$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28DFC39E02CE11E6B167303FC4F9AE02.roa File: 28DFC39E02CE11E6B167303FC4F9AE02.roa (raw, json) Hash identifier: +CGhSvKre7unc2jjZTN2h/5C4OKnNYy8AFrBlT9QgCc= Subject key identifier: 6E:D0:41:32:2F:49:FA:F3:94:F2:DB:82:5D:0B:99:CD:CE:34:0D:97 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 23FD Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28DFC39E02CE11E6B167303FC4F9AE02.roa Signing time: Fri 26 Jul 2024 16:33:32 +0000 ROA not before: Fri 26 Jul 2024 16:33:32 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 17550 IP address blocks: 203.177.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9213 (0x23fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 26 16:33:32 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a3cfdb-120e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:4c:1b:2b:4f:63:24:ed:d2:92:7f:a3:a4: 30:25:a0:19:61:9d:ac:16:10:7f:9a:c0:b4:c0:16: 60:58:0b:4b:e0:0c:4a:18:7a:4f:f4:f3:8a:86:c4: 36:77:00:f0:7b:84:37:e9:74:b5:35:1f:68:5b:8e: cd:9b:a9:95:78:aa:16:b7:95:81:e1:90:7e:0b:ee: 58:33:12:67:74:bf:ef:54:28:1d:7f:54:36:ae:d8: 47:11:ad:f7:89:48:6b:eb:61:c0:1b:0f:1f:49:a3: 3b:ee:4e:27:d5:a4:a5:77:c2:7c:af:65:38:2d:b8: 19:25:1e:c5:63:8e:8d:c8:08:08:67:f4:a0:26:3f: fd:b8:66:b2:d1:6e:7b:5e:de:a6:06:53:70:cf:81: ba:99:66:b0:d8:c0:5a:72:d9:6d:20:9d:e8:cc:d7: 76:e7:11:ee:a6:a8:4a:9b:9d:81:72:08:e6:64:25: b0:24:c6:5c:5d:d1:23:9b:64:ff:90:42:3b:45:b7: f8:e6:ef:64:a7:7b:e6:62:ef:e5:03:5a:a8:48:74: 6a:cb:dd:af:ca:f0:66:88:bc:51:24:47:bb:08:de: 7b:72:7d:c9:eb:71:d3:d6:8c:79:90:e2:b8:9e:14: b0:a8:6f:74:88:88:ad:44:51:db:1d:c7:49:b9:e5: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D0:41:32:2F:49:FA:F3:94:F2:DB:82:5D:0B:99:CD:CE:34:0D:97 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/28DFC39E02CE11E6B167303FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.177.86.0/24 Signature Algorithm: sha256WithRSAEncryption ac:d2:9a:53:7f:10:8d:06:d1:4b:0c:35:61:4d:68:ef:54:b7: f5:d9:43:26:67:09:8a:6e:86:4d:03:a4:d7:27:de:60:f3:13: 2a:c2:f6:cd:90:75:f4:09:93:e4:44:1a:00:df:31:80:fd:e0: 95:90:29:2e:93:0d:92:9a:8f:91:eb:3a:39:d6:ea:45:b8:11: 11:7d:95:59:76:95:1d:84:2a:8d:1f:30:92:2a:5d:a8:77:6c: b7:ad:a7:34:2c:61:1d:92:fe:52:87:4e:7b:09:88:0d:57:88: c6:39:a5:f2:91:36:42:a4:26:88:6a:9c:04:a5:41:62:08:e5: 92:57:c9:e7:eb:1d:14:97:6c:68:08:7e:a7:8e:0c:f7:bd:b2: 5b:99:4d:82:b5:81:78:80:23:3f:1d:02:93:24:d8:62:61:50: d4:45:9b:5a:f0:c1:45:bd:c9:2f:22:92:3a:27:29:de:96:6b: 26:a1:26:ea:ef:6f:3f:c3:58:68:33:29:8c:90:6a:30:24:3d: fa:21:0b:2e:41:08:1e:47:19:8e:13:03:ed:77:e1:5f:51:eb: 75:56:b0:c2:36:e5:4b:19:de:18:d0:00:63:94:b2:08:b4:e4: 61:22:85:1f:81:6d:d2:12:ad:60:20:bf:de:ea:84:f1:d8:3b: a3:79:db:5c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICI/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjQwNzI2MTYzMzMyWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEzY2ZkYi0xMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWNMGytPYyTt0pJ/o6QwJaAZYZ2sFhB/msC0wBZgWAtL4AxKGHpP9POKhsQ2 dwDwe4Q36XS1NR9oW47Nm6mVeKoWt5WB4ZB+C+5YMxJndL/vVCgdf1Q2rthHEa33 iUhr62HAGw8fSaM77k4n1aSld8J8r2U4LbgZJR7FY46NyAgIZ/SgJj/9uGay0W57 Xt6mBlNwz4G6mWaw2MBactltIJ3ozNd25xHupqhKm52BcgjmZCWwJMZcXdEjm2T/ kEI7Rbf45u9kp3vmYu/lA1qoSHRqy92vyvBmiLxRJEe7CN57cn3J63HT1ox5kOK4 nhSwqG90iIitRFHbHcdJueVzYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG7QQTIv SfrzlPLbgl0Lmc3ONA2XMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMjhERkMzOUUw MkNFMTFFNkIxNjczMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLsVYwDQYJKoZIhvcNAQELBQADggEBAKzSmlN/EI0G0UsM NWFNaO9Ut/XZQyZnCYpuhk0DpNcn3mDzEyrC9s2QdfQJk+REGgDfMYD94JWQKS6T DZKaj5HrOjnW6kW4ERF9lVl2lR2EKo0fMJIqXah3bLetpzQsYR2S/lKHTnsJiA1X iMY5pfKRNkKkJohqnASlQWII5ZJXyefrHRSXbGgIfqeODPe9sluZTYK1gXiAIz8d ApMk2GJhUNRFm1rwwUW9yS8ikjonKd6WayahJurvbz/DWGgzKYyQajAkPfohCy5B CB5HGY4TA+134V9R63VWsMI25UsZ3hjQAGOUsgi05GEihR+BbdISrWAgv97qhPHY O6N521w= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org