$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/72F3ADE05A5A11EB83B9F073C4F9AE02.roa File: 72F3ADE05A5A11EB83B9F073C4F9AE02.roa (raw, json) Hash identifier: pXHAaOJC3AB2Uf5C0Qb32yt/G71OGnSVhF8JTHg/eo0= Subject key identifier: CC:46:CB:ED:B5:09:B4:D2:F9:F6:C2:4C:D3:E2:15:ED:79:E5:25:DE Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 38BF Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/72F3ADE05A5A11EB83B9F073C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:31:24 +0000 ROA not before: Tue 16 Jul 2024 14:31:24 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4827 IP address blocks: 110.170.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14527 (0x38bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:31:24 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6696843c-d496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:6f:ee:62:c9:76:3d:53:56:cd:43:e2:a8: 9a:3e:7a:33:d1:81:47:63:34:ff:fa:77:f4:8f:29: 0e:22:b9:43:81:7a:4f:40:16:77:9c:27:6d:f3:2d: 9f:06:35:c6:2d:15:9c:b7:74:2f:24:74:fb:86:05: 65:88:68:d8:1a:77:9c:b4:9a:ca:f7:ce:2a:2a:81: a0:97:30:54:6c:ea:6b:47:84:96:5a:0e:a6:cd:4a: 9e:9e:b8:11:4b:32:68:58:06:5e:87:f6:58:6c:e3: e1:16:ce:7e:2b:5c:33:36:d5:e1:8e:a6:4c:ca:01: 58:ce:4c:30:04:57:d0:23:cd:a1:35:96:be:18:6e: b3:c2:91:09:ca:7c:86:da:6e:0e:34:24:6b:a1:55: a8:18:3a:fc:50:b3:2f:67:4d:76:dd:1e:cc:f4:31: 33:3d:08:89:c1:4e:ee:8c:2a:97:b0:15:41:6b:1e: c5:4b:3b:f6:4e:9d:93:b6:83:d3:d7:8e:bc:8b:a2: 39:35:ea:2b:46:95:23:c9:4c:30:2b:91:1b:47:5c: 31:e1:06:b0:bd:3f:32:79:44:5d:b1:d6:30:ef:4f: 21:05:91:6e:d1:70:ad:9c:80:4d:42:1e:d4:17:1c: c8:51:39:98:81:3d:55:2b:d5:b4:7a:74:25:8e:49: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:46:CB:ED:B5:09:B4:D2:F9:F6:C2:4C:D3:E2:15:ED:79:E5:25:DE X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/72F3ADE05A5A11EB83B9F073C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.170.233.0/24 Signature Algorithm: sha256WithRSAEncryption 09:5d:57:34:bc:2c:77:0c:6e:51:24:2a:27:9c:77:68:d2:92: 7f:c6:c0:c3:7b:d5:69:39:4a:5c:32:39:7a:66:79:51:de:45: bb:72:e8:45:27:fa:11:b2:6c:7a:39:12:9a:40:33:a0:dc:b3: 87:2d:55:5f:58:56:8d:2a:c2:15:06:ee:ad:bd:f6:e3:88:fb: ed:18:ee:0f:c0:e3:fe:59:31:a1:e1:8b:b0:52:77:f6:5c:07: 64:22:a1:d6:64:e6:06:96:5b:b3:e1:f8:a0:cb:8f:36:b0:6d: 32:93:d8:1e:3a:6d:79:8d:f1:26:0b:67:f1:d0:9c:da:5a:23: f3:18:e9:cc:f3:9d:ad:c9:11:bf:d7:5f:d3:3b:02:f7:db:f1: cd:d3:88:41:ba:88:e8:2e:bb:b1:f5:58:2d:d6:2a:38:72:1e: 86:a8:ba:54:35:53:91:9d:f0:0b:ba:18:c1:f2:36:6d:a1:34: c6:54:39:66:38:35:fe:5e:dd:1f:76:3c:d5:44:f3:cd:8d:81: ed:05:ee:4e:7a:12:0c:dd:d2:84:48:ef:cb:01:f1:58:0e:44: c4:5b:6a:1a:ce:b8:8f:cb:83:3b:8c:96:94:cb:1e:4a:71:29: 39:1b:e8:26:0d:5b:22:1c:c9:de:6b:18:00:9b:93:e4:17:db: 0d:1d:c9:e8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMTI0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQzYy1kNDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDVv7mLJdj1TVs1D4qiaPnoz0YFHYzT/+nf0jykOIrlDgXpPQBZ3nCdt8y2f BjXGLRWct3QvJHT7hgVliGjYGnectJrK984qKoGglzBUbOprR4SWWg6mzUqenrgR SzJoWAZeh/ZYbOPhFs5+K1wzNtXhjqZMygFYzkwwBFfQI82hNZa+GG6zwpEJynyG 2m4ONCRroVWoGDr8ULMvZ0123R7M9DEzPQiJwU7ujCqXsBVBax7FSzv2Tp2TtoPT 1468i6I5NeorRpUjyUwwK5EbR1wx4QawvT8yeURdsdYw708hBZFu0XCtnIBNQh7U FxzIUTmYgT1VK9W0enQljklf2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMxGy+21 CbTS+fbCTNPiFe155SXeMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNzJGM0FERTA1 QTVBMTFFQjgzQjlGMDczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABuqukwDQYJKoZIhvcNAQELBQADggEBAAldVzS8LHcMblEk Kiecd2jSkn/GwMN71Wk5SlwyOXpmeVHeRbty6EUn+hGybHo5EppAM6Dcs4ctVV9Y Vo0qwhUG7q299uOI++0Y7g/A4/5ZMaHhi7BSd/ZcB2QiodZk5gaWW7Ph+KDLjzaw bTKT2B46bXmN8SYLZ/HQnNpaI/MY6czzna3JEb/XX9M7Avfb8c3TiEG6iOguu7H1 WC3WKjhyHoaoulQ1U5Gd8Au6GMHyNm2hNMZUOWY4Nf5e3R92PNVE882Nge0F7k56 Egzd0oRI78sB8VgORMRbahrOuI/LgzuMlpTLHkpxKTkb6CYNWyIcyd5rGACbk+QX 2w0dyeg= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org