$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/8FFCD106CF5511ED870A7753C4F9AE02.roa File: 8FFCD106CF5511ED870A7753C4F9AE02.roa (raw, json) Hash identifier: HGq9rZMUk6E+ZJUpbIS2PTfkw0l15X0kWo1fQB0mkmo= Subject key identifier: 24:F7:21:CE:DF:96:AF:DC:A8:C1:D3:32:85:92:81:F0:F1:36:6C:54 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 06AC Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/8FFCD106CF5511ED870A7753C4F9AE02.roa Signing time: Sat 02 Sep 2023 21:48:37 +0000 ROA not before: Sat 02 Sep 2023 21:48:37 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 137443 IP address blocks: 114.134.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Sep 2 21:48:37 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64f3adb4-fd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:b4:6c:09:7f:36:3c:7d:b0:23:b0:eb:29: 38:42:40:4c:47:67:0e:12:b0:5b:15:c8:d9:a3:8d: ab:51:7c:ad:ca:f8:82:dd:b6:ef:52:06:25:e6:74: df:fc:83:3e:7f:10:eb:34:e7:fe:03:c0:e9:09:9d: fd:78:65:44:25:8c:9e:dc:15:10:87:ed:34:d9:d5: 4a:3a:55:df:ae:02:ca:3b:8a:a7:f6:99:d6:57:24: bb:44:37:03:cb:89:8b:47:a2:66:d6:3c:70:10:c2: 2a:c7:c5:be:a8:45:de:62:51:a8:53:ee:28:46:41: 7b:94:da:5e:58:87:f9:36:b4:65:fb:1e:2c:c5:e6: 62:fd:d1:f4:0b:86:3b:31:c4:f1:dd:51:d9:e2:4a: a2:2c:96:f8:84:ab:f0:47:5c:4e:87:94:e2:9f:08: 40:1f:0f:fd:5c:be:15:e7:35:f4:66:79:f7:36:2e: 0c:51:a9:02:1f:fe:a6:52:42:f8:9d:46:94:b4:94: 13:2c:c7:5e:a1:86:e1:91:2d:f8:4d:ed:98:a3:9f: 17:b3:64:1b:ad:53:94:35:77:4a:15:80:77:70:42: 3d:19:13:c8:26:c4:98:e3:f4:ac:75:03:bd:0a:2f: d5:db:3d:b0:6a:e6:c9:1b:3c:3c:4a:94:af:7f:38: ff:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F7:21:CE:DF:96:AF:DC:A8:C1:D3:32:85:92:81:F0:F1:36:6C:54 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/8FFCD106CF5511ED870A7753C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.134.189.0/24 Signature Algorithm: sha256WithRSAEncryption 34:be:0d:d8:00:a0:4c:cd:06:19:de:ec:8b:8e:2a:49:bc:a3: aa:4c:61:93:2a:fe:cc:b0:2c:45:dc:f4:31:f1:dc:23:8e:82: 11:6d:a7:dd:10:dc:40:f2:a0:ad:a9:d4:dd:e5:24:f3:46:57: 4b:0e:31:68:f5:1b:e4:df:4b:3d:1b:56:ce:d4:70:a6:df:69: 85:e7:50:af:b9:d6:01:4f:25:c8:1d:8a:03:a4:5e:e8:5d:08: 87:49:84:9c:60:b1:0c:27:67:09:43:eb:12:18:d2:48:7d:7d: 10:6e:f5:4c:da:8b:f2:ea:e0:6a:ce:7b:22:49:aa:8e:6a:c8: a5:9d:98:5d:75:41:2f:6f:47:2b:2f:26:75:fa:f0:a0:dc:ce: 6f:57:5f:50:01:af:d3:bc:cb:f9:c0:78:d6:e0:7e:cf:fb:44: a7:c6:30:4a:b4:62:42:17:92:c4:26:d4:e9:e6:a4:f1:fc:ce: dd:18:1a:0b:8c:db:a2:e9:fc:86:f4:30:c3:a9:7c:63:3d:72: 68:53:7f:a2:44:d0:83:2b:07:cb:3c:13:cf:b2:fc:2d:93:d5: 6e:27:1c:b8:f5:12:8a:6a:e2:cd:a1:16:49:8b:79:43:76:0f: d8:33:d2:2d:b8:f9:84:6c:c5:88:cc:cc:52:98:38:13:81:e8: 7b:d0:f4:91 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjMwOTAyMjE0ODM3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYzYWRiNC1mZDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQe0bAl/Njx9sCOw6yk4QkBMR2cOErBbFcjZo42rUXytyviC3bbvUgYl5nTf /IM+fxDrNOf+A8DpCZ39eGVEJYye3BUQh+002dVKOlXfrgLKO4qn9pnWVyS7RDcD y4mLR6Jm1jxwEMIqx8W+qEXeYlGoU+4oRkF7lNpeWIf5NrRl+x4sxeZi/dH0C4Y7 McTx3VHZ4kqiLJb4hKvwR1xOh5TinwhAHw/9XL4V5zX0Znn3Ni4MUakCH/6mUkL4 nUaUtJQTLMdeoYbhkS34Te2Yo58Xs2QbrVOUNXdKFYB3cEI9GRPIJsSY4/SsdQO9 Ci/V2z2waubJGzw8SpSvfzj/7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCT3Ic7f lq/cqMHTMoWSgfDxNmxUMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzE5MEYvQjNDQTc2QzBGQTMxMTFFQUJEMjQ5RTdBQzRGOUFFMDIvOEZGQ0QxMDZD RjU1MTFFRDg3MEE3NzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAByhr0wDQYJKoZIhvcNAQELBQADggEBADS+DdgAoEzNBhne 7IuOKkm8o6pMYZMq/sywLEXc9DHx3COOghFtp90Q3EDyoK2p1N3lJPNGV0sOMWj1 G+TfSz0bVs7UcKbfaYXnUK+51gFPJcgdigOkXuhdCIdJhJxgsQwnZwlD6xIY0kh9 fRBu9Uzai/Lq4GrOeyJJqo5qyKWdmF11QS9vRysvJnX68KDczm9XX1ABr9O8y/nA eNbgfs/7RKfGMEq0YkIXksQm1OnmpPH8zt0YGguM26Lp/Ib0MMOpfGM9cmhTf6JE 0IMrB8s8E8+y/C2T1W4nHLj1Eopq4s2hFkmLeUN2D9gz0i24+YRsxYjMzFKYOBOB 6HvQ9JE= -----END CERTIFICATE-----Generated at Thu May 2 23:48:43 2024 by rpki-client on console-fra.rpki-client.org