$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/A2F568A08CDC11EEA05B6E55C4F9AE02.roa File: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (raw, json) Hash identifier: VC/skDThQftldVbspNHCislgZHfc7Kw5lpI8wDN6suI= Subject key identifier: 21:47:8F:37:21:0E:3B:89:93:12:83:7E:46:EE:ED:45:1B:A2:B7:27 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 22 Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/A2F568A08CDC11EEA05B6E55C4F9AE02.roa Signing time: Wed 17 Jan 2024 07:08:57 +0000 ROA not before: Wed 17 Jan 2024 07:08:56 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 4768 IP address blocks: 202.49.252.0/22 maxlen: 22 202.49.252.0/24 maxlen: 24 202.49.253.0/24 maxlen: 24 202.49.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Jan 17 07:08:56 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a77d08-7ce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8e:d3:8b:df:4c:00:c9:b1:b1:c2:63:9e:cd: 6b:8b:34:e2:41:e5:77:40:f2:2a:34:27:e0:25:20: 02:6a:d0:ab:53:26:75:c5:9e:0b:4b:01:dc:16:fc: 9a:91:35:1d:0f:48:2f:e3:4e:15:93:ac:dc:32:a8: 5a:18:e8:11:ff:d4:55:11:1e:97:ba:dc:3c:bf:50: ee:c3:e4:81:6b:bb:78:66:53:27:b0:27:dc:ac:cf: 3c:fa:c9:2f:4a:70:aa:eb:ec:93:44:ee:74:79:2d: e4:bf:48:0a:f8:9d:51:33:90:f9:95:ce:5d:38:44: 14:25:3e:50:b6:05:a5:56:6b:40:bc:1c:4d:83:38: 0d:b0:ed:cd:ab:71:fd:db:3b:e6:40:1e:5f:63:15: 29:cc:45:6f:29:8a:19:fe:18:3d:37:1d:ff:ee:aa: 07:49:e7:46:bf:49:55:94:d5:d8:17:73:28:8d:eb: 0b:e4:5d:21:d1:52:be:a4:b4:03:06:e3:a0:bc:19: 8a:d9:14:3c:58:d5:ec:f1:f5:27:6a:d2:7f:3b:2b: 99:6c:48:b2:aa:41:43:4b:f5:70:58:66:88:b8:87: b6:ab:1e:d8:26:56:fa:da:0f:0e:81:d6:51:44:bc: 03:02:c7:1d:57:08:6f:eb:06:66:00:1a:9f:0a:bd: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:47:8F:37:21:0E:3B:89:93:12:83:7E:46:EE:ED:45:1B:A2:B7:27 X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/A2F568A08CDC11EEA05B6E55C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.49.252.0/22 Signature Algorithm: sha256WithRSAEncryption 73:7a:9a:43:28:37:ad:7b:ae:b0:e3:43:2b:15:fd:01:c3:23: f3:ab:35:ef:50:e7:91:b8:1f:07:e4:68:d2:6b:35:1b:f8:7c: 3a:8f:7d:18:06:f1:03:52:51:2c:36:16:08:ad:58:d2:6b:f5: 26:8f:e5:15:2d:39:35:be:18:3e:28:b6:01:27:b2:ac:38:ed: 41:5a:77:d6:a9:1c:1b:a1:bc:e1:3a:3e:ee:c0:d4:b2:f0:d3: 80:3d:56:b5:1d:41:85:e6:b8:5d:1f:18:6f:54:87:16:7b:a7: 36:75:53:17:f5:98:5f:d8:f2:6b:a3:ff:00:a0:15:69:4f:5f: 22:45:8e:f0:d6:82:f6:63:c1:79:47:8a:a7:14:70:9b:0d:92: 43:d5:08:73:b7:f4:30:56:64:20:ba:93:03:bc:e4:31:1f:3c: d5:ab:ac:66:56:f7:71:16:4f:fc:c9:2b:65:0c:3e:7c:e6:e5: 34:0c:b9:87:5e:5a:19:33:b2:3e:30:a9:b2:07:ac:19:0b:6d: 43:df:47:c8:bd:48:07:9f:a1:c1:2a:a0:3c:2e:25:86:3f:7b: 37:54:16:4b:9c:e1:ca:a0:05:01:dc:39:f5:58:4e:20:92:47: 5a:ef:20:f7:52:f3:18:a9:bb:03:6d:c3:28:f8:db:94:58:ac: 5b:3c:e1:5e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy N0MyRDExMC8GA1UEBRMoOEI2NUE1Mjk0Mzc3RDY4NjM3OEM0NkIzRTlEQUQ3Q0RC NUI2Njc5MTAeFw0yNDAxMTcwNzA4NTZaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YTc3ZDA4LTdjZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhjtOL30wAybGxwmOezWuLNOJB5XdA8io0J+AlIAJq0KtTJnXFngtLAdwW/JqR NR0PSC/jThWTrNwyqFoY6BH/1FURHpe63Dy/UO7D5IFru3hmUyewJ9yszzz6yS9K cKrr7JNE7nR5LeS/SAr4nVEzkPmVzl04RBQlPlC2BaVWa0C8HE2DOA2w7c2rcf3b O+ZAHl9jFSnMRW8pihn+GD03Hf/uqgdJ50a/SVWU1dgXcyiN6wvkXSHRUr6ktAMG 46C8GYrZFDxY1ezx9Sdq0n87K5lsSLKqQUNL9XBYZoi4h7arHtgmVvraDw6B1lFE vAMCxx1XCG/rBmYAGp8Kvfo3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUIUePNyEO O4mTEoN+Ru7tRRuitycwHwYDVR0jBBgwFoAUi2WlKUN31oY3jEaz6drXzbW2Z5Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3QzJELzlFMzlGOTM2OEM5 RTExRUU4N0M4RUU3OEM0RjlBRTAyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaTJXbEtVTjMxb1kzakVhejZkclh6YlcyWjVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9BMkY1NjhBMDhD REMxMUVFQTA1QjZFNTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsox/DANBgkqhkiG9w0BAQsFAAOCAQEAc3qaQyg3rXuusOND KxX9AcMj86s171DnkbgfB+Ro0ms1G/h8Oo99GAbxA1JRLDYWCK1Y0mv1Jo/lFS05 Nb4YPii2ASeyrDjtQVp31qkcG6G84To+7sDUsvDTgD1WtR1Bhea4XR8Yb1SHFnun NnVTF/WYX9jya6P/AKAVaU9fIkWO8NaC9mPBeUeKpxRwmw2SQ9UIc7f0MFZkILqT A7zkMR881ausZlb3cRZP/MkrZQw+fOblNAy5h15aGTOyPjCpsgesGQttQ99HyL1I B5+hwSqgPC4lhj97N1QWS5zhyqAFAdw59VhOIJJHWu8g91LzGKm7A23DKPjblFis WzzhXg== -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:01 2024 by rpki-client on console-ams.rpki-client.org