$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8DB5B2BC17DC11EE959DE671C4F9AE02.roa File: 8DB5B2BC17DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: MguY1LKJId1HYSlEXbAggDAGkLijqrW5pIMGHPUFAxQ= Subject key identifier: 72:42:24:01:22:8B:2E:D1:50:8C:D5:97:AA:E8:D6:51:59:FE:01:49 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0AF3 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8DB5B2BC17DC11EE959DE671C4F9AE02.roa Signing time: Mon 04 Dec 2023 20:08:16 +0000 ROA not before: Mon 04 Dec 2023 20:08:16 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 65040 IP address blocks: 218.208.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Dec 4 20:08:16 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656e31af-d1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:20:af:85:ac:73:b8:e5:2a:3e:04:7f:db: 70:90:12:fc:30:12:32:b1:fb:55:76:65:5f:ef:dc: cb:58:ba:6e:cd:0b:eb:66:10:87:40:fc:ee:ed:ef: b6:ba:ec:83:13:7c:be:ad:d5:15:83:d6:33:be:61: a2:0c:a3:9c:d2:97:e1:91:91:a4:27:12:d7:d0:ac: 3c:d8:6a:cd:8d:99:c6:49:50:73:36:95:08:11:a4: 13:0f:ab:b1:88:8c:65:9e:76:4c:4b:97:df:2b:20: 23:39:91:b6:ab:70:85:00:80:e2:17:1f:35:87:5f: 62:1e:99:d1:87:6a:a1:52:69:b4:8e:33:34:ee:d1: 7a:f7:1e:98:7d:60:74:59:49:1c:6c:1c:74:f5:29: a5:60:5d:1f:15:39:f5:97:17:2f:f4:80:02:1a:af: b4:79:04:1d:02:5b:5c:5a:8a:78:e9:3c:3a:0f:86: e4:94:bc:05:98:60:8c:f3:c4:4f:da:4a:57:e2:2b: cd:66:92:07:8c:a2:e8:7f:da:2c:6b:d6:71:b2:c8: 86:7e:7f:0c:83:67:34:88:15:da:e7:b5:e1:50:06: 32:47:a0:4d:d3:5b:59:42:6b:8d:9c:7a:1c:1a:d1: a3:c9:61:02:ab:6a:da:23:82:de:80:76:ae:a5:9e: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:42:24:01:22:8B:2E:D1:50:8C:D5:97:AA:E8:D6:51:59:FE:01:49 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8DB5B2BC17DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 218.208.39.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:ac:b5:f0:fc:71:65:c9:78:db:ec:75:01:a3:ba:f4:45:5a: c4:f5:d7:14:09:5b:42:67:09:46:20:dc:ea:34:51:1d:f9:a6: f8:36:10:1c:19:28:2f:73:5f:6d:09:a3:e8:bf:3a:72:a9:4f: 72:fa:22:98:58:18:00:58:6c:d4:1e:a1:cd:e7:17:1b:c9:25: bd:88:4d:a2:7a:b5:60:38:af:6c:76:c5:3f:19:6b:53:be:bd: 64:f4:0c:19:07:e8:75:86:54:1c:fe:9b:4d:fc:ca:d2:3f:5a: 64:e4:d9:97:49:1b:ad:eb:7c:89:fe:ff:d3:20:5d:76:ae:9b: 78:d3:70:f7:5b:fc:3b:71:11:25:09:62:bd:c8:5a:7d:2d:74: e7:99:6d:a6:c1:d8:34:bc:15:af:c6:5a:59:45:28:f1:c0:e6: 5e:06:4e:e5:46:db:93:de:67:1d:e8:03:fb:b1:a1:c4:f8:67: a0:2b:dd:3e:37:de:65:d7:8f:d1:d0:be:77:c6:53:01:4a:89: c8:92:1d:66:2c:17:19:21:42:67:7f:d8:9b:b8:75:9e:4b:54: fe:36:82:89:e8:ed:91:13:7c:1a:a6:48:39:5c:50:b5:20:64: 8e:37:23:84:b5:a0:46:7c:e5:ac:10:67:eb:9f:49:d7:a9:03: 2f:26:a7:fa -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjMxMjA0MjAwODE2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMzFhZi1kMWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthwgr4Wsc7jlKj4Ef9twkBL8MBIysftVdmVf79zLWLpuzQvrZhCHQPzu7e+2 uuyDE3y+rdUVg9YzvmGiDKOc0pfhkZGkJxLX0Kw82GrNjZnGSVBzNpUIEaQTD6ux iIxlnnZMS5ffKyAjOZG2q3CFAIDiFx81h19iHpnRh2qhUmm0jjM07tF69x6YfWB0 WUkcbBx09SmlYF0fFTn1lxcv9IACGq+0eQQdAltcWop46Tw6D4bklLwFmGCM88RP 2kpX4ivNZpIHjKLof9osa9ZxssiGfn8Mg2c0iBXa57XhUAYyR6BN01tZQmuNnHoc GtGjyWECq2raI4LegHaupZ7qcQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHJCJAEi iy7RUIzVl6ro1lFZ/gFJMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOERCNUIyQkMx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADa0CcwDQYJKoZIhvcNAQELBQADggEBAGqstfD8cWXJeNvs dQGjuvRFWsT11xQJW0JnCUYg3Oo0UR35pvg2EBwZKC9zX20Jo+i/OnKpT3L6IphY GABYbNQeoc3nFxvJJb2ITaJ6tWA4r2x2xT8Za1O+vWT0DBkH6HWGVBz+m038ytI/ WmTk2ZdJG63rfIn+/9MgXXaum3jTcPdb/DtxESUJYr3IWn0tdOeZbabB2DS8Fa/G WllFKPHA5l4GTuVG25PeZx3oA/uxocT4Z6Ar3T433mXXj9HQvnfGUwFKiciSHWYs FxkhQmd/2Ju4dZ5LVP42gono7ZETfBqmSDlcULUgZI43I4S1oEZ85awQZ+ufSdep Ay8mp/o= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:09 2024 by rpki-client on console-ams.rpki-client.org