$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/CCD092AE4E6411EF92C0EC3AC4F9AE02.roa File: CCD092AE4E6411EF92C0EC3AC4F9AE02.roa (raw, json) Hash identifier: rM2HcTN6YD/Z+cCFcZeuxrJ7Jgv3YiMIlsdFtNQfr2Q= Subject key identifier: 23:D7:9D:43:77:40:2E:B0:85:5C:17:45:0B:FA:BC:1F:D7:34:2F:88 Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Certificate serial: 1C62 Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/CCD092AE4E6411EF92C0EC3AC4F9AE02.roa Signing time: Mon 30 Sep 2024 16:24:17 +0000 ROA not before: Mon 30 Sep 2024 16:24:17 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 140900 IP address blocks: 111.119.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 15:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7266 (0x1c62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A Validity Not Before: Sep 30 16:24:17 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66fad0b1-0622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:39:be:fa:6a:cf:e6:ec:4a:42:ea:03:2e: 2e:2f:f9:a6:2b:1c:e9:bc:1b:51:d4:be:80:2f:8a: 10:53:a6:1f:97:c0:3e:44:08:39:c4:b0:57:46:28: c8:30:46:1f:21:ca:51:14:f5:a5:8f:e6:e9:07:d6: 53:a5:ea:d1:1e:34:f9:04:08:c9:eb:38:12:1d:f8: bc:66:8a:8c:a7:cb:0a:19:25:3a:d8:24:49:ca:83: 62:ba:b5:00:c3:11:41:dd:cc:f9:20:96:cb:ee:92: 95:67:26:ae:7d:6b:b6:ab:e7:d7:08:65:eb:1f:fe: 58:42:34:c3:9b:e8:53:af:44:e9:3b:1e:30:b5:60: 6d:ea:d4:72:2d:ef:41:87:79:4f:7d:ed:3f:d8:24: c3:81:69:c9:31:6d:33:73:8d:10:f9:cb:4d:4d:3a: a6:2d:15:4d:2f:07:46:0f:d7:fe:b6:ff:71:b2:c4: 07:10:96:e3:6e:e3:47:aa:3e:cf:83:04:a7:88:bb: 62:f9:aa:af:ce:45:93:3b:b7:c1:28:e7:3d:22:ef: 0a:68:0c:e5:7f:a2:13:53:15:4c:dc:b2:af:56:d3: 8a:47:10:49:8e:fe:7c:27:3d:ed:60:06:50:ad:aa: 59:3d:88:6b:d6:c0:52:fe:8b:f7:45:6e:71:0f:8a: c4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D7:9D:43:77:40:2E:B0:85:5C:17:45:0B:FA:BC:1F:D7:34:2F:88 X509v3 Authority Key Identifier: keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/CCD092AE4E6411EF92C0EC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.119.167.0/24 Signature Algorithm: sha256WithRSAEncryption 98:d7:35:fa:0b:b5:21:23:8c:30:91:d4:1e:b9:b5:19:9a:fb: b3:c0:15:dd:7a:90:b2:b9:e9:5f:02:c4:f7:83:cd:00:34:81: 59:15:1c:cd:e6:c6:33:6b:da:f1:01:90:0c:dc:66:c8:4e:69: 33:3c:c7:21:ba:57:93:e0:a9:48:53:4b:d9:ae:d9:88:55:4e: 43:a3:3e:38:65:30:b2:d2:db:f2:56:62:25:84:15:b9:b8:3e: c6:66:ae:13:17:6d:a3:54:bd:08:62:28:af:6a:f0:b8:39:44: 12:a0:4b:c4:af:87:71:c7:a9:45:46:c0:b8:b7:f7:ab:5c:7c: b9:4d:fb:01:05:e3:da:2e:a7:83:a2:de:8f:f0:9e:f1:3e:d6: 8e:72:a5:50:da:9f:9d:ca:69:ef:3a:cd:a2:2e:be:4c:b3:90: c3:c4:cb:55:ff:94:be:4b:b9:20:3e:83:7e:ce:9a:18:d6:89: fe:87:20:39:75:2e:07:6c:8d:c6:5f:7e:76:1e:b5:39:1a:53: 51:7f:bc:d9:c7:10:01:8f:44:c2:19:a5:6a:0b:8c:fd:ef:14: 3b:de:60:a1:59:cd:16:12:59:75:ca:c0:73:92:37:36:12:f2: 38:bf:ee:f3:4e:b9:c3:f7:15:b9:d8:09:2e:3e:81:44:bf:94: ad:29:61:ec -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICHGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4NEExMTAvBgNVBAUTKDhBMUExMEVCOEZCQTQ1QzIxNTJDQTg5NTZGNDMyRjlB ODEzOTYwM0EwHhcNMjQwOTMwMTYyNDE3WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZhZDBiMS0wNjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDo5vvpqz+bsSkLqAy4uL/mmKxzpvBtR1L6AL4oQU6Yfl8A+RAg5xLBXRijI MEYfIcpRFPWlj+bpB9ZTperRHjT5BAjJ6zgSHfi8ZoqMp8sKGSU62CRJyoNiurUA wxFB3cz5IJbL7pKVZyaufWu2q+fXCGXrH/5YQjTDm+hTr0TpOx4wtWBt6tRyLe9B h3lPfe0/2CTDgWnJMW0zc40Q+ctNTTqmLRVNLwdGD9f+tv9xssQHEJbjbuNHqj7P gwSniLti+aqvzkWTO7fBKOc9Iu8KaAzlf6ITUxVM3LKvVtOKRxBJjv58Jz3tYAZQ rapZPYhr1sBS/ov3RW5xD4rEawIDAQABo4IClTCCApEwHQYDVR0OBBYEFCPXnUN3 QC6whVwXRQv6vB/XNC+IMB8GA1UdIwQYMBaAFIoaEOuPukXCFSyolW9DL5qBOWA6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTg0QS8xODA1MTkxQUUx RUYxMUU2OUQzNjUwMUJDNEY5QUUwMi9paG9RNjQtNlJjSVZMS2lWYjBNdm1vRTVZ RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lob1E2NC02UmNJVkxLaVZiME12bW9FNVlEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0E4NEEvMTgwNTE5MUFFMUVGMTFFNjlEMzY1MDFCQzRGOUFFMDIvQ0NEMDkyQUU0 RTY0MTFFRjkyQzBFQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABvd6cwDQYJKoZIhvcNAQELBQADggEBAJjXNfoLtSEjjDCR 1B65tRma+7PAFd16kLK56V8CxPeDzQA0gVkVHM3mxjNr2vEBkAzcZshOaTM8xyG6 V5PgqUhTS9mu2YhVTkOjPjhlMLLS2/JWYiWEFbm4PsZmrhMXbaNUvQhiKK9q8Lg5 RBKgS8Svh3HHqUVGwLi396tcfLlN+wEF49oup4Oi3o/wnvE+1o5ypVDan53Kae86 zaIuvkyzkMPEy1X/lL5LuSA+g37OmhjWif6HIDl1LgdsjcZffnYetTkaU1F/vNnH EAGPRMIZpWoLjP3vFDveYKFZzRYSWXXKwHOSNzYS8ji/7vNOucP3FbnYCS4+gUS/ lK0pYew= -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:08 2024 by rpki-client on console-fra.rpki-client.org