$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa File: 1D77B4081BD911EAB49CC840C4F9AE02.roa (raw, json) Hash identifier: jHX60u9ArdYh7GwRrx6uREAMvSVK0+kOgD9fYQ7pbX8= Subject key identifier: 8E:9E:59:11:33:78:11:72:FA:9B:C1:64:A0:80:A5:D8:62:2D:73:CE Certificate issuer: /CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Certificate serial: 0B4B Authority key identifier: 81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa Signing time: Thu 08 Aug 2024 19:27:16 +0000 ROA not before: Thu 08 Aug 2024 19:27:16 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135600 IP address blocks: 45.114.4.0/23 maxlen: 23 45.114.6.0/23 maxlen: 23 103.67.170.0/24 maxlen: 24 103.67.171.0/24 maxlen: 24 202.133.192.0/20 maxlen: 20 202.133.208.0/20 maxlen: 20 203.17.180.0/24 maxlen: 24 203.17.181.0/24 maxlen: 24 203.17.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9/serialNumber=81813D6AF96CF0A0748071CDBB1E270F6B5C6113 Validity Not Before: Aug 8 19:27:16 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b51c14-ced2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2d:c3:74:05:6d:26:41:1a:37:7e:04:dc:54: a9:2b:35:26:5e:e0:d4:a4:17:94:5b:2b:a1:f5:76: 41:da:da:26:d2:b1:5f:14:ca:cd:2c:f7:0b:2a:d0: 1b:27:a2:e1:f4:78:60:7a:e9:6f:8a:81:e3:24:4e: c9:c7:6f:1e:cb:4e:0c:7e:00:d3:70:e8:6b:fb:95: 6f:8e:ce:5d:77:da:e0:d8:3c:a9:2b:d4:60:c2:6d: df:d4:c3:1c:79:b9:c6:fc:fd:ff:d9:57:1d:8d:17: d9:23:f7:c2:19:4a:0d:8e:38:21:92:dc:70:1e:e2: 9d:ed:60:66:6d:3e:37:e2:28:c3:7b:70:20:c5:0e: 29:d9:09:8b:09:26:d5:c2:c0:9c:b9:2a:e6:47:7f: af:84:e6:81:75:3c:85:2f:b7:b5:6a:1f:35:37:d2: 8e:d5:11:2a:1d:56:3b:98:2a:f3:7a:07:70:3a:8b: ff:27:c9:80:2d:67:4f:45:c3:e3:b3:f9:ff:87:ee: c5:47:40:80:ee:7d:fc:81:b5:81:bf:ca:22:36:15: 02:92:63:c8:4c:cb:ad:97:e6:bf:66:ef:db:f4:ca: bf:85:9a:cd:5b:74:b9:11:e7:54:65:72:ed:87:cc: 6f:d5:b3:e3:c5:27:a9:f6:83:a3:d2:27:75:d8:c2: 9b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9E:59:11:33:78:11:72:FA:9B:C1:64:A0:80:A5:D8:62:2D:73:CE X509v3 Authority Key Identifier: keyid:81:81:3D:6A:F9:6C:F0:A0:74:80:71:CD:BB:1E:27:0F:6B:5C:61:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/gYE9avls8KB0gHHNux4nD2tcYRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYE9avls8KB0gHHNux4nD2tcYRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D69B45E81BD511EA80CBCF36C4F9AE02/1D77B4081BD911EAB49CC840C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.4.0/22 103.67.170.0/23 202.133.192.0/19 203.17.180.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:9a:c2:e3:4a:ca:c5:fc:08:ff:ba:01:64:da:61:f7:52:a4: fb:d1:ba:66:e8:98:7b:e2:d6:5b:ef:fb:24:73:b4:73:3f:10: 59:1a:a3:01:93:4a:16:45:bc:03:79:16:97:25:87:df:21:8b: 12:03:8d:c8:21:6d:40:da:e5:ec:bb:58:10:6c:ca:5c:78:83: 6e:b3:77:75:2c:90:4f:11:fb:56:c6:53:69:be:68:a3:5a:e7: ba:b0:3b:ae:cb:41:c1:63:77:56:7f:25:91:4e:6a:4d:c1:58: fc:9b:69:39:2c:ef:76:11:fb:fd:4f:55:0b:e0:a5:af:17:24: bd:f6:98:a1:ac:9e:bd:d2:53:a0:6a:dc:f8:c6:81:88:da:fa: 97:cc:9e:8a:c5:78:c4:12:83:25:30:aa:c4:cf:13:e3:46:7a: 88:35:d5:07:46:63:fb:95:e6:a5:7d:b4:89:e4:c6:ab:6a:3c: 7b:fd:36:1a:32:a9:ec:2e:37:6f:82:b8:6a:c5:ca:8e:16:65: 0b:66:f8:f2:00:2d:35:2c:86:68:d5:c3:81:c9:5a:e6:a0:aa: 34:6b:7b:85:5a:c0:ed:50:b5:54:ea:cc:73:4c:a0:b9:5a:f8: bd:1c:00:3b:3c:2c:02:b0:7b:ed:32:0a:1d:42:11:8c:cc:66: fe:4b:59:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDgxODEzRDZBRjk2Q0YwQTA3NDgwNzFDREJCMUUyNzBG NkI1QzYxMTMwHhcNMjQwODA4MTkyNzE2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI1MWMxNC1jZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvy3DdAVtJkEaN34E3FSpKzUmXuDUpBeUWyuh9XZB2tom0rFfFMrNLPcLKtAb J6Lh9HhgeulvioHjJE7Jx28ey04MfgDTcOhr+5Vvjs5dd9rg2DypK9Rgwm3f1MMc ebnG/P3/2VcdjRfZI/fCGUoNjjghktxwHuKd7WBmbT434ijDe3AgxQ4p2QmLCSbV wsCcuSrmR3+vhOaBdTyFL7e1ah81N9KO1REqHVY7mCrzegdwOov/J8mALWdPRcPj s/n/h+7FR0CA7n38gbWBv8oiNhUCkmPITMutl+a/Zu/b9Mq/hZrNW3S5EedUZXLt h8xv1bPjxSep9oOj0id12MKb9wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFI6eWREz eBFy+pvBZKCApdhiLXPOMB8GA1UdIwQYMBaAFIGBPWr5bPCgdIBxzbseJw9rXGET MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9ENjlCNDVFODFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9nWUU5YXZsczhLQjBnSEhOdXg0bkQydGNZ Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dZRTlhdmxzOEtCMGdISE51eDRuRDJ0Y1lSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDY5QjQ1RTgxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvMUQ3N0I0MDgx QkQ5MTFFQUI0OUNDODQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAItcgQDBAFnQ6oDBAXKhcADBALLEbQwDQYJKoZIhvcNAQEL BQADggEBAAyawuNKysX8CP+6AWTaYfdSpPvRumbomHvi1lvv+yRztHM/EFkaowGT ShZFvAN5Fpclh98hixIDjcghbUDa5ey7WBBsylx4g26zd3UskE8R+1bGU2m+aKNa 57qwO67LQcFjd1Z/JZFOak3BWPybaTks73YR+/1PVQvgpa8XJL32mKGsnr3SU6Bq 3PjGgYja+pfMnorFeMQSgyUwqsTPE+NGeog11QdGY/uV5qV9tInkxqtqPHv9Nhoy qewuN2+CuGrFyo4WZQtm+PIALTUshmjVw4HJWuagqjRre4VawO1QtVTqzHNMoLla +L0cADs8LAKwe+0yCh1CEYzMZv5LWQM= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org