$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/671FF3862E9511E9896EFA1DC4F9AE02.roa File: 671FF3862E9511E9896EFA1DC4F9AE02.roa (raw, json) Hash identifier: 6cY6Ob6u+QL6WHZfOXxaIiNx2wMqL0gPJlcRnC46fIc= Subject key identifier: 8E:B4:05:06:6F:A9:CC:02:0A:31:23:00:63:EF:96:92:35:F7:43:6D Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 23FC Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/671FF3862E9511E9896EFA1DC4F9AE02.roa Signing time: Fri 26 Jul 2024 16:33:31 +0000 ROA not before: Fri 26 Jul 2024 16:33:31 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 15347 IP address blocks: 203.177.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9212 (0x23fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 26 16:33:31 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a3cfda-9404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:69:b3:7b:11:8e:a8:a7:5b:6d:ce:4b:eb:31: 98:b2:37:d4:5d:88:36:a9:40:91:44:04:19:ae:8c: e9:ca:f3:5b:93:b8:27:20:5c:38:d9:53:fb:d3:68: fc:9b:16:59:4a:37:1c:ca:25:81:9e:4f:67:14:7f: 7a:d7:b3:04:f6:52:64:a4:8e:06:52:d3:df:c2:0c: 88:28:1a:7a:a1:bd:4d:1a:8e:5e:22:16:9c:18:c6: 16:d9:24:7a:2e:2e:9f:ae:92:15:10:53:fb:85:51: c7:02:12:e7:d9:b5:43:ff:08:bc:17:c9:0e:14:b1: 17:03:84:16:df:02:21:76:4a:e2:f8:53:07:6e:3e: 85:4b:e6:f9:1a:ab:f2:df:55:04:cb:b0:4e:a4:32: 79:c5:02:e3:02:9a:c1:15:92:b6:e0:bd:fd:d0:24: 22:36:20:13:d6:40:84:eb:2f:ee:cb:98:23:06:ed: 5c:42:d3:fc:b8:68:66:b2:3b:ec:34:93:32:69:46: 2f:95:35:64:63:58:c3:f9:5c:33:8a:e9:6b:45:3f: ab:5c:2d:e3:8d:e1:ef:56:a3:62:74:3f:ac:7c:11: c2:9a:06:4d:d5:07:15:5e:16:21:94:1f:24:db:92: 8e:0a:f0:10:19:3b:47:78:7d:d3:07:34:e4:b1:0b: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B4:05:06:6F:A9:CC:02:0A:31:23:00:63:EF:96:92:35:F7:43:6D X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/671FF3862E9511E9896EFA1DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.177.170.0/24 Signature Algorithm: sha256WithRSAEncryption c1:50:04:0d:b0:36:bf:03:57:31:c9:3b:b5:eb:a2:71:17:6e: 40:c5:6a:bf:16:97:82:12:4e:a4:a7:fa:9b:fb:2f:6b:dd:1a: ee:94:9d:73:3d:a4:14:88:1f:58:8d:ea:59:de:6a:d0:34:dd: 11:f4:78:0a:13:72:14:e2:a1:8a:2b:7e:e2:bd:a1:61:0c:6a: 0f:e0:23:cf:f1:73:fe:d8:a0:c3:49:8e:65:f4:6a:2d:05:21: 98:ed:d5:ba:9a:b2:b0:bb:05:8b:0f:a5:6f:20:e6:45:a8:d7: 5c:1a:40:dc:03:96:fd:cc:76:9d:e1:fb:2f:4f:4e:b6:97:92: 50:18:5e:5b:04:28:a5:62:64:b0:32:39:ce:9f:73:c1:dd:ad: c8:a3:10:99:f3:a9:e2:7c:57:0f:44:33:8e:13:8b:0c:98:71: a3:23:d9:91:2f:29:24:44:e3:76:2a:01:a4:c7:e1:4e:10:0a: d6:75:30:9a:7c:1b:da:64:72:ea:98:40:bb:02:5b:e0:c3:d6: 8b:ad:ed:09:9a:57:9c:40:9d:13:ab:09:15:b4:af:04:38:11: 6f:9c:33:e5:6d:7a:08:ef:7a:29:9e:7e:f7:08:9c:8c:70:75: 79:f9:14:2a:8a:e5:e3:4f:43:d0:18:db:d1:d4:30:4b:c5:7c: 40:77:f9:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICI/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjQwNzI2MTYzMzMxWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEzY2ZkYS05NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2mzexGOqKdbbc5L6zGYsjfUXYg2qUCRRAQZrozpyvNbk7gnIFw42VP702j8 mxZZSjccyiWBnk9nFH9617ME9lJkpI4GUtPfwgyIKBp6ob1NGo5eIhacGMYW2SR6 Li6frpIVEFP7hVHHAhLn2bVD/wi8F8kOFLEXA4QW3wIhdkri+FMHbj6FS+b5Gqvy 31UEy7BOpDJ5xQLjAprBFZK24L390CQiNiAT1kCE6y/uy5gjBu1cQtP8uGhmsjvs NJMyaUYvlTVkY1jD+VwziulrRT+rXC3jjeHvVqNidD+sfBHCmgZN1QcVXhYhlB8k 25KOCvAQGTtHeH3TBzTksQsTGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI60BQZv qcwCCjEjAGPvlpI190NtMB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvNjcxRkYzODYy RTk1MTFFOTg5NkVGQTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLsaowDQYJKoZIhvcNAQELBQADggEBAMFQBA2wNr8DVzHJ O7XronEXbkDFar8Wl4ISTqSn+pv7L2vdGu6UnXM9pBSIH1iN6lneatA03RH0eAoT chTioYorfuK9oWEMag/gI8/xc/7YoMNJjmX0ai0FIZjt1bqasrC7BYsPpW8g5kWo 11waQNwDlv3Mdp3h+y9PTraXklAYXlsEKKViZLAyOc6fc8HdrcijEJnzqeJ8Vw9E M44TiwyYcaMj2ZEvKSRE43YqAaTH4U4QCtZ1MJp8G9pkcuqYQLsCW+DD1out7Qma V5xAnROrCRW0rwQ4EW+cM+VtegjveimefvcInIxwdXn5FCqK5eNPQ9AY29HUMEvF fEB3+cY= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:01 2024 by rpki-client on console-ams.rpki-client.org