$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa File: 1B2129BEA89C11EFB7509755C4F9AE02.roa (raw, json) Hash identifier: /vpSWryezgfmh7uLcv4slqDui8iJtG2ruMNhN0QZXtc= Subject key identifier: 0E:61:2D:2E:41:11:E7:BB:A1:E5:9F:1F:85:53:B3:6D:88:09:95:8A Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0341 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa Signing time: Fri 22 Nov 2024 06:36:30 +0000 ROA not before: Fri 22 Nov 2024 06:36:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134972 IP address blocks: 43.243.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Nov 22 06:36:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6740266d-70bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:9a:8d:91:91:0c:cf:50:04:d3:9b:36:f0: de:63:24:b8:cb:3f:84:dc:3b:ca:7a:82:a0:34:e3: 74:fa:c8:cf:52:61:24:cd:6d:4b:e7:5c:cb:42:2c: 52:d0:a8:cb:80:cb:71:5b:e8:49:24:a9:36:de:48: 2f:c9:ee:7e:5e:0d:f8:ce:75:d8:d7:db:20:d8:c2: b5:36:62:3d:87:44:2b:08:66:35:4d:9c:f9:d3:d1: f4:2c:2c:1c:51:a1:90:b2:bd:5c:48:a8:2c:a7:66: cc:a6:ca:a5:27:e0:d9:ff:ba:17:a8:20:01:97:89: 5a:a9:e8:e4:e3:ec:df:7f:19:a6:98:db:f7:32:9f: b7:73:a9:49:31:70:97:d9:2a:79:ed:15:58:a6:80: b5:94:49:e1:06:ff:a7:16:98:15:a8:ef:2b:73:1c: d5:2b:54:fa:bb:de:ee:84:5b:03:11:d2:a5:60:3d: ed:9b:ae:3e:62:5d:41:73:98:d2:b2:44:c4:05:ce: c3:59:53:b5:c3:5b:40:26:03:86:82:c5:3a:d9:4b: 5f:54:7d:44:90:0c:43:b5:3b:a5:b8:78:31:fc:36: d1:57:a0:4d:15:1d:15:c4:d7:6a:40:28:e7:e2:c9: 5c:3a:09:cc:be:14:31:fa:1b:a3:40:a7:ce:fb:3b: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:61:2D:2E:41:11:E7:BB:A1:E5:9F:1F:85:53:B3:6D:88:09:95:8A X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/1B2129BEA89C11EFB7509755C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.192.0/24 Signature Algorithm: sha256WithRSAEncryption 59:a1:10:13:08:f9:70:75:59:d4:54:3a:ea:da:6f:4b:7f:95: 11:c2:c9:61:d5:7a:2f:b0:57:f3:56:24:6f:c3:e7:9f:b9:e3: 55:98:ef:8d:ba:40:1d:c0:87:bd:8c:bd:ed:17:0c:14:98:b5: e0:64:7e:b2:d4:b1:76:04:80:78:8d:fb:e1:eb:aa:f1:75:ca: 19:95:08:0d:ff:e4:27:a1:3b:c6:44:34:1b:71:39:13:9c:ee: 49:32:b1:21:cb:99:f5:45:27:08:c3:43:e1:12:9c:60:06:0d: 75:50:7e:08:f1:ed:b8:fe:10:87:2a:f8:df:45:95:5a:ef:ed: 6c:05:90:dd:97:bc:3e:2c:d2:d5:e7:0d:7d:5e:fb:57:c2:dd: 3d:ab:05:ec:e0:c2:d3:10:7c:5b:70:bd:49:a4:17:8e:63:ef: b2:77:ab:31:84:14:cb:30:2e:42:40:a3:65:a8:72:f3:61:5c: 0d:ac:ac:43:21:76:dd:b6:65:b2:aa:e4:dd:6f:eb:61:ae:bb: a6:3c:e7:c0:6c:05:0c:85:f8:95:8b:15:71:13:c9:b7:0f:f0: 47:f7:d7:0a:89:a9:16:08:01:c1:0b:cd:79:82:a5:c9:7c:ef: 66:ef:6e:15:13:78:e2:21:63:71:39:eb:c1:38:2f:c3:ba:88: e8:8e:e9:ad -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjQxMTIyMDYzNjMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzQwMjY2ZC03MGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6eajZGRDM9QBNObNvDeYyS4yz+E3DvKeoKgNON0+sjPUmEkzW1L51zLQixS 0KjLgMtxW+hJJKk23kgvye5+Xg34znXY19sg2MK1NmI9h0QrCGY1TZz509H0LCwc UaGQsr1cSKgsp2bMpsqlJ+DZ/7oXqCABl4laqejk4+zffxmmmNv3Mp+3c6lJMXCX 2Sp57RVYpoC1lEnhBv+nFpgVqO8rcxzVK1T6u97uhFsDEdKlYD3tm64+Yl1Bc5jS skTEBc7DWVO1w1tAJgOGgsU62UtfVH1EkAxDtTuluHgx/DbRV6BNFR0VxNdqQCjn 4slcOgnMvhQx+hujQKfO+zsXUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFA5hLS5B Eee7oeWfH4VTs22ICZWKMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvMUIyMTI5QkVB ODlDMTFFRkI3NTA5NzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr88AwDQYJKoZIhvcNAQELBQADggEBAFmhEBMI+XB1WdRU Ourab0t/lRHCyWHVei+wV/NWJG/D55+541WY7426QB3Ah72Mve0XDBSYteBkfrLU sXYEgHiN++HrqvF1yhmVCA3/5CehO8ZENBtxOROc7kkysSHLmfVFJwjDQ+ESnGAG DXVQfgjx7bj+EIcq+N9FlVrv7WwFkN2XvD4s0tXnDX1e+1fC3T2rBezgwtMQfFtw vUmkF45j77J3qzGEFMswLkJAo2WocvNhXA2srEMhdt22ZbKq5N1v62Guu6Y858Bs BQyF+JWLFXETybcP8Ef31wqJqRYIAcELzXmCpcl872bvbhUTeOIhY3E568E4L8O6 iOiO6a0= -----END CERTIFICATE-----Generated at Fri Nov 22 08:02:00 2024 by rpki-client on console-ams.rpki-client.org