$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67F68132535F11EE9BC85F83C4F9AE02.roa File: 67F68132535F11EE9BC85F83C4F9AE02.roa (raw, json) Hash identifier: 68PnU5mlOA06iDNZ5XmPFrp9fhXfwnla9MbcMx8d36I= Subject key identifier: D2:04:8A:0E:CD:0D:63:FD:9B:A1:C5:EA:DA:CC:3C:DC:9B:7C:86:73 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0C17 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67F68132535F11EE9BC85F83C4F9AE02.roa Signing time: Wed 06 Nov 2024 19:08:51 +0000 ROA not before: Wed 06 Nov 2024 19:08:51 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 4202202331 IP address blocks: 112.137.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3095 (0xc17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 6 19:08:51 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672bbec3-c9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fb:89:24:1e:37:32:3f:3d:a8:2f:8b:32:27: 21:61:00:df:a0:47:a2:46:05:87:55:8c:43:be:65: 3a:cc:8a:11:10:85:12:cb:4a:5f:83:c6:98:de:c8: 32:6e:b7:8c:3b:4d:44:be:da:c7:5e:b0:b6:3e:9a: c3:5d:a5:57:a7:9b:ec:26:4e:2a:00:74:e2:43:94: a8:fe:39:12:63:9f:92:05:63:8f:fe:5e:08:58:28: 0e:a9:58:9b:6e:95:77:3c:72:10:07:60:cb:e3:43: 86:ca:72:e6:bc:d0:51:a1:74:84:64:16:82:ba:d6: 50:80:b0:9b:16:d0:68:12:71:aa:7f:ae:52:05:f5: ed:91:73:34:93:24:cf:08:e5:01:37:3c:cb:e3:7d: 11:89:f1:77:96:3d:ee:e4:9a:54:e3:e0:f4:a9:93: c1:cc:8f:71:b6:bf:84:63:27:d9:12:ed:8a:1e:3c: 5b:94:e7:22:92:a5:f3:a9:43:79:40:c3:a9:84:c6: 4c:7f:d2:7a:9e:34:39:5b:30:33:93:cd:9c:91:89: b3:52:2a:2f:b5:ac:82:79:e7:9e:83:5c:ea:92:c1: b1:7c:1f:a4:24:38:38:52:b2:24:49:9f:1a:9b:7d: 11:e2:f8:73:1e:a8:7b:6d:58:e7:1f:9a:17:a8:59: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:04:8A:0E:CD:0D:63:FD:9B:A1:C5:EA:DA:CC:3C:DC:9B:7C:86:73 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/67F68132535F11EE9BC85F83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.137.166.0/24 Signature Algorithm: sha256WithRSAEncryption 74:69:e1:51:c9:91:d5:e4:4e:36:a2:05:27:26:90:65:d5:90: af:4a:ba:66:9d:7d:b9:be:5d:90:b8:03:d8:dc:2b:f2:19:b5: cf:e1:b5:30:bc:15:95:4d:c9:64:92:e7:33:d7:d8:c0:b3:94: a4:a9:b8:11:29:cd:33:11:a5:80:c3:e1:a8:12:b7:54:0f:62: ae:85:ff:60:02:27:3f:5d:a7:37:08:a4:71:70:9b:18:f4:4c: ac:6c:75:3d:4f:0f:05:cb:6a:5a:36:84:f9:c1:f3:af:b9:fa: de:91:2e:66:31:41:a0:dd:72:63:3c:bc:cf:ef:43:de:cd:ff: 60:31:bd:2c:34:77:b6:66:45:8f:4f:3b:08:08:47:23:0d:8b: 83:47:4c:85:f5:27:6d:b7:7c:9e:8d:53:a7:6c:e1:42:26:c0: eb:a7:6e:63:60:43:30:10:86:1e:67:cb:cf:31:54:ee:1c:5a: 14:7a:f5:d8:7d:c7:be:d6:0e:fc:1a:e3:f9:0d:67:27:19:b9: fc:87:2c:fe:92:41:89:c6:9d:28:f2:8c:9a:ec:8f:4a:41:8b: 77:cc:5d:08:f7:68:2e:cb:be:ed:56:7e:e0:a1:8b:0c:12:6a: d5:43:b5:70:9d:44:c4:4a:16:7a:39:8f:5e:52:15:42:25:38: 69:23:0d:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjQxMTA2MTkwODUxWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYmVjMy1jOWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPuJJB43Mj89qC+LMichYQDfoEeiRgWHVYxDvmU6zIoREIUSy0pfg8aY3sgy breMO01EvtrHXrC2PprDXaVXp5vsJk4qAHTiQ5So/jkSY5+SBWOP/l4IWCgOqVib bpV3PHIQB2DL40OGynLmvNBRoXSEZBaCutZQgLCbFtBoEnGqf65SBfXtkXM0kyTP COUBNzzL430RifF3lj3u5JpU4+D0qZPBzI9xtr+EYyfZEu2KHjxblOcikqXzqUN5 QMOphMZMf9J6njQ5WzAzk82ckYmzUiovtayCeeeeg1zqksGxfB+kJDg4UrIkSZ8a m30R4vhzHqh7bVjnH5oXqFnBYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNIEig7N DWP9m6HF6trMPNybfIZzMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvNjdGNjgxMzI1 MzVGMTFFRTlCQzg1RjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABwiaYwDQYJKoZIhvcNAQELBQADggEBAHRp4VHJkdXkTjai BScmkGXVkK9Kumadfbm+XZC4A9jcK/IZtc/htTC8FZVNyWSS5zPX2MCzlKSpuBEp zTMRpYDD4agSt1QPYq6F/2ACJz9dpzcIpHFwmxj0TKxsdT1PDwXLalo2hPnB86+5 +t6RLmYxQaDdcmM8vM/vQ97N/2AxvSw0d7ZmRY9POwgIRyMNi4NHTIX1J223fJ6N U6ds4UImwOunbmNgQzAQhh5ny88xVO4cWhR69dh9x77WDvwa4/kNZycZufyHLP6S QYnGnSjyjJrsj0pBi3fMXQj3aC7Lvu1WfuChiwwSatVDtXCdRMRKFno5j15SFUIl OGkjDRM= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org