$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/D304973AC1E011EE81429B3EC4F9AE02.roa File: D304973AC1E011EE81429B3EC4F9AE02.roa (raw, json) Hash identifier: xcuVebpWpA51ZQ01z53xNiI20ooJwMoa0DiWxYItBos= Subject key identifier: 74:73:05:0F:C7:88:AD:25:5A:8E:A7:B7:92:29:7E:3F:28:66:35:9E Certificate issuer: /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Certificate serial: 059D Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/D304973AC1E011EE81429B3EC4F9AE02.roa Signing time: Fri 02 Feb 2024 15:36:25 +0000 ROA not before: Fri 02 Feb 2024 15:36:25 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 15083 IP address blocks: 115.126.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977 Validity Not Before: Feb 2 15:36:25 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65bd0bf9-0913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:5c:49:7c:35:d2:2d:09:a0:f9:f1:27:0b: 32:0e:8b:3f:2a:59:e5:a8:3a:2c:14:b6:ca:fe:a0: 12:de:5d:e1:be:0c:b1:e8:f1:5d:73:b6:a7:38:0c: b8:d2:ba:ad:58:0f:bb:76:8a:19:11:97:12:56:c0: 13:6a:44:05:9b:00:93:6a:a3:ee:9c:9d:74:c9:60: 82:a4:c4:6a:96:70:46:74:22:cb:b1:71:a3:32:00: a5:1c:e6:59:e0:6c:b3:86:a3:e7:65:07:31:4d:fb: 91:1a:43:78:bf:fd:c7:cc:26:0e:96:a4:5c:8d:60: 8d:a1:1e:03:aa:64:15:70:52:3d:7d:ba:20:68:27: 7a:84:17:87:a6:28:46:8f:af:ed:1c:25:e5:5e:a6: 0a:f1:43:0a:72:a2:3d:31:77:68:a6:f1:84:9c:de: 18:24:85:5f:02:c5:c9:f9:1d:05:b6:eb:e2:67:d4: d8:ea:cb:9d:cd:c6:c0:c4:34:ff:d2:a7:22:cf:cf: 72:46:a2:b7:d4:8b:3c:29:21:01:00:ab:54:8b:1a: 2b:0a:d1:04:0a:f3:cd:91:e0:7c:45:d2:7a:65:f5: 44:e0:14:65:9a:f7:90:42:1b:13:61:d5:ef:f7:82: 51:97:9a:e8:73:51:72:b6:60:4c:66:85:bc:a1:98: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:73:05:0F:C7:88:AD:25:5A:8E:A7:B7:92:29:7E:3F:28:66:35:9E X509v3 Authority Key Identifier: keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/D304973AC1E011EE81429B3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.126.25.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:d1:d0:43:57:b0:57:6f:a9:5b:68:3a:46:9a:fe:d3:4c:7b: cf:23:76:54:06:4b:88:d4:67:e5:3d:45:69:3e:1e:c9:cb:68: 18:11:b0:93:59:54:4d:21:6f:9b:e2:5a:b2:3d:8f:e4:79:bd: f0:e5:2e:4a:f3:91:38:81:b1:8e:1a:64:83:eb:32:9a:38:70: ab:c4:75:f5:41:eb:72:30:54:e9:12:d9:71:51:ca:4a:78:6a: 61:50:ef:3e:fd:c5:e7:08:c3:7c:01:c5:08:92:06:eb:65:3b: 97:9b:5c:7c:4b:43:30:88:0b:06:c6:97:f9:23:c9:f3:a9:6a: 1f:1e:36:e7:23:43:08:b4:24:97:64:4e:81:fc:08:93:b6:db: 9b:3e:cb:81:cd:7e:8f:b0:ac:10:03:d0:5f:e3:46:51:3a:ad: a0:cc:d6:0e:70:5b:65:15:03:cd:5e:95:74:ea:5a:70:65:c5: 84:ac:fd:44:51:ea:62:e3:ad:05:b1:3e:ef:4e:e8:de:2c:02: 67:91:44:08:e4:80:dc:d4:fb:43:8e:b9:9f:36:4d:af:45:6f: bc:cb:24:a5:68:bc:b9:a9:46:64:e4:e5:9e:f0:a3:0a:a1:4d: cc:04:5e:df:7a:24:3a:b4:5a:29:4f:e2:e1:32:49:c0:cd:45: 1f:60:8b:82 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRENjAxMTAvBgNVBAUTKEUwQkEyMjhFQUY5ODEyRjA2N0QyRkYzQkY4MDY4OTU2 OThDOTM5NzcwHhcNMjQwMjAyMTUzNjI1WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWJkMGJmOS0wOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ptcSXw10i0JoPnxJwsyDos/KlnlqDosFLbK/qAS3l3hvgyx6PFdc7anOAy4 0rqtWA+7dooZEZcSVsATakQFmwCTaqPunJ10yWCCpMRqlnBGdCLLsXGjMgClHOZZ 4GyzhqPnZQcxTfuRGkN4v/3HzCYOlqRcjWCNoR4DqmQVcFI9fbogaCd6hBeHpihG j6/tHCXlXqYK8UMKcqI9MXdopvGEnN4YJIVfAsXJ+R0FtuviZ9TY6sudzcbAxDT/ 0qciz89yRqK31Is8KSEBAKtUixorCtEECvPNkeB8RdJ6ZfVE4BRlmveQQhsTYdXv 94JRl5roc1FytmBMZoW8oZgg4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHRzBQ/H iK0lWo6nt5Ipfj8oZjWeMB8GA1UdIwQYMBaAFOC6Io6vmBLwZ9L/O/gGiVaYyTl3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEQ2MC85RTBERTM5MkI0 NUYxMUVCQjYxQjc2MENDNEY5QUUwMi80TG9panEtWUV2Qm4wdjg3LUFhSlZwakpP WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRMb2lqcS1ZRXZCbjB2ODctQWFKVnBqSk9YYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjRENjAvOUUwREUzOTJCNDVGMTFFQkI2MUI3NjBDQzRGOUFFMDIvRDMwNDk3M0FD MUUwMTFFRTgxNDI5QjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABzfhkwDQYJKoZIhvcNAQELBQADggEBAF3R0ENXsFdvqVto Okaa/tNMe88jdlQGS4jUZ+U9RWk+HsnLaBgRsJNZVE0hb5viWrI9j+R5vfDlLkrz kTiBsY4aZIPrMpo4cKvEdfVB63IwVOkS2XFRykp4amFQ7z79xecIw3wBxQiSButl O5ebXHxLQzCICwbGl/kjyfOpah8eNucjQwi0JJdkToH8CJO225s+y4HNfo+wrBAD 0F/jRlE6raDM1g5wW2UVA81elXTqWnBlxYSs/URR6mLjrQWxPu9O6N4sAmeRRAjk gNzU+0OOuZ82Ta9Fb7zLJKVovLmpRmTk5Z7wowqhTcwEXt96JDq0WilP4uEyScDN RR9gi4I= -----END CERTIFICATE-----Generated at Fri May 17 02:01:41 2024 by rpki-client on console-ams.rpki-client.org