$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/67DE34666F4811ED92CB5C4BC4F9AE02.roa File: 67DE34666F4811ED92CB5C4BC4F9AE02.roa (raw, json) Hash identifier: rNFuc6i3HSAXbtaMR2XJOOlprv+a2Uv2rj0SLIzZiF8= Subject key identifier: E7:EA:7D:40:82:76:05:0B:AF:58:38:D4:2E:6B:57:85:89:67:34:EA Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 01A4 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/67DE34666F4811ED92CB5C4BC4F9AE02.roa Signing time: Sun 21 May 2023 05:54:23 +0000 ROA not before: Sun 21 May 2023 05:54:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 203141 IP address blocks: 43.243.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 21 05:54:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6469b20f-e3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:47:94:6f:8c:23:05:86:64:12:ea:81:c0: 51:42:8c:e5:6b:4f:3b:4f:08:48:46:ed:f7:98:d2: 47:b9:0c:f4:14:7f:d6:7f:77:bf:d7:65:3c:28:86: 2b:2b:97:96:23:59:3d:41:76:f3:92:ef:b8:05:55: 13:e9:fe:0d:f9:42:66:b3:34:a2:cf:9a:ac:b6:d0: 76:35:f3:c0:43:9d:50:92:8e:22:d5:a3:5e:3d:0d: 01:50:e7:c9:18:5e:5e:57:98:f7:e4:a7:34:51:92: 88:c5:33:0d:84:c3:c8:bb:6f:ed:22:a9:b0:09:df: f9:aa:d1:58:e8:6e:97:06:8f:7c:bf:69:c9:45:c8: 89:bb:22:89:99:5f:9f:62:77:8e:b0:00:9b:4e:5e: 24:76:82:75:40:ed:13:49:c0:10:7d:cd:07:fb:47: 56:f5:fc:3a:f6:e3:f4:b4:2b:5c:e8:03:ed:21:25: d6:42:da:ee:e1:6f:d1:4d:75:93:33:44:13:f6:9e: db:3f:17:20:32:ec:c7:36:e5:67:52:d8:aa:1c:df: e6:0a:b2:4f:34:14:30:d2:bd:08:20:fc:37:34:bc: 8a:66:2f:88:8c:9c:50:1d:66:28:77:a3:4d:35:98: dc:02:1f:f0:19:24:d8:bc:dc:3b:67:ff:3f:58:a6: fa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:7D:40:82:76:05:0B:AF:58:38:D4:2E:6B:57:85:89:67:34:EA X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/67DE34666F4811ED92CB5C4BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.192.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:82:b1:f2:93:69:b0:3f:a7:26:19:e6:ea:23:42:72:21:63: d1:9e:a0:bb:83:1f:94:a0:12:eb:1d:9c:f3:f9:56:e0:34:71: 61:ef:c7:81:d3:08:9e:8d:1d:7d:c0:17:3e:6b:14:1f:84:e8: 24:20:4b:8d:8a:8c:b7:88:95:a4:95:bf:82:8d:1f:57:78:db: 1e:c4:73:fe:a0:13:75:4a:18:70:1e:d5:3f:7e:d8:42:3c:af: 64:57:26:db:54:6b:b8:37:a9:da:0b:f6:27:2b:c4:1c:ca:15: c0:2b:12:96:e4:6d:1b:d0:6f:54:0e:a5:42:7c:9d:fa:9f:09: 00:f9:ea:75:6e:dc:8a:47:e8:35:4d:1d:bb:36:8f:94:b5:fd: f3:45:eb:c4:a4:41:f6:08:90:28:51:dd:83:33:0e:5b:7b:6d: be:a2:86:79:10:d8:67:0e:77:ff:b6:fa:06:75:82:43:92:c0: 86:6c:16:0d:1a:98:ff:0c:ac:b7:2b:9f:d4:09:e5:8d:4e:8c: 27:c9:45:9a:09:c3:f7:a1:ba:03:e1:54:e2:71:30:19:d0:87: c8:99:0c:c6:fe:4c:08:e5:14:c1:d8:ac:d9:8f:9c:98:c1:d8: 0b:f7:90:59:04:7f:b5:97:aa:2c:51:70:f5:81:f5:ef:96:e5: 9b:55:68:4a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjMwNTIxMDU1NDIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDY5YjIwZi1lM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaxHlG+MIwWGZBLqgcBRQozla087TwhIRu33mNJHuQz0FH/Wf3e/12U8KIYr K5eWI1k9QXbzku+4BVUT6f4N+UJmszSiz5qsttB2NfPAQ51Qko4i1aNePQ0BUOfJ GF5eV5j35Kc0UZKIxTMNhMPIu2/tIqmwCd/5qtFY6G6XBo98v2nJRciJuyKJmV+f YneOsACbTl4kdoJ1QO0TScAQfc0H+0dW9fw69uP0tCtc6APtISXWQtru4W/RTXWT M0QT9p7bPxcgMuzHNuVnUtiqHN/mCrJPNBQw0r0IIPw3NLyKZi+IjJxQHWYod6NN NZjcAh/wGSTYvNw7Z/8/WKb6owIDAQABo4IClTCCApEwHQYDVR0OBBYEFOfqfUCC dgULr1g41C5rV4WJZzTqMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvNjdERTM0NjY2 RjQ4MTFFRDkyQ0I1QzRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr88AwDQYJKoZIhvcNAQELBQADggEBAFyCsfKTabA/pyYZ 5uojQnIhY9GeoLuDH5SgEusdnPP5VuA0cWHvx4HTCJ6NHX3AFz5rFB+E6CQgS42K jLeIlaSVv4KNH1d42x7Ec/6gE3VKGHAe1T9+2EI8r2RXJttUa7g3qdoL9icrxBzK FcArEpbkbRvQb1QOpUJ8nfqfCQD56nVu3IpH6DVNHbs2j5S1/fNF68SkQfYIkChR 3YMzDlt7bb6ihnkQ2GcOd/+2+gZ1gkOSwIZsFg0amP8MrLcrn9QJ5Y1OjCfJRZoJ w/ehugPhVOJxMBnQh8iZDMb+TAjlFMHYrNmPnJjB2Av3kFkEf7WXqixRcPWB9e+W 5ZtVaEo= -----END CERTIFICATE-----Generated at Sat May 11 05:40:24 2024 by rpki-client on console-ams.rpki-client.org