$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/646703648A2411EF98CFF955C4F9AE02.roa File: 646703648A2411EF98CFF955C4F9AE02.roa (raw, json) Hash identifier: wTjZVM548Wrh9y0svyoOrwDzYCRd/yXq2seB9OWoYhQ= Subject key identifier: 77:2D:84:1B:24:7C:1F:83:25:50:B1:6C:FA:44:B5:A7:DE:EC:6C:15 Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1CB7 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/646703648A2411EF98CFF955C4F9AE02.roa Signing time: Wed 13 Nov 2024 12:10:13 +0000 ROA not before: Wed 13 Nov 2024 12:10:13 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 55154 IP address blocks: 111.119.165.0/24 maxlen: 24 115.42.68.0/24 maxlen: 24 115.42.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7351 (0x1cb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Nov 13 12:10:13 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67349724-0e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:15:60:55:1b:92:53:2a:0e:1a:75:83:34: 9b:f1:d9:33:2d:3b:ea:71:0f:7b:db:4f:cc:7b:09: 1c:fc:c3:8c:93:62:04:25:d1:41:93:c8:bf:b7:69: 99:e6:ef:db:83:5d:69:74:8c:4f:63:36:b3:7a:3a: 31:59:87:e5:14:c0:85:d7:24:c3:d2:7b:89:8d:02: 4f:a8:89:bc:35:d0:c1:a7:a6:ad:56:13:e6:de:fc: 2b:7a:86:94:6c:f3:6b:73:60:38:4d:fd:db:17:24: 84:72:e6:44:c4:ce:ac:4f:66:d0:50:31:70:80:ea: 33:7c:f9:bb:df:bc:67:68:73:62:9b:4e:58:16:93: ba:d6:b8:23:53:52:5d:5d:e3:36:42:78:d8:de:5d: 55:62:a0:e7:5a:ce:eb:17:de:dd:76:78:67:7e:49: df:a5:7d:23:a2:8d:68:f7:fa:34:2f:d4:87:ec:2e: b9:26:01:14:62:75:b3:50:7e:c2:53:8c:8a:39:f2: bb:e5:59:56:91:dd:e2:f3:26:f3:12:2f:cb:c7:40: 74:54:74:88:76:81:ca:a5:29:a2:62:4f:fb:51:ae: 36:f3:18:63:47:7d:16:a9:31:51:b8:c6:68:ce:f5: 24:34:18:82:1c:02:79:18:6e:0e:9e:6e:7e:32:67: 11:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2D:84:1B:24:7C:1F:83:25:50:B1:6C:FA:44:B5:A7:DE:EC:6C:15 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/646703648A2411EF98CFF955C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.119.165.0/24 115.42.68.0/23 Signature Algorithm: sha256WithRSAEncryption 58:d7:53:d3:b9:54:2a:bf:e9:95:b0:39:94:99:09:fa:c2:c3: fc:93:eb:de:ad:59:1e:a1:b2:b3:b7:56:fe:5b:bb:99:8f:d5: ee:3f:a3:03:72:57:95:13:bc:f4:95:03:46:01:55:8f:3f:39: c8:62:18:11:0b:6d:0d:9a:6f:bb:c0:d6:9b:8c:07:b0:43:3c: 12:e7:1e:96:1d:02:94:82:a6:8c:79:75:d1:32:5b:13:03:c3: 86:3c:9d:91:ed:3d:9b:7d:37:fa:25:ad:56:ae:c4:eb:61:37: 54:df:fd:45:d4:f1:9f:9d:13:16:19:da:44:d1:26:fd:67:ec: 66:36:5a:a7:c1:96:04:68:93:e2:55:3f:f5:c1:61:e8:cb:cb: 49:33:ca:ba:35:b3:c3:e6:26:ce:c8:02:23:32:93:10:ce:3c: 5b:a4:2a:59:c4:c7:05:e8:dc:dd:db:90:ae:d9:08:ca:17:5b: 0a:d0:5c:b0:d1:64:da:e1:6d:b3:af:8d:89:9f:08:ca:9f:bc: b5:a1:34:35:50:2f:7f:25:07:df:39:92:59:0c:f1:a5:53:fe: 98:1b:12:08:73:70:b2:ee:46:11:96:f0:0c:eb:73:f1:cb:ac: c1:68:78:7f:11:fc:2e:1e:9b:66:71:5a:ed:3f:0c:d9:8c:92: 87:d0:a8:92 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICHLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjQxMTEzMTIxMDEzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM0OTcyNC0wZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdsVYFUbklMqDhp1gzSb8dkzLTvqcQ9720/Mewkc/MOMk2IEJdFBk8i/t2mZ 5u/bg11pdIxPYzazejoxWYflFMCF1yTD0nuJjQJPqIm8NdDBp6atVhPm3vwreoaU bPNrc2A4Tf3bFySEcuZExM6sT2bQUDFwgOozfPm737xnaHNim05YFpO61rgjU1Jd XeM2QnjY3l1VYqDnWs7rF97ddnhnfknfpX0joo1o9/o0L9SH7C65JgEUYnWzUH7C U4yKOfK75VlWkd3i8ybzEi/Lx0B0VHSIdoHKpSmiYk/7Ua428xhjR30WqTFRuMZo zvUkNBiCHAJ5GG4Onm5+MmcRJQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHcthBsk fB+DJVCxbPpEtafe7GwVMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvNjQ2NzAzNjQ4 QTI0MTFFRjk4Q0ZGOTU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABvd6UDBAFzKkQwDQYJKoZIhvcNAQELBQADggEBAFjXU9O5 VCq/6ZWwOZSZCfrCw/yT696tWR6hsrO3Vv5bu5mP1e4/owNyV5UTvPSVA0YBVY8/ OchiGBELbQ2ab7vA1puMB7BDPBLnHpYdApSCpox5ddEyWxMDw4Y8nZHtPZt9N/ol rVauxOthN1Tf/UXU8Z+dExYZ2kTRJv1n7GY2WqfBlgRok+JVP/XBYejLy0kzyro1 s8PmJs7IAiMykxDOPFukKlnExwXo3N3bkK7ZCMoXWwrQXLDRZNrhbbOvjYmfCMqf vLWhNDVQL38lB985klkM8aVT/pgbEghzcLLuRhGW8Azrc/HLrMFoeH8R/C4em2Zx Wu0/DNmMkofQqJI= -----END CERTIFICATE-----Generated at Wed Nov 20 19:05:21 2024 by rpki-client on console-ams.rpki-client.org