$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/B24920940C6911EC90B57338C4F9AE02.roa File: B24920940C6911EC90B57338C4F9AE02.roa (raw, json) Hash identifier: Nuk6/U0PEEUTh4/Znumg3fhwPF24LqsvJENpm5HBvzI= Subject key identifier: 1C:6E:0C:60:D7:FF:58:89:78:D7:25:BF:C4:1F:30:27:05:12:33:70 Certificate issuer: /CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Certificate serial: 09CF Authority key identifier: 7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/B24920940C6911EC90B57338C4F9AE02.roa Signing time: Fri 26 Apr 2024 21:09:57 +0000 ROA not before: Fri 26 Apr 2024 21:09:57 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 59253 IP address blocks: 203.24.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8/serialNumber=7ACE6DA35FB6A4A9F6F9970C18BCAF5B2748119F Validity Not Before: Apr 26 21:09:57 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662c1825-cb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:46:6c:b2:a4:ae:62:ca:a2:fe:5e:38:1b: 24:bb:88:a1:4e:1b:54:50:16:d6:b1:55:d7:45:d0: b3:68:ac:e5:c8:f5:66:5a:1d:ca:3b:dd:03:60:b7: 70:7d:58:1a:30:49:44:39:a2:8d:b9:81:96:48:40: f2:d6:15:ad:94:6a:8d:47:b2:b3:cb:22:99:bc:52: 2b:83:82:30:cd:33:57:50:be:e7:a5:52:89:7b:0a: 4d:bb:eb:f1:33:2a:98:6e:c4:00:4d:6c:d2:30:49: 99:aa:d1:d7:34:2d:92:69:8d:54:f9:fa:d7:21:e4: 2b:79:15:4c:26:20:7c:2b:94:66:a0:c7:41:30:23: 61:8c:f7:ed:33:51:32:d8:a6:3e:ef:6b:00:16:95: 8a:02:ae:36:5b:37:69:c3:a7:18:d2:7f:16:99:6f: 82:a8:41:a2:4c:08:ba:df:10:1c:1c:d3:f9:83:0e: 02:ea:72:a9:3f:f3:c1:1e:44:f9:2b:69:2e:08:0f: cc:4d:a3:fa:9b:73:a7:dc:3c:c8:26:b0:a4:76:a4: b7:55:c5:1c:fb:ee:7e:1f:2f:61:97:29:b2:e1:15: 91:45:a1:a7:82:92:34:d4:af:2e:4f:6d:4d:99:db: 8d:5a:ca:77:a4:0d:91:6f:8a:c6:53:29:d8:0f:42: 0f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6E:0C:60:D7:FF:58:89:78:D7:25:BF:C4:1F:30:27:05:12:33:70 X509v3 Authority Key Identifier: keyid:7A:CE:6D:A3:5F:B6:A4:A9:F6:F9:97:0C:18:BC:AF:5B:27:48:11:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/es5to1-2pKn2-ZcMGLyvWydIEZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/es5to1-2pKn2-ZcMGLyvWydIEZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/A059AF8A640D11EAB6395571C4F9AE02/B24920940C6911EC90B57338C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.24.92.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:c3:f4:81:2d:09:70:fd:ca:d9:1b:5f:04:be:98:dc:50:07: a4:d2:a0:b1:d9:fe:4a:f8:ea:6d:90:d9:79:71:62:0a:05:dc: be:7d:4e:0a:fe:a6:53:47:52:41:88:99:92:23:36:d7:73:87: a0:a4:e5:83:9e:53:01:42:63:81:24:a4:ca:b4:f5:28:65:bd: 97:84:60:df:e9:cd:b9:eb:05:b9:05:54:ad:4e:06:c9:c4:f8: 63:ae:00:59:d7:51:3e:a8:6d:5f:b9:24:44:c3:8d:ea:eb:30: 32:52:3d:a8:fa:6f:e9:af:80:60:43:34:60:ab:0d:54:a7:7f: 0c:87:52:45:c1:54:eb:91:ce:ad:06:d8:18:fa:dd:b0:6b:b0: 32:72:a5:1c:de:2a:ad:11:58:26:d0:45:39:a9:fa:60:ac:3a: dd:4e:67:31:99:0c:0b:90:7c:c5:a5:d9:06:d1:c2:a5:4d:a6: 35:4e:83:30:92:5b:5c:ce:0f:bf:21:e1:37:11:5e:33:00:d3: 22:18:7c:e7:f9:17:da:1c:b7:8d:fe:79:64:51:a0:d1:27:38: 65:73:43:d5:8b:2c:0a:4a:6e:bd:f1:90:c3:5e:76:cc:dd:6d: 6f:ae:6b:42:46:77:31:2b:d1:5f:e5:05:92:83:d4:40:53:f3: fa:8b:9d:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDdBQ0U2REEzNUZCNkE0QTlGNkY5OTcwQzE4QkNBRjVC Mjc0ODExOUYwHhcNMjQwNDI2MjEwOTU3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJjMTgyNS1jYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs31GbLKkrmLKov5eOBsku4ihThtUUBbWsVXXRdCzaKzlyPVmWh3KO90DYLdw fVgaMElEOaKNuYGWSEDy1hWtlGqNR7KzyyKZvFIrg4IwzTNXUL7npVKJewpNu+vx MyqYbsQATWzSMEmZqtHXNC2SaY1U+frXIeQreRVMJiB8K5RmoMdBMCNhjPftM1Ey 2KY+72sAFpWKAq42Wzdpw6cY0n8WmW+CqEGiTAi63xAcHNP5gw4C6nKpP/PBHkT5 K2kuCA/MTaP6m3On3DzIJrCkdqS3VcUc++5+Hy9hlymy4RWRRaGngpI01K8uT21N mduNWsp3pA2Rb4rGUynYD0IP/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFBxuDGDX /1iJeNclv8QfMCcFEjNwMB8GA1UdIwQYMBaAFHrObaNftqSp9vmXDBi8r1snSBGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC9BMDU5QUY4QTY0 MEQxMUVBQjYzOTU1NzFDNEY5QUUwMi9lczV0bzEtMnBLbjItWmNNR0x5dld5ZElF WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VzNXRvMS0ycEtuMi1aY01HTHl2V3lkSUVaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvQTA1OUFGOEE2NDBEMTFFQUI2Mzk1NTcxQzRGOUFFMDIvQjI0OTIwOTQw QzY5MTFFQzkwQjU3MzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLGFwwDQYJKoZIhvcNAQELBQADggEBAA/D9IEtCXD9ytkb XwS+mNxQB6TSoLHZ/kr46m2Q2XlxYgoF3L59Tgr+plNHUkGImZIjNtdzh6Ck5YOe UwFCY4EkpMq09ShlvZeEYN/pzbnrBbkFVK1OBsnE+GOuAFnXUT6obV+5JETDjerr MDJSPaj6b+mvgGBDNGCrDVSnfwyHUkXBVOuRzq0G2Bj63bBrsDJypRzeKq0RWCbQ RTmp+mCsOt1OZzGZDAuQfMWl2QbRwqVNpjVOgzCSW1zOD78h4TcRXjMA0yIYfOf5 F9oct43+eWRRoNEnOGVzQ9WLLApKbr3xkMNedszdbW+ua0JGdzEr0V/lBZKD1EBT 8/qLnaE= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:54 2024 by rpki-client on console-ams.rpki-client.org