$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/464E04581E0111E9A590C837C4F9AE02.roa File: 464E04581E0111E9A590C837C4F9AE02.roa (raw, json) Hash identifier: lX4av+C4I3vFaiHoodIKCnPiEyYR+L/+nLV7G6pLeQg= Subject key identifier: 6B:EA:B9:FC:C7:0A:AF:BB:91:D4:FC:E9:11:1F:15:A1:99:CC:F7:94 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 38AC Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/464E04581E0111E9A590C837C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:31:06 +0000 ROA not before: Tue 16 Jul 2024 14:31:06 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 37977 IP address blocks: 203.144.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14508 (0x38ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:31:06 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6696842a-32ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:53:fd:1f:6e:c8:43:f8:c6:8a:8d:f5:73:ed: 42:d3:37:56:38:bc:46:74:4e:7f:c2:23:73:a2:51: ba:0d:fd:68:fd:91:f6:b3:61:8a:94:67:8d:d5:bd: f4:22:1e:2f:b2:57:14:a5:be:d3:01:54:7f:6a:0f: 54:ad:ab:61:dc:83:a4:76:ae:94:0f:e0:1e:82:9f: eb:8f:e8:f8:c2:ce:6c:69:94:2a:e7:89:12:5d:3f: 9e:c9:70:db:bd:de:f0:08:0f:f7:9c:ed:1f:64:aa: 3c:2a:d7:bf:5c:ab:41:95:74:56:9f:41:ab:fe:27: 97:25:ab:e5:72:1f:b2:05:0e:07:cf:e1:5b:0e:0d: 01:3e:04:95:45:36:fc:60:ef:5d:99:34:81:15:d5: 68:82:c7:ba:af:ea:aa:cd:8c:a8:e1:51:3c:a2:8b: 88:9d:77:cf:9e:a8:7f:b7:33:9d:d0:56:0e:22:af: 37:29:35:76:55:a0:f1:99:e1:95:44:2a:fa:4f:e4: 18:00:4a:8a:d0:cc:6c:10:1f:65:c9:ea:23:cf:7b: a9:33:9f:e6:24:90:6e:87:61:1c:58:67:69:dc:76: a4:b5:ec:07:e0:73:ce:99:68:18:5a:f5:b5:08:1f: 34:21:e9:44:6b:76:fe:36:37:fc:c6:79:90:75:79: 3b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EA:B9:FC:C7:0A:AF:BB:91:D4:FC:E9:11:1F:15:A1:99:CC:F7:94 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/464E04581E0111E9A590C837C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.144.241.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:54:76:bf:24:6c:3e:d8:7e:b7:5d:84:20:5b:56:0c:a5:fb: 93:0e:fe:50:5d:ee:4d:25:36:aa:be:39:dd:7f:ed:24:7d:b9: 6b:6a:82:4d:51:d9:95:2e:0d:6f:82:67:c6:c9:71:e3:23:a2: cd:3a:7d:b0:f0:54:ef:ba:90:9e:d3:c3:79:22:1c:ad:5a:5a: e7:c2:fb:58:c0:6d:3c:65:98:02:f0:f1:c6:ae:0b:bd:ef:30: 0a:af:b6:a0:3d:4f:36:70:47:f0:73:b2:08:70:97:70:ad:83: 95:03:38:81:33:c3:67:1c:47:18:64:e0:85:de:2a:66:25:8e: 5e:3f:1f:cb:a5:b3:61:f5:5a:8d:33:f9:0d:8a:68:52:2f:50: ce:1c:9e:cc:cd:68:4d:a3:18:34:9c:01:ea:1a:b2:e2:91:cc: da:80:c6:b1:e8:54:b1:ff:ef:4d:44:d4:79:db:ef:32:9c:e7: b9:72:c8:11:1a:c1:3b:1e:4d:28:8c:f5:c4:c1:e4:38:99:4f: 64:53:85:19:00:c9:b9:1b:dd:b9:51:ed:2c:8b:19:8f:56:e2: 3f:b6:e4:bd:b2:3d:41:50:d3:b6:a6:c1:a5:97:d3:a3:31:7f: d4:d9:4a:f9:ff:be:0d:c2:a6:16:0c:f2:6c:f4:f4:e9:94:99: 6b:14:d8:28 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMTA2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQyYS0zMmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FP9H27IQ/jGio31c+1C0zdWOLxGdE5/wiNzolG6Df1o/ZH2s2GKlGeN1b30 Ih4vslcUpb7TAVR/ag9Urath3IOkdq6UD+Aegp/rj+j4ws5saZQq54kSXT+eyXDb vd7wCA/3nO0fZKo8Kte/XKtBlXRWn0Gr/ieXJavlch+yBQ4Hz+FbDg0BPgSVRTb8 YO9dmTSBFdVogse6r+qqzYyo4VE8oouInXfPnqh/tzOd0FYOIq83KTV2VaDxmeGV RCr6T+QYAEqK0MxsEB9lyeojz3upM5/mJJBuh2EcWGdp3HaktewH4HPOmWgYWvW1 CB80IelEa3b+Njf8xnmQdXk7zQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGvqufzH Cq+7kdT86REfFaGZzPeUMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNDY0RTA0NTgx RTAxMTFFOUE1OTBDODM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLkPEwDQYJKoZIhvcNAQELBQADggEBADpUdr8kbD7Yfrdd hCBbVgyl+5MO/lBd7k0lNqq+Od1/7SR9uWtqgk1R2ZUuDW+CZ8bJceMjos06fbDw VO+6kJ7Tw3kiHK1aWufC+1jAbTxlmALw8cauC73vMAqvtqA9TzZwR/Bzsghwl3Ct g5UDOIEzw2ccRxhk4IXeKmYljl4/H8uls2H1Wo0z+Q2KaFIvUM4cnszNaE2jGDSc AeoasuKRzNqAxrHoVLH/701E1Hnb7zKc57lyyBEawTseTSiM9cTB5DiZT2RThRkA ybkb3blR7SyLGY9W4j+25L2yPUFQ07amwaWX06Mxf9TZSvn/vg3CphYM8mz09OmU mWsU2Cg= -----END CERTIFICATE-----Generated at Sun Nov 24 15:31:14 2024 by rpki-client on console-ams.rpki-client.org