$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B7E4B4D8676411EA90B16258C4F9AE02.roa File: B7E4B4D8676411EA90B16258C4F9AE02.roa (raw, json) Hash identifier: 6i/wQ4aqyw6yUMcfj4nqQ49XMZ1jZli6ptWz0bUUQIg= Subject key identifier: 96:9B:F1:52:D6:E8:A9:9C:97:1B:F4:ED:5C:92:2A:A6:E6:EE:F5:C9 Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Certificate serial: 3415 Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B7E4B4D8676411EA90B16258C4F9AE02.roa Signing time: Tue 30 Jul 2024 16:02:40 +0000 ROA not before: Tue 30 Jul 2024 16:02:40 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 24213 IP address blocks: 119.82.224.0/20 maxlen: 24 202.182.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 00:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13333 (0x3415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7 Validity Not Before: Jul 30 16:02:40 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=66a90ea0-6884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:c2:28:dd:73:b1:a5:31:52:bc:c2:ec:86: 1d:6d:ac:d1:4f:f5:c3:ae:e7:56:f1:bf:5a:78:0b: 2a:28:44:e0:06:25:e4:57:22:fd:3a:88:d5:95:d4: 33:2f:e0:df:39:56:71:e9:65:16:c0:56:17:a1:46: b0:1e:dc:e7:77:08:e7:3e:5f:8f:a3:44:de:85:b7: 81:56:27:45:70:4a:32:f9:b7:80:4d:81:13:03:a9: 13:4c:7a:96:4e:7d:57:79:ff:7d:db:ea:10:76:08: 41:d0:ff:29:7c:fc:b5:7f:89:27:87:ed:44:71:5b: 87:30:97:7f:ce:dd:ea:63:57:49:6e:14:ac:87:fe: 14:83:bd:88:42:1b:e6:63:3a:bf:76:7c:09:d1:d6: d7:cf:7e:bb:6e:4b:42:d4:09:fa:f0:4f:ab:eb:cd: eb:bf:3d:f8:fa:59:27:cb:a4:6d:fc:f1:ad:66:7f: 04:47:c0:e9:f8:dc:ba:7c:7d:14:e4:53:01:31:10: 7c:23:2d:b6:54:a4:65:36:36:b9:55:01:29:c7:30: 00:89:6e:97:29:02:de:a8:8a:ec:3e:36:35:ce:66: 44:c0:50:ad:74:07:c1:37:0f:70:2c:a5:57:0c:97: 73:09:01:9c:7a:27:80:73:8e:92:63:5e:20:3b:61: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:F1:52:D6:E8:A9:9C:97:1B:F4:ED:5C:92:2A:A6:E6:EE:F5:C9 X509v3 Authority Key Identifier: keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/B7E4B4D8676411EA90B16258C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.82.224.0/20 202.182.56.0/21 Signature Algorithm: sha256WithRSAEncryption be:35:8d:2a:f1:9e:dc:52:1d:e8:95:63:7b:0a:2b:ea:0b:4d: de:68:c3:42:37:ef:ee:50:90:78:1e:95:09:70:18:f1:2e:3f: 95:a8:ec:b9:88:61:9b:f0:64:1a:5a:67:07:fa:6a:16:24:a1: 9a:63:3a:6f:20:a5:f8:33:07:f2:cb:9e:b3:d8:69:39:07:2a: 00:e0:6f:39:5d:14:46:bc:a9:29:3d:0a:a1:0f:f6:c9:fb:f7: 82:f9:d5:03:09:5b:8b:0b:35:97:37:c3:5b:b0:cd:a3:4c:5c: d3:6b:ef:99:11:2d:76:7f:df:49:3e:d7:c8:70:64:3a:56:ba: e8:e4:ae:7a:b0:97:12:9e:6d:89:1a:fe:b9:51:48:04:47:10: cd:ec:de:2c:1b:96:06:fa:b4:57:e4:e9:30:14:90:3b:03:a9: e3:33:4b:54:4c:62:e4:52:22:b4:5d:7f:cc:c7:62:0c:a3:c0: 1f:ee:6e:cc:57:3a:cb:17:23:af:88:44:1a:54:fd:74:6b:69: 6f:07:02:96:1e:29:56:d1:d1:77:be:a0:76:fa:2e:f9:b0:c2: f7:c7:30:ac:62:c5:17:1e:1f:d5:db:63:86:64:6e:49:48:51: 95:42:69:95:9b:3f:23:4b:ae:f7:da:5c:61:83:cb:ed:01:66: 80:9f:fc:f6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICNBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG QUIyNEQ3RTcwHhcNMjQwNzMwMTYwMjQwWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NmE5MGVhMC02ODg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqF/CKN1zsaUxUrzC7IYdbazRT/XDrudW8b9aeAsqKETgBiXkVyL9OojVldQz L+DfOVZx6WUWwFYXoUawHtzndwjnPl+Po0TehbeBVidFcEoy+beATYETA6kTTHqW Tn1Xef992+oQdghB0P8pfPy1f4knh+1EcVuHMJd/zt3qY1dJbhSsh/4Ug72IQhvm Yzq/dnwJ0dbXz367bktC1An68E+r683rvz34+lkny6Rt/PGtZn8ER8Dp+Ny6fH0U 5FMBMRB8Iy22VKRlNja5VQEpxzAAiW6XKQLeqIrsPjY1zmZEwFCtdAfBNw9wLKVX DJdzCQGceieAc46SY14gO2F8XQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJab8VLW 6Kmclxv07VySKqbm7vXJMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQjdFNEI0RDg2 NzY0MTFFQTkwQjE2MjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAR3UuADBAPKtjgwDQYJKoZIhvcNAQELBQADggEBAL41jSrx ntxSHeiVY3sKK+oLTd5ow0I37+5QkHgelQlwGPEuP5Wo7LmIYZvwZBpaZwf6ahYk oZpjOm8gpfgzB/LLnrPYaTkHKgDgbzldFEa8qSk9CqEP9sn794L51QMJW4sLNZc3 w1uwzaNMXNNr75kRLXZ/30k+18hwZDpWuujkrnqwlxKebYka/rlRSARHEM3s3iwb lgb6tFfk6TAUkDsDqeMzS1RMYuRSIrRdf8zHYgyjwB/ubsxXOssXI6+IRBpU/XRr aW8HApYeKVbR0Xe+oHb6LvmwwvfHMKxixRceH9XbY4ZkbklIUZVCaZWbPyNLrvfa XGGDy+0BZoCf/PY= -----END CERTIFICATE-----Generated at Fri Nov 22 04:05:36 2024 by rpki-client on console-ams.rpki-client.org