$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/0C2CCB529B6D11EF9DC26822C4F9AE02.roa File: 0C2CCB529B6D11EF9DC26822C4F9AE02.roa (raw, json) Hash identifier: 3dvjbuMT8Y0qb48SF6bJUwqEnOmDrnVR3qZ9bmDelg8= Subject key identifier: A9:4D:05:E2:10:8F:F0:10:E9:95:49:08:7E:67:74:E9:F8:C2:03:44 Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Certificate serial: 0F Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/0C2CCB529B6D11EF9DC26822C4F9AE02.roa Signing time: Tue 05 Nov 2024 11:56:53 +0000 ROA not before: Tue 05 Nov 2024 11:56:53 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 2914 IP address blocks: 202.89.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Validity Not Before: Nov 5 11:56:53 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=672a0805-5cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:b6:18:bb:21:ce:ec:07:2b:c0:b0:08:c0: 94:53:60:4a:39:76:79:7b:a6:fa:93:9d:2a:af:49: 27:f9:90:bd:66:d7:31:df:16:99:bd:6c:97:98:ec: 8d:85:68:82:20:14:94:51:26:62:79:c2:87:f2:af: 47:86:ee:7f:1e:06:0e:6e:84:30:bc:dc:18:df:d9: 7b:8c:f1:32:1b:8a:d2:e3:70:76:32:54:d2:d9:0d: 1a:62:b3:54:45:31:93:f5:6c:da:fe:4a:7e:6f:ce: ea:75:7b:09:03:91:d1:fd:a8:df:28:ab:9b:ea:ba: 1c:6f:1b:35:ff:62:62:d6:07:71:58:31:48:8f:a8: f0:5e:d2:9f:f0:e0:44:19:a0:7c:7a:5a:4f:9e:7a: d7:a4:76:e7:4e:3a:a4:d0:43:a5:9e:8b:53:17:76: 9e:c0:3c:62:a0:f9:98:56:44:75:f6:d7:dd:c4:99: 36:97:01:be:7d:cb:67:77:4a:f0:06:5e:86:dc:b6: 55:22:7c:d2:46:bb:ff:ea:c9:f0:b2:be:17:3b:34: 69:79:84:c6:02:2d:f1:2b:08:bb:1a:9b:ee:a1:f2: a4:84:12:95:54:63:90:18:90:92:51:76:ec:c4:e9: 4e:5c:c0:4e:99:b7:ba:04:5f:18:02:be:95:16:ab: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:05:E2:10:8F:F0:10:E9:95:49:08:7E:67:74:E9:F8:C2:03:44 X509v3 Authority Key Identifier: keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/0C2CCB529B6D11EF9DC26822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.89.255.0/24 Signature Algorithm: sha256WithRSAEncryption b9:fe:fc:20:74:62:4a:fc:dd:61:4a:b1:fe:3f:34:1c:b9:a7: d1:4a:51:e4:4b:ed:be:f7:99:22:c7:c5:76:c6:80:d8:7e:64: 6a:bb:f7:03:6d:d5:6c:01:08:4e:57:25:e7:eb:c4:70:37:db: ee:ab:10:17:03:54:7b:ac:6c:bf:ae:b6:59:73:c2:80:e8:db: 54:0b:cc:9f:79:88:50:23:20:40:cc:14:c2:9c:10:f5:36:7a: 56:ba:6b:87:ad:d1:8d:2a:1a:dd:4d:12:fb:9c:d1:de:aa:8a: cf:d1:62:e8:48:8d:62:64:bf:ef:04:07:09:4f:b0:36:e6:48: aa:2d:be:dd:57:7d:8f:8b:a7:58:76:7a:f3:dd:c4:68:26:f6: 6b:1d:31:27:8b:31:cd:f4:c2:96:eb:83:98:5f:cb:33:2e:1b: 8b:8b:2a:07:14:e5:83:2d:7c:e3:11:45:95:34:ac:1d:7d:2f: 49:fd:df:16:80:e3:48:37:9e:a9:73:f9:83:cf:40:03:7f:cc: 75:42:2a:ef:0d:cf:18:ad:9b:58:ad:ad:8f:c0:e9:9e:e6:0e: b3:f0:6d:57:75:ce:de:6d:20:71:7a:b8:35:4e:3c:21:82:3c: fc:9c:c1:c1:ac:3c:a8:6f:04:ce:25:fd:c2:89:c4:0a:e5:34: 97:3f:6f:90 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzM4ODExMC8GA1UEBRMoM0MzNzc1RDlGODdGMEVBQTI5Njg2Njc3NEVBNjJGNjI3 NEQwNjZDQjAeFw0yNDExMDUxMTU2NTNaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmEwODA1LTVjZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3O7YYuyHO7AcrwLAIwJRTYEo5dnl7pvqTnSqvSSf5kL1m1zHfFpm9bJeY7I2F aIIgFJRRJmJ5wofyr0eG7n8eBg5uhDC83Bjf2XuM8TIbitLjcHYyVNLZDRpis1RF MZP1bNr+Sn5vzup1ewkDkdH9qN8oq5vquhxvGzX/YmLWB3FYMUiPqPBe0p/w4EQZ oHx6Wk+eetekdudOOqTQQ6Wei1MXdp7APGKg+ZhWRHX2193EmTaXAb59y2d3SvAG XobctlUifNJGu//qyfCyvhc7NGl5hMYCLfErCLsam+6h8qSEEpVUY5AYkJJRduzE 6U5cwE6Zt7oEXxgCvpUWq52rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqU0F4hCP 8BDplUkIfmd06fjCA0QwHwYDVR0jBBgwFoAUPDd12fh/DqopaGZ3TqYvYnTQZssw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMzg4L0UwRTczNjBBODlG NDExRUZBOTEzQjk1MkM0RjlBRTAyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpz cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUERkMTJmaF9EcW9wYUdaM1RxWXZZblRRWnNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM4OC9FMEU3MzYwQTg5RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi8wQzJDQ0I1MjlC NkQxMUVGOURDMjY4MjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMpZ/zANBgkqhkiG9w0BAQsFAAOCAQEAuf78IHRiSvzdYUqx /j80HLmn0UpR5EvtvveZIsfFdsaA2H5karv3A23VbAEITlcl5+vEcDfb7qsQFwNU e6xsv662WXPCgOjbVAvMn3mIUCMgQMwUwpwQ9TZ6Vrprh63RjSoa3U0S+5zR3qqK z9Fi6EiNYmS/7wQHCU+wNuZIqi2+3Vd9j4unWHZ6893EaCb2ax0xJ4sxzfTCluuD mF/LMy4bi4sqBxTlgy184xFFlTSsHX0vSf3fFoDjSDeeqXP5g89AA3/MdUIq7w3P GK2bWK2tj8DpnuYOs/BtV3XO3m0gcXq4NU48IYI8/JzBwaw8qG8EziX9wonECuU0 lz9vkA== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:35 2024 by rpki-client on console-ams.rpki-client.org