$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F1DD9E017DC11EE959DE671C4F9AE02.roa File: 8F1DD9E017DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: arl4UC92qPVUXs/4JsFRSGmU8q2ljxGq2A9CpZD8w3Q= Subject key identifier: 45:99:B7:8E:62:28:0F:6C:03:58:17:06:70:21:53:7B:17:7A:D5:B2 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0C20 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F1DD9E017DC11EE959DE671C4F9AE02.roa Signing time: Wed 06 Nov 2024 19:08:59 +0000 ROA not before: Wed 06 Nov 2024 19:08:59 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 65120 IP address blocks: 1.9.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3104 (0xc20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 6 19:08:59 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672bbecb-0629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:4f:30:78:3f:c5:22:4c:75:67:d1:8b:0f: 44:48:c0:86:fb:97:30:2d:af:be:4a:df:52:a0:19: 18:c6:4b:3e:f5:c1:2a:51:0d:b7:80:af:ba:89:52: ad:88:18:8f:71:1c:2b:24:87:71:e4:9f:9f:1c:d9: c2:b1:1e:4a:f6:d7:0d:88:34:e8:f1:dd:40:b7:9d: ce:cf:5f:47:25:1d:fe:35:f0:23:bb:f3:c3:2e:39: 3d:1c:4d:48:48:71:d4:4c:6f:7c:27:3e:85:e0:2f: 3d:cc:da:4a:d1:20:7a:87:46:73:6b:5f:9f:3e:21: e6:46:93:47:85:cd:ca:bc:74:d1:11:61:f9:76:1e: 66:fc:2f:da:09:12:de:0e:b3:79:40:cb:09:c1:07: 3e:7c:60:45:5a:b6:0d:aa:2a:d8:bb:54:18:e9:75: 93:a5:7e:96:34:61:89:b2:d5:bc:c7:ed:ec:a5:12: 2a:cd:25:de:e8:6d:da:34:cb:42:2e:ac:09:59:7b: 3e:52:e5:54:82:a9:65:07:3a:4a:37:15:5c:68:cd: bd:c9:42:9f:f1:08:d5:a4:f3:c1:06:47:3f:04:e8: 37:92:dc:b2:a7:f0:68:59:37:96:af:7c:f7:de:7e: ab:0d:0d:2d:ef:6c:9f:82:e0:de:ca:3a:14:8b:20: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:99:B7:8E:62:28:0F:6C:03:58:17:06:70:21:53:7B:17:7A:D5:B2 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F1DD9E017DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 1.9.23.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:d1:23:7a:4d:c3:d3:ec:f3:d1:56:d9:56:7f:d7:77:cb:34: a6:d5:3c:e7:70:52:c8:4b:0c:42:34:9f:20:26:0a:63:ae:58: 65:e2:19:2e:6b:b9:af:0d:17:03:35:eb:c9:c8:e5:72:39:50: e2:bf:1d:b2:3a:e8:9d:28:e2:83:29:d2:71:a9:1b:1c:08:e0: e7:22:1e:07:16:aa:f8:cd:e8:76:57:a7:e8:cc:87:0f:21:3f: 60:25:95:2b:ec:88:89:8d:c2:be:42:41:15:b4:76:c1:ec:82: b3:fb:1c:b3:e9:e1:88:24:b2:61:b4:93:18:35:ff:b6:d2:6c: 96:93:99:fe:63:13:1f:a8:09:44:70:ec:46:17:d7:e3:1d:e3: 19:34:60:3a:67:24:d9:33:cc:bb:fa:d6:95:bf:81:27:93:7d: 3e:7c:b3:29:82:88:ef:c8:23:f5:7c:af:b0:de:93:e1:61:e7: ea:7f:20:27:40:93:2f:1f:b6:47:1b:84:2d:12:73:a7:30:ef: e3:74:b5:3a:9c:6f:4d:3d:74:89:f0:3e:ad:4f:17:9e:f2:5f: ce:02:ad:a8:62:35:73:7a:84:2c:b0:7d:36:f9:12:9a:41:36: 0c:da:07:3e:4a:6a:3a:6f:73:80:18:68:5b:bd:25:0d:3d:71: 19:28:aa:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjQxMTA2MTkwODU5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYmVjYi0wNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4JlPMHg/xSJMdWfRiw9ESMCG+5cwLa++St9SoBkYxks+9cEqUQ23gK+6iVKt iBiPcRwrJIdx5J+fHNnCsR5K9tcNiDTo8d1At53Oz19HJR3+NfAju/PDLjk9HE1I SHHUTG98Jz6F4C89zNpK0SB6h0Zza1+fPiHmRpNHhc3KvHTREWH5dh5m/C/aCRLe DrN5QMsJwQc+fGBFWrYNqirYu1QY6XWTpX6WNGGJstW8x+3spRIqzSXe6G3aNMtC LqwJWXs+UuVUgqllBzpKNxVcaM29yUKf8QjVpPPBBkc/BOg3ktyyp/BoWTeWr3z3 3n6rDQ0t72yfguDeyjoUiyCmJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEWZt45i KA9sA1gXBnAhU3sXetWyMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEYxREQ5RTAx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAABCRcwDQYJKoZIhvcNAQELBQADggEBAArRI3pNw9Ps89FW 2VZ/13fLNKbVPOdwUshLDEI0nyAmCmOuWGXiGS5rua8NFwM168nI5XI5UOK/HbI6 6J0o4oMp0nGpGxwI4OciHgcWqvjN6HZXp+jMhw8hP2AllSvsiImNwr5CQRW0dsHs grP7HLPp4YgksmG0kxg1/7bSbJaTmf5jEx+oCURw7EYX1+Md4xk0YDpnJNkzzLv6 1pW/gSeTfT58symCiO/II/V8r7Dek+Fh5+p/ICdAky8ftkcbhC0Sc6cw7+N0tTqc b009dInwPq1PF57yX84CrahiNXN6hCywfTb5EppBNgzaBz5Kajpvc4AYaFu9JQ09 cRkoqiQ= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:21 2024 by rpki-client on console-ams.rpki-client.org