$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/C20CAC2C6C0511EFAC661E0FC4F9AE02.roa File: C20CAC2C6C0511EFAC661E0FC4F9AE02.roa (raw, json) Hash identifier: gDxyyKWR4DFNGeOVA/HlAfyMWxTfcYUOV29Yt36LZlM= Subject key identifier: 34:61:34:2D:38:A7:AD:71:2B:F7:CD:99:1A:10:52:B0:C0:05:1A:C6 Certificate issuer: /CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569 Certificate serial: 5C Authority key identifier: 42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/C20CAC2C6C0511EFAC661E0FC4F9AE02.roa Signing time: Fri 06 Sep 2024 04:09:06 +0000 ROA not before: Fri 06 Sep 2024 04:09:06 +0000 ROA not after: Sat 01 May 2038 00:00:00 +0000 asID: 4608 IP address blocks: 203.176.189.0/24 maxlen: 25 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287/serialNumber=4239117A25582D0067DE4D0CEDA5ABA5CC7E3569 Validity Not Before: Sep 6 04:09:06 2024 GMT Not After : May 1 00:00:00 2038 GMT Subject: CN=66da8062-6248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:c4:18:1e:0a:df:18:12:8a:5b:82:e6:e2: 76:3c:30:4f:eb:05:5a:1f:95:e9:67:28:e9:33:2f: 7e:79:d7:a7:f6:da:20:e4:80:44:75:8f:ec:6a:21: dc:5d:9a:5a:42:a7:82:d2:64:09:37:04:05:25:15: ea:f2:01:b1:88:86:3d:3b:8c:d8:c1:db:12:4c:8e: d3:b9:9f:6b:14:aa:90:79:22:91:89:a1:50:7f:7b: 1b:f0:cb:c1:15:2b:b7:61:f9:e1:09:42:98:41:6c: 8d:a1:ae:c7:e6:0e:6e:56:e6:c8:d9:92:1f:4e:b7: 8a:e0:37:9b:4b:16:f5:5d:c8:96:46:62:18:04:0e: 50:a6:11:b0:c4:18:0a:e6:a0:ef:09:76:ca:b4:c4: 4b:14:54:c8:9d:8a:b7:7f:32:e2:ce:1c:4e:3a:6b: e5:fe:33:95:15:b2:a6:27:03:8c:2e:60:8d:2a:95: 49:02:28:e2:13:ec:bd:8b:b5:65:f7:16:b6:52:4f: 42:73:3c:59:7f:5a:4e:04:76:d9:9f:5c:e1:66:c8: 79:ce:d1:25:5d:25:39:9e:fa:9d:90:d7:8c:22:bc: 0d:04:b4:7d:d9:fa:6a:32:bb:88:f9:c5:34:9d:3b: f6:81:fa:09:e7:81:17:ad:9b:4e:f4:b6:b0:95:f9: 64:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:61:34:2D:38:A7:AD:71:2B:F7:CD:99:1A:10:52:B0:C0:05:1A:C6 X509v3 Authority Key Identifier: keyid:42:39:11:7A:25:58:2D:00:67:DE:4D:0C:ED:A5:AB:A5:CC:7E:35:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/QjkReiVYLQBn3k0M7aWrpcx-NWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QjkReiVYLQBn3k0M7aWrpcx-NWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/68D88184248511EF94236572C4F9AE02/C20CAC2C6C0511EFAC661E0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.176.189.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a6:9e:8a:e5:31:71:c3:af:24:9d:5d:e2:3a:0a:2e:84:b8: d1:45:e3:b2:b9:05:f9:ce:ee:4c:ac:a2:fd:33:47:5d:df:f1: 00:03:0a:88:d3:89:b1:02:cf:75:b3:05:f5:e4:11:70:e9:77: 5f:f9:8d:0e:74:29:95:6c:40:eb:09:9e:6f:00:80:b8:81:87: b5:e4:e2:d5:2f:bc:63:1e:f2:92:4d:23:42:8e:d8:1a:a5:9f: 44:f7:70:94:84:04:ef:e8:40:84:3b:f6:33:eb:f3:a1:d5:b5: b5:e1:19:fe:a4:52:10:45:4d:2f:8e:64:68:e7:92:fb:cf:e6: 1e:7b:8c:8f:2e:e8:0b:da:a1:d9:f0:19:8d:32:0d:6e:c5:67: 80:bf:dd:ee:4b:28:28:42:9f:38:b5:31:6b:cd:67:fa:00:e0: 6c:f4:9e:02:3d:ef:ab:d6:66:2f:fe:98:81:6c:1c:a6:c2:cd: 0a:53:26:d7:5c:f5:37:ab:7b:81:1c:d5:50:05:10:1c:8f:6c: 87:e6:ae:1c:a2:31:0d:02:15:41:de:25:a4:48:9a:47:29:c8: 39:70:a8:7f:42:91:d2:e3:f3:fe:46:9b:4d:30:4d:7a:6e:b4: cc:39:7f:5a:08:02:48:2f:21:ad:18:61:c4:06:93:f0:2c:ae: 14:10:d6:16 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoNDIzOTExN0EyNTU4MkQwMDY3REU0RDBDRURBNUFCQTVD QzdFMzU2OTAeFw0yNDA5MDYwNDA5MDZaFw0zODA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZGE4MDYyLTYyNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpT8QYHgrfGBKKW4Lm4nY8ME/rBVoflelnKOkzL35516f22iDkgER1j+xqIdxd mlpCp4LSZAk3BAUlFeryAbGIhj07jNjB2xJMjtO5n2sUqpB5IpGJoVB/exvwy8EV K7dh+eEJQphBbI2hrsfmDm5W5sjZkh9Ot4rgN5tLFvVdyJZGYhgEDlCmEbDEGArm oO8Jdsq0xEsUVMidird/MuLOHE46a+X+M5UVsqYnA4wuYI0qlUkCKOIT7L2LtWX3 FrZST0JzPFl/Wk4EdtmfXOFmyHnO0SVdJTme+p2Q14wivA0EtH3Z+moyu4j5xTSd O/aB+gnngRetm070trCV+WTfAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNGE0LTin rXEr982ZGhBSsMAFGsYwHwYDVR0jBBgwFoAUQjkReiVYLQBn3k0M7aWrpcx+NWkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzY4RDg4MTg0MjQ4 NTExRUY5NDIzNjU3MkM0RjlBRTAyL1Fqa1JlaVZZTFFCbjNrME03YVdycGN4LU5X ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUWprUmVpVllMUUJuM2swTTdhV3JwY3gtTldrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI4Ny82OEQ4ODE4NDI0ODUxMUVGOTQyMzY1NzJDNEY5QUUwMi9DMjBDQUMyQzZD MDUxMUVGQUM2NjFFMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMuwvTANBgkqhkiG9w0BAQsFAAOCAQEANKaeiuUxccOvJJ1d 4joKLoS40UXjsrkF+c7uTKyi/TNHXd/xAAMKiNOJsQLPdbMF9eQRcOl3X/mNDnQp lWxA6wmebwCAuIGHteTi1S+8Yx7ykk0jQo7YGqWfRPdwlIQE7+hAhDv2M+vzodW1 teEZ/qRSEEVNL45kaOeS+8/mHnuMjy7oC9qh2fAZjTINbsVngL/d7ksoKEKfOLUx a81n+gDgbPSeAj3vq9ZmL/6YgWwcpsLNClMm11z1N6t7gRzVUAUQHI9sh+auHKIx DQIVQd4lpEiaRynIOXCof0KR0uPz/kabTTBNem60zDl/WggCSC8hrRhhxAaT8Cyu FBDWFg== -----END CERTIFICATE-----Generated at Tue Sep 17 08:11:56 2024 by rpki-client on console-ams.rpki-client.org