$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa File: 296C70368D0A11EE89E31163C4F9AE02.roa (raw, json) Hash identifier: gQEkaaB6KGWRyBNxynv7uX6DsWwzFIq6WAw4P+UYB/k= Subject key identifier: 20:3D:16:D5:B7:34:D2:50:DA:0A:AA:D3:82:38:0C:D7:BC:9E:CB:34 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3898 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:49 +0000 ROA not before: Tue 16 Jul 2024 14:30:49 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 152130 IP address blocks: 110.170.136.0/24 maxlen: 24 2001:fb0:1081::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14488 (0x3898) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:30:49 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66968419-05a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:55:fd:88:69:98:f7:46:cf:ca:ba:97:58: d2:60:de:ff:e1:25:c2:52:af:57:8e:da:d0:27:f5: 53:f4:de:16:3c:a5:38:7c:06:53:32:24:5f:5d:f9: 18:a7:7c:ee:44:b6:bb:80:d5:27:ac:28:28:92:88: 21:32:36:ba:59:79:4e:5b:c3:a5:72:70:5d:fe:ab: 11:9d:c9:5b:a1:07:e2:57:87:4a:b6:2a:31:17:39: c2:f3:cc:83:d2:5b:03:8d:c3:8e:2a:18:a3:78:66: 11:3e:06:3d:c9:5b:ec:92:3e:f6:e2:91:f0:20:83: 2b:d0:c4:3e:c9:23:a7:aa:83:ce:ef:31:1a:a2:95: ac:85:e9:a6:bc:05:ff:e9:93:72:7a:bf:49:e0:db: 27:a4:63:64:2d:46:37:d1:62:2b:86:d3:fe:50:7a: f5:83:e9:79:19:d7:42:2d:e3:96:18:f7:1f:03:1f: 2f:09:f6:cb:07:b6:94:21:f3:0b:35:21:af:bd:98: d2:ff:31:32:97:01:f9:ad:61:8f:7d:5b:1e:d2:4e: fc:ed:16:17:c6:fc:50:c0:83:f1:33:39:d1:f2:a9: a2:e2:38:9f:fd:6c:18:58:b1:03:f2:41:29:5e:c2: 95:63:d4:19:0d:05:26:f2:07:d5:c5:f5:73:a0:5d: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3D:16:D5:B7:34:D2:50:DA:0A:AA:D3:82:38:0C:D7:BC:9E:CB:34 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/296C70368D0A11EE89E31163C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.136.0/24 IPv6: 2001:fb0:1081::/48 Signature Algorithm: sha256WithRSAEncryption 19:c8:3f:68:70:0e:58:c0:29:6d:c7:fe:58:09:79:54:f9:7a: 67:f4:21:ac:9a:75:91:19:d1:b2:9a:00:2e:4d:51:bc:c2:e3: 00:3f:b3:54:63:84:2f:98:85:6d:48:62:b9:01:27:84:56:9f: 91:2c:c2:34:b1:7f:78:86:d2:1b:3e:bd:51:7c:35:89:f2:f6: 66:dd:ff:e7:be:87:25:ed:be:66:eb:3a:7f:ed:85:d0:2f:df: 8d:26:52:5a:3d:8c:f2:95:20:09:d1:27:59:45:42:f5:e1:75: 1e:e3:e7:b2:eb:90:7d:00:ab:e2:12:a8:b7:6c:c5:59:da:e9: c7:45:38:d2:26:55:3e:ad:e5:a8:11:71:9e:83:3e:af:f0:4a: 1b:a4:af:98:6f:93:48:7d:be:0d:b9:fb:59:db:63:8f:3e:52: 77:e2:2b:0c:c3:6d:c0:54:7a:1c:f8:3f:29:2c:79:17:03:22: 55:b5:04:07:21:8a:17:0e:56:a7:54:13:e7:46:58:2b:44:69: 47:3b:79:eb:b3:bf:62:b3:dd:a9:bc:50:fd:e4:c9:1e:b3:f1: 16:a5:46:a3:e7:33:72:99:ef:4d:e2:0c:6e:d8:52:4f:ce:1f: ce:7e:75:14:f0:d2:24:8d:40:24:74:80:70:ac:46:ac:48:5b: dc:ba:3c:87 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICOJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDQ5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQxOS0wNWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqxV/YhpmPdGz8q6l1jSYN7/4SXCUq9XjtrQJ/VT9N4WPKU4fAZTMiRfXfkY p3zuRLa7gNUnrCgokoghMja6WXlOW8OlcnBd/qsRnclboQfiV4dKtioxFznC88yD 0lsDjcOOKhijeGYRPgY9yVvskj724pHwIIMr0MQ+ySOnqoPO7zEaopWshemmvAX/ 6ZNyer9J4NsnpGNkLUY30WIrhtP+UHr1g+l5GddCLeOWGPcfAx8vCfbLB7aUIfML NSGvvZjS/zEylwH5rWGPfVse0k787RYXxvxQwIPxMznR8qmi4jif/WwYWLED8kEp XsKVY9QZDQUm8gfVxfVzoF0eNQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFCA9FtW3 NNJQ2gqq04I4DNe8nss0MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvMjk2QzcwMzY4 RDBBMTFFRTg5RTMxMTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABuqogwDwQCAAIwCQMHACABD7AQgTANBgkqhkiG9w0BAQsF AAOCAQEAGcg/aHAOWMApbcf+WAl5VPl6Z/QhrJp1kRnRspoALk1RvMLjAD+zVGOE L5iFbUhiuQEnhFafkSzCNLF/eIbSGz69UXw1ifL2Zt3/576HJe2+Zus6f+2F0C/f jSZSWj2M8pUgCdEnWUVC9eF1HuPnsuuQfQCr4hKot2zFWdrpx0U40iZVPq3lqBFx noM+r/BKG6SvmG+TSH2+Dbn7Wdtjjz5Sd+IrDMNtwFR6HPg/KSx5FwMiVbUEByGK Fw5Wp1QT50ZYK0RpRzt567O/YrPdqbxQ/eTJHrPxFqVGo+czcpnvTeIMbthST84f zn51FPDSJI1AJHSAcKxGrEhb3Lo8hw== -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:07 2024 by rpki-client on console-ams.rpki-client.org