$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/C9E62876DD0A11EA97BF0347C4F9AE02.roa File: C9E62876DD0A11EA97BF0347C4F9AE02.roa (raw, json) Hash identifier: 0mOETl/OdBfCNtX5dYvxJWUGYIrmCCO9qdnaVBCdeGw= Subject key identifier: FF:7F:22:75:96:7D:26:E7:4A:BB:BC:A2:86:0E:29:1E:1F:4D:BF:87 Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Certificate serial: 0996 Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/C9E62876DD0A11EA97BF0347C4F9AE02.roa Signing time: Thu 14 Nov 2024 19:58:57 +0000 ROA not before: Thu 14 Nov 2024 19:58:57 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 4134 IP address blocks: 63.140.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2454 (0x996) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4 Validity Not Before: Nov 14 19:58:57 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67365681-6790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:d9:b7:be:44:7e:06:e6:d9:f0:02:3c:d3: 9e:5c:70:31:37:e5:7f:88:c4:ff:6e:60:90:7b:57: ee:ab:71:fd:1a:11:44:ca:8c:a2:55:f5:ad:0c:11: da:0c:60:72:0b:60:11:82:1c:d6:0b:7a:94:ae:ee: 31:cf:f3:e9:1f:2e:bf:b1:e1:4d:79:07:87:bd:26: cb:28:ec:9a:8d:9a:ef:42:fa:46:d1:4f:d2:3d:58: 61:61:d1:8a:ab:7c:e4:44:82:bb:fc:0f:51:44:52: 84:f2:97:eb:23:c9:a2:fa:11:e1:53:45:fe:a4:e1: f4:a4:b2:0e:68:36:89:17:d9:b5:c7:54:70:0b:d2: 5d:ac:2a:9c:11:be:77:46:3f:69:f0:37:1a:2e:1b: e5:5e:90:81:21:5e:0c:9a:17:be:ff:b3:4a:e7:55: db:3e:c3:9a:af:14:a9:39:63:30:92:f0:c3:cc:3f: 62:86:43:7a:f2:f3:17:13:f3:76:82:02:b0:e9:03: 65:16:f1:45:3b:69:5a:5c:68:83:e5:e4:d0:46:d1: 8e:27:69:4e:34:f4:22:2a:75:68:b4:85:85:21:a1: 0f:c6:33:e7:4b:8e:59:db:bb:b1:66:b0:47:e1:76: ea:d1:99:82:ae:93:ba:64:cf:4b:a7:bc:0d:81:d7: 93:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7F:22:75:96:7D:26:E7:4A:BB:BC:A2:86:0E:29:1E:1F:4D:BF:87 X509v3 Authority Key Identifier: keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/C9E62876DD0A11EA97BF0347C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 63.140.0.0/24 Signature Algorithm: sha256WithRSAEncryption 96:a8:95:91:db:7e:a9:8d:ef:e4:ae:09:13:2d:83:a5:66:2d: 96:2e:82:d0:50:ab:9f:ae:5e:ef:e0:a5:14:1f:6d:cd:d7:ac: c1:3a:25:c8:29:3a:e3:6a:9f:9d:f4:a5:2c:29:1d:24:a4:d5: ba:3d:bc:59:c9:59:a3:19:a1:98:47:70:c8:43:a0:b7:36:fa: 84:d6:9d:7d:9b:a2:4e:79:37:dd:b0:4d:80:d4:3f:c1:b3:ba: 2d:5e:5a:d5:6b:77:1b:b1:9e:cf:10:b6:f4:c7:f4:88:d6:b8: fc:a1:7c:20:d6:e8:13:e3:e8:ad:75:d6:89:88:c5:38:77:87: 34:43:a6:ac:25:f9:21:6b:f0:81:40:87:9e:88:f6:0b:13:b2: fa:8a:ab:c0:7f:0d:0a:18:a8:a8:3c:74:1e:f8:8e:8b:e6:67: 2b:7f:4a:c0:8b:ef:33:75:9b:31:b8:10:ca:00:b7:0f:44:59: 02:4e:23:a8:a5:af:f1:5d:1e:66:dd:e1:02:16:96:74:d0:89: 95:f0:44:c5:a7:d8:1f:64:e0:9d:8d:69:ba:39:dd:e9:8c:37: e9:5e:23:f1:1d:5b:11:ca:dc:20:0a:f9:ec:97:37:7c:21:54: 7b:12:4f:4f:bd:6d:87:08:0b:20:35:dc:bd:0e:45:69:32:14: 68:f1:9a:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NkQxMTAvBgNVBAUTKEI3MDMxOEQ3MUFBMEU4MDQzMjRFMDEzQzMwOTdGREJD RDYwMTM0RDQwHhcNMjQxMTE0MTk1ODU3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2NTY4MS02NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9vZt75Efgbm2fACPNOeXHAxN+V/iMT/bmCQe1fuq3H9GhFEyoyiVfWtDBHa DGByC2ARghzWC3qUru4xz/PpHy6/seFNeQeHvSbLKOyajZrvQvpG0U/SPVhhYdGK q3zkRIK7/A9RRFKE8pfrI8mi+hHhU0X+pOH0pLIOaDaJF9m1x1RwC9JdrCqcEb53 Rj9p8DcaLhvlXpCBIV4Mmhe+/7NK51XbPsOarxSpOWMwkvDDzD9ihkN68vMXE/N2 ggKw6QNlFvFFO2laXGiD5eTQRtGOJ2lONPQiKnVotIWFIaEPxjPnS45Z27uxZrBH 4Xbq0ZmCrpO6ZM9Lp7wNgdeTgwIDAQABo4IClTCCApEwHQYDVR0OBBYEFP9/InWW fSbnSru8ooYOKR4fTb+HMB8GA1UdIwQYMBaAFLcDGNcaoOgEMk4BPDCX/bzWATTU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2RC8yRTc2N0UzMjgy Q0QxMUVBODk1QzdCNUNDNEY5QUUwMi90d01ZMXhxZzZBUXlUZ0U4TUpmOXZOWUJO TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3R3TVkxeHFnNkFReVRnRThNSmY5dk5ZQk5OUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU3NkQvMkU3NjdFMzI4MkNEMTFFQTg5NUM3QjVDQzRGOUFFMDIvQzlFNjI4NzZE RDBBMTFFQTk3QkYwMzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA/jAAwDQYJKoZIhvcNAQELBQADggEBAJaolZHbfqmN7+Su CRMtg6VmLZYugtBQq5+uXu/gpRQfbc3XrME6JcgpOuNqn530pSwpHSSk1bo9vFnJ WaMZoZhHcMhDoLc2+oTWnX2bok55N92wTYDUP8Gzui1eWtVrdxuxns8QtvTH9IjW uPyhfCDW6BPj6K111omIxTh3hzRDpqwl+SFr8IFAh56I9gsTsvqKq8B/DQoYqKg8 dB74jovmZyt/SsCL7zN1mzG4EMoAtw9EWQJOI6ilr/FdHmbd4QIWlnTQiZXwRMWn 2B9k4J2Nabo53emMN+leI/EdWxHK3CAK+eyXN3whVHsST0+9bYcICyA13L0ORWky FGjxmuU= -----END CERTIFICATE-----Generated at Wed Nov 20 21:52:41 2024 by rpki-client on console-fra.rpki-client.org