$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/BCD1B792ED3011EE9B8FE115C4F9AE02.roa File: BCD1B792ED3011EE9B8FE115C4F9AE02.roa (raw, json) Hash identifier: DSwy9njppPWVdrRqIQbwRsBnswJVbIVpqvNNTg3ZDPY= Subject key identifier: B8:B1:17:86:AB:70:A8:AA:32:DA:96:83:20:82:F7:D2:BC:97:C3:D1 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0295 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/BCD1B792ED3011EE9B8FE115C4F9AE02.roa Signing time: Thu 28 Mar 2024 18:26:48 +0000 ROA not before: Thu 28 Mar 2024 18:26:48 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 834 IP address blocks: 45.113.82.0/24 maxlen: 24 103.229.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Mar 28 18:26:48 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=6605b668-d27e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:02:c3:b3:4f:b8:9a:d9:9f:be:33:05:28: 0c:16:00:90:b5:e0:ea:07:cf:1f:9d:cd:8b:be:e5: b5:86:6c:bc:d5:76:6c:76:4e:c8:c1:c1:f9:fb:f8: 20:7d:98:db:fe:c9:ad:0e:34:7b:75:aa:44:33:3c: e8:8a:d7:e2:29:44:73:f7:96:26:0e:ef:8a:92:71: 3b:2e:30:2d:06:e0:74:af:8b:3a:76:24:18:b1:40: c6:d1:f6:7a:12:b0:b3:3a:b6:3d:b6:22:89:0f:7d: de:62:c0:85:fb:b0:df:d6:ba:bb:fd:34:66:63:ee: 59:e7:08:c9:19:33:90:f3:f3:d8:e0:3c:1c:05:9e: 00:3a:da:3f:e6:97:8c:6f:24:5a:96:01:5f:3d:9f: 46:07:f8:c8:9a:7e:77:d1:d2:40:d9:04:9c:dc:64: 3e:00:00:01:45:48:f7:01:cb:60:2f:36:0f:8f:59: 70:21:30:d9:66:3e:3a:de:08:a3:14:05:90:56:2f: a5:e6:d5:97:2f:74:a3:43:fd:f8:2e:19:6d:da:bd: 87:e9:c6:b8:23:53:86:b4:e1:70:4f:69:93:1a:1f: f2:3d:9c:d0:30:17:0d:bb:d0:86:24:6a:05:1e:79: cf:76:39:b4:10:b6:c6:3f:50:7f:e5:2d:48:45:9f: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B1:17:86:AB:70:A8:AA:32:DA:96:83:20:82:F7:D2:BC:97:C3:D1 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/BCD1B792ED3011EE9B8FE115C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.82.0/24 103.229.118.0/24 Signature Algorithm: sha256WithRSAEncryption a6:4b:17:83:fe:79:ac:e8:9d:c8:f7:a7:23:3b:0c:bf:ae:0c: e4:07:0f:d0:ad:6b:b7:8c:11:39:7e:8f:cd:36:ad:22:3e:57: 8b:df:83:60:3c:af:f6:7a:d5:50:87:43:ad:f6:45:c6:5b:25: c0:d3:c6:81:2a:df:fc:eb:16:7d:28:61:77:5c:59:51:df:7b: 26:98:b6:73:ca:1c:46:21:8d:6b:5e:4b:67:79:cb:a5:15:1b: c3:83:5d:cd:b1:88:08:53:ef:09:03:ff:4d:db:06:94:79:98: 7d:2a:c7:90:ce:87:33:ad:80:c4:53:38:7c:0d:af:0b:13:b9: 7c:0c:10:9c:6e:1c:bf:fb:11:4b:c3:f3:4e:aa:0b:c0:04:48: 43:fe:6e:26:ca:e7:1d:8a:e8:d5:44:5d:a9:bb:eb:3a:04:d6: 51:ef:09:cb:54:a4:e9:56:3f:c7:b4:6a:a7:7b:b9:61:e7:a1: c5:af:18:45:cf:e2:01:ba:83:a8:2b:52:a6:dd:ef:0e:4d:84: 61:57:b4:6e:e2:57:a9:b9:e0:fc:b0:c3:4f:44:c6:ec:63:f3: 47:15:8c:b8:de:6d:70:b7:e9:45:ad:5b:17:a7:a6:e8:6e:8a: dc:d9:3d:77:67:d7:2c:1b:df:66:ad:cb:9e:3f:d5:2e:5b:66: bf:99:38:51 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjQwMzI4MTgyNjQ4WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA1YjY2OC1kMjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu3cCw7NPuJrZn74zBSgMFgCQteDqB88fnc2LvuW1hmy81XZsdk7IwcH5+/gg fZjb/smtDjR7dapEMzzoitfiKURz95YmDu+KknE7LjAtBuB0r4s6diQYsUDG0fZ6 ErCzOrY9tiKJD33eYsCF+7Df1rq7/TRmY+5Z5wjJGTOQ8/PY4DwcBZ4AOto/5peM byRalgFfPZ9GB/jImn530dJA2QSc3GQ+AAABRUj3ActgLzYPj1lwITDZZj463gij FAWQVi+l5tWXL3SjQ/34Lhlt2r2H6ca4I1OGtOFwT2mTGh/yPZzQMBcNu9CGJGoF HnnPdjm0ELbGP1B/5S1IRZ8xxwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLixF4ar cKiqMtqWgyCC99K8l8PRMB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvQkNEMUI3OTJF RDMwMTFFRTlCOEZFMTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAtcVIDBABn5XYwDQYJKoZIhvcNAQELBQADggEBAKZLF4P+ eazoncj3pyM7DL+uDOQHD9Cta7eMETl+j802rSI+V4vfg2A8r/Z61VCHQ632RcZb JcDTxoEq3/zrFn0oYXdcWVHfeyaYtnPKHEYhjWteS2d5y6UVG8ODXc2xiAhT7wkD /03bBpR5mH0qx5DOhzOtgMRTOHwNrwsTuXwMEJxuHL/7EUvD806qC8AESEP+bibK 5x2K6NVEXam76zoE1lHvCctUpOlWP8e0aqd7uWHnocWvGEXP4gG6g6grUqbd7w5N hGFXtG7iV6m54Pyww09Exuxj80cVjLjebXC36UWtWxenpuhuitzZPXdn1ywb32at y54/1S5bZr+ZOFE= -----END CERTIFICATE-----Generated at Wed May 1 05:55:43 2024 by rpki-client on console-ams.rpki-client.org