$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/B98FDC9C012D11EA99FBD824C4F9AE02.roa File: B98FDC9C012D11EA99FBD824C4F9AE02.roa (raw, json) Hash identifier: 4CDMDervvfKbg91Pt4DNYQyZpzoDFgFlLcdrIby4ls8= Subject key identifier: D6:BD:BF:08:88:73:E5:2D:06:C1:B8:E4:0B:9C:70:39:6F:EB:B2:58 Certificate issuer: /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Certificate serial: 2C31 Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/B98FDC9C012D11EA99FBD824C4F9AE02.roa Signing time: Thu 24 Aug 2023 15:51:54 +0000 ROA not before: Thu 24 Aug 2023 15:51:54 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 63965 IP address blocks: 118.179.10.0/24 maxlen: 24 118.179.11.0/24 maxlen: 24 118.179.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11313 (0x2c31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2 Validity Not Before: Aug 24 15:51:54 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e77c9a-03e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:e8:76:b3:30:a5:e4:c8:93:48:e8:bf:4a: c6:8a:86:f9:27:12:0c:fa:73:16:81:f1:4b:7d:8b: dc:a2:58:cb:c9:ad:fa:5d:87:7c:51:31:58:df:bc: b4:5e:74:27:8c:0e:80:5e:c0:52:26:09:cb:b8:ec: 01:c5:3a:e4:30:58:6e:ce:53:be:7b:bf:8e:22:37: a7:e1:2e:17:04:b3:3f:ec:c0:1e:1c:5e:4a:21:b7: 56:b8:c6:06:80:bd:05:80:40:55:8b:60:2e:eb:36: 8f:10:b5:06:c7:42:bd:ad:84:e6:b1:72:24:eb:9c: 28:e8:50:6b:a2:81:46:5a:36:4e:f3:20:e9:50:bb: cf:2d:50:91:fa:62:1c:b1:ec:be:e3:d8:32:3c:14: 15:8b:e4:b7:00:82:4f:04:27:a5:5e:57:ba:23:57: 8e:17:d9:3d:4c:0c:14:de:5a:d8:88:3e:1a:62:c3: 24:9b:27:74:fd:5b:8d:c0:ce:db:d5:7d:8d:60:b7: 01:58:35:6d:da:a6:84:b2:2e:a4:f5:3a:66:3e:33: 7f:99:70:d8:e4:4f:b6:23:28:cc:e2:af:a0:ea:6f: fc:6e:9b:87:ec:eb:fb:c5:51:c3:28:dc:1a:4f:d9: 22:9f:40:da:34:1d:44:05:0c:44:db:68:60:1b:00: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BD:BF:08:88:73:E5:2D:06:C1:B8:E4:0B:9C:70:39:6F:EB:B2:58 X509v3 Authority Key Identifier: keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/B98FDC9C012D11EA99FBD824C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.179.10.0/23 118.179.13.0/24 Signature Algorithm: sha256WithRSAEncryption af:ae:67:45:2a:10:64:f5:27:0b:4c:70:1b:af:3c:df:6b:be: 7f:32:ef:d4:72:59:75:1d:5d:db:88:f1:93:8a:27:10:cf:39: d2:0f:2c:32:df:a2:f1:8d:c8:0b:a9:8d:ce:cb:37:cd:ed:0c: c9:22:65:e7:5b:58:3c:08:56:1a:7e:94:c9:80:77:bc:93:89: 3f:ce:65:4a:9a:2b:a9:0b:4e:96:53:24:ed:cf:e0:4c:11:94: 42:09:69:c6:27:46:cd:e5:8f:04:6c:79:1d:81:78:3c:dc:ab: 1a:bf:89:63:f9:47:1c:e2:ce:87:fb:be:ba:1a:e8:20:a0:6d: 72:64:62:04:00:89:ee:4c:74:8b:fb:27:bd:6e:49:c4:2d:b9: 04:54:fa:9d:6c:ac:dd:1e:81:f2:06:4a:be:c3:f2:7d:be:6d: f1:1d:6d:16:d6:c2:3a:4a:5c:43:2d:12:6b:8d:b0:24:a0:79: 8f:56:07:39:b4:77:de:b7:75:c9:87:b1:03:64:b1:94:36:24: 9a:4d:a0:20:5c:6b:65:5d:f0:02:5c:60:15:8b:50:56:ce:f6: e6:21:a1:17:8d:58:26:02:53:01:a7:18:c0:c8:a6:cc:55:c5: b2:19:69:b0:7b:b6:86:7c:65:63:e3:cf:1e:4a:59:3e:14:47: 5b:3d:79:69 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICLDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1MjMxMTAvBgNVBAUTKDhBNjgxREQwQzQzNzMxRDBGNDc2M0E0REJERDVENEND MDFGRDY0QzIwHhcNMjMwODI0MTU1MTU0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU3N2M5YS0wM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO3odrMwpeTIk0jov0rGiob5JxIM+nMWgfFLfYvcoljLya36XYd8UTFY37y0 XnQnjA6AXsBSJgnLuOwBxTrkMFhuzlO+e7+OIjen4S4XBLM/7MAeHF5KIbdWuMYG gL0FgEBVi2Au6zaPELUGx0K9rYTmsXIk65wo6FBrooFGWjZO8yDpULvPLVCR+mIc sey+49gyPBQVi+S3AIJPBCelXle6I1eOF9k9TAwU3lrYiD4aYsMkmyd0/VuNwM7b 1X2NYLcBWDVt2qaEsi6k9TpmPjN/mXDY5E+2IyjM4q+g6m/8bpuH7Ov7xVHDKNwa T9kin0DaNB1EBQxE22hgGwC1cQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNa9vwiI c+UtBsG45AuccDlv67JYMB8GA1UdIwQYMBaAFIpoHdDENzHQ9HY6Tb3V1MwB/WTC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzUyMy8xMkI5OTdFODlB RTMxMUUzQTVBMjU3QTc1OTExRUEzMi9pbWdkME1RM01kRDBkanBOdmRYVXpBSDla TUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ltZ2QwTVEzTWREMGRqcE52ZFhVekFIOVpNSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mjc1MjMvMTJCOTk3RTg5QUUzMTFFM0E1QTI1N0E3NTkxMUVBMzIvQjk4RkRDOUMw MTJEMTFFQTk5RkJEODI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAF2swoDBAB2sw0wDQYJKoZIhvcNAQELBQADggEBAK+uZ0Uq EGT1JwtMcBuvPN9rvn8y79RyWXUdXduI8ZOKJxDPOdIPLDLfovGNyAupjc7LN83t DMkiZedbWDwIVhp+lMmAd7yTiT/OZUqaK6kLTpZTJO3P4EwRlEIJacYnRs3ljwRs eR2BeDzcqxq/iWP5Rxzizof7vroa6CCgbXJkYgQAie5MdIv7J71uScQtuQRU+p1s rN0egfIGSr7D8n2+bfEdbRbWwjpKXEMtEmuNsCSgeY9WBzm0d963dcmHsQNksZQ2 JJpNoCBca2Vd8AJcYBWLUFbO9uYhoReNWCYCUwGnGMDIpsxVxbIZabB7toZ8ZWPj zx5KWT4UR1s9eWk= -----END CERTIFICATE-----Generated at Sat May 18 17:20:03 2024 by rpki-client on console-ams.rpki-client.org