$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8BF60AF817DC11EE959DE671C4F9AE02.roa File: 8BF60AF817DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: kh4hhTCX8Fi9NA+V05arYqEhwsTNSKknNhiVN/VBtTs= Subject key identifier: EE:58:C5:DD:86:75:A1:44:2F:56:BF:69:79:5E:C5:B8:EF:8B:28:9B Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0C1A Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8BF60AF817DC11EE959DE671C4F9AE02.roa Signing time: Wed 06 Nov 2024 19:08:54 +0000 ROA not before: Wed 06 Nov 2024 19:08:54 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 65001 IP address blocks: 202.188.30.0/24 maxlen: 24 202.188.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3098 (0xc1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 6 19:08:54 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672bbec6-3ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:2b:cd:e0:0e:a2:4b:cc:02:af:a4:21:36: 51:89:9e:ef:20:08:a8:47:0b:e8:9c:3c:77:6e:fc: 78:d8:34:08:4c:6f:5c:5d:cc:f6:85:ce:a0:61:64: 15:2e:94:71:ed:7b:0d:44:62:8f:31:6a:07:5c:15: 65:14:62:71:b8:b1:11:9a:aa:ed:5f:34:44:06:1a: 56:17:e4:86:f7:cd:4b:e6:b4:48:f7:a0:d7:08:14: 22:bb:cc:54:d8:6f:cd:db:d0:95:91:17:7c:bb:a1: 0f:04:36:26:ba:83:0b:87:86:5b:7d:57:aa:1a:0b: e5:96:4d:27:5b:3a:07:78:f6:40:59:5c:4b:c0:0e: 1b:1b:5f:2b:60:5f:8c:d2:4d:a8:f6:dc:ab:60:4f: c3:94:95:de:41:13:37:93:70:71:93:55:93:a2:c6: 3e:07:d2:82:35:90:e3:0c:00:fe:9e:92:49:0a:f9: 8b:5f:bb:cf:b2:dd:79:fe:d0:2c:cb:00:68:68:7b: 9f:54:0d:16:f3:41:92:02:a1:24:63:22:02:b2:32: d3:0d:13:d6:f9:f2:6b:e7:28:50:7b:ed:c1:65:a4: 26:2f:19:93:b6:4d:ba:40:e6:e1:0b:a8:0e:db:58: 61:cb:50:06:82:7b:5a:b0:a1:5d:4d:79:f5:f3:9f: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:58:C5:DD:86:75:A1:44:2F:56:BF:69:79:5E:C5:B8:EF:8B:28:9B X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8BF60AF817DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.188.30.0/24 202.188.245.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c5:ad:f5:67:e5:f3:bf:6d:8d:69:ed:f9:a9:18:c7:84:68: 53:a2:45:d7:14:4b:3b:bb:53:3e:62:c0:4c:ea:31:c8:52:f8: 98:e1:fc:c6:42:40:b2:4e:ca:ad:05:84:1e:54:67:84:a0:ce: 79:c9:b7:0a:be:50:1b:e2:c1:f8:16:94:ce:88:87:64:26:b5: d9:d0:7c:98:7d:45:e6:6e:0c:59:c4:05:7d:44:c0:a7:8f:8c: 89:d7:7a:c6:2a:d5:32:5f:90:32:9c:d8:c5:33:e3:e0:ec:c5: 9c:64:8d:61:f7:3a:99:48:97:7d:62:c7:94:af:4d:bd:49:74: 3c:e3:f1:94:2a:11:5a:4c:1c:1b:a5:20:62:3e:2e:ae:40:f3: 81:a7:b7:ba:e5:4d:fe:cf:75:8d:39:bc:23:66:f7:a8:ef:43: 62:d1:13:b3:29:f1:71:7f:37:b1:f2:9b:4d:2f:52:86:cc:95: 90:d3:53:7e:a9:1f:6e:6b:f0:97:c0:da:ab:8c:97:7f:81:b4: df:83:24:41:97:55:35:ef:93:c1:71:d7:cb:62:21:0a:3a:58: 2e:54:70:6f:a5:31:ab:56:2d:6f:2b:cf:64:99:4b:42:e9:0b: 8b:6b:05:80:93:b2:98:dc:9a:b2:f9:a1:2e:e2:bb:8e:df:3b: ce:cb:90:98 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjQxMTA2MTkwODU0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYmVjNi0zYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWMrzeAOokvMAq+kITZRiZ7vIAioRwvonDx3bvx42DQITG9cXcz2hc6gYWQV LpRx7XsNRGKPMWoHXBVlFGJxuLERmqrtXzREBhpWF+SG981L5rRI96DXCBQiu8xU 2G/N29CVkRd8u6EPBDYmuoMLh4ZbfVeqGgvllk0nWzoHePZAWVxLwA4bG18rYF+M 0k2o9tyrYE/DlJXeQRM3k3Bxk1WTosY+B9KCNZDjDAD+npJJCvmLX7vPst15/tAs ywBoaHufVA0W80GSAqEkYyICsjLTDRPW+fJr5yhQe+3BZaQmLxmTtk26QObhC6gO 21hhy1AGgntasKFdTXn185+W8QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO5Yxd2G daFEL1a/aXlexbjviyibMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEJGNjBBRjgx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKvB4DBADKvPUwDQYJKoZIhvcNAQELBQADggEBADnFrfVn 5fO/bY1p7fmpGMeEaFOiRdcUSzu7Uz5iwEzqMchS+Jjh/MZCQLJOyq0FhB5UZ4Sg znnJtwq+UBviwfgWlM6Ih2QmtdnQfJh9ReZuDFnEBX1EwKePjInXesYq1TJfkDKc 2MUz4+DsxZxkjWH3OplIl31ix5SvTb1JdDzj8ZQqEVpMHBulIGI+Lq5A84Gnt7rl Tf7PdY05vCNm96jvQ2LRE7Mp8XF/N7Hym00vUobMlZDTU36pH25r8JfA2quMl3+B tN+DJEGXVTXvk8Fx18tiIQo6WC5UcG+lMatWLW8rz2SZS0LpC4trBYCTspjcmrL5 oS7iu47fO87LkJg= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org