$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa File: 3EE7D5645A5D11EB9B234479C4F9AE02.roa (raw, json) Hash identifier: qZfa+Juh2x+zW777HS9Pc0LFH7oTilT/U/peufL7Hvg= Subject key identifier: 44:79:97:BA:9F:DB:BB:54:D5:4C:A1:5D:97:EE:D1:79:3F:B9:CE:76 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3872 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:30:15 +0000 ROA not before: Tue 16 Jul 2024 14:30:15 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 131460 IP address blocks: 61.90.227.0/24 maxlen: 24 119.46.128.0/24 maxlen: 24 119.46.129.0/24 maxlen: 24 119.46.199.0/24 maxlen: 24 119.46.249.0/24 maxlen: 24 203.144.132.0/24 maxlen: 24 203.144.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14450 (0x3872) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:30:15 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=669683f6-5979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:12:f0:8f:03:31:6b:f5:f1:c3:96:ad:64: bb:6a:ec:f0:08:db:4c:92:9d:17:47:e7:96:9f:c2: 98:b0:11:53:f5:ce:58:36:26:fa:46:40:ed:15:ae: f5:c6:8e:ed:bd:29:ae:b5:82:fb:9d:d7:02:9e:26: b2:38:5d:aa:14:40:99:23:c9:f8:60:a3:b2:42:5f: e7:c6:6d:35:4f:33:e6:e6:6f:d4:52:0f:f4:85:96: ba:e8:db:20:a0:7f:21:80:69:f0:10:e2:4f:97:83: fd:c5:81:8f:b1:14:da:c1:8f:20:12:ee:5d:2a:f9: cc:f3:a6:89:65:ab:e0:46:27:ef:9d:6b:61:5c:aa: ab:0a:f8:81:17:9b:e4:33:d5:e6:01:b2:e7:eb:79: 91:6a:f2:9f:00:e6:10:b9:52:ec:44:d4:e6:ea:6f: 4f:18:e8:cd:87:e2:94:ea:8d:b2:74:07:fb:87:dc: 27:f7:bb:4d:90:fa:49:75:0c:79:3d:00:f3:51:42: 8f:79:db:ec:f0:25:e5:2b:58:11:f6:6d:8c:70:d9: 83:ce:ea:b7:1e:40:a0:ed:b7:29:d8:68:f2:89:ca: ef:0c:6f:56:b6:be:25:27:7b:d8:72:d1:01:25:58: 39:27:df:5a:42:55:13:2f:08:69:13:e1:3e:06:f3: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:79:97:BA:9F:DB:BB:54:D5:4C:A1:5D:97:EE:D1:79:3F:B9:CE:76 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/3EE7D5645A5D11EB9B234479C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.90.227.0/24 119.46.128.0/23 119.46.199.0/24 119.46.249.0/24 203.144.132.0/24 203.144.213.0/24 Signature Algorithm: sha256WithRSAEncryption 44:72:e2:05:4e:d1:88:5e:37:c6:14:5d:d3:46:54:56:e7:cf: 47:7c:7f:0d:4d:eb:1b:b5:9d:42:63:b0:82:b5:32:fd:6b:aa: 99:e3:16:ce:38:f9:07:b2:91:26:3d:64:30:47:94:bd:43:30: 02:97:39:05:14:ff:85:28:b8:d0:22:4b:fb:53:e6:65:9e:fc: d0:62:2d:2a:c2:ed:0f:af:07:ec:51:1d:2b:a2:51:d3:da:b1: da:8f:f8:1b:a5:91:c3:e5:fa:7a:44:18:3b:7b:6d:da:5e:1e: 72:b5:c6:e3:bc:dc:6c:58:7e:ff:0c:d4:35:84:71:13:3b:97: 1b:1e:ea:f1:d2:f5:8e:45:23:b2:13:88:e9:c7:8e:08:bd:c4: 4d:25:c9:fa:6f:13:95:e9:ae:c3:ea:ee:0b:24:b3:80:7e:1c: 2d:72:ad:6e:b7:53:b8:91:b8:04:d8:1d:31:3d:27:33:4a:de: 62:98:1d:8c:4e:5d:1d:06:b3:62:0e:f8:54:9f:8b:af:b3:f8: d2:19:c1:97:ae:2a:d4:dc:f4:26:08:5e:b5:30:71:fd:f7:df: 04:bd:9b:10:84:25:af:57:6e:49:1f:4b:9a:61:8a:48:b5:41: 9e:83:5b:2f:ee:53:1f:91:d2:61:de:ab:0c:ca:ae:50:c0:e8: 82:63:f3:4e -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICOHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMDE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODNmNi01OTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2MS8I8DMWv18cOWrWS7auzwCNtMkp0XR+eWn8KYsBFT9c5YNib6RkDtFa71 xo7tvSmutYL7ndcCniayOF2qFECZI8n4YKOyQl/nxm01TzPm5m/UUg/0hZa66Nsg oH8hgGnwEOJPl4P9xYGPsRTawY8gEu5dKvnM86aJZavgRifvnWthXKqrCviBF5vk M9XmAbLn63mRavKfAOYQuVLsRNTm6m9PGOjNh+KU6o2ydAf7h9wn97tNkPpJdQx5 PQDzUUKPedvs8CXlK1gR9m2McNmDzuq3HkCg7bcp2GjyicrvDG9Wtr4lJ3vYctEB JVg5J99aQlUTLwhpE+E+BvMP/wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFER5l7qf 27tU1UyhXZfu0Xk/uc52MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvM0VFN0Q1NjQ1 QTVEMTFFQjlCMjM0NDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAA9WuMDBAF3LoADBAB3LscDBAB3LvkDBADLkIQDBADLkNUw DQYJKoZIhvcNAQELBQADggEBAERy4gVO0YheN8YUXdNGVFbnz0d8fw1N6xu1nUJj sIK1Mv1rqpnjFs44+QeykSY9ZDBHlL1DMAKXOQUU/4UouNAiS/tT5mWe/NBiLSrC 7Q+vB+xRHSuiUdPasdqP+BulkcPl+npEGDt7bdpeHnK1xuO83GxYfv8M1DWEcRM7 lxse6vHS9Y5FI7ITiOnHjgi9xE0lyfpvE5XprsPq7gsks4B+HC1yrW63U7iRuATY HTE9JzNK3mKYHYxOXR0Gs2IO+FSfi6+z+NIZwZeuKtTc9CYIXrUwcf333wS9mxCE Ja9XbkkfS5phiki1QZ6DWy/uUx+R0mHeqwzKrlDA6IJj804= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org