$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/06B76AE05AC911EF9DF4275AC4F9AE02.roa File: 06B76AE05AC911EF9DF4275AC4F9AE02.roa (raw, json) Hash identifier: p2h51oKfWEnIrxeQceDN5JWcokM71oAHp5D24ePE5rk= Subject key identifier: 92:BE:F0:9E:ED:7E:FF:6F:7E:DB:04:5B:69:F0:7B:9A:19:8B:0D:36 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: 06 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/06B76AE05AC911EF9DF4275AC4F9AE02.roa Signing time: Thu 15 Aug 2024 05:41:32 +0000 ROA not before: Thu 15 Aug 2024 05:41:32 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 9790 IP address blocks: 202.160.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Aug 15 05:41:32 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66bd950c-3411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:f9:b4:83:df:e2:05:9b:7c:2b:80:1a:32: 7d:15:36:8e:7c:dc:db:6a:23:2e:af:4e:0c:fa:f8: 33:2f:df:99:fd:81:97:55:23:e4:63:76:90:b7:53: aa:dc:d4:72:85:c5:6a:06:bf:23:f0:3e:a2:31:af: 02:85:36:91:58:6d:c9:fa:55:b9:05:15:5b:02:e5: f5:4f:ec:89:32:11:56:b2:a8:b0:5a:a0:06:5d:da: 99:8a:27:4a:4f:e3:54:a7:79:1d:da:58:88:66:49: 17:7b:2b:8a:89:38:65:f1:3a:66:5c:b6:2e:c0:13: 56:1d:a1:8a:87:e7:a4:8d:2b:7e:20:0f:78:2d:12: 5b:00:2c:54:3e:06:0a:ef:bc:c6:ec:6f:e5:6d:f3: 0d:36:90:91:a2:e2:9b:83:ee:58:f4:a2:71:0b:19: d5:f1:8e:f1:7e:a0:17:eb:cc:80:dd:1d:82:a4:db: ef:5d:f2:80:74:1c:e8:d4:7d:2f:c3:e8:cb:49:fe: b8:fb:0d:2e:6e:8c:a4:2b:14:b1:9e:28:af:3f:b9: e4:6c:12:c4:da:96:77:d4:b3:1a:05:10:f8:40:bd: f5:36:7b:20:55:d6:46:31:8c:89:00:e3:2e:d5:b7: d2:36:b3:97:17:f6:3c:fd:e1:1c:83:1c:a2:83:dc: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:BE:F0:9E:ED:7E:FF:6F:7E:DB:04:5B:69:F0:7B:9A:19:8B:0D:36 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/06B76AE05AC911EF9DF4275AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.160.118.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:bd:ed:2e:d7:9d:4e:eb:e8:18:38:2f:10:fb:f2:50:61:c9: a3:98:4e:ad:99:c8:86:b1:33:5a:02:d9:1b:9c:76:0d:a6:4c: fa:5a:5a:a3:45:db:f0:94:f5:78:14:33:cc:f2:65:b1:6e:01: 38:ca:b3:21:ab:d6:ea:f6:ea:2b:09:19:d8:c9:7f:93:b2:6f: 74:a5:41:ba:09:07:57:a9:5a:42:cb:ef:97:05:4a:92:d3:14: 1a:89:f9:e2:0b:ce:34:7e:61:5e:3b:6e:fc:7b:49:53:38:28: d5:b7:f0:f5:38:57:e8:3d:91:27:d7:7b:32:d7:e0:b2:94:d5: eb:7e:0f:0a:ea:bc:4f:a6:3c:b1:2f:5a:74:58:55:c1:eb:f9: 10:b9:0a:b2:b0:de:95:0e:3f:bc:36:c4:a1:b9:d2:6c:a5:54: 28:8f:cb:36:79:51:e7:db:2e:9f:67:1b:bf:42:6f:a2:b2:fc: aa:f8:9d:fb:3e:48:08:12:e6:03:fd:f1:b7:6d:e0:41:58:66: 67:24:90:df:fb:eb:d7:d3:08:8b:a7:e6:48:3a:86:c7:07:7a: d0:f5:31:be:1a:9c:d7:b3:81:4d:e5:27:e6:82:4d:e0:a6:93: c7:f7:64:2c:fd:4c:4c:c5:62:c6:0e:23:29:fd:f7:81:08:d7: 90:99:38:21 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REYyNTExMC8GA1UEBRMoOTY4MzU0NTBEMzIxQzFFN0M0OENBMEM1RENEMkJBNkMx RDJENDhGMTAeFw0yNDA4MTUwNTQxMzJaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmQ5NTBjLTM0MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFcfm0g9/iBZt8K4AaMn0VNo583NtqIy6vTgz6+DMv35n9gZdVI+RjdpC3U6rc 1HKFxWoGvyPwPqIxrwKFNpFYbcn6VbkFFVsC5fVP7IkyEVayqLBaoAZd2pmKJ0pP 41SneR3aWIhmSRd7K4qJOGXxOmZcti7AE1YdoYqH56SNK34gD3gtElsALFQ+Bgrv vMbsb+Vt8w02kJGi4puD7lj0onELGdXxjvF+oBfrzIDdHYKk2+9d8oB0HOjUfS/D 6MtJ/rj7DS5ujKQrFLGeKK8/ueRsEsTalnfUsxoFEPhAvfU2eyBV1kYxjIkA4y7V t9I2s5cX9jz94RyDHKKD3BYvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUkr7wnu1+ /29+2wRbafB7mhmLDTYwHwYDVR0jBBgwFoAUloNUUNMhwefEjKDF3NK6bB0tSPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERjI1LzdGN0IxREFDNUFD NzExRUY5OUVBRkM0M0M0RjlBRTAyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9OVVVOTWh3ZWZFaktERjNOSzZiQjB0U1BFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi8wNkI3NkFFMDVB QzkxMUVGOURGNDI3NUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMqgdjANBgkqhkiG9w0BAQsFAAOCAQEAbb3tLtedTuvoGDgv EPvyUGHJo5hOrZnIhrEzWgLZG5x2DaZM+lpao0Xb8JT1eBQzzPJlsW4BOMqzIavW 6vbqKwkZ2Ml/k7JvdKVBugkHV6laQsvvlwVKktMUGon54gvONH5hXjtu/HtJUzgo 1bfw9ThX6D2RJ9d7MtfgspTV634PCuq8T6Y8sS9adFhVwev5ELkKsrDelQ4/vDbE obnSbKVUKI/LNnlR59sun2cbv0JvorL8qvid+z5ICBLmA/3xt23gQVhmZySQ3/vr 19MIi6fmSDqGxwd60PUxvhqc17OBTeUn5oJN4KaTx/dkLP1MTMVixg4jKf33gQjX kJk4IQ== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:01 2024 by rpki-client on console-ams.rpki-client.org