$ rpki-client -vvf rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa File: DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa (raw, json) Hash identifier: Uc6IvGFV1iQCfhkRq/qlgRwPJG6xeOo9MbTiUR3zcfg= Subject key identifier: 32:B4:85:3F:2E:85:D3:4C:BA:E6:D8:97:6A:2A:BD:56:31:79:F6:E5 Certificate issuer: /CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Certificate serial: 02 Authority key identifier: 42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa Signing time: Mon 09 Sep 2024 19:15:25 +0000 ROA not before: Mon 09 Sep 2024 19:15:25 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 7545 IP address blocks: 61.68.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 05:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172506/serialNumber=42BB0F3C1847E658BBE41418494CE89CE8E34488 Validity Not Before: Sep 9 19:15:25 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66df494c-f538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:58:de:e6:a2:49:87:9d:77:c6:2e:e5:a9: 42:b9:71:8e:6d:b9:36:23:44:8a:6d:53:4b:fa:b1: c3:d9:b8:53:99:71:28:5d:2c:d1:a8:88:8d:ec:4a: cc:a6:3f:71:39:c6:cb:42:89:fc:b0:ce:41:35:92: c3:de:2d:61:d5:b5:1b:82:f0:cc:6a:12:6b:ef:c0: 08:bd:d8:23:ad:ac:79:bb:2b:8f:a9:16:74:19:19: 35:14:bd:70:a6:27:f8:8f:21:ac:05:32:79:82:fa: 5f:a8:7b:31:80:d2:95:af:5c:cc:ba:16:10:7f:b6: c7:14:29:96:e2:e2:af:66:c8:e7:81:db:95:d7:1f: 09:64:6b:5a:cd:b0:7b:55:54:eb:11:d9:6e:68:4a: a0:a8:b4:69:62:36:c4:1c:8c:05:fa:b9:29:59:8b: f3:8e:b8:18:87:61:0a:46:7b:b5:2c:00:50:be:d5: f0:cc:8f:3a:e1:2d:6f:5e:74:03:43:25:19:4a:94: 60:49:07:ba:98:09:07:0f:1d:d7:2b:fe:64:33:19: b9:e7:7e:e9:be:e3:58:66:61:5f:82:ad:bf:5a:e6: 47:01:fd:27:34:b8:e2:0c:b0:0f:e0:af:ad:8e:45: 52:bb:be:14:4f:ad:46:37:24:93:de:90:ac:69:ab: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B4:85:3F:2E:85:D3:4C:BA:E6:D8:97:6A:2A:BD:56:31:79:F6:E5 X509v3 Authority Key Identifier: keyid:42:BB:0F:3C:18:47:E6:58:BB:E4:14:18:49:4C:E8:9C:E8:E3:44:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/QrsPPBhH5li75BQYSUzonOjjRIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrsPPBhH5li75BQYSUzonOjjRIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172506/B04908CE6EDE11EFAAC2CB5DC4F9AE02/DD75C9BC6EDF11EF90C49A5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.68.16.0/21 Signature Algorithm: sha256WithRSAEncryption 80:15:8c:8b:96:6c:85:4d:e7:93:dc:34:7d:16:a1:f9:80:c2: 96:68:5d:04:1d:d4:4f:c0:36:31:fd:25:fb:1c:cc:2a:2a:96: f2:df:64:10:dd:e4:07:cb:45:57:0d:3b:ed:54:67:4d:6e:c1: 80:18:37:87:8b:2f:50:25:3d:0c:89:a9:47:90:e3:47:f4:6a: 53:34:64:1d:95:40:ec:1a:ae:5a:75:5d:6c:d4:90:86:02:ef: 7e:22:26:5f:3f:ab:c1:44:6e:b9:41:19:9a:ef:d0:2a:e3:b6: 9c:3f:49:04:99:82:aa:e4:8d:d1:31:f7:ad:2c:4a:20:f2:0e: 64:dc:5b:dc:3e:63:a1:bd:c4:91:8f:6d:e7:fe:b4:49:8e:b0: 18:25:62:6c:75:73:b8:3f:37:9e:d3:ef:bb:42:b6:3c:5a:e9: c7:bf:83:0c:44:5c:27:46:21:e6:35:8e:04:c3:99:38:20:ec: 95:12:aa:59:88:56:b9:40:ac:7e:0b:91:a2:78:60:88:22:ad: 17:64:e3:93:6f:52:86:f3:5a:aa:ee:e1:85:8e:c3:5a:a6:07: a2:19:76:1d:c5:1d:02:4a:56:06:0f:2d:2d:4f:78:d6:d4:80: 32:b0:1f:5b:7a:72:f2:8b:3c:d2:61:b5:a8:41:d1:6e:a2:b9: 89:b7:36:1b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjUwNjExMC8GA1UEBRMoNDJCQjBGM0MxODQ3RTY1OEJCRTQxNDE4NDk0Q0U4OUNF OEUzNDQ4ODAeFw0yNDA5MDkxOTE1MjVaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZGY0OTRjLWY1MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChHlje5qJJh513xi7lqUK5cY5tuTYjRIptU0v6scPZuFOZcShdLNGoiI3sSsym P3E5xstCifywzkE1ksPeLWHVtRuC8MxqEmvvwAi92COtrHm7K4+pFnQZGTUUvXCm J/iPIawFMnmC+l+oezGA0pWvXMy6FhB/tscUKZbi4q9myOeB25XXHwlka1rNsHtV VOsR2W5oSqCotGliNsQcjAX6uSlZi/OOuBiHYQpGe7UsAFC+1fDMjzrhLW9edAND JRlKlGBJB7qYCQcPHdcr/mQzGbnnfum+41hmYV+Crb9a5kcB/Sc0uOIMsA/gr62O RVK7vhRPrUY3JJPekKxpqwipAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMrSFPy6F 00y65tiXaiq9VjF59uUwHwYDVR0jBBgwFoAUQrsPPBhH5li75BQYSUzonOjjRIgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyNTA2L0IwNDkwOENFNkVE RTExRUZBQUMyQ0I1REM0RjlBRTAyL1Fyc1BQQmhINWxpNzVCUVlTVXpvbk9qalJJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUXJzUFBCaEg1bGk3NUJRWVNVem9uT2pqUklnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjUwNi9CMDQ5MDhDRTZFREUxMUVGQUFDMkNCNURDNEY5QUUwMi9ERDc1QzlCQzZF REYxMUVGOTBDNDlBNUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAz1EEDANBgkqhkiG9w0BAQsFAAOCAQEAgBWMi5ZshU3nk9w0 fRah+YDClmhdBB3UT8A2Mf0l+xzMKiqW8t9kEN3kB8tFVw077VRnTW7BgBg3h4sv UCU9DImpR5DjR/RqUzRkHZVA7BquWnVdbNSQhgLvfiImXz+rwURuuUEZmu/QKuO2 nD9JBJmCquSN0TH3rSxKIPIOZNxb3D5job3EkY9t5/60SY6wGCVibHVzuD83ntPv u0K2PFrpx7+DDERcJ0Yh5jWOBMOZOCDslRKqWYhWuUCsfguRonhgiCKtF2Tjk29S hvNaqu7hhY7DWqYHohl2HcUdAkpWBg8tLU941tSAMrAfW3py8os80mG1qEHRbqK5 ibc2Gw== -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:55 2024 by rpki-client on console-ams.rpki-client.org