$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CF09016006A611EAA8819441C4F9AE02.roa File: CF09016006A611EAA8819441C4F9AE02.roa (raw, json) Hash identifier: KHNLT838WyNkjsWq7rgOnQXbrzOIWI56kiUt7itJ3/o= Subject key identifier: FE:8B:21:CC:60:0B:D1:27:E0:1A:10:E4:E2:91:F2:15:20:39:E1:6B Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Certificate serial: 35C7 Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CF09016006A611EAA8819441C4F9AE02.roa Signing time: Tue 20 Aug 2024 14:30:23 +0000 ROA not before: Tue 20 Aug 2024 14:30:22 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134515 IP address blocks: 203.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13767 (0x35c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE Validity Not Before: Aug 20 14:30:22 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66c4a87e-ac87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b2:99:76:c7:03:b4:08:f8:9f:5f:37:c7:30: 01:79:42:fa:1c:9e:3d:7a:27:96:59:28:5f:e3:36: bf:3a:31:01:6b:eb:42:8e:ee:f6:64:af:97:42:8f: 97:70:86:22:cc:3d:39:c2:75:72:08:c1:f2:b3:86: 76:e2:20:13:ea:5c:f9:d3:aa:fb:f5:3b:9a:f9:52: ec:a4:86:07:e1:68:21:61:29:d8:73:b7:04:05:67: d6:81:68:93:23:fe:ea:75:06:b6:2f:3e:b0:93:52: 88:10:c2:b3:c5:43:00:ea:a8:90:09:dd:fc:8c:f1: 73:5a:81:49:57:bf:f2:6a:85:e4:c6:db:d2:d0:70: 87:30:ec:28:1a:13:02:31:c2:d1:ba:dd:3e:62:f6: 14:c9:c5:f4:f7:01:93:f2:2c:88:cc:e0:c1:4f:86: 6b:ec:48:90:74:85:93:68:eb:d5:c4:1f:3e:83:04: 09:8b:4e:a6:fe:ec:0e:60:df:dd:73:f4:08:df:15: 0c:37:28:3a:b3:43:2b:07:9c:9a:2a:d4:5e:91:ca: 15:5e:16:0e:d0:40:fb:a8:d1:6a:53:50:1c:9d:04: f2:9a:6d:a7:01:8a:70:da:a1:58:1c:d3:ae:ba:00: 3c:8f:8b:f9:1d:c2:9e:a0:30:f4:98:9d:6b:4c:5c: 4f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8B:21:CC:60:0B:D1:27:E0:1A:10:E4:E2:91:F2:15:20:39:E1:6B X509v3 Authority Key Identifier: keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/CF09016006A611EAA8819441C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:e1:94:6c:dd:8b:bc:14:4c:26:21:7f:b2:9e:c8:82:91:23: 7b:d9:99:03:c4:57:58:8f:e7:23:f4:2c:34:8a:13:40:e4:a9: 5e:e1:6a:48:bf:1f:60:5c:e1:1a:f2:4e:ca:92:39:30:de:b3: d8:5b:5e:40:ec:e1:83:84:5e:3c:5e:27:ac:38:2b:a5:f8:45: 71:d2:85:de:05:e0:4f:0d:27:fa:25:1c:1e:7d:78:bc:9b:29: dd:dd:52:77:49:a7:a1:f8:1b:0b:d9:43:f8:a6:36:8d:f4:ee: 2e:be:d6:92:4b:6a:df:5b:c3:13:80:00:04:04:85:13:d5:d7: 9c:20:eb:16:32:fa:bb:b7:28:12:ab:16:e6:a7:f2:eb:49:95: 2c:2b:91:06:c1:e8:bd:7c:6b:0e:a3:7e:ff:b2:1d:80:31:4e: 7c:e4:f4:c3:19:c6:65:b2:fa:d9:c1:93:21:e8:72:94:4f:87: 04:61:d7:e6:d5:3b:a7:32:60:be:f4:d3:e0:e1:a1:14:d3:21: ea:e1:1f:91:eb:c0:e8:fb:5d:a6:85:84:86:5f:6a:77:2c:42: b3:2d:cd:06:98:fe:a7:05:f3:40:c8:b8:f3:a8:90:bd:46:2c: 78:03:c4:79:63:a6:6f:eb:73:d5:8c:9f:53:76:25:d2:0b:9b: 6f:40:6d:d5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0 MkI1MDUxQ0UwHhcNMjQwODIwMTQzMDIyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM0YTg3ZS1hYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLKZdscDtAj4n183xzABeUL6HJ49eieWWShf4za/OjEBa+tCju72ZK+XQo+X cIYizD05wnVyCMHys4Z24iAT6lz506r79Tua+VLspIYH4WghYSnYc7cEBWfWgWiT I/7qdQa2Lz6wk1KIEMKzxUMA6qiQCd38jPFzWoFJV7/yaoXkxtvS0HCHMOwoGhMC McLRut0+YvYUycX09wGT8iyIzODBT4Zr7EiQdIWTaOvVxB8+gwQJi06m/uwOYN/d c/QI3xUMNyg6s0MrB5yaKtRekcoVXhYO0ED7qNFqU1AcnQTymm2nAYpw2qFYHNOu ugA8j4v5HcKeoDD0mJ1rTFxPcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP6LIcxg C9En4BoQ5OKR8hUgOeFrMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvQ0YwOTAxNjAw NkE2MTFFQUE4ODE5NDQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLfuMwDQYJKoZIhvcNAQELBQADggEBAA3hlGzdi7wUTCYh f7KeyIKRI3vZmQPEV1iP5yP0LDSKE0DkqV7haki/H2Bc4RryTsqSOTDes9hbXkDs 4YOEXjxeJ6w4K6X4RXHShd4F4E8NJ/olHB59eLybKd3dUndJp6H4GwvZQ/imNo30 7i6+1pJLat9bwxOAAAQEhRPV15wg6xYy+ru3KBKrFuan8utJlSwrkQbB6L18aw6j fv+yHYAxTnzk9MMZxmWy+tnBkyHocpRPhwRh1+bVO6cyYL700+DhoRTTIerhH5Hr wOj7XaaFhIZfancsQrMtzQaY/qcF80DIuPOokL1GLHgDxHljpm/rc9WMn1N2JdIL m29AbdU= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org