$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/8FFCD106CF5511ED870A7753C4F9AE02.roa File: 8FFCD106CF5511ED870A7753C4F9AE02.roa (raw, json) Hash identifier: O4Np0XtDQoEvb+gWsTJXU39EKi5Py43jm59eT2hWjjY= Subject key identifier: 72:15:D1:93:C9:90:93:54:71:39:D0:74:93:B5:1B:DD:F7:B8:D5:C4 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 07A0 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/8FFCD106CF5511ED870A7753C4F9AE02.roa Signing time: Fri 04 Oct 2024 21:30:47 +0000 ROA not before: Fri 04 Oct 2024 21:30:47 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 137443 IP address blocks: 114.134.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1952 (0x7a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Oct 4 21:30:47 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67005e86-ae60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b5:b5:90:99:15:76:a6:d0:da:ed:26:7d:20: 09:34:e2:f8:f0:b4:48:52:47:87:b0:aa:f1:5b:c8: 4d:05:af:53:46:ae:09:6c:b8:2c:b5:6a:64:3b:92: d3:6b:72:cc:48:34:d3:ef:5a:b4:5f:62:fc:d7:6a: fc:81:ad:2e:2f:d0:39:fe:fb:bb:98:3f:c3:ac:32: d6:ed:c2:3f:5b:e6:c3:8f:a9:88:56:c4:71:3b:c6: 5d:ca:d1:1a:ec:31:ae:59:00:0f:7d:59:38:1a:e0: a1:8d:a9:dc:36:97:b2:d7:24:fa:d2:13:3f:9b:0f: d1:4f:64:2e:06:c7:9c:ab:cb:ed:3d:16:e9:67:e9: ee:a1:fd:87:9a:44:db:ad:0e:e5:db:36:63:76:fd: bb:f4:b6:aa:eb:6c:5a:44:a9:1a:49:64:74:c4:f3: e3:17:42:38:0d:59:7e:29:cd:88:65:21:4b:34:80: 97:50:9b:42:e5:8e:71:06:e7:78:82:06:85:34:ee: a6:c0:61:0a:2b:5f:bb:95:3a:ca:c3:79:b1:b1:a5: 17:50:29:b4:99:20:de:b3:02:1c:cd:73:a9:02:ad: ac:e9:35:f6:22:96:d0:32:15:29:1d:72:f4:7b:83: 91:63:b6:46:e3:c5:fe:cc:07:26:a4:1a:0e:08:d0: 83:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:15:D1:93:C9:90:93:54:71:39:D0:74:93:B5:1B:DD:F7:B8:D5:C4 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/8FFCD106CF5511ED870A7753C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.134.189.0/24 Signature Algorithm: sha256WithRSAEncryption 03:26:d6:0e:f7:90:ce:83:84:db:2a:b5:98:cf:dd:94:89:46: 1a:ea:55:87:4d:ba:bb:28:b7:65:d8:d3:9d:f3:dc:3e:8f:d9: 39:fd:68:bb:d4:db:b3:e8:e7:56:54:75:4d:2e:26:e9:0f:ba: 0a:50:85:82:ad:79:e7:ac:3a:64:ad:1f:33:8d:dc:4c:b1:ed: 4e:83:28:90:87:1b:8b:26:f1:ff:6c:17:3d:81:5b:39:43:d1: 13:e4:2c:e8:fc:df:cf:83:93:66:64:29:c3:bc:69:48:74:13: cb:d1:40:35:4b:2a:8d:9d:3c:fb:01:ab:3a:56:04:b0:a5:bb: 7a:b5:b8:3c:48:02:9b:2a:ef:dc:03:f7:6f:c0:12:7a:60:07: 54:7e:6c:01:ef:94:45:c6:ef:5b:83:ba:d5:3b:70:a8:f1:60: 1f:58:28:be:e3:5a:1a:c7:6f:b8:71:3f:3d:74:bf:21:d7:47: ed:6f:15:3f:ad:cc:76:ec:7b:59:9a:3d:53:7c:9d:16:a7:22: 4c:e6:34:74:06:5c:99:d1:08:13:c2:f5:04:a3:09:c4:36:2d: 45:4c:f6:ac:aa:7a:13:1a:11:b2:74:bd:f3:01:a4:61:93:d0: 46:48:da:65:16:41:42:b9:b2:da:1c:f6:05:9b:e6:78:e8:cd: 14:ea:d5:8e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjQxMDA0MjEzMDQ3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwNWU4Ni1hZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLW1kJkVdqbQ2u0mfSAJNOL48LRIUkeHsKrxW8hNBa9TRq4JbLgstWpkO5LT a3LMSDTT71q0X2L812r8ga0uL9A5/vu7mD/DrDLW7cI/W+bDj6mIVsRxO8ZdytEa 7DGuWQAPfVk4GuChjancNpey1yT60hM/mw/RT2QuBsecq8vtPRbpZ+nuof2HmkTb rQ7l2zZjdv279Laq62xaRKkaSWR0xPPjF0I4DVl+Kc2IZSFLNICXUJtC5Y5xBud4 ggaFNO6mwGEKK1+7lTrKw3mxsaUXUCm0mSDeswIczXOpAq2s6TX2IpbQMhUpHXL0 e4ORY7ZG48X+zAcmpBoOCNCDvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHIV0ZPJ kJNUcTnQdJO1G933uNXEMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvOEZGQ0QxMDZD RjU1MTFFRDg3MEE3NzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAByhr0wDQYJKoZIhvcNAQELBQADggEBAAMm1g73kM6DhNsq tZjP3ZSJRhrqVYdNursot2XY053z3D6P2Tn9aLvU27Po51ZUdU0uJukPugpQhYKt eeesOmStHzON3Eyx7U6DKJCHG4sm8f9sFz2BWzlD0RPkLOj838+Dk2ZkKcO8aUh0 E8vRQDVLKo2dPPsBqzpWBLClu3q1uDxIApsq79wD92/AEnpgB1R+bAHvlEXG71uD utU7cKjxYB9YKL7jWhrHb7hxPz10vyHXR+1vFT+tzHbse1maPVN8nRanIkzmNHQG XJnRCBPC9QSjCcQ2LUVM9qyqehMaEbJ0vfMBpGGT0EZI2mUWQUK5stoc9gWb5njo zRTq1Y4= -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:43 2024 by rpki-client on console-ams.rpki-client.org