$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F9A2E2817DC11EE959DE671C4F9AE02.roa File: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: Yl9KuL2olezy0M8W6OSB3cu+FEta0hyZsURFvSpPFbo= Subject key identifier: 29:04:AD:2B:60:2D:E6:DF:72:6B:92:60:86:49:86:18:AD:82:5D:C3 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0AF7 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F9A2E2817DC11EE959DE671C4F9AE02.roa Signing time: Mon 04 Dec 2023 20:08:19 +0000 ROA not before: Mon 04 Dec 2023 20:08:19 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 65530 IP address blocks: 202.188.95.0/24 maxlen: 24 202.188.100.0/24 maxlen: 24 2001:e68:2001:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Dec 4 20:08:19 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=656e31b3-f012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:49:d7:0d:b3:57:ee:20:a8:e1:de:0d:a8: 88:e6:2d:1d:c9:db:ea:6f:8e:83:91:fe:1d:49:58: 40:37:5c:2a:c9:8b:6f:ad:f1:57:da:56:b3:6e:1a: 73:b4:32:ff:b6:77:0d:10:0a:ff:63:c6:61:e7:5f: e4:af:ff:d9:76:60:d4:b5:87:2c:82:65:64:42:55: 07:15:d9:77:27:17:68:77:47:56:9f:f3:bb:60:a6: 1d:98:d4:c0:7a:3e:0d:ba:74:41:d7:42:ac:22:75: 76:b3:6b:02:36:4e:09:14:40:ca:64:2c:44:d4:3b: a0:10:a1:aa:fa:cd:6e:e9:2e:f6:59:cd:7e:e5:d3: 3b:a8:29:bf:6f:93:3a:56:04:ed:65:1b:ff:54:9c: 05:fe:b8:82:ae:b7:0a:65:07:19:09:d2:7a:76:c9: a0:cd:3f:0a:b3:c5:d1:05:d3:b9:92:6c:74:93:65: 9e:8f:f4:49:a5:6d:e8:5b:84:92:80:bb:ae:82:d2: d6:04:e9:5a:5f:1e:c6:ba:23:5c:e2:b3:68:28:c2: 28:47:c1:db:75:78:56:a9:28:c1:83:15:8b:6f:2a: 40:8e:74:c8:7c:eb:82:aa:57:6e:a2:1f:83:b2:f1: 7d:82:0c:89:1e:30:df:5e:da:a8:24:b4:a0:af:5c: 15:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:AD:2B:60:2D:E6:DF:72:6B:92:60:86:49:86:18:AD:82:5D:C3 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F9A2E2817DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.188.95.0/24 202.188.100.0/24 IPv6: 2001:e68:2001:1::/64 Signature Algorithm: sha256WithRSAEncryption a2:4e:0c:fe:6c:d5:2e:77:74:4b:8d:22:12:73:d0:58:da:4a: e1:9d:c3:b2:60:75:47:78:ee:bd:2e:92:33:1d:cf:d5:57:b7: 82:d5:a1:d2:fd:da:d1:46:2c:4e:0d:89:f9:01:a9:1f:52:53: f1:68:63:fb:b8:9c:37:d1:6f:06:8c:ea:8d:0d:21:46:76:61: 49:04:03:d7:f9:bd:82:31:0a:c9:24:96:36:9e:28:a1:fd:bc: 89:37:2c:7e:19:1f:80:6d:25:ca:3a:1e:1b:0c:84:6f:c6:cf: 9f:4f:9f:8a:d7:74:90:9c:a3:7e:f2:55:0e:12:b7:01:fe:27: 2b:a1:16:db:91:b0:87:75:f5:79:37:f4:b9:3c:69:aa:45:ba: a6:33:ea:a1:f8:95:24:98:9e:6c:8e:01:ca:60:96:30:60:1d: b6:cd:1d:8a:9d:5c:42:a0:24:7c:52:ac:ce:13:92:66:d9:61: 5a:c3:af:11:7a:5c:f6:4e:45:8c:3e:7f:c5:8a:f4:f4:a6:26: 18:ae:e1:6a:10:6f:6d:75:eb:6e:5b:28:17:4b:80:b0:c0:aa: d3:4a:b8:e3:a3:d0:cd:66:af:3f:32:ee:16:0c:3b:98:c8:08: fd:12:0a:cc:94:5f:87:c5:8a:7e:fe:11:55:a4:33:18:aa:7f: d3:7a:cd:41 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjMxMjA0MjAwODE5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMzFiMy1mMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUtJ1w2zV+4gqOHeDaiI5i0dydvqb46Dkf4dSVhAN1wqyYtvrfFX2lazbhpz tDL/tncNEAr/Y8Zh51/kr//ZdmDUtYcsgmVkQlUHFdl3Jxdod0dWn/O7YKYdmNTA ej4NunRB10KsInV2s2sCNk4JFEDKZCxE1DugEKGq+s1u6S72Wc1+5dM7qCm/b5M6 VgTtZRv/VJwF/riCrrcKZQcZCdJ6dsmgzT8Ks8XRBdO5kmx0k2Wej/RJpW3oW4SS gLuugtLWBOlaXx7GuiNc4rNoKMIoR8HbdXhWqSjBgxWLbypAjnTIfOuCqlduoh+D svF9ggyJHjDfXtqoJLSgr1wVpwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFCkErStg LebfcmuSYIZJhhitgl3DMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEY5QTJFMjgx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMBIEAgABMAwDBADKvF8DBADKvGQwEQQCAAIwCwMJACABDmggAQABMA0GCSqG SIb3DQEBCwUAA4IBAQCiTgz+bNUud3RLjSISc9BY2krhncOyYHVHeO69LpIzHc/V V7eC1aHS/drRRixODYn5AakfUlPxaGP7uJw30W8GjOqNDSFGdmFJBAPX+b2CMQrJ JJY2niih/byJNyx+GR+AbSXKOh4bDIRvxs+fT5+K13SQnKN+8lUOErcB/icroRbb kbCHdfV5N/S5PGmqRbqmM+qh+JUkmJ5sjgHKYJYwYB22zR2KnVxCoCR8UqzOE5Jm 2WFaw68Relz2TkWMPn/FivT0piYYruFqEG9tdetuWygXS4CwwKrTSrjjo9DNZq8/ Mu4WDDuYyAj9EgrMlF+HxYp+/hFVpDMYqn/Tes1B -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:09 2024 by rpki-client on console-ams.rpki-client.org