$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28D70012A14F11EC8FF76A62C4F9AE02.roa File: 28D70012A14F11EC8FF76A62C4F9AE02.roa (raw, json) Hash identifier: BoIbbyMCoyjBPVVzzNzvY0re58/2xN3cHA7chKiXOvg= Subject key identifier: 8F:EC:C7:88:19:0C:60:95:3C:2E:C0:5E:CF:2E:6B:7F:49:8A:FE:4E Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 23F7 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28D70012A14F11EC8FF76A62C4F9AE02.roa Signing time: Fri 26 Jul 2024 16:33:25 +0000 ROA not before: Fri 26 Jul 2024 16:33:25 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 139350 IP address blocks: 112.198.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9207 (0x23f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 26 16:33:25 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a3cfd5-b28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f7:b4:6c:7b:09:5d:6f:1d:03:f4:a7:ab:f3: c3:da:e0:95:1b:5c:54:ce:c9:09:7e:90:88:74:45: 23:f1:fd:13:ad:22:df:81:fe:50:a1:fa:e7:ff:be: 8a:60:15:34:36:69:e1:8c:0d:1d:15:72:92:14:42: 0d:66:18:ab:13:7d:0c:15:57:fe:9d:92:55:da:bf: 28:9b:ff:7a:0f:32:31:ac:4e:ad:44:b9:eb:e5:b4: 9a:d7:8a:c2:64:58:57:8c:70:87:bf:96:66:a1:49: 97:87:7e:cc:33:36:fb:0d:16:d7:bb:08:e0:ee:48: 6c:ac:26:05:db:2a:ca:91:aa:58:cd:48:dd:19:e4: 2c:0c:14:d1:ee:85:c2:e8:a0:14:ed:6e:ea:76:74: 15:c6:67:f7:9d:ce:df:13:c4:9b:5a:05:cf:0e:32: 5d:4c:94:3a:da:9c:5d:e3:67:60:c9:ab:b2:cd:e6: 7a:0f:3c:45:56:20:31:4a:68:05:5e:49:a2:ae:25: d8:25:a8:8d:6e:f4:e1:ed:58:8b:34:b9:be:2a:e4: de:5f:94:35:47:76:05:27:b4:ce:3c:de:e1:90:30: 12:f6:aa:4f:c4:41:9c:3b:9f:24:b1:db:45:98:65: 38:83:12:64:f9:32:ab:58:e2:b3:b5:61:27:61:24: 4c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EC:C7:88:19:0C:60:95:3C:2E:C0:5E:CF:2E:6B:7F:49:8A:FE:4E X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28D70012A14F11EC8FF76A62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 112.198.6.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:06:81:86:c1:d2:86:4c:9f:18:9f:29:ef:f2:a7:e1:77:7d: 99:ca:c1:4c:0b:7e:d5:cc:70:f3:cb:45:1f:90:e8:d8:51:8d: 30:92:a4:3f:87:b2:6a:8f:ca:03:1d:fe:ad:8c:13:fd:02:83: 3b:70:0a:80:dc:b6:15:bf:7c:60:35:5d:33:e2:80:66:a3:0c: 68:f2:56:2c:45:7a:72:44:cb:e5:71:66:3d:3e:b4:d1:96:57: 23:46:b3:23:3e:cc:0c:06:0b:c6:51:cd:b3:f8:07:b1:bc:25: 8b:88:bb:1d:0f:5e:ed:d5:83:dd:86:8f:d7:8a:9d:c3:1c:83: 65:b0:fe:12:ab:40:ab:76:89:af:d4:20:8f:f2:a6:b9:d0:5a: 84:1f:56:c5:78:0b:a8:9c:f4:7a:8e:82:77:a8:0f:6e:63:22: a6:34:8d:15:64:23:3f:70:58:4e:f8:a5:9d:b3:05:bf:bf:da: 5e:7b:d3:77:77:12:1a:82:95:bf:32:d0:11:95:a3:e4:00:ae: e8:6a:b7:c8:64:35:9e:3d:87:e2:03:48:08:1c:aa:a3:93:4f: f4:4d:84:11:71:6b:45:b8:dd:d0:48:80:b1:db:c1:8f:7f:c6: f6:4f:9b:ef:43:7d:94:a7:af:6c:ee:67:7a:55:5e:1b:b9:9b: e4:2b:a8:4f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICI/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjQwNzI2MTYzMzI1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEzY2ZkNS1iMjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufe0bHsJXW8dA/Snq/PD2uCVG1xUzskJfpCIdEUj8f0TrSLfgf5Qofrn/76K YBU0NmnhjA0dFXKSFEINZhirE30MFVf+nZJV2r8om/96DzIxrE6tRLnr5bSa14rC ZFhXjHCHv5ZmoUmXh37MMzb7DRbXuwjg7khsrCYF2yrKkapYzUjdGeQsDBTR7oXC 6KAU7W7qdnQVxmf3nc7fE8SbWgXPDjJdTJQ62pxd42dgyauyzeZ6DzxFViAxSmgF XkmiriXYJaiNbvTh7ViLNLm+KuTeX5Q1R3YFJ7TOPN7hkDAS9qpPxEGcO58ksdtF mGU4gxJk+TKrWOKztWEnYSRMiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFI/sx4gZ DGCVPC7AXs8ua39Jiv5OMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMjhENzAwMTJB MTRGMTFFQzhGRjc2QTYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABwxgYwDQYJKoZIhvcNAQELBQADggEBAD8GgYbB0oZMnxif Ke/yp+F3fZnKwUwLftXMcPPLRR+Q6NhRjTCSpD+HsmqPygMd/q2ME/0CgztwCoDc thW/fGA1XTPigGajDGjyVixFenJEy+VxZj0+tNGWVyNGsyM+zAwGC8ZRzbP4B7G8 JYuIux0PXu3Vg92Gj9eKncMcg2Ww/hKrQKt2ia/UII/yprnQWoQfVsV4C6ic9HqO gneoD25jIqY0jRVkIz9wWE74pZ2zBb+/2l5703d3EhqClb8y0BGVo+QAruhqt8hk NZ49h+IDSAgcqqOTT/RNhBFxa0W43dBIgLHbwY9/xvZPm+9DfZSnr2zuZ3pVXhu5 m+QrqE8= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org