$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa File: 178177F0D35C11E69A0BDB79C4F9AE02.roa (raw, json) Hash identifier: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc= Subject key identifier: FF:6E:AA:F9:DD:08:A6:2F:3E:99:92:99:B2:32:40:0C:35:17:45:DD Certificate issuer: /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC Certificate serial: 1C8E Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa Signing time: Sat 02 Nov 2024 16:24:00 +0000 ROA not before: Sat 02 Nov 2024 16:24:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 2647 IP address blocks: 202.167.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7310 (0x1c8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC Validity Not Before: Nov 2 16:24:00 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67265220-b669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:e4:43:6d:a5:20:58:9d:aa:d5:cd:78:68: a9:f8:97:bc:cd:97:6f:d0:89:44:a0:50:10:68:6b: 0f:24:3c:41:80:a1:d5:75:4c:1d:66:45:f9:10:a8: 1b:12:cf:f3:6e:c9:62:2c:60:4f:b3:1c:32:47:1e: 0a:e2:43:7f:8f:c0:7a:33:ea:53:2d:fb:6c:09:c7: d9:25:8d:14:a1:c6:1e:2f:c9:55:78:80:24:77:7f: 76:34:8e:82:33:f1:00:a5:18:6c:28:98:f9:38:7d: da:fa:9a:77:c0:39:0b:f0:14:9b:31:c2:bd:7b:82: 0f:1b:60:49:16:d4:f1:1c:e2:8d:5c:06:5c:6e:87: 00:0c:82:b5:e4:38:10:e5:c1:4c:da:50:4a:49:9e: 58:ec:05:ae:36:7f:da:d9:17:56:7c:7a:7a:49:28: cd:ef:5c:5f:e0:cb:fe:59:71:af:2b:30:c9:5c:fc: 50:67:2b:0a:47:b6:02:1a:38:1e:fa:91:fa:39:3c: 28:6f:2d:be:e8:3e:06:1c:cb:b8:85:4a:f6:20:ab: a2:87:c8:a2:3f:fb:0d:50:00:af:76:f9:83:e1:3f: 60:f0:4c:61:db:3e:04:2b:07:51:58:f7:e3:ad:37: cb:db:06:5f:10:24:5b:8f:7f:7c:48:16:74:c4:90: 09:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6E:AA:F9:DD:08:A6:2F:3E:99:92:99:B2:32:40:0C:35:17:45:DD X509v3 Authority Key Identifier: keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/178177F0D35C11E69A0BDB79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.167.43.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f8:3b:6a:a1:e5:b1:05:49:8d:4b:c1:87:eb:ba:1b:04:94: 71:98:e1:1d:c9:e2:a5:99:13:26:3e:1c:b5:45:76:81:c6:97: 2b:98:17:fb:5d:59:75:47:51:ab:80:c8:6a:c0:99:4c:75:3f: 1d:55:b7:24:81:5c:d1:6c:c7:ef:08:42:0e:7c:90:77:39:15: 2c:1a:91:76:ac:70:a9:1a:30:3b:f1:71:7e:5e:a7:8c:0c:dc: e1:b5:ca:60:a0:2d:a5:f1:83:23:86:6e:dc:5d:8f:6c:e0:93: b0:38:26:7d:b5:b6:d9:0a:4a:8c:36:2f:c5:78:7e:06:1b:3c: 33:2d:a0:5f:c6:d1:e6:09:6f:32:d4:d7:9c:c4:6f:9d:a3:c4: 16:ef:1f:bd:1d:8e:c1:d9:6d:8f:55:33:5b:50:3d:a9:9d:96: 6a:47:00:ab:30:a0:da:8f:92:19:e1:17:ad:a4:dd:5e:e3:ad: a6:87:f2:d3:d3:41:05:b7:b0:80:d9:26:82:f5:4c:df:4f:cc: aa:ba:bf:87:4d:f3:f7:35:20:54:69:61:c2:c3:d6:12:f1:60: a7:70:02:00:ba:20:af:c3:50:04:9f:5d:bd:3f:ba:8b:f1:d7: 8e:74:09:c6:62:8e:32:84:3c:cf:18:15:63:ac:4d:07:75:65: a7:37:61:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBEMjcxMTAvBgNVBAUTKEZGQ0QyMERDQTY4REU0MzJGMjE5MUI3QjYzMzI4NkJD OTg3RTQyRUMwHhcNMjQxMTAyMTYyNDAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NTIyMC1iNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7bkQ22lIFidqtXNeGip+Je8zZdv0IlEoFAQaGsPJDxBgKHVdUwdZkX5EKgb Es/zbsliLGBPsxwyRx4K4kN/j8B6M+pTLftsCcfZJY0UocYeL8lVeIAkd392NI6C M/EApRhsKJj5OH3a+pp3wDkL8BSbMcK9e4IPG2BJFtTxHOKNXAZcbocADIK15DgQ 5cFM2lBKSZ5Y7AWuNn/a2RdWfHp6SSjN71xf4Mv+WXGvKzDJXPxQZysKR7YCGjge +pH6OTwoby2+6D4GHMu4hUr2IKuih8iiP/sNUACvdvmD4T9g8Exh2z4EKwdRWPfj rTfL2wZfECRbj398SBZ0xJAJzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP9uqvnd CKYvPpmSmbIyQAw1F0XdMB8GA1UdIwQYMBaAFP/NINymjeQy8hkbe2MyhryYfkLs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQyNy8yQTYxQ0E4QUQz NTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVETHlHUnQ3WXpLR3ZKaC1R dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184MGczS2FONURMeUdSdDdZektHdkpoLVF1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTBEMjcvMkE2MUNBOEFEMzU5MTFFNkI1NUFGQTcwQzRGOUFFMDIvMTc4MTc3RjBE MzVDMTFFNjlBMEJEQjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKpyswDQYJKoZIhvcNAQELBQADggEBAFL4O2qh5bEFSY1L wYfruhsElHGY4R3J4qWZEyY+HLVFdoHGlyuYF/tdWXVHUauAyGrAmUx1Px1VtySB XNFsx+8IQg58kHc5FSwakXascKkaMDvxcX5ep4wM3OG1ymCgLaXxgyOGbtxdj2zg k7A4Jn21ttkKSow2L8V4fgYbPDMtoF/G0eYJbzLU15zEb52jxBbvH70djsHZbY9V M1tQPamdlmpHAKswoNqPkhnhF62k3V7jraaH8tPTQQW3sIDZJoL1TN9PzKq6v4dN 8/c1IFRpYcLD1hLxYKdwAgC6IK/DUASfXb0/uovx1450CcZijjKEPM8YFWOsTQd1 Zac3YQY= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:45 2024 by rpki-client on console-fra.rpki-client.org