$ rpki-client -vvf rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/9C072F22C9E411EC956B0A3CC4F9AE02.roa File: 9C072F22C9E411EC956B0A3CC4F9AE02.roa (raw, json) Hash identifier: YgVhX2rX+zPQ1467o887/FhnDxbWRkvwY5a2EYtW2qQ= Subject key identifier: 27:A7:60:71:C3:B8:82:F2:24:ED:79:6A:DA:AA:EF:2C:BA:E1:D7:30 Certificate issuer: /CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Certificate serial: 028D Authority key identifier: 44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/9C072F22C9E411EC956B0A3CC4F9AE02.roa Signing time: Fri 05 Jul 2024 03:04:31 +0000 ROA not before: Fri 05 Jul 2024 03:04:31 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 24079 IP address blocks: 202.0.144.0/22 maxlen: 22 202.14.86.0/23 maxlen: 23 203.129.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 653 (0x28d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171235/serialNumber=441CB0D86A92CEDFBE8083DED697A26D623EE655 Validity Not Before: Jul 5 03:04:31 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668762bf-1849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:1d:c9:4a:ce:78:49:14:1d:29:9b:fb:b3: e0:39:df:b4:fa:e6:83:66:ea:a2:e0:b7:3d:31:f6: ad:d6:a9:e1:56:a8:6a:eb:c7:80:dd:ef:5f:c4:86: 79:40:96:a6:6e:e9:d9:85:3a:a4:9d:08:28:19:fb: a7:df:94:af:8d:12:87:61:91:a0:7b:db:20:36:bb: 49:82:6e:27:4e:b9:f2:ab:5c:39:65:aa:86:45:cd: ea:c6:f1:1f:bf:f3:0b:02:86:c3:ba:0d:62:15:60: 98:6f:47:82:61:c6:f9:c7:b2:7a:c5:e1:d3:6c:31: 7d:97:3f:fa:27:35:ee:56:a7:e0:84:e0:a8:b5:c0: 51:03:eb:c1:d0:55:28:e8:d5:27:e5:54:3a:5a:62: fc:00:a9:08:f7:ff:19:4e:29:92:d8:31:3e:eb:a9: 5d:95:cb:f7:a6:47:28:6f:71:35:a2:9a:20:b7:13: 7b:f6:21:56:48:9d:9b:7f:80:7e:ba:35:04:5c:47: e3:de:70:8c:d9:82:cf:11:65:9b:f4:bc:e2:36:ad: f3:61:76:3c:98:65:3a:5b:f1:a3:82:a3:c9:c2:95: 4b:39:95:25:da:19:c2:c3:42:f4:16:7a:80:86:dc: fd:c1:3e:79:68:fa:61:58:45:17:3c:78:80:f8:4d: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A7:60:71:C3:B8:82:F2:24:ED:79:6A:DA:AA:EF:2C:BA:E1:D7:30 X509v3 Authority Key Identifier: keyid:44:1C:B0:D8:6A:92:CE:DF:BE:80:83:DE:D6:97:A2:6D:62:3E:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/RByw2GqSzt--gIPe1peibWI-5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RByw2GqSzt--gIPe1peibWI-5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171235/DD61E22EC5DD11ECBEF42C77C4F9AE02/9C072F22C9E411EC956B0A3CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.144.0/22 202.14.86.0/23 203.129.4.0/23 Signature Algorithm: sha256WithRSAEncryption ca:71:06:68:b5:97:93:1f:dd:25:e7:47:ff:f8:75:ca:b8:7c: e0:3e:e6:0b:cc:0e:e3:b4:7c:d9:bb:8f:3d:cf:e3:e1:b7:70: 99:a4:23:04:cf:08:0b:7a:81:a9:96:4f:be:9f:9d:d5:83:ae: 90:66:88:bc:74:e9:50:88:5c:a9:44:96:c0:c4:71:09:74:de: 77:7d:2e:d5:6a:59:15:43:fa:1d:b9:0b:7c:ed:21:b4:79:7c: 44:bd:3e:ce:46:9b:7d:73:85:1c:50:25:de:57:5c:65:90:9d: 88:e9:69:9f:09:7e:89:86:65:f9:70:ea:99:e1:d0:92:8e:0f: fb:6c:57:be:7c:5a:20:b5:42:4a:e8:14:26:2f:9e:b5:a3:55: 1b:d4:5f:fe:a5:dd:07:be:2d:96:8d:94:f1:45:94:df:c8:1e: b1:ad:3e:a6:0d:e2:1f:52:e7:84:4c:58:11:5b:d2:dc:08:52: 19:00:af:d3:ba:56:32:ae:0f:af:53:5a:eb:63:5b:11:21:31: f2:92:ff:6b:72:32:da:5a:46:27:18:4b:81:1d:c2:60:16:46: bc:8d:70:4a:01:f2:1c:d2:90:4e:4c:82:d9:1a:ee:7e:45:0f: fc:f3:55:ce:d3:67:79:bb:42:56:74:a7:5f:45:12:66:6a:37: 42:18:0d:59 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyMzUxMTAvBgNVBAUTKDQ0MUNCMEQ4NkE5MkNFREZCRTgwODNERUQ2OTdBMjZE NjIzRUU2NTUwHhcNMjQwNzA1MDMwNDMxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg3NjJiZi0xODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp90dyUrOeEkUHSmb+7PgOd+0+uaDZuqi4Lc9Mfat1qnhVqhq68eA3e9fxIZ5 QJambunZhTqknQgoGfun35SvjRKHYZGge9sgNrtJgm4nTrnyq1w5ZaqGRc3qxvEf v/MLAobDug1iFWCYb0eCYcb5x7J6xeHTbDF9lz/6JzXuVqfghOCotcBRA+vB0FUo 6NUn5VQ6WmL8AKkI9/8ZTimS2DE+66ldlcv3pkcob3E1opogtxN79iFWSJ2bf4B+ ujUEXEfj3nCM2YLPEWWb9LziNq3zYXY8mGU6W/GjgqPJwpVLOZUl2hnCw0L0FnqA htz9wT55aPphWEUXPHiA+E1HbQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCenYHHD uILyJO15atqq7yy64dcwMB8GA1UdIwQYMBaAFEQcsNhqks7fvoCD3taXom1iPuZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTIzNS9ERDYxRTIyRUM1 REQxMUVDQkVGNDJDNzdDNEY5QUUwMi9SQnl3MkdxU3p0LS1nSVBlMXBlaWJXSS01 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCeXcyR3FTenQtLWdJUGUxcGVpYldJLTVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzEyMzUvREQ2MUUyMkVDNUREMTFFQ0JFRjQyQzc3QzRGOUFFMDIvOUMwNzJGMjJD OUU0MTFFQzk1NkIwQTNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBALKAJADBAHKDlYDBAHLgQQwDQYJKoZIhvcNAQELBQADggEB AMpxBmi1l5Mf3SXnR//4dcq4fOA+5gvMDuO0fNm7jz3P4+G3cJmkIwTPCAt6gamW T76fndWDrpBmiLx06VCIXKlElsDEcQl03nd9LtVqWRVD+h25C3ztIbR5fES9Ps5G m31zhRxQJd5XXGWQnYjpaZ8JfomGZflw6pnh0JKOD/tsV758WiC1QkroFCYvnrWj VRvUX/6l3Qe+LZaNlPFFlN/IHrGtPqYN4h9S54RMWBFb0twIUhkAr9O6VjKuD69T WutjWxEhMfKS/2tyMtpaRicYS4EdwmAWRryNcEoB8hzSkE5Mgtka7n5FD/zzVc7T Z3m7QlZ0p19FEmZqN0IYDVk= -----END CERTIFICATE-----Generated at Sat Nov 23 02:33:38 2024 by rpki-client on console-fra.rpki-client.org