$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2AA1812202CE11E6B167303FC4F9AE02.roa File: 2AA1812202CE11E6B167303FC4F9AE02.roa (raw, json) Hash identifier: nPuyeWNG9exmJBtrhR6dKImyLvexezTrvMYpeknk12s= Subject key identifier: 7B:DD:C7:39:FE:95:91:BC:0D:9B:2C:0B:8C:1E:FF:34:8F:0B:09:58 Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2404 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2AA1812202CE11E6B167303FC4F9AE02.roa Signing time: Fri 26 Jul 2024 16:33:38 +0000 ROA not before: Fri 26 Jul 2024 16:33:38 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 24179 IP address blocks: 203.177.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9220 (0x2404) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 26 16:33:38 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a3cfe1-74c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d4:c8:11:7f:9a:6d:1d:09:b3:a1:39:3b:2c: f8:a8:c8:79:97:bf:ab:c4:00:42:98:49:75:63:1d: 32:47:07:6b:85:f3:7a:e4:f1:6f:fa:87:d3:ef:3a: fb:d3:38:75:e4:ac:f5:9c:57:f6:cd:32:1e:fa:f7: 66:ca:f5:68:7d:db:96:a8:26:83:9e:0b:6a:73:2d: 15:04:2e:46:8a:bf:9f:0d:d8:ba:e0:de:18:6c:66: 19:77:8f:37:76:05:16:6a:57:1b:de:d6:c3:3e:0b: 42:80:b0:2b:ed:fb:26:d9:e3:73:37:a9:f4:8e:cd: 65:0c:5c:2b:98:7c:91:d5:c4:92:4c:9f:06:02:48: 1e:e1:30:df:62:38:05:1b:dc:6c:78:a5:62:9a:1f: 06:21:b5:e6:29:9f:68:7e:d1:7a:01:11:c5:c1:23: fa:07:72:d9:24:cd:e2:57:22:34:7d:55:2c:98:4d: 65:93:64:97:b9:f5:02:34:d7:15:ce:d3:1d:6f:30: e0:68:e9:73:af:56:35:ad:aa:4e:06:b6:fb:9a:79: c6:c1:26:14:6a:92:f6:a2:b3:d5:37:c2:5e:5e:e8: f0:31:8b:22:23:33:8a:d4:15:39:cf:15:6f:4b:42: 80:3d:a5:9f:3f:e1:d7:83:16:d6:be:68:8b:98:16: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DD:C7:39:FE:95:91:BC:0D:9B:2C:0B:8C:1E:FF:34:8F:0B:09:58 X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2AA1812202CE11E6B167303FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.177.151.0/24 Signature Algorithm: sha256WithRSAEncryption 40:95:b4:c1:95:27:37:6d:14:6e:27:15:05:88:37:42:6b:38: 82:f2:36:da:9d:0f:a6:26:c6:0f:ba:91:30:d9:d2:f9:7b:24: 24:3d:06:c2:d5:1b:2c:e2:6e:45:e0:56:b7:eb:7a:77:6f:1b: ad:bc:4f:78:ee:4d:de:b9:57:9a:65:e9:18:62:29:28:5a:06: 91:e0:c4:e2:ec:40:98:f8:13:17:94:78:87:b6:cf:1f:1f:04: 73:45:f2:54:ff:6f:e9:85:e4:b2:0f:9a:ff:4a:83:1c:d4:b1: 3f:52:a4:8c:78:63:0f:5e:51:fc:2c:07:de:06:17:cf:a8:57: d4:92:0b:cb:f4:5d:99:c9:dd:c9:96:15:d4:59:8d:ca:72:42: 2a:42:44:25:c6:dc:49:b2:f9:7d:2b:b2:e9:db:92:76:7a:9f: 1d:89:cb:e4:d1:77:5b:ad:a5:8d:b8:92:05:68:02:61:f9:3a: 3a:70:d9:f4:84:f4:24:4e:45:94:e8:3b:02:e1:9a:5b:b9:98: c2:be:62:e9:39:51:ac:44:57:bc:1b:bc:3a:42:10:6e:c7:a2: c2:69:36:9c:95:f8:f3:65:43:fe:1e:ef:85:15:a6:3a:9b:1e: 6b:ca:53:eb:1b:ed:43:ef:67:5a:36:a8:f2:69:e5:c4:b4:1f: 45:3e:ee:a8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJAQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjQwNzI2MTYzMzM4WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEzY2ZlMS03NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5tTIEX+abR0Js6E5Oyz4qMh5l7+rxABCmEl1Yx0yRwdrhfN65PFv+ofT7zr7 0zh15Kz1nFf2zTIe+vdmyvVofduWqCaDngtqcy0VBC5Gir+fDdi64N4YbGYZd483 dgUWalcb3tbDPgtCgLAr7fsm2eNzN6n0js1lDFwrmHyR1cSSTJ8GAkge4TDfYjgF G9xseKVimh8GIbXmKZ9oftF6ARHFwSP6B3LZJM3iVyI0fVUsmE1lk2SXufUCNNcV ztMdbzDgaOlzr1Y1rapOBrb7mnnGwSYUapL2orPVN8JeXujwMYsiIzOK1BU5zxVv S0KAPaWfP+HXgxbWvmiLmBY5tQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHvdxzn+ lZG8DZssC4we/zSPCwlYMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMkFBMTgxMjIw MkNFMTFFNkIxNjczMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLsZcwDQYJKoZIhvcNAQELBQADggEBAECVtMGVJzdtFG4n FQWIN0JrOILyNtqdD6Ymxg+6kTDZ0vl7JCQ9BsLVGyzibkXgVrfrendvG628T3ju Td65V5pl6RhiKShaBpHgxOLsQJj4ExeUeIe2zx8fBHNF8lT/b+mF5LIPmv9KgxzU sT9SpIx4Yw9eUfwsB94GF8+oV9SSC8v0XZnJ3cmWFdRZjcpyQipCRCXG3Emy+X0r sunbknZ6nx2Jy+TRd1utpY24kgVoAmH5Ojpw2fSE9CRORZToOwLhmlu5mMK+Yuk5 UaxEV7wbvDpCEG7HosJpNpyV+PNlQ/4e74UVpjqbHmvKU+sb7UPvZ1o2qPJp5cS0 H0U+7qg= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org