$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F9A2E2817DC11EE959DE671C4F9AE02.roa File: 8F9A2E2817DC11EE959DE671C4F9AE02.roa (raw, json) Hash identifier: sNGI4IjSttFM+bJq5CDyljE79J+Q6/JoAjLErm5ZlOg= Subject key identifier: F2:2E:53:7A:F3:42:A4:A0:90:36:47:31:82:25:8B:4F:85:1A:1A:88 Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Certificate serial: 0C21 Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F9A2E2817DC11EE959DE671C4F9AE02.roa Signing time: Wed 06 Nov 2024 19:09:00 +0000 ROA not before: Wed 06 Nov 2024 19:09:00 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 65530 IP address blocks: 202.188.95.0/24 maxlen: 24 202.188.100.0/24 maxlen: 24 2001:e68:2001:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6 Validity Not Before: Nov 6 19:09:00 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672bbecc-5193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:93:aa:06:f5:89:c1:2a:fd:29:63:25:77: 5a:54:f1:f8:fc:40:db:f9:c8:ae:8a:90:8d:0a:39: 8f:fd:ca:cb:ed:65:8f:cd:a6:fa:a2:0f:ab:09:17: 0d:7f:67:e2:d0:01:0b:7a:ab:df:6f:68:7c:3e:6b: 3b:d0:91:64:bb:44:48:99:83:7d:f9:e3:ba:68:35: f1:9d:c3:dd:24:75:98:1b:b5:5e:78:e8:5d:bf:de: 96:96:60:d7:9b:da:b6:30:2e:93:8c:69:7a:3a:d3: 18:11:f2:41:a3:8c:c5:bc:f0:c7:91:06:c6:0f:e9: 7c:df:f1:46:0a:7e:49:10:81:a5:dd:4e:5f:24:8d: eb:b2:cf:71:4d:20:ef:7d:71:09:16:b7:d3:d4:7a: 11:e9:7f:23:94:b6:7f:a9:2d:14:8a:ea:29:71:3d: f6:39:2d:9b:6d:61:64:23:75:da:52:31:89:22:97: b1:08:5b:7b:55:52:2b:c6:97:79:ca:1e:0b:c4:15: 75:68:f9:cd:82:e6:ec:ae:55:0b:20:50:bd:66:fc: 38:19:e8:eb:db:65:77:7b:f1:d8:e6:bc:68:54:2b: 77:34:52:58:1a:9a:ed:a4:12:a1:7d:ff:89:5f:f3: 7c:66:3c:48:69:44:2e:0e:69:dd:8c:88:1f:b8:05: d8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2E:53:7A:F3:42:A4:A0:90:36:47:31:82:25:8B:4F:85:1A:1A:88 X509v3 Authority Key Identifier: keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/8F9A2E2817DC11EE959DE671C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.188.95.0/24 202.188.100.0/24 IPv6: 2001:e68:2001:1::/64 Signature Algorithm: sha256WithRSAEncryption 8a:34:2a:55:ed:28:be:dc:12:11:04:0e:31:43:e9:8c:84:d7: 89:5a:1a:a4:5f:2a:0f:a2:7d:72:c7:e1:ff:d3:13:b7:24:f9: 77:51:75:05:53:22:ef:99:29:88:b0:ed:65:b2:ea:3e:ea:ec: 7b:38:a7:57:cb:9a:2e:b4:10:15:2b:d4:67:92:bc:48:e4:84: 5d:41:5f:17:dc:a2:16:d5:fb:b2:24:54:db:01:09:ad:08:b4: 11:75:a5:9c:ce:03:d6:91:6a:d9:f2:43:c2:ac:f3:99:4e:c1: 49:ef:6a:9f:67:bd:88:48:b5:61:63:e2:33:4a:38:2e:6c:6a: 32:d8:cc:f1:f3:fa:79:85:bf:54:03:ce:c2:89:3b:46:ce:d4: 09:07:02:1b:0a:e2:9a:6e:25:ab:12:17:4d:7d:b6:74:a9:e8: 92:a9:82:fe:66:86:06:89:0e:5e:dd:77:f7:4b:af:6b:6d:df: b4:5e:dc:bf:3c:15:11:38:a5:78:d5:1d:7b:32:ab:be:b4:cd: ff:d5:fc:e1:25:2c:ae:ff:03:2b:80:41:69:c1:32:1f:7d:3d: 59:3d:c1:36:ff:18:f0:02:57:72:b1:0d:7a:2d:7d:b8:01:7c: 8f:ff:1e:c1:40:6e:64:c8:7b:64:c1:5e:05:b5:74:53:7a:09: 7d:2a:e5:96 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDQwNTYyQzE0M0EyOUNCMTlDNzBGRkM5Qjk5QjYwQkJF Q0QxRDczQjYwHhcNMjQxMTA2MTkwOTAwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYmVjYy01MTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlmTqgb1icEq/SljJXdaVPH4/EDb+ciuipCNCjmP/crL7WWPzab6og+rCRcN f2fi0AELeqvfb2h8Pms70JFku0RImYN9+eO6aDXxncPdJHWYG7VeeOhdv96WlmDX m9q2MC6TjGl6OtMYEfJBo4zFvPDHkQbGD+l83/FGCn5JEIGl3U5fJI3rss9xTSDv fXEJFrfT1HoR6X8jlLZ/qS0UiuopcT32OS2bbWFkI3XaUjGJIpexCFt7VVIrxpd5 yh4LxBV1aPnNgubsrlULIFC9Zvw4Gejr22V3e/HY5rxoVCt3NFJYGprtpBKhff+J X/N8ZjxIaUQuDmndjIgfuAXYoQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFPIuU3rz QqSgkDZHMYIli0+FGhqIMB8GA1UdIwQYMBaAFEBWLBQ6KcsZxw/8m5m2C77NHXO2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC9CRTg4NDZEMjM1 RDgxMUVBQTczMEVDNDZDNEY5QUUwMi9RRllzRkRvcHl4bkhEX3libWJZTHZzMGRj N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FGWXNGRG9weXhuSERfeWJtYllMdnMwZGM3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvQkU4ODQ2RDIzNUQ4MTFFQUE3MzBFQzQ2QzRGOUFFMDIvOEY5QTJFMjgx N0RDMTFFRTk1OURFNjcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMBIEAgABMAwDBADKvF8DBADKvGQwEQQCAAIwCwMJACABDmggAQABMA0GCSqG SIb3DQEBCwUAA4IBAQCKNCpV7Si+3BIRBA4xQ+mMhNeJWhqkXyoPon1yx+H/0xO3 JPl3UXUFUyLvmSmIsO1lsuo+6ux7OKdXy5outBAVK9RnkrxI5IRdQV8X3KIW1fuy JFTbAQmtCLQRdaWczgPWkWrZ8kPCrPOZTsFJ72qfZ72ISLVhY+IzSjgubGoy2Mzx 8/p5hb9UA87CiTtGztQJBwIbCuKabiWrEhdNfbZ0qeiSqYL+ZoYGiQ5e3Xf3S69r bd+0Xty/PBUROKV41R17Mqu+tM3/1fzhJSyu/wMrgEFpwTIffT1ZPcE2/xjwAldy sQ16LX24AXyP/x7BQG5kyHtkwV4FtXRTegl9KuWW -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org