$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/8D156CDE391A11EF880FB82FC4F9AE02.roa File: 8D156CDE391A11EF880FB82FC4F9AE02.roa (raw, json) Hash identifier: /zNjWEjih0QCdQAIcUzfklwUex/YSgMs6L4oVfON+H0= Subject key identifier: A3:54:7F:8F:B6:3A:25:97:F5:DC:E4:C0:12:41:E7:FF:3A:48:DE:1A Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 0203 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/8D156CDE391A11EF880FB82FC4F9AE02.roa Signing time: Wed 03 Jul 2024 08:59:27 +0000 ROA not before: Wed 03 Jul 2024 08:59:27 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38197 IP address blocks: 43.248.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Jul 3 08:59:27 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=668512ef-d560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:e4:a0:48:1c:11:a6:91:56:c5:62:cf:15: 37:f2:2c:2c:59:11:3a:b5:92:0a:43:0e:e3:5c:5a: 5f:0e:a3:4d:5f:1a:8d:cd:be:e9:a6:14:a2:9f:5e: 1e:c1:a3:19:5b:31:1f:3a:46:3c:cf:e5:10:35:3b: 8b:aa:0f:fd:ad:c5:26:2b:82:0d:cb:b8:32:df:2d: d7:81:ce:15:50:54:15:6c:6a:6a:11:b4:0a:ac:d2: b7:0a:81:fe:2b:1d:07:35:a7:66:22:d5:05:cc:a0: f4:2e:16:b0:ce:e3:be:08:f3:9a:b6:b5:42:94:b7: 3d:fb:e7:2a:a1:07:5d:f9:0f:92:8f:02:b8:46:74: 83:2b:36:ef:01:55:f3:c2:c4:06:1b:2b:1b:54:a3: d8:b4:0d:12:56:17:35:ff:fa:97:3c:95:49:26:f5: 92:1d:fb:e9:ab:87:1a:59:3f:b7:6c:e4:0b:eb:06: a6:37:df:ab:c2:2b:4b:17:1b:4a:89:3b:26:9d:b4: 29:40:bb:3a:1a:d6:4a:4c:57:3f:d6:81:cf:b5:46: 6c:9f:cb:70:64:6a:a6:b9:22:e2:ec:93:c5:05:f4: 87:0a:f9:6f:73:e8:26:4f:34:10:85:ad:e7:40:87: d9:31:f8:11:6e:9a:4b:e0:31:09:35:87:f6:e5:e6: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:7F:8F:B6:3A:25:97:F5:DC:E4:C0:12:41:E7:FF:3A:48:DE:1A X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/8D156CDE391A11EF880FB82FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.174.0/24 Signature Algorithm: sha256WithRSAEncryption 04:62:13:b2:a3:60:b9:31:09:ac:33:e0:b8:6a:3c:d1:d1:c4: 88:31:bf:32:50:8e:d6:e7:0c:ea:db:9d:14:a0:25:98:47:ca: 61:c6:03:15:d7:ae:ed:d1:b2:50:d8:fe:40:2f:8b:51:11:75: 6c:6f:2a:46:33:1e:77:90:90:41:70:92:ee:7c:4a:b0:c6:a7: 94:72:0e:1e:65:1b:5c:25:50:c8:47:c0:e2:04:92:fe:f1:2b: b6:11:a4:06:d5:66:b8:02:d2:f6:42:d0:a7:4d:25:d6:91:e1: 1f:82:c6:5c:f1:aa:f6:fb:75:dc:70:8d:04:82:c6:2b:6c:31: 56:61:d1:31:5a:49:f7:a4:d8:bc:72:56:a0:38:2c:d4:85:4c: 49:85:d3:a3:cb:c5:5f:2a:30:b5:30:d9:7b:0c:0b:96:ec:80: b5:ef:67:04:aa:24:1c:8b:a8:a5:51:ff:96:07:b0:16:d5:d8: 60:00:1d:da:b1:ab:2b:25:a1:9d:1d:9a:db:d5:0d:21:31:6d: e1:77:89:25:6a:28:d7:e8:8a:f4:5a:93:c5:8d:0d:ae:7e:26: 47:24:f6:75:a1:b5:64:63:b4:fb:15:c0:96:06:cc:8d:71:84: d3:eb:b6:7d:6b:2e:47:b8:35:fa:3c:10:fb:09:de:29:be:38: f8:8e:24:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjQwNzAzMDg1OTI3WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02Njg1MTJlZi1kNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6DkoEgcEaaRVsVizxU38iwsWRE6tZIKQw7jXFpfDqNNXxqNzb7pphSin14e waMZWzEfOkY8z+UQNTuLqg/9rcUmK4INy7gy3y3Xgc4VUFQVbGpqEbQKrNK3CoH+ Kx0HNadmItUFzKD0LhawzuO+CPOatrVClLc9++cqoQdd+Q+SjwK4RnSDKzbvAVXz wsQGGysbVKPYtA0SVhc1//qXPJVJJvWSHfvpq4caWT+3bOQL6wamN9+rwitLFxtK iTsmnbQpQLs6GtZKTFc/1oHPtUZsn8twZGqmuSLi7JPFBfSHCvlvc+gmTzQQha3n QIfZMfgRbppL4DEJNYf25eZcfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKNUf4+2 OiWX9dzkwBJB5/86SN4aMB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvOEQxNTZDREUz OTFBMTFFRjg4MEZCODJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr+K4wDQYJKoZIhvcNAQELBQADggEBAARiE7KjYLkxCawz 4LhqPNHRxIgxvzJQjtbnDOrbnRSgJZhHymHGAxXXru3RslDY/kAvi1ERdWxvKkYz HneQkEFwku58SrDGp5RyDh5lG1wlUMhHwOIEkv7xK7YRpAbVZrgC0vZC0KdNJdaR 4R+Cxlzxqvb7ddxwjQSCxitsMVZh0TFaSfek2LxyVqA4LNSFTEmF06PLxV8qMLUw 2XsMC5bsgLXvZwSqJByLqKVR/5YHsBbV2GAAHdqxqysloZ0dmtvVDSExbeF3iSVq KNfoivRak8WNDa5+Jkck9nWhtWRjtPsVwJYGzI1xhNPrtn1rLke4Nfo8EPsJ3im+ OPiOJD0= -----END CERTIFICATE-----Generated at Thu Nov 21 03:11:58 2024 by rpki-client on console-fra.rpki-client.org