$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa File: 18164B6AB2C811EFA702DF80C4F9AE02.roa (raw, json) Hash identifier: 7UFK5IvMzRZ9oqAbFOWW72hTsQEiovxWyIoXLKQd8RE= Subject key identifier: 65:82:F8:C5:47:99:57:94:A0:8B:8A:6A:9D:DC:AD:18:70:88:DC:8B Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: 02 Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa Signing time: Thu 05 Dec 2024 05:16:34 +0000 ROA not before: Thu 05 Dec 2024 05:16:34 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 0 IP address blocks: 203.34.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jan 2025 05:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: Dec 5 05:16:34 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67513732-8584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c3:bf:b3:ce:30:51:d5:1c:cc:79:41:07:23: 92:be:5f:46:84:b6:9d:0c:1c:47:22:06:13:ed:cb: 42:b9:ab:5b:e1:1b:b1:cf:32:ef:d0:9d:2e:1f:cc: 7b:e2:51:a3:f3:3d:8a:fc:82:82:94:f7:ba:31:e4: 40:25:99:0a:b7:4a:c9:ec:bc:04:6a:70:5e:9e:0c: 23:15:d2:bc:2c:9c:2b:16:ca:d7:ed:ce:ea:2a:ab: 26:07:a7:c1:e0:9f:9c:40:c9:35:e5:dd:bf:88:3c: 90:5e:55:af:9d:ad:86:24:cc:46:99:07:1f:ca:fe: 3c:9b:a8:c9:24:07:e6:6c:0c:49:4f:63:20:43:4a: 8a:5c:90:6f:66:c0:5e:bb:2c:48:14:9a:ac:a5:47: 0b:2e:30:6d:83:85:45:b1:8b:0f:23:67:77:52:eb: 13:00:c8:14:7e:27:d3:e2:34:1d:0d:92:e3:0a:9e: 2b:03:e0:70:5a:0c:58:6c:97:f4:a6:cf:17:d3:06: 04:67:5a:01:72:b2:28:77:fa:7d:92:7d:54:d3:3d: 68:19:00:89:95:4b:14:09:3d:ea:c8:69:13:fa:b4: 1d:a1:82:52:70:0a:f7:04:1e:34:55:db:9a:37:aa: 43:51:fb:cc:6f:50:e2:27:c6:75:5e:56:8e:87:82: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:82:F8:C5:47:99:57:94:A0:8B:8A:6A:9D:DC:AD:18:70:88:DC:8B X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/18164B6AB2C811EFA702DF80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.34.237.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:da:39:5f:48:24:70:6d:4d:50:1d:a8:bc:cc:fa:8e:59:28: 78:70:3b:ef:93:35:dc:c7:e1:3e:78:29:55:db:3b:84:fb:05: ff:01:3d:a7:05:2d:f5:68:08:8e:47:d1:71:5f:d6:b8:39:5c: e8:7f:cf:1a:76:72:84:92:9c:aa:b0:fc:42:7c:aa:57:65:65: ec:f4:bb:d7:4e:9d:be:53:52:19:4a:46:68:f6:68:04:8e:cf: 48:b9:76:80:ab:88:14:0e:5a:ac:7f:e2:20:f8:99:1a:6c:d4: 7d:e3:f7:99:ad:0f:c2:eb:4b:a0:99:54:e2:2a:10:b1:e9:63: d0:34:6e:49:ae:2e:a6:a7:30:57:fd:b7:e5:0a:a2:93:0e:91: 09:22:87:8b:79:8f:6c:75:c6:d3:8e:84:2a:60:65:3c:a4:92: 0f:34:cb:d4:89:44:6e:21:b0:0e:72:21:ae:04:a8:2f:e5:5f: 18:55:36:16:84:a9:01:6c:8d:f1:d7:1d:c3:1d:47:fe:f3:c8: fe:61:b7:6f:4a:29:b8:dc:53:0c:58:5e:16:83:73:06:1f:18: be:9e:17:8b:2e:0e:aa:ab:3a:df:34:5a:ca:53:68:6a:17:83: 7f:1f:b7:83:21:f8:2b:b1:69:8c:fd:bc:ae:d1:ff:f7:54:fe: ef:cf:34:64 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTdDRjExMC8GA1UEBRMoRUMzRDgwN0Y3OTNDOUNGNUZDRTMzNUVFMTVFMDk4NDQ0 OUI0MzA5NjAeFw0yNDEyMDUwNTE2MzRaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NTEzNzMyLTg1ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiw7+zzjBR1RzMeUEHI5K+X0aEtp0MHEciBhPty0K5q1vhG7HPMu/QnS4fzHvi UaPzPYr8goKU97ox5EAlmQq3SsnsvARqcF6eDCMV0rwsnCsWytftzuoqqyYHp8Hg n5xAyTXl3b+IPJBeVa+drYYkzEaZBx/K/jybqMkkB+ZsDElPYyBDSopckG9mwF67 LEgUmqylRwsuMG2DhUWxiw8jZ3dS6xMAyBR+J9PiNB0NkuMKnisD4HBaDFhsl/Sm zxfTBgRnWgFysih3+n2SfVTTPWgZAImVSxQJPerIaRP6tB2hglJwCvcEHjRV25o3 qkNR+8xvUOInxnVeVo6Hgmw7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZYL4xUeZ V5Sgi4pqndytGHCI3IswHwYDVR0jBBgwFoAU7D2Af3k8nPX84zXuFeCYREm0MJYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxN0NGL0I0MTU1NDU4QjJD NzExRUY5MTZCQjY3RkM0RjlBRTAyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1K WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0QyQWYzazhuUFg4NHpYdUZlQ1lSRW0wTUpZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi8xODE2NEI2QUIy QzgxMUVGQTcwMkRGODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsi7TANBgkqhkiG9w0BAQsFAAOCAQEAnNo5X0gkcG1NUB2o vMz6jlkoeHA775M13MfhPngpVds7hPsF/wE9pwUt9WgIjkfRcV/WuDlc6H/PGnZy hJKcqrD8QnyqV2Vl7PS7106dvlNSGUpGaPZoBI7PSLl2gKuIFA5arH/iIPiZGmzU feP3ma0PwutLoJlU4ioQselj0DRuSa4upqcwV/235Qqikw6RCSKHi3mPbHXG046E KmBlPKSSDzTL1IlEbiGwDnIhrgSoL+VfGFU2FoSpAWyN8dcdwx1H/vPI/mG3b0op uNxTDFheFoNzBh8Yvp4Xiy4Oqqs63zRaylNoaheDfx+3gyH4K7FpjP28rtH/91T+ 7880ZA== -----END CERTIFICATE-----Generated at Fri Dec 27 08:43:12 2024 by rpki-client on console-fra.rpki-client.org