$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa File: 2C04F1F202CE11E6B167303FC4F9AE02.roa (raw, json) Hash identifier: 42+AdUwxxCnW8+mpW9En0BbvfvMfDp076eo2jJL8hog= Subject key identifier: 1B:B9:1F:AC:19:7C:BE:00:01:64:78:DA:EA:0D:CD:37:33:46:0B:BC Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 2406 Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa Signing time: Fri 26 Jul 2024 16:33:39 +0000 ROA not before: Fri 26 Jul 2024 16:33:39 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 24451 IP address blocks: 203.177.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9222 (0x2406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 26 16:33:39 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a3cfe3-4b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:55:48:f1:5a:15:ea:48:56:43:48:97:9b: d5:9d:95:bc:f0:44:70:d2:3b:32:6c:a2:05:14:29: 18:1f:6a:f4:6a:37:60:17:2a:70:e0:d6:65:b8:b3: 85:55:05:c7:5c:52:fd:14:c4:a8:03:80:ed:29:42: b3:55:27:f4:c7:11:ff:9b:77:c7:e8:96:bb:28:d8: f9:5a:82:e0:70:e6:20:43:e4:8b:66:e0:23:5a:86: 90:16:5b:05:3e:75:69:d0:dc:5c:3a:f3:95:fd:06: 48:7a:7a:3a:d6:e4:72:be:76:cd:99:c0:8e:e8:8a: 2f:b9:c2:a3:77:b6:b5:36:54:93:ac:1b:19:49:6b: b3:a8:af:9b:a0:ab:4f:20:de:d0:27:2e:f1:7c:08: 68:58:59:a9:56:d4:b4:24:6e:d5:9b:44:82:9b:d8: c4:94:1b:66:c3:b1:a6:7d:71:d4:5d:50:3a:e5:f0: dc:d2:6b:62:b3:58:80:cd:d2:7b:f1:9c:6a:0d:5d: a4:db:6a:cc:76:ab:52:00:5d:07:af:01:ff:bf:25: ee:97:e9:18:fe:f0:e0:db:c0:9c:94:16:47:ee:93: 08:84:7d:88:41:11:43:c3:4d:ad:ed:0a:0a:7e:f9: 47:ca:3a:bb:1e:94:a6:31:95:40:e6:28:4f:83:94: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B9:1F:AC:19:7C:BE:00:01:64:78:DA:EA:0D:CD:37:33:46:0B:BC X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/2C04F1F202CE11E6B167303FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.177.81.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:1c:36:aa:7d:25:ea:66:48:0e:2d:17:b7:01:fd:d2:5c:7a: 39:39:31:5f:db:a2:8f:49:70:b4:79:ca:b3:8e:dc:cd:e2:ce: 40:f8:09:06:1f:e4:cb:02:1b:da:48:06:ad:46:3e:81:74:34: e8:50:a0:cc:ea:47:54:e2:6a:c1:f9:c5:d4:15:ff:1c:e6:71: 49:a4:34:a0:e5:f0:fe:d7:5c:15:83:7a:c0:c2:0e:57:5b:73: c0:a4:86:b6:57:ff:90:47:34:a7:4f:cf:16:a6:b4:19:88:3f: bc:4f:ed:f7:56:07:b7:c0:b8:71:e2:bb:f2:33:e9:5c:b5:7e: d6:c2:e1:b1:4c:ec:f2:b0:1a:2d:b0:59:4f:2d:b9:92:fc:32: 74:9a:bd:f9:17:65:a6:49:b9:01:2b:7b:08:c8:72:20:20:c6: 97:37:ba:21:26:7b:64:1b:5d:c8:ce:59:86:4a:a6:42:9a:4c: 52:a5:69:6a:86:c2:29:ed:ad:43:01:da:05:5f:5c:8e:d0:4b: ce:51:e2:15:28:bf:15:32:09:37:c1:15:86:8b:0d:ae:63:f9: b5:0a:95:21:91:09:e1:2a:77:aa:e2:1f:d8:15:79:85:aa:83: e3:bf:fa:80:ef:84:9b:04:cc:95:24:f4:8f:06:7e:b1:73:09: 1b:dd:bd:91 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjQwNzI2MTYzMzM5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEzY2ZlMy00Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssJVSPFaFepIVkNIl5vVnZW88ERw0jsybKIFFCkYH2r0ajdgFypw4NZluLOF VQXHXFL9FMSoA4DtKUKzVSf0xxH/m3fH6Ja7KNj5WoLgcOYgQ+SLZuAjWoaQFlsF PnVp0NxcOvOV/QZIeno61uRyvnbNmcCO6IovucKjd7a1NlSTrBsZSWuzqK+boKtP IN7QJy7xfAhoWFmpVtS0JG7Vm0SCm9jElBtmw7GmfXHUXVA65fDc0mtis1iAzdJ7 8ZxqDV2k22rMdqtSAF0HrwH/vyXul+kY/vDg28CclBZH7pMIhH2IQRFDw02t7QoK fvlHyjq7HpSmMZVA5ihPg5R7hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBu5H6wZ fL4AAWR42uoNzTczRgu8MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvMkMwNEYxRjIw MkNFMTFFNkIxNjczMDNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLsVEwDQYJKoZIhvcNAQELBQADggEBAGocNqp9JepmSA4t F7cB/dJcejk5MV/boo9JcLR5yrOO3M3izkD4CQYf5MsCG9pIBq1GPoF0NOhQoMzq R1TiasH5xdQV/xzmcUmkNKDl8P7XXBWDesDCDldbc8CkhrZX/5BHNKdPzxamtBmI P7xP7fdWB7fAuHHiu/Iz6Vy1ftbC4bFM7PKwGi2wWU8tuZL8MnSavfkXZaZJuQEr ewjIciAgxpc3uiEme2QbXcjOWYZKpkKaTFKlaWqGwintrUMB2gVfXI7QS85R4hUo vxUyCTfBFYaLDa5j+bUKlSGRCeEqd6riH9gVeYWqg+O/+oDvhJsEzJUk9I8GfrFz CRvdvZE= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org