$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa File: D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa (raw, json) Hash identifier: Olu+WtwbBHXHNfIpfFtNqF4wVjO2TQrgZJ3O5lYSz6A= Subject key identifier: 04:8B:ED:D3:C1:5C:D1:64:DE:46:9A:7F:52:C8:69:1E:72:78:0A:79 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 38CB Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa Signing time: Tue 16 Jul 2024 14:31:34 +0000 ROA not before: Tue 16 Jul 2024 14:31:34 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 55867 IP address blocks: 171.102.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14539 (0x38cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 16 14:31:34 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66968445-2c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:99:5d:ed:8d:e7:3d:d5:27:e0:c7:30:11:3f: 98:79:3e:20:98:39:8d:d8:7b:0a:ac:24:8f:eb:36: c1:e4:bd:93:90:3e:78:eb:22:3e:fa:f4:74:c1:7a: ce:29:d2:2d:6c:67:06:a8:2e:5f:9f:38:20:3f:f4: 0b:a3:69:8c:16:68:b3:4e:31:66:b0:db:0a:1c:99: be:a3:37:03:c9:84:0a:93:bf:9f:53:f4:c5:a6:dd: 1f:a0:42:fc:e6:91:bf:18:91:11:d7:f1:a5:ec:bd: bc:ea:a8:cc:62:25:e8:27:e0:2d:a0:f0:bb:fc:e8: 88:f2:7d:7b:cd:61:b3:18:3b:94:0a:52:4d:32:43: b2:57:4a:b9:6d:3e:71:f6:02:10:2c:76:46:75:1b: ec:62:16:51:39:c4:51:dd:b9:fa:a0:4f:23:a1:76: 9f:c2:52:be:34:49:6c:00:bc:13:e8:64:03:34:3b: 4b:b6:71:c0:51:25:24:a3:b9:ae:1d:07:e4:82:ec: d9:b3:25:22:2a:7b:16:db:72:33:42:bf:b7:30:e3: 2b:7f:c1:6b:71:fa:f4:50:6f:13:53:c7:d6:ac:54: ba:94:07:27:42:25:86:70:70:e3:9b:0d:d4:95:78: 1a:ac:a3:64:3c:4a:46:c1:f6:67:cd:e4:d5:d8:48: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8B:ED:D3:C1:5C:D1:64:DE:46:9A:7F:52:C8:69:1E:72:78:0A:79 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 171.102.202.0/24 Signature Algorithm: sha256WithRSAEncryption 63:46:60:1b:e8:0b:ab:19:9e:04:41:87:b7:5d:0d:65:24:d2: 6e:be:f3:af:21:6a:2c:52:b1:99:a2:33:ac:b6:e3:cb:ce:05: e1:83:2c:6d:25:79:b5:cb:0e:08:2f:fd:79:9e:8a:ff:41:7b: 72:75:e1:53:e5:e5:54:f7:d6:81:c0:af:ea:f4:97:eb:20:bb: c1:86:a1:59:5d:3b:d1:5a:7e:2b:d0:17:90:e9:99:a3:fd:03: 8d:0c:ec:8f:0e:4c:73:d8:a7:21:da:aa:e8:e6:70:b2:19:21: 09:7c:86:9e:e1:43:33:67:13:be:9b:a2:b9:4c:aa:72:2f:64: 13:fe:e5:97:34:1e:33:99:0d:35:70:ec:bd:35:f7:80:4c:67: fa:da:54:0d:77:d0:fd:08:4c:bc:6b:b6:6c:2e:f8:ae:7b:fd: 77:a6:11:5f:e0:c4:3a:0c:70:18:66:3b:1b:55:64:7f:17:1e: 05:78:9b:9a:03:e6:dd:79:88:15:90:97:04:15:ff:6d:4f:bb: d6:b4:c1:26:ad:38:33:b5:39:c9:1b:f2:d6:96:d2:b4:dc:db: c8:42:cd:db:73:b9:19:7d:dc:37:5d:e7:6c:96:1f:99:8d:9c: 0c:c7:11:dc:9c:c6:c1:f3:97:5e:b3:46:f1:1f:8b:af:c4:cb: bd:60:c1:1d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICOMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjQwNzE2MTQzMTM0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njk2ODQ0NS0yYzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5pld7Y3nPdUn4McwET+YeT4gmDmN2HsKrCSP6zbB5L2TkD546yI++vR0wXrO KdItbGcGqC5fnzggP/QLo2mMFmizTjFmsNsKHJm+ozcDyYQKk7+fU/TFpt0foEL8 5pG/GJER1/Gl7L286qjMYiXoJ+AtoPC7/OiI8n17zWGzGDuUClJNMkOyV0q5bT5x 9gIQLHZGdRvsYhZROcRR3bn6oE8joXafwlK+NElsALwT6GQDNDtLtnHAUSUko7mu HQfkguzZsyUiKnsW23IzQr+3MOMrf8Frcfr0UG8TU8fWrFS6lAcnQiWGcHDjmw3U lXgarKNkPEpGwfZnzeTV2EhMhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFASL7dPB XNFk3kaaf1LIaR5yeAp5MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRDlEQUUwOTA1 QTVCMTFFQkJCQ0FBRjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACrZsowDQYJKoZIhvcNAQELBQADggEBAGNGYBvoC6sZngRB h7ddDWUk0m6+868haixSsZmiM6y248vOBeGDLG0lebXLDggv/Xmeiv9Be3J14VPl 5VT31oHAr+r0l+sgu8GGoVldO9FafivQF5DpmaP9A40M7I8OTHPYpyHaqujmcLIZ IQl8hp7hQzNnE76borlMqnIvZBP+5Zc0HjOZDTVw7L0194BMZ/raVA130P0ITLxr tmwu+K57/XemEV/gxDoMcBhmOxtVZH8XHgV4m5oD5t15iBWQlwQV/21Pu9a0wSat ODO1Ockb8taW0rTc28hCzdtzuRl93Ddd52yWH5mNnAzHEdycxsHzl16zRvEfi6/E y71gwR0= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:24 2024 by rpki-client on console-fra.rpki-client.org