$ rpki-client -vvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa File: 800275E63FF911EB9BC3F51FC4F9AE02.roa (raw, json) Hash identifier: GhXAuDsottF/BTuRuS6OoHwQzw9kjGM2I7psy27j7Nk= Subject key identifier: 97:8C:BE:D1:58:0A:A5:5F:41:1F:4C:EE:08:BC:71:3B:82:ED:68:4A Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Certificate serial: 3490 Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa Signing time: Tue 19 Nov 2024 02:42:21 +0000 ROA not before: Tue 19 Nov 2024 02:42:21 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9280 IP address blocks: 202.60.90.0/24 maxlen: 24 202.60.91.0/24 maxlen: 24 202.131.92.0/24 maxlen: 24 2400:d400:9280::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE Validity Not Before: Nov 19 02:42:21 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=673bfb0d-25cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:5e:63:f9:e8:cf:d0:27:10:60:2c:a5:48: d2:72:c5:e2:32:c1:31:49:b0:05:ce:8d:a1:83:50: dd:95:38:aa:6c:f2:f5:03:ab:fb:00:5e:17:88:22: c3:9c:ab:c4:c5:04:02:9e:27:a6:5b:47:e2:ad:55: db:4a:25:57:9c:66:fd:e7:b7:fa:08:d7:e0:88:58: b1:9b:2c:29:1c:fb:e3:49:a8:26:88:1f:4d:c9:d6: 6a:a6:d9:91:43:f4:d6:9f:d3:e4:51:80:7e:e2:92: d0:77:41:b2:ba:5c:58:99:74:fc:bd:db:4b:bb:56: 02:d4:03:4e:1e:9c:cf:4c:a7:e9:29:c1:7f:1f:2a: 11:cd:68:21:97:12:18:a9:bd:5b:c4:d5:cf:a4:f0: 72:b5:26:05:03:dc:8a:bb:12:25:9b:81:9e:54:39: 76:4d:f0:36:ae:2e:be:2f:e1:76:30:3a:ab:c6:ca: 33:e8:6b:c1:6c:3f:97:01:5c:0e:28:fa:2b:35:fd: db:77:54:cf:05:01:82:ae:c8:48:e7:4e:85:dd:40: 64:7f:0e:10:64:18:ca:b4:25:b8:38:e8:38:db:b0: 60:15:df:e0:0e:5a:4e:82:ac:b3:a6:b3:fe:8c:c4: 83:69:68:c8:93:78:2b:5a:86:7f:24:69:b3:9d:b4: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:BE:D1:58:0A:A5:5F:41:1F:4C:EE:08:BC:71:3B:82:ED:68:4A X509v3 Authority Key Identifier: keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/800275E63FF911EB9BC3F51FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.60.90.0/23 202.131.92.0/24 IPv6: 2400:d400:9280::/48 Signature Algorithm: sha256WithRSAEncryption 68:37:0a:0d:0f:a9:af:d5:f6:83:c5:88:97:9f:d4:3d:3b:a3: d4:18:be:17:72:fe:38:72:e0:45:10:a6:c6:c5:51:5f:66:c2: 26:50:3c:ae:00:99:2e:53:7d:60:e0:9e:0f:f0:87:c6:1d:8b: ff:0c:de:24:d1:fb:e6:1d:f4:8d:56:14:79:b3:e1:c6:ed:44: 01:d4:68:02:ae:ec:0c:84:26:a4:5f:61:d2:26:62:91:04:11: 57:86:dd:a5:3c:08:b1:32:47:b9:db:9c:eb:e4:f8:40:da:17: 21:bb:41:25:3c:f4:f3:15:ea:53:f7:17:fc:37:17:70:4e:92: de:4a:6f:05:83:4e:e4:e7:1b:5e:cc:f9:47:d9:63:67:d4:67: b2:1f:d4:9c:fe:d4:4a:13:55:d4:13:33:06:28:6c:4c:eb:f9: ad:09:91:ea:8c:2c:12:1c:fc:bd:67:86:1c:c0:8f:fb:53:a7: 55:d7:f7:c7:8d:f4:27:42:21:cb:1d:b6:44:43:a7:1d:2f:82: 28:ed:3c:88:e8:8b:f2:12:cc:37:8d:54:c3:eb:d4:c3:b3:fb: e6:1b:30:56:3e:b1:ee:db:0d:3f:ce:85:ad:9b:43:36:65:ad: b2:d0:10:3d:a7:9c:12:8a:e8:03:36:67:f9:e6:c4:9b:a5:35: 4e:75:e5:4c -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZEQkExMTAvBgNVBAUTKEZFRjkxNDNCMTYxNkNEQTExNTlCNTlFQ0Q1RTM5OTNF OTgyNjU0RkUwHhcNMjQxMTE5MDI0MjIxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNiZmIwZC0yNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlpeY/noz9AnEGAspUjScsXiMsExSbAFzo2hg1DdlTiqbPL1A6v7AF4XiCLD nKvExQQCniemW0firVXbSiVXnGb957f6CNfgiFixmywpHPvjSagmiB9NydZqptmR Q/TWn9PkUYB+4pLQd0GyulxYmXT8vdtLu1YC1ANOHpzPTKfpKcF/HyoRzWghlxIY qb1bxNXPpPBytSYFA9yKuxIlm4GeVDl2TfA2ri6+L+F2MDqrxsoz6GvBbD+XAVwO KPorNf3bd1TPBQGCrshI506F3UBkfw4QZBjKtCW4OOg427BgFd/gDlpOgqyzprP+ jMSDaWjIk3grWoZ/JGmznbT3/wIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJeMvtFY CqVfQR9M7gi8cTuC7WhKMB8GA1UdIwQYMBaAFP75FDsWFs2hFZtZ7NXjmT6YJlT+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkRCQS8wNzc4NTFBNDFE OUQxMUUyOTg3Q0VFOEIwOEIwMkNEMi9fdmtVT3hZV3phRVZtMW5zMWVPWlBwZ21W UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL192a1VPeFlXemFFVm0xbnMxZU9aUHBnbVZQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUZEQkEvMDc3ODUxQTQxRDlEMTFFMjk4N0NFRThCMDhCMDJDRDIvODAwMjc1RTYz RkY5MTFFQjlCQzNGNTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAHKPFoDBADKg1wwDwQCAAIwCQMHACQA1ACSgDANBgkqhkiG 9w0BAQsFAAOCAQEAaDcKDQ+pr9X2g8WIl5/UPTuj1Bi+F3L+OHLgRRCmxsVRX2bC JlA8rgCZLlN9YOCeD/CHxh2L/wzeJNH75h30jVYUebPhxu1EAdRoAq7sDIQmpF9h 0iZikQQRV4bdpTwIsTJHuduc6+T4QNoXIbtBJTz08xXqU/cX/DcXcE6S3kpvBYNO 5OcbXsz5R9ljZ9Rnsh/UnP7UShNV1BMzBihsTOv5rQmR6owsEhz8vWeGHMCP+1On Vdf3x430J0Ihyx22REOnHS+CKO08iOiL8hLMN41Uw+vUw7P75hswVj6x7tsNP86F rZtDNmWtstAQPaecEoroAzZn+ebEm6U1TnXlTA== -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:06 2024 by rpki-client on console-ams.rpki-client.org