$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3045AC766ECB11EFA91B0884C4F9AE02.roa File: 3045AC766ECB11EFA91B0884C4F9AE02.roa (raw, json) Hash identifier: L6oHTZlZD915gJVDu2CooRPRRYDAik9tn78RpS9QF50= Subject key identifier: 37:60:07:17:43:0B:04:62:71:D6:97:E4:EB:C1:B7:6F:2F:96:7A:E3 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 07A1 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3045AC766ECB11EFA91B0884C4F9AE02.roa Signing time: Fri 04 Oct 2024 21:30:47 +0000 ROA not before: Fri 04 Oct 2024 21:30:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 142032 IP address blocks: 111.92.240.0/22 maxlen: 24 114.134.188.0/23 maxlen: 23 114.134.188.0/24 maxlen: 24 114.134.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1953 (0x7a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Oct 4 21:30:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67005e87-1450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:29:1e:7a:32:2d:f0:52:66:ce:04:2e:a5: 40:b0:03:b5:45:73:ef:1d:e1:25:a1:5c:ff:0e:db: 4c:2f:cc:ba:a0:33:71:06:f7:5d:b8:f9:ff:7e:06: ff:64:8c:08:4d:37:f8:d6:d1:ec:45:f7:79:ec:2b: 05:ab:63:56:67:1a:a3:57:f4:ef:da:94:e3:e4:c6: 88:72:cf:91:ec:cc:f3:c6:05:df:19:37:d3:f8:f3: df:a5:2e:b8:53:8d:7a:86:01:7d:28:c7:69:34:eb: ed:90:86:c5:52:41:8d:67:53:8d:9e:b3:8d:97:e7: 65:13:6f:be:c0:3e:02:05:36:e7:d7:e7:00:41:a4: 09:9d:80:8d:57:df:bb:22:43:3f:7e:8e:6f:e1:b0: 2b:fb:9e:23:f2:1f:28:5c:91:f6:e4:45:c7:21:86: 19:c4:a9:21:d8:4a:54:a0:de:fe:f4:44:d8:e0:39: a7:9d:33:9b:1b:e1:5d:30:52:87:ca:cf:fe:33:51: 89:90:8d:31:cb:1f:50:01:14:ac:3a:9a:c2:0a:34: c0:e6:2c:df:5a:b5:77:5d:83:6f:5e:16:ac:b2:a9: 35:8d:6f:a8:45:7f:90:95:b9:c5:8d:79:18:fa:41: 1f:53:fb:27:0c:ed:e3:3c:af:8d:43:29:20:13:11: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:60:07:17:43:0B:04:62:71:D6:97:E4:EB:C1:B7:6F:2F:96:7A:E3 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/3045AC766ECB11EFA91B0884C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.92.240.0/22 114.134.188.0/23 Signature Algorithm: sha256WithRSAEncryption c1:6a:65:e9:74:67:ea:80:d9:4d:8b:ff:50:9d:78:6b:58:1d: 09:b4:0d:c0:5d:5a:40:97:c5:80:b4:06:a3:32:47:c7:ae:c3: 17:45:17:9f:92:c1:88:33:f4:71:5d:76:7b:fe:39:91:83:32: af:85:6e:84:2d:54:f3:c4:87:5c:71:32:ec:b5:e1:ce:a4:43: 10:7d:c0:ca:df:ba:53:3d:bf:c5:10:6b:38:72:39:13:e5:80: 09:7e:e1:ac:25:2a:93:24:dc:54:32:aa:45:30:04:4b:3d:5c: 53:2d:0f:1b:9b:aa:43:38:dd:0d:09:dc:ae:4c:48:12:7e:43: 80:e0:d3:21:85:c9:16:71:9a:7c:93:dd:08:0b:8f:6d:e5:e5: 8f:47:ab:47:b8:fc:8e:2a:fa:60:cf:05:9e:17:21:2b:30:82: d8:ec:e2:35:41:41:28:86:a2:98:cb:2d:ad:bd:65:ed:68:46: 1c:ed:d9:a6:e3:cf:b2:91:f0:8c:81:45:12:68:38:a5:77:6d: 4d:c0:f8:ae:ee:7e:cd:39:dd:b3:12:0f:8c:00:d9:c2:3a:b7: a2:dc:6b:33:4a:62:18:6c:b5:89:db:c4:00:1a:82:d4:03:1a: e4:e1:d1:e0:42:3c:d9:3a:4c:2c:a4:78:a1:47:7c:6f:9c:cd: 51:4e:58:eb -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjQxMDA0MjEzMDQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwNWU4Ny0xNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/YpHnoyLfBSZs4ELqVAsAO1RXPvHeEloVz/DttML8y6oDNxBvdduPn/fgb/ ZIwITTf41tHsRfd57CsFq2NWZxqjV/Tv2pTj5MaIcs+R7MzzxgXfGTfT+PPfpS64 U416hgF9KMdpNOvtkIbFUkGNZ1ONnrONl+dlE2++wD4CBTbn1+cAQaQJnYCNV9+7 IkM/fo5v4bAr+54j8h8oXJH25EXHIYYZxKkh2EpUoN7+9ETY4DmnnTObG+FdMFKH ys/+M1GJkI0xyx9QARSsOprCCjTA5izfWrV3XYNvXhassqk1jW+oRX+QlbnFjXkY +kEfU/snDO3jPK+NQykgExHB/wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDdgBxdD CwRicdaX5OvBt28vlnrjMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvMzA0NUFDNzY2 RUNCMTFFRkE5MUIwODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJvXPADBAFyhrwwDQYJKoZIhvcNAQELBQADggEBAMFqZel0 Z+qA2U2L/1CdeGtYHQm0DcBdWkCXxYC0BqMyR8euwxdFF5+SwYgz9HFddnv+OZGD Mq+FboQtVPPEh1xxMuy14c6kQxB9wMrfulM9v8UQazhyORPlgAl+4awlKpMk3FQy qkUwBEs9XFMtDxubqkM43Q0J3K5MSBJ+Q4Dg0yGFyRZxmnyT3QgLj23l5Y9Hq0e4 /I4q+mDPBZ4XISswgtjs4jVBQSiGopjLLa29Ze1oRhzt2abjz7KR8IyBRRJoOKV3 bU3A+K7ufs053bMSD4wA2cI6t6LcazNKYhhstYnbxAAagtQDGuTh0eBCPNk6TCyk eKFHfG+czVFOWOs= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:43 2024 by rpki-client on console-ams.rpki-client.org