$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/671FF9F6943011EA8988B883C4F9AE02.roa File: 671FF9F6943011EA8988B883C4F9AE02.roa (raw, json) Hash identifier: Wdg4VF5GLoHlwlPyl6+HlE/ibrc1SiBo2CXSWmJGq0s= Subject key identifier: AB:32:17:B6:F4:98:31:9D:BC:6E:D7:62:8D:22:60:DF:F1:00:0C:52 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1C5C Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/671FF9F6943011EA8988B883C4F9AE02.roa Signing time: Mon 28 Oct 2024 14:40:42 +0000 ROA not before: Mon 28 Oct 2024 14:40:42 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 45669 IP address blocks: 119.30.116.0/22 maxlen: 24 119.73.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 14:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7260 (0x1c5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 28 14:40:42 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=671fa269-11af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:ff:84:57:9f:24:e0:ae:44:22:cf:2d:a2: 92:2a:7a:8c:56:2f:9e:c6:a8:a0:ef:e5:86:48:2a: 2a:13:12:fd:9d:55:12:f4:57:d9:74:7b:08:21:cb: d7:06:4d:0f:5b:f6:b7:97:9c:86:c1:f0:b1:94:36: 97:e6:85:f3:f0:5e:dd:ac:50:28:e1:31:b6:d6:91: ac:b2:93:e3:f4:e4:be:6f:88:b3:d7:cc:56:66:c3: fc:17:d4:99:16:d2:57:35:58:a1:c6:92:d9:7c:4b: cf:dc:82:94:ad:43:bc:43:ac:85:81:27:45:16:2e: d6:6d:a7:94:f4:35:20:eb:db:71:d5:d7:b5:ca:66: f8:5d:94:4b:f3:5b:9c:e3:23:77:41:2b:f0:b1:53: f1:d4:b3:95:ff:f4:5e:a2:f2:25:13:13:17:eb:94: 8d:ee:25:d7:83:e3:a9:66:50:b5:5c:62:da:1c:08: 4d:95:44:8d:9b:62:d5:0e:6e:dd:16:68:16:cf:86: d7:13:3c:99:a6:8f:ef:42:e1:c8:39:15:ad:45:d6: 78:84:55:cb:80:b2:4b:a7:c9:c0:e4:4e:80:a9:a1: 50:d4:c7:48:3f:a0:e2:e2:5d:d0:14:c2:a7:4c:c5: 5f:a8:6c:2f:71:ed:65:e0:84:a3:4b:f5:2f:ba:22: 70:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:32:17:B6:F4:98:31:9D:BC:6E:D7:62:8D:22:60:DF:F1:00:0C:52 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/671FF9F6943011EA8988B883C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.30.116.0/22 119.73.65.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:2d:cf:98:70:51:8b:d0:0d:e0:d3:b0:37:f6:a9:b5:7d:c2: b7:7f:f3:d9:ef:f6:79:d1:a4:94:a6:fa:d6:c9:1a:ce:6b:41: 11:20:2f:0b:c8:de:69:28:e2:59:50:9d:58:99:f0:16:78:08: 72:9c:69:6f:f3:8e:8e:d9:b2:c1:5f:0b:f1:78:76:fb:00:b4: f1:e8:79:a8:7d:f5:0f:38:1d:80:09:02:7d:86:d3:bd:07:bb: e1:a5:e4:a1:1a:e6:fa:62:65:ee:94:90:73:94:0e:ec:25:0e: 4f:70:71:27:f7:72:26:57:2b:65:a5:3d:d4:69:d4:6b:f3:5d: 17:38:85:26:1c:28:71:3d:22:ae:03:0b:2e:b7:4d:54:9e:80: 0d:cf:a1:7d:5d:ad:c5:ff:e3:38:6b:5c:36:90:4d:70:d8:3e: dc:26:22:57:1f:b6:d1:09:08:6f:1f:58:34:f7:56:02:0e:de: 77:fd:ae:f5:cd:1e:60:ea:32:2b:67:62:5f:0d:38:27:02:d7: b7:69:c4:66:f4:0f:fd:34:c8:fa:69:e9:f5:f1:39:ae:ce:62: 0c:2d:97:1c:65:2f:b4:d2:42:ec:1b:34:2b:87:c4:e6:00:45: 38:ec:65:3f:1f:ea:2a:a7:37:9d:f7:55:40:36:1f:7d:4b:cc: 95:d6:6e:01 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjQxMDI4MTQ0MDQyWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzFmYTI2OS0xMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5X/hFefJOCuRCLPLaKSKnqMVi+exqig7+WGSCoqExL9nVUS9FfZdHsIIcvX Bk0PW/a3l5yGwfCxlDaX5oXz8F7drFAo4TG21pGsspPj9OS+b4iz18xWZsP8F9SZ FtJXNVihxpLZfEvP3IKUrUO8Q6yFgSdFFi7WbaeU9DUg69tx1de1ymb4XZRL81uc 4yN3QSvwsVPx1LOV//ReovIlExMX65SN7iXXg+OpZlC1XGLaHAhNlUSNm2LVDm7d FmgWz4bXEzyZpo/vQuHIORWtRdZ4hFXLgLJLp8nA5E6AqaFQ1MdIP6Di4l3QFMKn TMVfqGwvce1l4ISjS/UvuiJwxQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKsyF7b0 mDGdvG7XYo0iYN/xAAxSMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNjcxRkY5RjY5 NDMwMTFFQTg5ODhCODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJ3HnQDBAB3SUEwDQYJKoZIhvcNAQELBQADggEBADstz5hw UYvQDeDTsDf2qbV9wrd/89nv9nnRpJSm+tbJGs5rQREgLwvI3mko4llQnViZ8BZ4 CHKcaW/zjo7ZssFfC/F4dvsAtPHoeah99Q84HYAJAn2G070Hu+Gl5KEa5vpiZe6U kHOUDuwlDk9wcSf3ciZXK2WlPdRp1GvzXRc4hSYcKHE9Iq4DCy63TVSegA3PoX1d rcX/4zhrXDaQTXDYPtwmIlcfttEJCG8fWDT3VgIO3nf9rvXNHmDqMitnYl8NOCcC 17dpxGb0D/00yPpp6fXxOa7OYgwtlxxlL7TSQuwbNCuHxOYARTjsZT8f6iqnN533 VUA2H31LzJXWbgE= -----END CERTIFICATE-----Generated at Tue Nov 26 17:19:23 2024 by rpki-client on console-fra.rpki-client.org