$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/7817D2327A5C11EDA0156D76C4F9AE02.roa File: 7817D2327A5C11EDA0156D76C4F9AE02.roa (raw, json) Hash identifier: NRQXP8/Yyxz2onFKhHMZs9OvKvOabIesSucdhpClwHM= Subject key identifier: D4:C8:4A:CE:41:8D:1E:C2:C3:9F:98:2F:53:51:C4:8E:12:C6:50:DE Certificate issuer: /CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Certificate serial: EA Authority key identifier: 0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/7817D2327A5C11EDA0156D76C4F9AE02.roa Signing time: Wed 21 Feb 2024 04:56:35 +0000 ROA not before: Wed 21 Feb 2024 04:56:35 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9555 IP address blocks: 202.125.8.0/24 maxlen: 24 202.125.9.0/24 maxlen: 24 203.2.208.0/24 maxlen: 24 203.23.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA/serialNumber=0A161F177AF2AC8A75D41AFE47AD40D2AB9187CA Validity Not Before: Feb 21 04:56:35 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65d58282-5469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f4:ff:ec:83:44:4b:58:f5:3b:ea:0f:c3:e9: 18:7d:7c:40:e6:d9:29:2e:fe:a3:ec:78:15:09:a5: f7:a3:2c:14:be:3d:45:0c:5e:c2:7c:8d:82:fe:2e: a9:e6:d4:58:b7:bd:b9:e4:a7:4e:49:39:62:46:9d: b2:e9:0f:04:35:2a:d5:94:10:de:cf:91:dc:80:d0: 02:2c:0c:05:07:9e:4f:ac:99:f6:2e:e5:d3:f0:62: be:52:18:28:85:70:58:be:08:9f:7e:a7:39:43:5b: 81:b8:31:07:cd:87:58:e1:81:2e:32:ef:55:a7:9c: e8:36:53:88:bb:a9:e9:56:77:36:5b:9c:22:cc:e4: 3c:d7:b8:e3:97:10:b6:50:f1:e0:4d:42:50:b0:82: d4:36:8b:8d:11:ba:5f:f3:a5:8f:88:d4:97:6f:8d: 29:9c:4c:72:3a:06:71:6d:ce:cb:60:89:aa:a3:1c: 5a:bf:24:38:6a:dd:4f:8b:be:32:88:5f:d4:3c:1a: 78:68:f3:d4:8b:79:6a:05:a1:ae:65:e4:0f:01:04: b5:0b:fe:d3:98:24:3e:9f:b0:c8:c3:c8:7a:7a:61: a0:b5:da:f2:fd:fb:b6:db:d1:8d:67:80:0f:61:22: fe:58:d6:29:3e:d3:9d:6a:14:91:a7:97:d2:04:80: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C8:4A:CE:41:8D:1E:C2:C3:9F:98:2F:53:51:C4:8E:12:C6:50:DE X509v3 Authority Key Identifier: keyid:0A:16:1F:17:7A:F2:AC:8A:75:D4:1A:FE:47:AD:40:D2:AB:91:87:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/ChYfF3ryrIp11Br-R61A0quRh8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChYfF3ryrIp11Br-R61A0quRh8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/365BCCEC7A3C11ED861B2933C4F9AE02/7817D2327A5C11EDA0156D76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.125.8.0/23 203.2.208.0/24 203.23.18.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:16:69:29:fa:d8:63:09:32:d4:3c:cf:3b:b8:bc:fa:b8:30: 82:d4:b3:b4:6c:d8:1b:05:35:cb:1e:3f:a9:b5:c4:e0:e0:dc: 2f:9e:e3:33:66:08:4b:a9:8e:1e:64:d0:85:8f:a9:be:b5:63: cc:d8:1f:21:a4:95:dc:46:44:77:6a:ec:07:e6:1a:7a:f6:82: ab:be:87:a2:ce:6b:4c:04:be:ed:50:1b:cf:82:b0:6e:ff:b0: 16:23:0f:be:c2:ff:3d:c2:7c:81:22:65:42:a8:7c:dd:87:b4: 8d:a3:ef:f6:5e:a4:4b:d6:df:c0:16:0d:88:8d:47:43:99:b5: ce:58:07:c6:45:e7:87:89:e5:2a:2e:46:7d:a8:10:1e:06:73: a8:68:84:55:8f:58:69:43:61:69:61:80:a5:b3:a1:06:d1:ab: eb:c8:ef:42:88:b9:0a:bd:a0:0b:ad:b4:d4:f8:77:bd:be:68: 23:0b:e8:d8:b8:5d:d4:1e:99:74:53:2e:be:d5:aa:a3:04:85: 13:da:11:8b:87:39:24:5e:67:f0:b9:30:47:45:b8:45:23:19: 72:1b:68:e6:78:b7:c3:7f:f2:1f:cf:ff:b4:99:43:64:30:78: c6:99:75:f7:a6:fc:1c:9f:94:d0:70:45:ee:08:7b:e1:0b:80: d0:23:dc:b2 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDBBMTYxRjE3N0FGMkFDOEE3NUQ0MUFGRTQ3QUQ0MEQy QUI5MTg3Q0EwHhcNMjQwMjIxMDQ1NjM1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ1ODI4Mi01NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPT/7INES1j1O+oPw+kYfXxA5tkpLv6j7HgVCaX3oywUvj1FDF7CfI2C/i6p 5tRYt7255KdOSTliRp2y6Q8ENSrVlBDez5HcgNACLAwFB55PrJn2LuXT8GK+Uhgo hXBYvgiffqc5Q1uBuDEHzYdY4YEuMu9Vp5zoNlOIu6npVnc2W5wizOQ817jjlxC2 UPHgTUJQsILUNouNEbpf86WPiNSXb40pnExyOgZxbc7LYImqoxxavyQ4at1Pi74y iF/UPBp4aPPUi3lqBaGuZeQPAQS1C/7TmCQ+n7DIw8h6emGgtdry/fu229GNZ4AP YSL+WNYpPtOdahSRp5fSBICHdwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFNTISs5B jR7Cw5+YL1NRxI4SxlDeMB8GA1UdIwQYMBaAFAoWHxd68qyKddQa/ketQNKrkYfK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8zNjVCQ0NFQzdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9DaFlmRjNyeXJJcDExQnItUjYxQTBxdVJo OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoWWZGM3J5cklwMTFCci1SNjFBMHF1Umg4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQwQUEvMzY1QkNDRUM3QTNDMTFFRDg2MUIyOTMzQzRGOUFFMDIvNzgxN0QyMzI3 QTVDMTFFREEwMTU2RDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAHKfQgDBADLAtADBADLFxIwDQYJKoZIhvcNAQELBQADggEB AH4WaSn62GMJMtQ8zzu4vPq4MILUs7Rs2BsFNcseP6m1xODg3C+e4zNmCEupjh5k 0IWPqb61Y8zYHyGkldxGRHdq7AfmGnr2gqu+h6LOa0wEvu1QG8+CsG7/sBYjD77C /z3CfIEiZUKofN2HtI2j7/ZepEvW38AWDYiNR0OZtc5YB8ZF54eJ5SouRn2oEB4G c6hohFWPWGlDYWlhgKWzoQbRq+vI70KIuQq9oAuttNT4d72+aCML6Ni4XdQemXRT Lr7VqqMEhRPaEYuHOSReZ/C5MEdFuEUjGXIbaOZ4t8N/8h/P/7SZQ2QweMaZdfem /ByflNBwRe4Ie+ELgNAj3LI= -----END CERTIFICATE-----Generated at Sun May 19 07:40:41 2024 by rpki-client on console-fra.rpki-client.org