d1:ae:06:d3:eb:59:ac:1a: 45:b8:d6:39:08:d5:b4:da:dd:48:eb:13:f8:c7:f6:54:fa:1b: 0b:be:de:82:32:ec:55:a0:82:98:ea:65:b5:27:39:07:d7:5a: c3:65:5f:89:75:cb:d5:06:40:90:f3:24:ee:6f:02:a0:a5:ed: 5e:a1:2f:37:d6:6d:27:c1:96:1e:71:68:7e:2f:97:65:8b:0b: 8e:40:c7:84:fd:f4:9a:1a:57:b9:87:8c:b1:7f:8e:3f:c0:41: ab:96:9d:66:f2:fb:f1:6c:15:e8:2b:7f:97:e2:7a:79:c3:9a: 6d:b1:85:5e:85:45:a8:14:c8:60:73:b4:23:74:a8:24:08:aa: 62:da:2b:f1:88:d2:d3:2a:27:c9:f8:bd:91:83:e1:7e:6d:3d: fc:84:d7:8f:99:b0:66:1e:fd:36:60:8b:06:4b:6d:b2:3b:69: e0:55:83:6d:e2:3d:12:24:e1:0f:83:6f:55:34:7b:a2:7b:e3: 5c:f7:05:5d:a1:8b:ce:ee:dc:6b:b7:33:6b:76:20:95:d9:ce: 50:b0:da:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjQwNTEzMDQwODQ2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQxOTI0ZS1jYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOVEDbdCX7seSr77k1NBkjapMhnMgdnnaR8Pz3XAKCdC1rsDWUaRQK2C/j9n KSvxVObp5qI4VYCmogl/zb1YyZ+866eWt6tqX4wkgR6HNVmDXq9D9WsB2hEHK4Eo YKGGV2buOzk0FkOTHAY724wLWMO4CIhKRxA0FdYyuN5QIZYGX3KS+k/xaaXeFrup N2R1Wl7KLC5MVUCSUEQICxMZxFOZ0rOSHSz7YgKs6okGBN+GiPoD1A6e4NtfiTzA 011N3drJX76mCTOn9e5I3J/iZeZacDWh05TDlrBOj/W4LgPBvJol/10qTk151pmG FrJNf/nKozmSEjY3vXbIYDiXawIDAQABo4IClTCCApEwHQYDVR0OBBYEFCG4rxEb DIpqMtBgNYwyEM+w+q0MMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvRjBBNkMyRDBB NTUzMTFFRTlEMjVCODI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr88IwDQYJKoZIhvcNAQELBQADggEBAC9o0iFkovi73VEj i5J0VctrUcsk8yq6YmJH2H4DsHOm1Ot8MltkF/H0BlhTWpzRrgbT61msGkW41jkI 1bTa3UjrE/jH9lT6Gwu+3oIy7FWggpjqZbUnOQfXWsNlX4l1y9UGQJDzJO5vAqCl 7V6hLzfWbSfBlh5xaH4vl2WLC45Ax4T99JoaV7mHjLF/jj/AQauWnWby+/FsFegr f5fiennDmm2xhV6FRagUyGBztCN0qCQIqmLaK/GI0tMqJ8n4vZGD4X5tPfyE14+Z sGYe/TZgiwZLbbI7aeBVg23iPRIk4Q+Db1U0e6J741z3BV2hi87u3Gu3M2t2IJXZ zlCw2tc= -----END CERTIFICATE-----Generated at Mon Jun 3 05:38:35 2024 by rpki-client on console-ams.rpki-client.org