$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/8DA4D91477EF11EAB5508A28C4F9AE02.roa File: 8DA4D91477EF11EAB5508A28C4F9AE02.roa (raw, json) Hash identifier: ibjFmXnXnU8N5O1p29U2A3A7TTL4SvNFNaoSn7RurMY= Subject key identifier: F0:4D:49:6D:98:B4:A3:C1:23:86:15:6E:E6:78:03:5D:9C:20:E1:66 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 08E4 Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/8DA4D91477EF11EAB5508A28C4F9AE02.roa Signing time: Wed 08 Nov 2023 21:08:45 +0000 ROA not before: Wed 08 Nov 2023 21:08:45 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 24479 IP address blocks: 203.3.167.0/24 maxlen: 24 203.28.212.0/24 maxlen: 24 203.170.2.0/23 maxlen: 23 203.170.4.0/22 maxlen: 22 203.170.8.0/21 maxlen: 21 203.170.8.0/24 maxlen: 24 203.170.9.0/24 maxlen: 24 203.170.10.0/24 maxlen: 24 203.170.11.0/24 maxlen: 24 203.170.12.0/24 maxlen: 24 203.170.13.0/24 maxlen: 24 203.170.14.0/24 maxlen: 24 2402:4d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 20:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Nov 8 21:08:45 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654bf8dd-0c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:b3:a6:87:90:e1:83:43:2d:ab:49:f8:ec: 6a:66:e9:af:fb:6c:74:a6:2e:87:1a:90:99:90:64: bf:de:8e:98:ed:fa:cb:79:4b:15:f9:a7:30:c6:62: d1:1d:57:8a:24:0a:9e:5f:8c:d4:12:87:ce:a4:f6: bd:fd:b4:50:ed:74:49:42:82:15:80:6a:ed:ea:24: 12:50:fd:b8:e2:a2:70:a4:22:f5:f7:78:31:e1:0a: 44:54:5e:e4:d0:c4:b6:a4:93:3e:68:7f:7f:27:5b: a3:74:32:24:57:fb:35:bc:2a:43:50:bc:51:87:eb: 7b:43:64:da:d1:9a:07:e2:67:8f:07:06:34:2b:39: 09:83:ad:c1:1a:c9:8a:7f:c0:e5:6b:33:fc:23:8a: fd:ae:a3:c4:f6:16:5c:db:c8:44:1c:7b:69:75:9f: 6d:ee:8e:cb:f9:a0:c3:dd:d6:79:be:c8:db:47:0d: 16:4d:cf:65:44:fc:f6:d7:6f:7f:a5:93:ba:b7:80: f1:f6:a1:46:22:0a:c3:fb:cd:d5:ea:92:53:2d:2c: 32:fe:37:27:98:5e:73:86:17:51:e5:24:35:c4:05: aa:1c:fa:22:51:01:4b:53:90:ce:0f:4f:b7:47:d6: ac:44:6a:e8:a3:c9:1d:0f:1e:c1:07:b1:81:30:f8: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4D:49:6D:98:B4:A3:C1:23:86:15:6E:E6:78:03:5D:9C:20:E1:66 X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/8DA4D91477EF11EAB5508A28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.3.167.0/24 203.28.212.0/24 203.170.2.0-203.170.15.255 IPv6: 2402:4d40::/32 Signature Algorithm: sha256WithRSAEncryption 5d:37:05:2f:26:47:fb:a3:e7:85:70:e9:07:92:e6:c5:50:0b: 09:06:bf:33:14:47:71:39:b3:7b:a2:76:f4:22:74:90:dd:57: 87:b8:53:27:14:a0:06:90:66:47:82:d5:76:6b:89:6b:61:1f: d7:b4:58:61:d3:45:75:9d:ef:e5:ea:d4:64:1d:47:51:a6:4f: c5:2b:f3:e7:5a:9f:81:00:40:de:6c:73:75:ba:20:cb:d7:d9: 1f:de:c6:ae:01:95:fd:de:e0:5c:40:62:0c:01:87:9d:7f:8a: 09:3f:9a:dc:2c:99:29:77:41:1f:34:b2:01:84:59:0a:a5:a5: c2:64:37:69:bb:36:dc:a4:18:10:0c:b4:92:6b:ff:c9:3d:d0: ac:18:c5:34:e0:d2:58:a5:4d:c4:ba:e4:73:99:51:b2:d8:33: df:00:c6:45:42:cf:a3:56:0c:7d:53:7a:2d:a4:7d:ed:1f:5e: 3e:19:db:dd:bb:b1:8f:c7:35:72:b7:3d:50:79:df:03:50:68: 89:4c:02:41:4f:ac:58:96:41:94:d7:35:14:ef:f8:39:8f:c3: 06:cf:85:3e:b7:45:31:25:24:a4:be:2d:67:cc:a9:2f:ef:0d: 77:f4:82:df:3f:31:f5:25:4b:37:43:c0:61:bd:29:66:2f:69: 06:3e:e0:6f -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjMxMTA4MjEwODQ1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRiZjhkZC0wYzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4OzpoeQ4YNDLatJ+OxqZumv+2x0pi6HGpCZkGS/3o6Y7frLeUsV+acwxmLR HVeKJAqeX4zUEofOpPa9/bRQ7XRJQoIVgGrt6iQSUP244qJwpCL193gx4QpEVF7k 0MS2pJM+aH9/J1ujdDIkV/s1vCpDULxRh+t7Q2Ta0ZoH4mePBwY0KzkJg63BGsmK f8DlazP8I4r9rqPE9hZc28hEHHtpdZ9t7o7L+aDD3dZ5vsjbRw0WTc9lRPz2129/ pZO6t4Dx9qFGIgrD+83V6pJTLSwy/jcnmF5zhhdR5SQ1xAWqHPoiUQFLU5DOD0+3 R9asRGroo8kdDx7BB7GBMPjT/wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPBNSW2Y tKPBI4YVbuZ4A12cIOFmMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzM3ODAvOEVCNjJERkE3N0VEMTFFQUFBNENDNDIyQzRGOUFFMDIvOERBNEQ5MTQ3 N0VGMTFFQUI1NTA4QTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBADLA6cDBADLHNQwDAMEAcuqAgMEBMuqADANBAIAAjAHAwUA JAJNQDANBgkqhkiG9w0BAQsFAAOCAQEAXTcFLyZH+6PnhXDpB5LmxVALCQa/MxRH cTmze6J29CJ0kN1Xh7hTJxSgBpBmR4LVdmuJa2Ef17RYYdNFdZ3v5erUZB1HUaZP xSvz51qfgQBA3mxzdbogy9fZH97GrgGV/d7gXEBiDAGHnX+KCT+a3CyZKXdBHzSy AYRZCqWlwmQ3abs23KQYEAy0kmv/yT3QrBjFNODSWKVNxLrkc5lRstgz3wDGRULP o1YMfVN6LaR97R9ePhnb3buxj8c1crc9UHnfA1BoiUwCQU+sWJZBlNc1FO/4OY/D Bs+FPrdFMSUkpL4tZ8ypL+8Nd/SC3z8x9SVLN0PAYb0pZi9pBj7gbw== -----END CERTIFICATE-----Generated at Thu May 16 21:45:28 2024 by rpki-client on console-fra.rpki-client.org