$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa File: 1501E24625F511EF8F342F3EC4F9AE02.roa (raw, json) Hash identifier: 8iMIdtLXj06lz9OEogd1EHlmS5FT+UFNcxatrFBmqJs= Subject key identifier: 8B:C2:D4:8B:18:F7:FB:77:90:98:08:04:09:FF:F3:5F:3F:BE:E5:4C Certificate issuer: /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Certificate serial: 03 Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa Signing time: Sun 09 Jun 2024 00:13:22 +0000 ROA not before: Sun 09 Jun 2024 00:13:22 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 136433 IP address blocks: 202.61.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57 Validity Not Before: Jun 9 00:13:22 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6664f3a2-1001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:b7:38:2b:5d:8c:af:ae:cb:7e:5e:51:f0: 11:19:bb:74:06:4f:53:f9:0e:21:ea:62:ae:ae:0a: c9:16:99:34:70:d4:09:07:7e:3f:82:28:fd:98:8b: c3:32:fc:ce:72:b5:08:18:43:36:98:83:39:d9:57: 8c:6c:9c:58:32:b7:28:e2:91:ee:68:9a:25:43:b5: 63:2f:0a:73:12:87:8c:35:37:88:a2:06:19:f4:c2: 43:a2:71:4e:7d:5a:2e:ef:7a:50:ff:42:4a:a4:cd: 06:3b:16:c4:08:bd:b3:66:ab:b4:c6:c2:0f:a7:e9: f6:b6:4d:dd:d0:1d:1c:8e:6a:89:cc:19:5e:ce:b3: 9a:b3:22:f4:67:f8:78:50:08:1f:81:9b:aa:92:69: da:84:a0:cf:e1:44:be:bf:df:95:cc:7f:26:b6:94: af:bc:01:ad:f0:6b:64:d6:fd:38:ad:75:76:a2:98: 12:78:39:10:86:8f:f8:86:b1:73:42:06:53:7a:de: 66:ec:4b:c5:f4:02:bd:dd:f9:bd:83:f8:d0:a4:d6: 7f:d2:e3:57:e7:7a:0d:cf:36:ac:91:56:7b:65:bb: bc:7b:f6:23:65:b6:2c:54:67:60:40:37:7d:18:ef: 8e:e0:8e:20:2a:c0:6b:62:3d:a5:42:1e:11:cc:e8: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:D4:8B:18:F7:FB:77:90:98:08:04:09:FF:F3:5F:3F:BE:E5:4C X509v3 Authority Key Identifier: keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.61.110.0/24 Signature Algorithm: sha256WithRSAEncryption 12:87:27:6d:56:1e:3f:7a:41:d9:8a:14:92:82:a2:1e:a7:5e: 82:f1:9b:a1:33:5d:b1:8b:6a:b2:51:78:1f:e4:cf:d6:d0:bc: 33:6b:ea:a6:05:ae:7d:e6:3f:7c:90:0c:cf:12:b1:c0:d1:6c: fa:a9:d6:0b:e6:5e:4e:63:a3:95:df:ca:e4:a5:15:f5:18:44: af:fe:d3:3c:81:4c:13:f2:64:ae:10:53:2f:a4:ad:83:2f:01: b2:14:97:fd:cf:e5:9f:d7:7e:ca:e6:c5:96:0b:0a:de:2a:db: bc:f3:1a:a0:cb:b2:8f:03:83:40:5b:1c:ea:97:8c:7e:20:11: 00:66:01:95:83:26:67:7b:6a:62:9f:c2:c4:62:78:4b:77:70: ae:0e:ee:c3:00:52:0e:0c:76:37:85:73:8f:66:4d:5c:b5:fe: eb:b8:80:9b:b6:4a:0c:03:95:9c:fd:e7:8b:fd:bc:db:d4:c6: fa:65:70:e4:fe:18:12:60:11:74:cc:86:e9:81:83:ac:02:a3: 0a:95:66:7a:14:09:ca:75:fc:f6:1b:d2:41:a9:4a:5c:1b:d4: ea:7d:6a:db:cf:eb:75:d2:37:b3:3a:df:68:42:d3:52:9a:44: 4a:22:81:2a:42:2f:bd:63:82:67:da:cb:2e:d4:4d:c9:7f:48: 28:4b:1c:35 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OEY3NzExMC8GA1UEBRMoMTYzMTVBNjhBNzQ1MDgwQkREQjZDOEYwMTU2RDA0MzA2 ODkzMUI1NzAeFw0yNDA2MDkwMDEzMjJaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NjRmM2EyLTEwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUKrc4K12Mr67Lfl5R8BEZu3QGT1P5DiHqYq6uCskWmTRw1AkHfj+CKP2Yi8My /M5ytQgYQzaYgznZV4xsnFgytyjike5omiVDtWMvCnMSh4w1N4iiBhn0wkOicU59 Wi7velD/QkqkzQY7FsQIvbNmq7TGwg+n6fa2Td3QHRyOaonMGV7Os5qzIvRn+HhQ CB+Bm6qSadqEoM/hRL6/35XMfya2lK+8Aa3wa2TW/TitdXaimBJ4ORCGj/iGsXNC BlN63mbsS8X0Ar3d+b2D+NCk1n/S41fneg3PNqyRVntlu7x79iNltixUZ2BAN30Y 747gjiAqwGtiPaVCHhHM6LNnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUi8LUixj3 +3eQmAgECf/zXz++5UwwHwYDVR0jBBgwFoAUFjFaaKdFCAvdtsjwFW0EMGiTG1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg4Rjc3L0NEMjg3MzgyMjVD MTExRUY5MDA5N0Y1QUM0RjlBRTAyL0ZqRmFhS2RGQ0F2ZHRzandGVzBFTUdpVEcx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRmpGYWFLZEZDQXZkdHNqd0ZXMEVNR2lURzFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEY3Ny9DRDI4NzM4MjI1QzExMUVGOTAwOTdGNUFDNEY5QUUwMi8xNTAxRTI0NjI1 RjUxMUVGOEYzNDJGM0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMo9bjANBgkqhkiG9w0BAQsFAAOCAQEAEocnbVYeP3pB2YoU koKiHqdegvGboTNdsYtqslF4H+TP1tC8M2vqpgWufeY/fJAMzxKxwNFs+qnWC+Ze TmOjld/K5KUV9RhEr/7TPIFME/JkrhBTL6Stgy8BshSX/c/ln9d+yubFlgsK3irb vPMaoMuyjwODQFsc6peMfiARAGYBlYMmZ3tqYp/CxGJ4S3dwrg7uwwBSDgx2N4Vz j2ZNXLX+67iAm7ZKDAOVnP3ni/2829TG+mVw5P4YEmARdMyG6YGDrAKjCpVmehQJ ynX89hvSQalKXBvU6n1q28/rddI3szrfaELTUppESiKBKkIvvWOCZ9rLLtRNyX9I KEscNQ== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:56 2024 by rpki-client on console-ams.rpki-client.org