$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/D7E41D6A788411EA9186C910C4F9AE02.roa File: D7E41D6A788411EA9186C910C4F9AE02.roa (raw, json) Hash identifier: Lhup7Zk9zUWbpx4YvLoYtp8k4a6DjCWODZVfnB4MNOA= Subject key identifier: 09:44:74:82:C2:5E:52:27:7E:D9:69:07:96:E3:27:FB:4C:3D:CD:D0 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0DF1 Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/D7E41D6A788411EA9186C910C4F9AE02.roa Signing time: Sat 06 Jul 2024 18:26:05 +0000 ROA not before: Sat 06 Jul 2024 18:26:05 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38235 IP address blocks: 111.90.176.0/20 maxlen: 24 2405:fa00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 17:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3569 (0xdf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Jul 6 18:26:05 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66898c3c-493f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:b7:1f:43:0d:f2:e1:71:bf:c1:f8:28:87: fd:80:c0:d3:7a:a1:e2:03:6b:90:7e:d1:f7:35:c9: 7c:57:ca:be:b2:b3:76:9c:e1:49:ff:11:d3:f0:48: b8:15:7e:8e:4f:f1:cd:1f:6d:e0:39:e6:d4:6a:8a: 4d:bd:9c:6e:12:20:e3:bc:bc:ff:1e:65:d5:c1:bb: 87:84:c6:61:0c:12:93:94:20:4d:43:c5:17:fa:ba: c9:9d:25:36:90:cf:31:36:ac:e9:42:7e:c2:b5:99: 0c:5c:77:f9:a4:e0:19:1d:8d:f8:9c:e5:76:c8:0b: fc:c1:85:f5:b5:a9:af:2f:15:9e:05:4a:12:6a:cb: 0d:57:85:01:cb:fb:78:a8:6e:11:98:e8:dc:dc:fd: e6:4c:26:ef:ef:34:a1:4a:d6:5a:3a:8a:52:a7:30: 74:c3:de:b5:32:86:8d:f1:3b:16:b8:01:6d:58:be: 11:18:69:d4:bc:17:d4:61:cd:ea:94:12:4a:63:8d: 82:91:56:a6:18:c3:49:f4:6d:85:9e:e6:f6:13:46: e0:da:27:66:8d:57:16:af:6a:ef:ec:b1:cb:a2:b4: b0:d4:67:d7:44:79:65:db:21:70:86:ba:43:97:2f: b9:11:d5:68:1a:09:3e:99:29:1a:a8:2d:d3:11:87: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:44:74:82:C2:5E:52:27:7E:D9:69:07:96:E3:27:FB:4C:3D:CD:D0 X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/D7E41D6A788411EA9186C910C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.90.176.0/20 IPv6: 2405:fa00::/32 Signature Algorithm: sha256WithRSAEncryption 78:96:71:32:f6:e2:25:a6:29:61:86:19:36:f4:b4:e8:c9:e6: 10:01:c1:f2:c1:c3:69:43:cd:99:59:e0:bf:f1:67:df:58:67: 0f:24:db:a6:31:c6:9b:2e:a2:54:fb:ef:22:e7:22:b0:a1:ed: 15:b7:25:23:27:82:2c:9a:8f:70:5c:1d:d0:18:d7:f3:65:6a: 6a:4b:4e:02:0a:44:15:7f:18:16:a9:45:6a:f7:26:90:4e:00: 70:80:35:c0:b7:3f:89:03:55:ed:ce:0c:62:d8:14:ff:c0:1e: 19:2d:b8:c2:dc:ba:00:47:3c:62:48:5d:5a:3b:dd:56:c0:17: 76:19:72:9c:5c:fa:a0:45:77:0f:d1:b6:66:c3:70:f4:a7:50: 82:9d:32:55:f5:af:87:28:39:5a:f4:6e:a7:f4:ad:b7:29:ba: 0b:b5:78:db:a5:97:2a:47:86:5c:e0:30:12:b7:e4:a2:21:e2: 64:c1:83:c5:3d:54:2f:7a:ac:6b:e3:63:54:f0:a1:13:9c:42: ff:57:06:6f:b1:14:83:38:0a:82:7a:7e:cb:4e:95:cf:d1:bf: 78:03:f6:fb:74:c5:e9:20:75:8c:b4:33:aa:cd:02:62:12:9c: 22:0d:60:94:d0:21:32:c2:52:55:c1:29:dd:6a:a8:9e:8c:80: 87:62:09:c9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjQwNzA2MTgyNjA1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg5OGMzYy00OTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGq3H0MN8uFxv8H4KIf9gMDTeqHiA2uQftH3Ncl8V8q+srN2nOFJ/xHT8Ei4 FX6OT/HNH23gOebUaopNvZxuEiDjvLz/HmXVwbuHhMZhDBKTlCBNQ8UX+rrJnSU2 kM8xNqzpQn7CtZkMXHf5pOAZHY34nOV2yAv8wYX1tamvLxWeBUoSassNV4UBy/t4 qG4RmOjc3P3mTCbv7zShStZaOopSpzB0w961MoaN8TsWuAFtWL4RGGnUvBfUYc3q lBJKY42CkVamGMNJ9G2Fnub2E0bg2idmjVcWr2rv7LHLorSw1GfXRHll2yFwhrpD ly+5EdVoGgk+mSkaqC3TEYfHnQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAlEdILC XlInftlpB5bjJ/tMPc3QMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRFMzgvNzMzMzFCNUU5MUQxMTFFOUI2QTkzMjVCQzRGOUFFMDIvRDdFNDFENkE3 ODg0MTFFQTkxODZDOTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBARvWrAwDQQCAAIwBwMFACQF+gAwDQYJKoZIhvcNAQELBQAD ggEBAHiWcTL24iWmKWGGGTb0tOjJ5hABwfLBw2lDzZlZ4L/xZ99YZw8k26Yxxpsu olT77yLnIrCh7RW3JSMngiyaj3BcHdAY1/NlampLTgIKRBV/GBapRWr3JpBOAHCA NcC3P4kDVe3ODGLYFP/AHhktuMLcugBHPGJIXVo73VbAF3YZcpxc+qBFdw/RtmbD cPSnUIKdMlX1r4coOVr0bqf0rbcpugu1eNullypHhlzgMBK35KIh4mTBg8U9VC96 rGvjY1TwoROcQv9XBm+xFIM4CoJ6fstOlc/Rv3gD9vt0xekgdYy0M6rNAmISnCIN YJTQITLCUlXBKd1qqJ6MgIdiCck= -----END CERTIFICATE-----Generated at Tue Nov 26 19:07:08 2024 by rpki-client on console-fra.rpki-client.org