$ rpki-client -vvf rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/F16DD2B0E0FB11EE8552F941C4F9AE02.roa File: F16DD2B0E0FB11EE8552F941C4F9AE02.roa (raw, json) Hash identifier: 37wbWCnWXU/ELyPlkoOPoh4JCAJyFhcsdRvKDXlbhrc= Subject key identifier: 25:A5:14:6F:4F:F3:57:34:74:64:FF:59:6D:7C:76:1C:5C:BA:6E:78 Certificate issuer: /CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Certificate serial: 4F Authority key identifier: C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/F16DD2B0E0FB11EE8552F941C4F9AE02.roa Signing time: Thu 25 Jul 2024 05:06:12 +0000 ROA not before: Thu 25 Jul 2024 05:06:12 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 137883 IP address blocks: 202.37.104.0/23 maxlen: 23 202.37.104.0/24 maxlen: 24 202.37.105.0/24 maxlen: 24 2401:b620::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B1BE/serialNumber=C958FD2ABF8DA1F489152CE651A4089457CD176A Validity Not Before: Jul 25 05:06:12 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66a1dd44-f8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:22:02:67:cb:cc:96:a0:42:f7:40:d8:57: 82:65:fc:c2:f8:4e:5b:db:27:b3:59:5b:59:4f:39: eb:04:cd:69:17:3c:64:6e:52:a1:2a:f4:22:08:87: 21:5e:f3:e0:d9:f0:ae:95:99:e1:98:4e:6e:e1:69: 44:06:94:c0:83:39:32:0c:5b:94:32:51:88:b2:f2: a2:8c:79:0f:37:ba:ab:41:bb:56:7d:f6:d7:f3:42: 48:f4:1b:a1:f4:ea:0b:a7:b7:84:7f:31:c9:06:24: 88:1b:c5:61:66:ec:97:07:78:aa:79:b8:c8:f5:fe: b0:0f:51:49:c3:d4:9b:9a:19:84:b9:b9:5b:fe:ce: 35:dc:dd:94:0c:aa:ed:76:13:4d:dd:dc:8b:24:4f: 09:72:7c:b6:67:ff:72:84:82:cb:15:15:0b:96:ea: 41:74:71:d6:f5:36:43:22:ac:ff:1c:84:63:d6:d4: 50:5c:bd:6a:ac:cc:e2:79:c3:fe:62:be:79:c6:e4: 6f:8d:75:7f:4e:d4:d6:7b:5c:d4:0e:fe:8c:df:22: ee:2b:c9:2e:61:ae:29:38:d0:d1:db:49:fd:35:35: 15:eb:05:59:d2:1f:52:0c:6f:d7:6a:d7:67:4e:61: c6:7c:01:71:c7:f4:c4:b3:6f:2f:89:84:10:36:db: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A5:14:6F:4F:F3:57:34:74:64:FF:59:6D:7C:76:1C:5C:BA:6E:78 X509v3 Authority Key Identifier: keyid:C9:58:FD:2A:BF:8D:A1:F4:89:15:2C:E6:51:A4:08:94:57:CD:17:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/yVj9Kr-NofSJFSzmUaQIlFfNF2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVj9Kr-NofSJFSzmUaQIlFfNF2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B1BE/39995344E0FB11EE878F0D40C4F9AE02/F16DD2B0E0FB11EE8552F941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.104.0/23 IPv6: 2401:b620::/32 Signature Algorithm: sha256WithRSAEncryption 36:c2:78:40:65:60:69:8e:73:f7:eb:a9:e2:0a:f7:5b:ea:03: 9a:61:25:fc:43:8d:3b:1d:b7:e0:35:cd:a5:a1:28:c9:5c:9f: b6:ce:e4:27:bd:0b:65:5c:01:02:48:d9:7c:66:de:bd:90:e6: 4c:28:3c:f7:00:9b:32:f9:a8:a9:9a:76:25:09:fd:2b:da:d1: d6:7f:3c:17:1b:6a:ab:1b:88:a6:c8:c9:14:f3:65:20:f5:58: b8:5b:03:df:79:a2:bf:77:0e:2b:f3:ac:0b:9e:19:c1:32:ed: d1:ce:81:31:4f:a5:70:cd:09:6e:2e:51:f4:5f:bb:e1:1e:e3: ca:d9:12:cc:fd:30:3e:b1:36:0c:e9:2a:ec:11:b2:f5:14:1e: b5:7c:1b:41:a2:1e:d5:53:c3:23:15:fb:0f:c8:fa:68:6b:6d: ad:59:96:91:56:4a:91:03:75:c6:ae:e2:78:18:ad:20:5a:ee: fe:b2:86:91:d2:4e:5c:d1:36:87:11:c1:d4:3d:a9:eb:25:7f: d3:72:d6:b3:aa:1c:bb:13:15:94:a6:57:7d:b1:6f:84:7c:0d: eb:32:a0:25:01:b6:d0:0a:9f:eb:41:3a:ba:0e:2f:99:1c:9d: 31:8c:65:58:7e:5d:ce:a2:5c:72:60:f5:25:db:b2:a0:62:cb: e4:57:14:70 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 QjFCRTExMC8GA1UEBRMoQzk1OEZEMkFCRjhEQTFGNDg5MTUyQ0U2NTFBNDA4OTQ1 N0NEMTc2QTAeFw0yNDA3MjUwNTA2MTJaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YTFkZDQ0LWY4ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVKyICZ8vMlqBC90DYV4Jl/ML4TlvbJ7NZW1lPOesEzWkXPGRuUqEq9CIIhyFe 8+DZ8K6VmeGYTm7haUQGlMCDOTIMW5QyUYiy8qKMeQ83uqtBu1Z99tfzQkj0G6H0 6gunt4R/MckGJIgbxWFm7JcHeKp5uMj1/rAPUUnD1JuaGYS5uVv+zjXc3ZQMqu12 E03d3IskTwlyfLZn/3KEgssVFQuW6kF0cdb1NkMirP8chGPW1FBcvWqszOJ5w/5i vnnG5G+NdX9O1NZ7XNQO/ozfIu4ryS5hrik40NHbSf01NRXrBVnSH1IMb9dq12dO YcZ8AXHH9MSzby+JhBA22xNJAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUJaUUb0/z VzR0ZP9ZbXx2HFy6bngwHwYDVR0jBBgwFoAUyVj9Kr+NofSJFSzmUaQIlFfNF2ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVCMUJFLzM5OTk1MzQ0RTBG QjExRUU4NzhGMEQ0MEM0RjlBRTAyL3lWajlLci1Ob2ZTSkZTem1VYVFJbEZmTkYy by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveVZqOUtyLU5vZlNKRlN6bVVhUUlsRmZORjJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjFCRS8zOTk5NTM0NEUwRkIxMUVFODc4RjBENDBDNEY5QUUwMi9GMTZERDJCMEUw RkIxMUVFODU1MkY5NDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAcolaDANBAIAAjAHAwUAJAG2IDANBgkqhkiG9w0BAQsFAAOC AQEANsJ4QGVgaY5z9+up4gr3W+oDmmEl/EONOx234DXNpaEoyVyfts7kJ70LZVwB AkjZfGbevZDmTCg89wCbMvmoqZp2JQn9K9rR1n88FxtqqxuIpsjJFPNlIPVYuFsD 33miv3cOK/OsC54ZwTLt0c6BMU+lcM0Jbi5R9F+74R7jytkSzP0wPrE2DOkq7BGy 9RQetXwbQaIe1VPDIxX7D8j6aGttrVmWkVZKkQN1xq7ieBitIFru/rKGkdJOXNE2 hxHB1D2p6yV/03LWs6ocuxMVlKZXfbFvhHwN6zKgJQG20Aqf60E6ug4vmRydMYxl WH5dzqJccmD1JduyoGLL5FcUcA== -----END CERTIFICATE-----Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org