$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/8EF9AD126E8711EDB407C430C4F9AE02.roa File: 8EF9AD126E8711EDB407C430C4F9AE02.roa (raw, json) Hash identifier: jm9H6ds7laBX7TxaxDAqEupPnz0aDrdQ+VAKFbcbz9Q= Subject key identifier: 12:AC:01:89:05:25:1F:06:F8:FC:D3:DA:47:1D:45:88:7D:47:CD:D5 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 01A3 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/8EF9AD126E8711EDB407C430C4F9AE02.roa Signing time: Sun 21 May 2023 05:54:22 +0000 ROA not before: Sun 21 May 2023 05:54:22 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 201351 IP address blocks: 43.243.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: May 21 05:54:22 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6469b20e-26fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:35:5c:78:58:d5:f3:7a:2b:8a:97:53:ff: 02:85:dd:1d:1b:d2:1d:b7:4c:70:25:5a:04:b7:16: 31:55:f2:71:e1:6b:63:5c:be:51:53:25:e9:10:31: 80:4c:bd:82:78:d6:87:16:bf:39:5b:b0:fa:63:80: a7:9b:d4:38:b8:39:17:5d:fe:fc:e4:58:7a:0a:81: 88:53:0e:99:e2:0e:bd:77:72:66:03:b8:24:25:e1: 9e:4b:53:30:2b:8d:f9:7f:46:83:54:e7:ee:9e:20: 8e:04:4e:b7:dc:e5:34:1b:06:04:2b:b6:59:1e:07: 89:db:0b:79:8f:30:a7:de:b5:b7:fe:f9:1c:fd:11: 74:85:cd:9f:fe:63:db:3f:d3:da:04:bd:ff:f3:db: 1e:04:3d:e5:d9:12:fb:ae:ec:95:40:43:88:93:a9: 45:88:09:6f:1a:2d:ef:ba:91:b7:f4:7d:dd:e0:00: a9:6d:6c:00:1b:7c:cf:25:57:74:b2:36:03:ca:11: d7:67:12:af:0e:69:2d:53:96:ce:c0:1e:45:d6:9f: 7e:38:a6:14:0a:58:89:c1:4d:a2:63:68:d8:46:fd: d1:45:41:ee:d3:e4:ef:1f:1e:3f:e9:e2:20:2e:7d: 5d:e7:36:d5:2e:b2:99:7e:44:7f:8b:69:59:f8:df: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AC:01:89:05:25:1F:06:F8:FC:D3:DA:47:1D:45:88:7D:47:CD:D5 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/8EF9AD126E8711EDB407C430C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.192.0/24 Signature Algorithm: sha256WithRSAEncryption aa:84:c5:de:99:79:3c:21:b5:ba:2c:59:e4:ab:29:d9:a9:ce: 89:9a:2e:61:07:dc:7a:3a:0b:0f:fb:63:9d:a4:d5:47:74:04: f5:eb:69:9a:8c:78:da:6e:bb:64:27:3c:c0:4b:7d:e7:d1:1d: e8:55:93:06:c6:2c:8e:da:b0:57:73:2b:03:3e:ce:12:42:26: 65:f9:fe:de:ff:c3:f1:d6:b7:8d:f6:74:79:74:e3:ec:0e:08: 4e:14:d5:23:3f:de:0c:fb:98:04:06:4d:a0:6b:32:16:7f:57: 88:9f:fb:7d:97:a0:e0:dc:65:dd:6e:00:66:9b:45:a0:72:08: 14:25:20:d2:01:d8:35:43:6e:79:df:99:8d:7f:a5:5e:fb:7d: 2c:fb:76:7d:42:87:75:a0:f3:5b:f1:a7:23:5d:9b:70:db:95: bc:08:d1:f7:b8:fa:18:fa:f8:63:22:7c:ab:ea:85:fb:c4:2e: 5f:fe:86:10:7d:5e:68:89:ac:97:b3:18:e4:cf:ae:7b:9c:e4: aa:aa:41:e3:d2:a0:96:ac:db:df:d9:be:1a:69:1d:88:3e:d2: 53:a9:79:c7:27:38:da:1c:9f:7d:67:15:c7:78:34:2e:50:e3: ae:a2:7a:3b:fd:b8:89:9a:bc:ec:c9:5f:dd:c8:fc:7a:8d:43: da:b0:69:30 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjMwNTIxMDU1NDIyWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDY5YjIwZS0yNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9k1XHhY1fN6K4qXU/8Chd0dG9Idt0xwJVoEtxYxVfJx4WtjXL5RUyXpEDGA TL2CeNaHFr85W7D6Y4Cnm9Q4uDkXXf785Fh6CoGIUw6Z4g69d3JmA7gkJeGeS1Mw K435f0aDVOfuniCOBE633OU0GwYEK7ZZHgeJ2wt5jzCn3rW3/vkc/RF0hc2f/mPb P9PaBL3/89seBD3l2RL7ruyVQEOIk6lFiAlvGi3vupG39H3d4ACpbWwAG3zPJVd0 sjYDyhHXZxKvDmktU5bOwB5F1p9+OKYUCliJwU2iY2jYRv3RRUHu0+TvHx4/6eIg Ln1d5zbVLrKZfkR/i2lZ+N+9AQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBKsAYkF JR8G+PzT2kcdRYh9R83VMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvOEVGOUFEMTI2 RTg3MTFFREI0MDdDNDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr88AwDQYJKoZIhvcNAQELBQADggEBAKqExd6ZeTwhtbos WeSrKdmpzomaLmEH3Ho6Cw/7Y52k1Ud0BPXraZqMeNpuu2QnPMBLfefRHehVkwbG LI7asFdzKwM+zhJCJmX5/t7/w/HWt432dHl04+wOCE4U1SM/3gz7mAQGTaBrMhZ/ V4if+32XoODcZd1uAGabRaByCBQlINIB2DVDbnnfmY1/pV77fSz7dn1Ch3Wg81vx pyNdm3DblbwI0fe4+hj6+GMifKvqhfvELl/+hhB9XmiJrJezGOTPrnuc5KqqQePS oJas29/ZvhppHYg+0lOpeccnONocn31nFcd4NC5Q466iejv9uImavOzJX93I/HqN Q9qwaTA= -----END CERTIFICATE-----Generated at Sat May 11 05:27:32 2024 by rpki-client on console-fra.rpki-client.org