$ rpki-client -vvf rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/EA7000B2ABAA11EAAA93741EC4F9AE02.roa File: EA7000B2ABAA11EAAA93741EC4F9AE02.roa (raw, json) Hash identifier: jRtR6pa7Kbd4t5WQwGEkXAFFvqrdSVQIMkPT9eeq4Sw= Subject key identifier: 01:6C:16:14:74:C6:16:98:BA:A9:C7:28:A2:AD:D6:96:B2:6A:4D:02 Certificate issuer: /CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Certificate serial: 086D Authority key identifier: 67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/EA7000B2ABAA11EAAA93741EC4F9AE02.roa Signing time: Mon 26 Aug 2024 21:29:29 +0000 ROA not before: Mon 26 Aug 2024 21:29:29 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 10127 IP address blocks: 202.124.28.0/24 maxlen: 24 202.124.29.0/24 maxlen: 24 202.124.30.0/24 maxlen: 24 202.124.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2157 (0x86d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114F46/serialNumber=678EBBA2F848E3C8E5F072749005C8415252DB85 Validity Not Before: Aug 26 21:29:29 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66ccf3b8-b3ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:06:4f:cc:35:df:84:51:da:9d:c1:db:5a: 65:2c:dd:1a:51:cb:8c:c2:fe:0d:66:0f:79:65:74: 50:b7:a9:f6:cf:61:0c:cf:c2:4e:1f:de:53:ec:ef: a2:7e:d7:f2:ef:cf:a7:38:3d:4a:93:99:2d:aa:61: 7d:bc:7c:c5:71:75:b0:30:cc:1a:04:6e:a1:3e:14: 0c:de:54:de:f4:b2:00:4b:e8:d0:dd:4d:5f:10:36: 9c:0f:1c:72:99:ab:17:cc:06:d1:0b:e7:41:4d:c4: 34:91:50:0f:00:28:d7:17:7c:36:f9:59:94:34:93: f7:89:ba:3d:2f:cd:a9:d6:26:56:8d:07:b2:5d:49: 47:5f:87:bb:b0:da:b7:5a:e8:ea:d8:fb:4c:93:78: 96:56:80:94:aa:5b:a9:b1:7c:e6:23:cb:2a:90:e2: e7:3a:9b:ba:0a:61:74:e7:2d:c4:79:78:78:75:12: 9d:1b:51:24:9e:03:9e:5c:2e:17:2c:bd:1f:09:1f: 63:ca:74:f9:74:75:11:50:39:3d:fa:bc:ad:6d:bc: 36:3c:6c:58:f5:77:dc:f3:8c:00:dd:ed:56:62:d4: ff:97:35:57:c3:32:a7:af:7d:df:3c:ec:39:b4:a3: 95:8b:ce:f7:c6:dc:b2:3d:6a:a2:1a:4a:45:4c:b2: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:16:14:74:C6:16:98:BA:A9:C7:28:A2:AD:D6:96:B2:6A:4D:02 X509v3 Authority Key Identifier: keyid:67:8E:BB:A2:F8:48:E3:C8:E5:F0:72:74:90:05:C8:41:52:52:DB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/Z467ovhI48jl8HJ0kAXIQVJS24U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z467ovhI48jl8HJ0kAXIQVJS24U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114F46/EFA69510ABA911EA91E5BF1DC4F9AE02/EA7000B2ABAA11EAAA93741EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.124.28.0/22 Signature Algorithm: sha256WithRSAEncryption bb:67:31:c5:11:66:79:fe:59:74:ce:14:9d:96:10:13:8e:61: fe:fe:f3:74:d3:60:cf:5c:46:86:c5:0f:c3:a7:08:60:d6:fe: e6:49:68:40:0b:30:3c:ab:d1:6b:ab:c4:03:19:61:f6:49:30: 40:44:7f:11:87:f0:19:0d:2e:bf:15:8e:0b:c6:9e:74:3a:56: f7:0b:60:0e:e8:ab:36:74:48:f5:3b:ed:23:01:0c:3d:68:aa: 95:ee:8a:bd:7d:49:a9:d5:7f:93:ad:e7:a3:ce:71:3c:aa:d3: ca:9a:f5:c0:09:1d:28:52:53:1e:65:43:14:b3:6d:94:a4:f6: 1b:2e:be:e3:3d:84:b2:a4:77:09:5e:ba:f5:d2:09:c2:a8:01: 1b:d1:c7:3a:02:aa:b4:0a:ba:2f:78:c6:4c:9e:c7:31:03:41: 86:83:b2:ad:03:0c:1c:56:94:1d:9e:3e:4b:b6:93:5f:67:0e: 27:f5:fa:e2:26:6f:3f:64:2c:1e:62:b2:7a:02:b4:33:eb:ea: ab:fa:e1:00:7e:e6:98:2c:a9:2d:10:6d:bd:6e:8f:a5:81:1a: d9:43:ce:84:6f:ed:17:f7:06:04:54:bc:2e:ed:2d:a4:da:ff: fc:cb:38:7d:af:bd:a4:af:af:fa:f5:64:53:fa:7a:8d:1c:22: a1:93:30:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTRGNDYxMTAvBgNVBAUTKDY3OEVCQkEyRjg0OEUzQzhFNUYwNzI3NDkwMDVDODQx NTI1MkRCODUwHhcNMjQwODI2MjEyOTI5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNjZjNiOC1iM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlMGT8w134RR2p3B21plLN0aUcuMwv4NZg95ZXRQt6n2z2EMz8JOH95T7O+i ftfy78+nOD1Kk5ktqmF9vHzFcXWwMMwaBG6hPhQM3lTe9LIAS+jQ3U1fEDacDxxy masXzAbRC+dBTcQ0kVAPACjXF3w2+VmUNJP3ibo9L82p1iZWjQeyXUlHX4e7sNq3 Wujq2PtMk3iWVoCUqlupsXzmI8sqkOLnOpu6CmF05y3EeXh4dRKdG1EkngOeXC4X LL0fCR9jynT5dHURUDk9+rytbbw2PGxY9Xfc84wA3e1WYtT/lzVXwzKnr33fPOw5 tKOVi873xtyyPWqiGkpFTLL4KwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAFsFhR0 xhaYuqnHKKKt1payak0CMB8GA1UdIwQYMBaAFGeOu6L4SOPI5fBydJAFyEFSUtuF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEY0Ni9FRkE2OTUxMEFC QTkxMUVBOTFFNUJGMURDNEY5QUUwMi9aNDY3b3ZoSTQ4amw4SEowa0FYSVFWSlMy NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o0NjdvdmhJNDhqbDhISjBrQVhJUVZKUzI0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTRGNDYvRUZBNjk1MTBBQkE5MTFFQTkxRTVCRjFEQzRGOUFFMDIvRUE3MDAwQjJB QkFBMTFFQUFBOTM3NDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALKfBwwDQYJKoZIhvcNAQELBQADggEBALtnMcURZnn+WXTO FJ2WEBOOYf7+83TTYM9cRobFD8OnCGDW/uZJaEALMDyr0WurxAMZYfZJMEBEfxGH 8BkNLr8VjgvGnnQ6VvcLYA7oqzZ0SPU77SMBDD1oqpXuir19SanVf5Ot56POcTyq 08qa9cAJHShSUx5lQxSzbZSk9hsuvuM9hLKkdwleuvXSCcKoARvRxzoCqrQKui94 xkyexzEDQYaDsq0DDBxWlB2ePku2k19nDif1+uImbz9kLB5isnoCtDPr6qv64QB+ 5pgsqS0Qbb1uj6WBGtlDzoRv7Rf3BgRUvC7tLaTa//zLOH2vvaSvr/r1ZFP6eo0c IqGTMCk= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org