$ rpki-client -vvf rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/C8642118032511ED86C03C22C4F9AE02.roa File: C8642118032511ED86C03C22C4F9AE02.roa (raw, json) Hash identifier: OnsaNgjO8g3+wNoKD/TWUpjf3Jf4Zt5/oExQM+aBuRQ= Subject key identifier: BF:C6:97:FD:AB:DE:08:C9:78:EC:2B:D9:FD:C9:C2:34:2E:CD:6C:3F Certificate issuer: /CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Certificate serial: 01C5 Authority key identifier: 2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/C8642118032511ED86C03C22C4F9AE02.roa Signing time: Tue 19 Mar 2024 04:36:45 +0000 ROA not before: Tue 19 Mar 2024 04:36:45 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38197 IP address blocks: 43.248.174.0/24 maxlen: 24 43.248.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172999/serialNumber=2F533EA0E40819DF563E3F7FE3FE87428D52A0D5 Validity Not Before: Mar 19 04:36:45 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f9165c-ad6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8b:47:3e:84:81:c0:c3:0a:c7:a0:0e:b9:78: 87:73:11:8f:cc:fd:39:e8:02:42:fb:dc:43:c8:68: 1c:96:5e:38:af:db:8c:42:1d:29:df:34:99:53:c9: a6:17:90:04:84:4a:04:1a:58:4b:4e:c8:a6:b2:a0: 45:4e:03:ee:94:88:62:f1:84:93:d3:1b:46:ed:26: 10:1b:6f:bb:13:c0:ba:bb:25:46:86:4d:49:ca:e2: ac:5e:2b:f1:f6:60:86:da:20:cc:f8:9e:73:d5:cc: 45:22:74:85:de:3d:b5:83:4c:ae:bf:0d:6e:66:b2: 1b:f4:3e:9c:54:e4:85:39:e2:92:ba:b7:71:64:fb: 8e:c7:3e:52:0c:28:89:43:da:64:6f:89:42:3b:1c: 8f:76:6c:22:34:30:60:6d:c2:3a:e7:82:31:80:b7: 85:e7:0f:34:24:49:58:ec:7f:50:50:71:cb:26:5b: 05:b6:84:8a:68:09:b8:b4:9e:be:cd:2c:9c:a7:a3: 36:89:4c:57:9c:50:bf:71:71:8b:b7:34:da:0b:a7: ce:56:f2:c9:c2:07:53:09:9a:9c:83:d4:ab:40:66: c3:25:42:ac:71:d3:c0:12:bb:9b:c3:d3:b2:bd:1d: 7d:c4:f9:ae:d7:f1:43:a7:75:23:c6:a8:b0:fd:9b: 0f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C6:97:FD:AB:DE:08:C9:78:EC:2B:D9:FD:C9:C2:34:2E:CD:6C:3F X509v3 Authority Key Identifier: keyid:2F:53:3E:A0:E4:08:19:DF:56:3E:3F:7F:E3:FE:87:42:8D:52:A0:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/L1M-oOQIGd9WPj9_4_6HQo1SoNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L1M-oOQIGd9WPj9_4_6HQo1SoNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172999/B1C1B0DA031E11ED96E25620C4F9AE02/C8642118032511ED86C03C22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.174.0/23 Signature Algorithm: sha256WithRSAEncryption 86:ac:e7:c7:fd:60:de:28:4e:66:f3:d8:53:4f:fa:b9:4b:86: b2:2f:e7:3e:7e:0e:48:a1:3d:3e:8b:2c:84:82:b6:ed:79:f9: 31:3e:1f:48:a1:3a:f0:ee:e8:31:7c:6d:59:4e:a6:c1:f5:41: a3:7e:aa:99:63:fc:ff:d0:f5:23:11:c6:37:c7:ea:f6:ff:e3: 1c:98:41:65:09:e0:20:2e:67:9e:a3:40:86:92:bf:45:1f:16: 57:a2:82:13:ad:91:66:46:ac:6d:27:37:43:db:68:94:85:84: d9:77:d9:22:d5:1f:da:83:62:1a:35:16:d4:11:f9:c6:18:d9: dc:1d:75:6c:6a:8c:ea:f3:4f:3f:36:bb:63:27:e0:f8:3a:44: 8f:6d:f9:b4:f2:02:71:32:c1:2f:cb:d5:66:13:52:4f:e6:88: 4c:3f:ee:5d:32:a6:bd:20:c3:95:14:f6:ed:8c:cf:d5:1f:80: 7e:9d:21:da:0a:b6:a4:90:a3:28:24:e0:5c:7b:a8:1f:56:6d: 88:2a:43:39:15:1d:40:a6:23:aa:03:f9:e2:b5:e4:f0:5a:c9: 86:8e:b0:f0:f8:11:b0:94:74:6f:2b:47:8a:f8:53:4f:ed:ef: 75:3e:42:95:f9:ee:3a:e9:c4:e1:38:0c:1e:da:15:bc:5f:b6: 6d:2e:d1:1c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5OTkxMTAvBgNVBAUTKDJGNTMzRUEwRTQwODE5REY1NjNFM0Y3RkUzRkU4NzQy OEQ1MkEwRDUwHhcNMjQwMzE5MDQzNjQ1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY5MTY1Yy1hZDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApotHPoSBwMMKx6AOuXiHcxGPzP056AJC+9xDyGgcll44r9uMQh0p3zSZU8mm F5AEhEoEGlhLTsimsqBFTgPulIhi8YST0xtG7SYQG2+7E8C6uyVGhk1JyuKsXivx 9mCG2iDM+J5z1cxFInSF3j21g0yuvw1uZrIb9D6cVOSFOeKSurdxZPuOxz5SDCiJ Q9pkb4lCOxyPdmwiNDBgbcI654IxgLeF5w80JElY7H9QUHHLJlsFtoSKaAm4tJ6+ zSycp6M2iUxXnFC/cXGLtzTaC6fOVvLJwgdTCZqcg9SrQGbDJUKscdPAErubw9Oy vR19xPmu1/FDp3Ujxqiw/ZsP8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFL/Gl/2r 3gjJeOwr2f3JwjQuzWw/MB8GA1UdIwQYMBaAFC9TPqDkCBnfVj4/f+P+h0KNUqDV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk5OS9CMUMxQjBEQTAz MUUxMUVEOTZFMjU2MjBDNEY5QUUwMi9MMU0tb09RSUdkOVdQajlfNF82SFFvMVNv TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wxTS1vT1FJR2Q5V1BqOV80XzZIUW8xU29OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzI5OTkvQjFDMUIwREEwMzFFMTFFRDk2RTI1NjIwQzRGOUFFMDIvQzg2NDIxMTgw MzI1MTFFRDg2QzAzQzIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEr+K4wDQYJKoZIhvcNAQELBQADggEBAIas58f9YN4oTmbz 2FNP+rlLhrIv5z5+DkihPT6LLISCtu15+TE+H0ihOvDu6DF8bVlOpsH1QaN+qplj /P/Q9SMRxjfH6vb/4xyYQWUJ4CAuZ56jQIaSv0UfFleighOtkWZGrG0nN0PbaJSF hNl32SLVH9qDYho1FtQR+cYY2dwddWxqjOrzTz82u2Mn4Pg6RI9t+bTyAnEywS/L 1WYTUk/miEw/7l0ypr0gw5UU9u2Mz9UfgH6dIdoKtqSQoygk4Fx7qB9WbYgqQzkV HUCmI6oD+eK15PBayYaOsPD4EbCUdG8rR4r4U0/t73U+QpX57jrpxOE4DB7aFbxf tm0u0Rw= -----END CERTIFICATE-----Generated at Sun May 19 05:08:04 2024 by rpki-client on console-ams.rpki-client.org