$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa File: F0A6C2D0A55311EE9D25B829C4F9AE02.roa (raw, json) Hash identifier: BfdZWwitQHkgL4h6Zq9ibmtFQQ/5o8yDnpUHC/N2uJA= Subject key identifier: 6D:4C:9F:BD:60:D7:B8:30:69:59:5D:5A:08:8B:53:35:0D:74:A9:36 Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Certificate serial: 0240 Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa Signing time: Thu 28 Dec 2023 07:37:23 +0000 ROA not before: Thu 28 Dec 2023 07:37:23 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 22781 IP address blocks: 43.243.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172 Validity Not Before: Dec 28 07:37:23 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=658d25b3-d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:50:8b:43:45:07:2c:3e:e8:3e:9e:e8:2f: 73:ad:8f:63:20:cb:e4:7d:ff:7a:e9:e4:f4:4b:be: 3b:48:f7:f1:83:18:49:f2:45:a5:00:ae:66:a6:1e: 10:d8:f9:fb:32:fe:cc:c3:07:8f:c8:fe:f1:6a:e1: ac:1c:eb:ef:f2:72:7e:a2:fe:c2:b2:4e:46:3e:1d: c5:08:f0:cc:92:b6:02:4a:53:7d:e5:00:10:93:ca: e1:90:8d:6c:55:e8:f1:d0:40:30:5c:be:45:6e:66: 32:26:07:62:2e:17:41:d7:64:14:b0:c5:05:24:34: ac:16:9e:aa:56:47:88:39:51:f6:86:bd:e6:f5:5b: cc:11:e6:39:1c:2a:2e:f8:e0:22:cd:8d:8e:85:e7: 50:32:99:43:85:49:f6:61:78:70:8c:21:6a:44:c3: e9:e9:f1:ad:0c:7e:96:92:d3:fc:ee:9a:3f:27:9e: 9d:4d:41:93:9c:da:80:85:53:17:ed:4b:92:57:c0: 80:d1:7b:a7:66:50:70:98:7b:f4:2f:c1:15:bd:f6: ba:ff:aa:16:19:9d:8c:98:ad:91:21:69:63:b9:81: d0:5d:1b:5e:03:b4:69:9b:83:dd:68:f7:c0:fe:b3: 06:7f:56:45:30:e0:72:08:d7:ac:67:a4:d1:f7:1a: 4b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4C:9F:BD:60:D7:B8:30:69:59:5D:5A:08:8B:53:35:0D:74:A9:36 X509v3 Authority Key Identifier: keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A6C2D0A55311EE9D25B829C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.194.0/24 Signature Algorithm: sha256WithRSAEncryption ca:7f:25:38:64:91:20:c5:f5:8d:e3:e0:14:3b:be:a8:fd:0f: 19:8a:59:bd:0b:3d:8b:17:21:50:a9:93:cc:78:90:0b:ad:4a: 13:15:37:55:25:92:3b:03:58:ad:9a:33:37:54:76:7a:6d:3f: 54:70:e0:84:e7:c5:ce:bb:63:ab:66:55:c6:18:f1:70:4c:40: 71:80:95:cc:d0:f8:7d:ec:85:e2:62:99:b2:8a:68:b7:fa:f0: c6:d7:66:57:29:82:2f:e3:48:c2:db:99:0e:4a:c0:62:7a:77: 93:10:30:a4:7d:07:2c:83:79:c3:7c:89:87:8d:e0:33:88:cc: c6:33:7e:ea:6b:e4:67:23:61:8c:32:de:72:d7:78:cf:75:2f: 2d:2d:62:94:54:f5:6f:3b:49:49:49:bc:b4:68:ff:4f:cc:ff: 99:26:9b:57:95:ff:82:a8:e7:80:c7:04:56:88:90:f9:cf:b2: bc:1f:87:60:4d:7b:88:ee:be:dc:24:63:10:76:7a:12:b4:4a: 4b:00:9a:ad:1f:f1:34:96:c7:d8:31:b9:3a:fa:17:62:9c:57: a3:70:83:69:ff:8b:e6:7d:7d:e8:69:12:46:79:e1:53:54:5d: 78:8e:ee:cd:77:ec:77:11:ec:aa:a1:9a:39:d9:85:e8:4f:c2: 0e:2b:82:c3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhBRjIxMTAvBgNVBAUTKDEwMDVDQ0Q1RTE4MjMwRkJBOUFERDNEMjdGODVEQTM4 RjEzRTQxNzIwHhcNMjMxMjI4MDczNzIzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkMjViMy1kMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOFQi0NFByw+6D6e6C9zrY9jIMvkff966eT0S747SPfxgxhJ8kWlAK5mph4Q 2Pn7Mv7MwwePyP7xauGsHOvv8nJ+ov7Csk5GPh3FCPDMkrYCSlN95QAQk8rhkI1s Vejx0EAwXL5FbmYyJgdiLhdB12QUsMUFJDSsFp6qVkeIOVH2hr3m9VvMEeY5HCou +OAizY2OhedQMplDhUn2YXhwjCFqRMPp6fGtDH6WktP87po/J56dTUGTnNqAhVMX 7UuSV8CA0XunZlBwmHv0L8EVvfa6/6oWGZ2MmK2RIWljuYHQXRteA7Rpm4PdaPfA /rMGf1ZFMOByCNesZ6TR9xpLywIDAQABo4IClTCCApEwHQYDVR0OBBYEFG1Mn71g 17gwaVldWgiLUzUNdKk2MB8GA1UdIwQYMBaAFBAFzNXhgjD7qa3T0n+F2jjxPkFy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEFGMi83M0M4ODc5MkUw NjcxMUVDQjlEMkZGODFDNEY5QUUwMi9FQVhNMWVHQ01QdXByZFBTZjRYYU9QRS1R WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBWE0xZUdDTVB1cHJkUFNmNFhhT1BFLVFYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhBRjIvNzNDODg3OTJFMDY3MTFFQ0I5RDJGRjgxQzRGOUFFMDIvRjBBNkMyRDBB NTUzMTFFRTlEMjVCODI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr88IwDQYJKoZIhvcNAQELBQADggEBAMp/JThkkSDF9Y3j 4BQ7vqj9DxmKWb0LPYsXIVCpk8x4kAutShMVN1UlkjsDWK2aMzdUdnptP1Rw4ITn xc67Y6tmVcYY8XBMQHGAlczQ+H3sheJimbKKaLf68MbXZlcpgi/jSMLbmQ5KwGJ6 d5MQMKR9ByyDecN8iYeN4DOIzMYzfupr5GcjYYwy3nLXeM91Ly0tYpRU9W87SUlJ vLRo/0/M/5kmm1eV/4Ko54DHBFaIkPnPsrwfh2BNe4juvtwkYxB2ehK0SksAmq0f 8TSWx9gxuTr6F2KcV6Nwg2n/i+Z9fehpEkZ54VNUXXiO7s137HcR7KqhmjnZhehP wg4rgsM= -----END CERTIFICATE-----Generated at Sat May 11 05:40:24 2024 by rpki-client on console-ams.rpki-client.org