$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0649562CC63A11EAB59CC262C4F9AE02.roa File: 0649562CC63A11EAB59CC262C4F9AE02.roa (raw, json) Hash identifier: MuEbqKnGdeTwOpzWtZfybGE0sUEXNrb1FXuWP6xXyqg= Subject key identifier: 98:99:98:CC:8E:7F:E2:24:F0:81:53:D4:78:68:EB:57:72:57:6D:4F Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 07F8 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0649562CC63A11EAB59CC262C4F9AE02.roa Signing time: Mon 26 Aug 2024 21:29:59 +0000 ROA not before: Mon 26 Aug 2024 21:29:59 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 21866 IP address blocks: 202.173.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Aug 26 21:29:59 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ccf3d7-c305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:02:b2:ed:3d:4f:3e:5b:81:a7:54:42:4f: 6c:d6:04:90:58:27:93:f8:b4:5b:ed:63:96:c4:f6: 75:ea:22:2b:c3:13:39:55:df:91:2f:6b:c3:a6:bb: 3f:1c:11:eb:12:e5:6a:e4:1e:08:b8:03:d7:82:f5: b2:46:3d:b9:0e:9c:f6:c3:ba:ee:7e:ea:3c:69:c8: dc:7d:ce:26:17:94:eb:d1:02:eb:a5:53:e6:77:d1: 13:bb:40:59:61:59:45:92:4c:d2:a5:33:dd:62:2f: c7:35:89:a1:fb:1b:cd:4b:b6:1a:0b:79:a5:d4:06: 3e:70:09:3d:94:2d:b1:5f:fa:b0:7f:28:75:e1:60: cf:e4:95:13:f9:b0:33:32:52:c5:c2:f3:82:9c:81: ea:0e:08:a6:02:8b:99:94:71:2a:fc:c7:a2:ad:ac: 85:29:f4:c8:fa:71:eb:08:f6:ce:91:72:d0:c0:cf: f4:28:c1:2a:e8:10:74:0e:30:b3:ca:16:7a:bb:b2: ef:b8:21:68:24:1f:89:43:6f:cf:86:ef:05:fb:79: 85:b8:b2:51:9e:a0:44:9c:e8:9d:0f:bd:af:91:dc: b8:e1:b8:80:6b:fb:39:97:e9:ec:9c:b2:bd:d9:7f: 0c:dd:c8:6e:82:ac:f3:4c:52:82:2b:9c:0e:e5:95: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:99:98:CC:8E:7F:E2:24:F0:81:53:D4:78:68:EB:57:72:57:6D:4F X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/0649562CC63A11EAB59CC262C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.173.25.0/24 Signature Algorithm: sha256WithRSAEncryption d0:40:93:e0:65:ec:26:5f:37:45:e7:f2:64:4d:87:e7:ae:64: ff:8e:7d:26:81:14:78:e4:55:68:b4:5a:39:c6:9c:66:a4:32: 05:cb:8c:01:d4:dd:23:27:6d:0b:1f:cc:85:2b:7b:db:ac:85: 0b:7e:66:ff:a9:2c:cf:db:1e:07:68:49:63:38:9f:b0:84:a8: ab:b2:bd:ce:cf:c9:81:d1:da:d4:58:b2:07:b6:0a:35:ce:2b: ef:cf:47:5d:d1:41:25:a4:f0:36:80:6e:02:03:aa:1d:bb:3c: 20:6c:aa:b5:1a:83:03:2b:d7:b4:76:4d:54:be:a8:f0:ed:0a: 09:4f:64:eb:f2:85:70:fa:4e:9c:25:9b:f8:12:1b:84:96:55: 7f:7f:6a:ee:e6:2e:ba:15:5c:49:cd:78:38:97:da:72:39:ca: f3:81:81:7d:cc:ae:51:3b:ce:dd:f1:c1:77:b4:a3:7e:5a:d6: 5d:60:aa:59:86:d7:65:07:b4:85:f7:af:6e:5b:f6:c9:3d:76: b8:04:d2:1c:9f:04:a1:cd:58:86:3f:00:4c:9a:00:db:26:cb: 87:6f:00:24:07:33:cd:92:71:a4:f9:f3:b4:fc:f5:a6:dd:b7: b2:c1:b6:54:d8:fb:67:6b:a1:f4:aa:b1:fa:fd:6e:8a:77:58: fd:ce:3c:2f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjQwODI2MjEyOTU5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNjZjNkNy1jMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwBMCsu09Tz5bgadUQk9s1gSQWCeT+LRb7WOWxPZ16iIrwxM5Vd+RL2vDprs/ HBHrEuVq5B4IuAPXgvWyRj25Dpz2w7rufuo8acjcfc4mF5Tr0QLrpVPmd9ETu0BZ YVlFkkzSpTPdYi/HNYmh+xvNS7YaC3ml1AY+cAk9lC2xX/qwfyh14WDP5JUT+bAz MlLFwvOCnIHqDgimAouZlHEq/MeirayFKfTI+nHrCPbOkXLQwM/0KMEq6BB0DjCz yhZ6u7LvuCFoJB+JQ2/Phu8F+3mFuLJRnqBEnOidD72vkdy44biAa/s5l+nsnLK9 2X8M3chugqzzTFKCK5wO5ZVjbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJiZmMyO f+Ik8IFT1Hho61dyV21PMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDIyNDEvNEY3Qjk4NjZDNUY3MTFFQUJBOUQyMDgxQzRGOUFFMDIvMDY0OTU2MkND NjNBMTFFQUI1OUNDMjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKrRkwDQYJKoZIhvcNAQELBQADggEBANBAk+Bl7CZfN0Xn 8mRNh+euZP+OfSaBFHjkVWi0WjnGnGakMgXLjAHU3SMnbQsfzIUre9ushQt+Zv+p LM/bHgdoSWM4n7CEqKuyvc7PyYHR2tRYsge2CjXOK+/PR13RQSWk8DaAbgIDqh27 PCBsqrUagwMr17R2TVS+qPDtCglPZOvyhXD6Tpwlm/gSG4SWVX9/au7mLroVXEnN eDiX2nI5yvOBgX3MrlE7zt3xwXe0o35a1l1gqlmG12UHtIX3r25b9sk9drgE0hyf BKHNWIY/AEyaANsmy4dvACQHM82ScaT587T89abdt7LBtlTY+2drofSqsfr9bop3 WP3OPC8= -----END CERTIFICATE-----Generated at Sun Nov 24 22:11:57 2024 by rpki-client on console-fra.rpki-client.org