$ rpki-client -vvf rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa File: 80D77ED8D8A811EB85D5E456C4F9AE02.roa (raw, json) Hash identifier: 5vdLLR7SsjyoWbJEWGx2u6gT4judyFxezvmtzE9hlfI= Subject key identifier: DC:A5:2D:71:1D:9C:C3:59:3A:5F:EF:83:D0:B2:B2:E4:A0:3F:45:4C Certificate issuer: /CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Certificate serial: 0504 Authority key identifier: 34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa Signing time: Wed 21 Aug 2024 00:14:15 +0000 ROA not before: Wed 21 Aug 2024 00:14:15 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 24110 IP address blocks: 202.41.14.0/23 maxlen: 24 202.124.206.0/23 maxlen: 24 203.55.35.0/24 maxlen: 24 203.55.36.0/24 maxlen: 24 203.57.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Dec 2024 22:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186684/serialNumber=34A1232EA718469EADB7ADBC4CD9E00DF6A85206 Validity Not Before: Aug 21 00:14:15 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66c53157-fee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:39:ee:1d:bc:b1:ef:27:33:84:a3:2f:eb: 7a:a0:7d:21:04:d4:e2:85:dd:8f:1f:c1:51:00:b5: ee:a1:cd:90:fc:ea:14:20:cc:b9:93:99:a2:1d:c7: 0e:e4:cf:c7:d6:72:21:c9:1b:96:04:a8:4a:7d:7d: a9:72:8b:d6:b2:96:1f:73:49:ee:a3:d5:8c:3b:e5: 64:28:97:ec:a0:36:0e:02:6d:9b:4a:b9:96:36:5f: 72:42:5a:11:3b:73:be:8b:98:b5:58:1f:02:7d:f7: a6:f0:11:45:43:04:5a:6b:73:80:1e:53:cb:09:fc: 36:07:bb:60:23:9b:6b:a4:2a:40:bc:2a:fd:c7:02: 21:df:be:9c:9a:e0:93:cb:81:95:da:db:95:4b:85: e2:0e:d2:a4:54:9e:15:a9:9e:d9:83:27:e9:53:6e: d8:95:87:33:87:8e:8e:0b:26:57:db:9d:17:7f:64: e8:d1:4c:c7:cd:c1:d2:d4:80:7e:1d:26:8d:44:24: c6:ad:83:f8:de:6c:fd:70:c9:a4:61:36:d0:45:51: 1c:b6:2c:d6:2f:79:ae:21:51:1d:94:b6:5b:b1:38: 0d:b6:23:7a:6c:82:5b:fe:29:41:bf:9e:0b:ed:1e: 61:f3:c4:fd:fc:5c:c9:dc:95:b4:56:83:f3:54:f4: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A5:2D:71:1D:9C:C3:59:3A:5F:EF:83:D0:B2:B2:E4:A0:3F:45:4C X509v3 Authority Key Identifier: keyid:34:A1:23:2E:A7:18:46:9E:AD:B7:AD:BC:4C:D9:E0:0D:F6:A8:52:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/NKEjLqcYRp6tt628TNngDfaoUgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NKEjLqcYRp6tt628TNngDfaoUgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186684/36B86ADCD89F11EBAB98C55AC4F9AE02/80D77ED8D8A811EB85D5E456C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.14.0/23 202.124.206.0/23 203.55.35.0-203.55.36.255 203.57.207.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:ce:eb:c6:d9:af:e2:f3:f5:a4:e5:37:a2:68:fd:52:30:51: 3b:0f:4c:89:af:df:ee:c6:c7:9e:24:16:89:22:be:39:3b:aa: 7c:28:d8:00:cb:97:e1:19:54:6f:02:5d:80:6b:24:95:df:01: 9f:1a:46:b4:89:ed:49:67:fe:ae:4a:d2:b1:c3:59:4f:46:32: f1:09:68:66:f5:4b:21:c5:2c:f3:fb:f4:8f:35:9e:4f:73:a3: ac:e7:79:52:6c:bb:07:47:c3:e7:cb:6d:07:e1:73:bb:69:55: 5b:09:10:26:92:da:47:53:c8:b9:fa:8d:2e:2f:02:af:e5:03: 70:80:37:63:c9:8a:7b:db:a6:50:29:f5:8b:e8:8c:64:35:65: 6c:8b:20:85:b0:63:47:75:41:ed:93:49:12:9b:e7:6e:30:a9: ef:cf:d4:1a:b9:03:e5:e1:e7:54:12:bc:ad:11:00:fb:bf:d4: d8:4e:79:e7:fa:b5:a5:b3:54:16:b7:cb:bc:60:e9:4f:c9:4d: 7f:36:be:1e:07:3b:c3:ae:cd:59:bc:32:46:10:78:3f:be:7c: bf:8e:27:85:5d:87:cd:fe:d5:db:c2:70:00:ed:9d:ac:79:db: e6:ef:5b:cd:06:4a:a0:1b:23:fe:b9:3d:4a:c1:d3:77:17:a8: df:80:97:ac -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2ODQxMTAvBgNVBAUTKDM0QTEyMzJFQTcxODQ2OUVBREI3QURCQzRDRDlFMDBE RjZBODUyMDYwHhcNMjQwODIxMDAxNDE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmM1MzE1Ny1mZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fE57h28se8nM4SjL+t6oH0hBNTihd2PH8FRALXuoc2Q/OoUIMy5k5miHccO 5M/H1nIhyRuWBKhKfX2pcovWspYfc0nuo9WMO+VkKJfsoDYOAm2bSrmWNl9yQloR O3O+i5i1WB8Cffem8BFFQwRaa3OAHlPLCfw2B7tgI5trpCpAvCr9xwIh376cmuCT y4GV2tuVS4XiDtKkVJ4VqZ7ZgyfpU27YlYczh46OCyZX250Xf2To0UzHzcHS1IB+ HSaNRCTGrYP43mz9cMmkYTbQRVEctizWL3muIVEdlLZbsTgNtiN6bIJb/ilBv54L 7R5h88T9/FzJ3JW0VoPzVPTSpQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFNylLXEd nMNZOl/vg9CysuSgP0VMMB8GA1UdIwQYMBaAFDShIy6nGEaerbetvEzZ4A32qFIG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjY4NC8zNkI4NkFEQ0Q4 OUYxMUVCQUI5OEM1NUFDNEY5QUUwMi9OS0VqTHFjWVJwNnR0NjI4VE5uZ0RmYW9V Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05LRWpMcWNZUnA2dHQ2MjhUTm5nRGZhb1VnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODY2ODQvMzZCODZBRENEODlGMTFFQkFCOThDNTVBQzRGOUFFMDIvODBENzdFRDhE OEE4MTFFQjg1RDVFNDU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAHKKQ4DBAHKfM4wDAMEAMs3IwMEAMs3JAMEAMs5zzANBgkq hkiG9w0BAQsFAAOCAQEAKs7rxtmv4vP1pOU3omj9UjBROw9Mia/f7sbHniQWiSK+ OTuqfCjYAMuX4RlUbwJdgGskld8BnxpGtIntSWf+rkrSscNZT0Yy8QloZvVLIcUs 8/v0jzWeT3OjrOd5Umy7B0fD58ttB+Fzu2lVWwkQJpLaR1PIufqNLi8Cr+UDcIA3 Y8mKe9umUCn1i+iMZDVlbIsghbBjR3VB7ZNJEpvnbjCp78/UGrkD5eHnVBK8rREA +7/U2E555/q1pbNUFrfLvGDpT8lNfza+Hgc7w67NWbwyRhB4P758v44nhV2Hzf7V 28JwAO2drHnb5u9bzQZKoBsj/rk9SsHTdxeo34CXrA== -----END CERTIFICATE-----Generated at Wed Nov 27 00:10:04 2024 by rpki-client on console-ams.rpki-client.org