$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CCE4E99E02CC11E6AA35863CC4F9AE02.roa File: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (raw, json) Hash identifier: 4Baklu7fz790X3t+DnvBTOz3bpmb9db78d+W2Rsz46U= Subject key identifier: 82:72:E0:99:3F:ED:C6:30:79:D3:42:8A:39:A2:B8:40:E1:97:7E:7E Certificate issuer: /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Certificate serial: 240B Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CCE4E99E02CC11E6AA35863CC4F9AE02.roa Signing time: Fri 26 Jul 2024 16:33:44 +0000 ROA not before: Fri 26 Jul 2024 16:33:44 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45832 IP address blocks: 120.28.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9227 (0x240b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B Validity Not Before: Jul 26 16:33:44 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a3cfe8-e34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:11:47:5f:18:a2:fc:c6:90:04:72:9f:02: 88:f4:e2:22:27:da:96:f5:64:10:b8:3c:96:15:39: b6:20:2c:bf:fb:d9:2d:e1:e5:25:29:13:7d:d9:dc: 11:9b:08:18:08:35:8f:4b:5a:da:ef:d6:92:79:88: 84:c9:80:32:26:03:b5:43:8d:0d:dd:92:66:f5:d6: 04:23:47:1a:57:c7:2c:6d:54:86:a0:8f:1d:e9:36: 6d:4c:8d:51:e0:e5:f7:c1:15:40:e9:66:08:63:bd: 9b:d0:94:59:cf:91:ce:2d:65:39:9d:e8:15:d0:80: 41:76:67:95:18:f4:28:5e:df:e6:8d:08:24:3b:1a: e0:79:9f:dd:0e:ba:76:47:d4:8c:8a:65:d7:6a:59: 4c:c0:7c:d2:9c:aa:86:2e:ba:87:07:c6:c7:6e:bc: cc:8b:e0:c2:73:b9:13:d6:b4:7b:f5:4d:17:f1:12: 03:a2:58:c5:83:c5:43:30:70:c2:d8:d8:5c:12:d9: 4b:8a:ad:27:da:8e:64:c2:1c:dd:2f:c3:8f:ae:53: eb:ab:f7:70:33:e9:3e:d0:51:7e:d3:42:77:a1:1a: 4e:20:4e:95:9a:ee:9d:b2:72:35:4f:39:c1:ea:c2: 69:ad:cf:05:95:b2:12:0e:97:8e:8f:c4:ac:3e:76: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:72:E0:99:3F:ED:C6:30:79:D3:42:8A:39:A2:B8:40:E1:97:7E:7E X509v3 Authority Key Identifier: keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/CCE4E99E02CC11E6AA35863CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.28.61.0/24 Signature Algorithm: sha256WithRSAEncryption cc:71:9d:67:2c:1d:dd:4b:dc:7a:0c:17:60:c3:3e:e5:3c:1f: 89:47:03:ab:ab:aa:45:31:af:9a:c4:1f:c2:74:59:29:da:f4: 8d:38:89:b6:a5:bb:e7:0c:0d:b8:12:e6:aa:87:94:3a:2a:4c: 94:59:49:4d:67:fe:03:7d:60:9c:a2:61:f1:a2:55:2c:c0:39: 74:db:0e:b7:5c:16:db:16:c5:94:95:f5:66:6c:66:a3:30:5b: ef:ff:b8:ed:d5:eb:af:83:e3:77:26:b7:84:ce:27:86:1c:3f: 85:e0:21:96:df:3b:67:83:68:a4:8a:a7:47:8c:1d:9c:c5:e2: f0:20:f5:c2:28:f8:d3:52:0c:3a:c3:1b:61:0f:57:2c:38:39: 41:18:1b:d2:6e:52:b7:65:14:65:f2:60:3a:7a:aa:fe:cb:9b: a4:fb:16:58:6d:1a:eb:f2:84:7f:50:15:3f:f0:6e:30:20:3e: 58:d0:11:c7:91:ef:75:12:ee:2d:e4:c7:71:25:48:b5:e5:1b: 57:02:5e:73:a4:73:71:be:da:5d:47:ee:fd:44:49:44:2a:cf: 39:95:dc:1d:a3:e2:a1:dc:f3:71:5b:2f:7d:34:cc:d4:1e:dd: 07:98:8d:e9:ce:fe:95:95:b1:b7:21:a4:61:8a:1e:02:5e:a5: 0e:01:09:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDlFNjY4RTZFNjdCQUQwQUNGOTQwQTIyOEM0QkMwOTNC OEIyNDAwMkIwHhcNMjQwNzI2MTYzMzQ0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmEzY2ZlOC1lMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh4RR18YovzGkARynwKI9OIiJ9qW9WQQuDyWFTm2ICy/+9kt4eUlKRN92dwR mwgYCDWPS1ra79aSeYiEyYAyJgO1Q40N3ZJm9dYEI0caV8csbVSGoI8d6TZtTI1R 4OX3wRVA6WYIY72b0JRZz5HOLWU5negV0IBBdmeVGPQoXt/mjQgkOxrgeZ/dDrp2 R9SMimXXallMwHzSnKqGLrqHB8bHbrzMi+DCc7kT1rR79U0X8RIDoljFg8VDMHDC 2NhcEtlLiq0n2o5kwhzdL8OPrlPrq/dwM+k+0FF+00J3oRpOIE6Vmu6dsnI1TznB 6sJprc8FlbISDpeOj8SsPnYP7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIJy4Jk/ 7cYwedNCijmiuEDhl35+MB8GA1UdIwQYMBaAFJ5mjm5nutCs+UCiKMS8CTuLJAAr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy9GRTc1NjM0MDAy Q0IxMUU2ODY1QjhGM0JDNEY5QUUwMi9ubWFPYm1lNjBLejVRS0lveEx3Sk80c2tB Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25tYU9ibWU2MEt6NVFLSW94THdKTzRza0FDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDYyMDcvRkU3NTYzNDAwMkNCMTFFNjg2NUI4RjNCQzRGOUFFMDIvQ0NFNEU5OUUw MkNDMTFFNkFBMzU4NjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB4HD0wDQYJKoZIhvcNAQELBQADggEBAMxxnWcsHd1L3HoM F2DDPuU8H4lHA6urqkUxr5rEH8J0WSna9I04ibalu+cMDbgS5qqHlDoqTJRZSU1n /gN9YJyiYfGiVSzAOXTbDrdcFtsWxZSV9WZsZqMwW+//uO3V66+D43cmt4TOJ4Yc P4XgIZbfO2eDaKSKp0eMHZzF4vAg9cIo+NNSDDrDG2EPVyw4OUEYG9JuUrdlFGXy YDp6qv7Lm6T7FlhtGuvyhH9QFT/wbjAgPljQEceR73US7i3kx3ElSLXlG1cCXnOk c3G+2l1H7v1ESUQqzzmV3B2j4qHc83FbL300zNQe3QeYjenO/pWVsbchpGGKHgJe pQ4BCTc= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:43 2024 by rpki-client on console-fra.rpki-client.org