$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9BC7782069A911EFBF66800FC4F9AE02.roa File: 9BC7782069A911EFBF66800FC4F9AE02.roa (raw, json) Hash identifier: LhnWY5C8gHukhwVXvOAc7cX+Zpf2HzOLwDa4BIPsCZM= Subject key identifier: 73:FD:36:CE:16:B1:D4:AD:47:EB:DD:13:93:80:30:E8:EC:B3:A8:0B Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB Certificate serial: 02 Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9BC7782069A911EFBF66800FC4F9AE02.roa Signing time: Tue 03 Sep 2024 04:04:26 +0000 ROA not before: Tue 03 Sep 2024 04:04:26 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133919 IP address blocks: 203.158.144.0/24 maxlen: 24 203.158.145.0/24 maxlen: 24 203.158.146.0/24 maxlen: 24 203.158.147.0/24 maxlen: 24 203.158.148.0/24 maxlen: 24 203.158.149.0/24 maxlen: 24 203.158.152.0/24 maxlen: 24 203.158.232.0/24 maxlen: 24 203.158.233.0/24 maxlen: 24 203.158.234.0/24 maxlen: 24 203.158.235.0/24 maxlen: 24 203.158.236.0/24 maxlen: 24 203.158.237.0/24 maxlen: 24 203.158.238.0/24 maxlen: 24 203.158.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB Validity Not Before: Sep 3 04:04:26 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66d68ac9-d5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:2c:62:5c:2d:36:54:17:50:ff:24:fc:0d: 15:b0:ad:91:1b:25:72:0e:fb:4e:e3:ab:97:e8:91: 49:39:91:8b:32:7a:85:36:93:b8:8b:32:7a:93:0e: a3:0e:1e:82:64:9f:2b:22:d6:66:5d:c4:d1:5d:bd: 8a:cb:75:94:17:7e:0b:32:8d:71:2b:3d:51:76:e9: a2:27:17:26:0d:20:9d:9f:a0:ed:58:87:2d:b0:f2: 4f:88:20:0c:46:cf:12:7b:fc:66:01:d5:f0:15:2c: 6d:d4:7b:d4:42:a2:e2:e0:21:45:9f:9d:df:32:9c: 16:36:3b:ce:2a:0e:f0:62:c5:92:bd:a7:32:b7:7c: ec:f3:e8:97:00:08:97:80:fe:bf:87:21:3f:81:29: dd:f3:4b:f1:ba:c1:7c:7d:07:f7:7e:8b:d5:48:35: c0:eb:0f:fc:c2:e4:ac:a3:a4:7e:4d:7e:8d:ec:71: 29:61:0f:78:26:08:d2:fc:7f:98:32:7f:e5:35:a2: 9b:02:3d:a2:9e:11:4d:d1:ce:64:41:b2:25:54:22: 8c:03:8d:85:e3:47:f2:7d:b3:d3:c5:52:e7:90:b5: 97:8f:b6:cd:22:68:aa:b1:36:87:1e:94:16:4f:d9: bf:4e:44:fc:04:17:b3:4c:1e:71:98:33:61:cb:08: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FD:36:CE:16:B1:D4:AD:47:EB:DD:13:93:80:30:E8:EC:B3:A8:0B X509v3 Authority Key Identifier: keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9BC7782069A911EFBF66800FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.158.144.0-203.158.149.255 203.158.152.0/24 203.158.232.0/21 Signature Algorithm: sha256WithRSAEncryption 92:58:9f:28:e2:39:48:13:e8:37:5a:67:4b:1d:fc:f8:34:91: 8b:1f:d3:8d:71:8d:f1:50:4d:e2:7f:3f:00:32:87:a7:75:9f: 22:17:ef:c3:ec:85:18:4e:e4:51:bc:4b:07:1b:c7:77:d7:97: db:15:c9:ae:2a:fb:a5:e4:ac:58:6c:d9:79:36:3c:17:54:fa: e2:75:63:db:a9:4a:3e:c9:7d:2b:43:4d:75:a2:6b:92:4c:44: 07:68:02:a6:5e:18:61:d2:e6:27:ce:a4:b8:f9:14:7c:71:2e: 2f:2a:71:e0:f0:c4:e7:88:05:df:6f:4e:8b:20:cb:1e:bc:da: e4:50:d8:df:c6:b5:40:00:26:5b:02:4d:1f:cf:cc:99:60:fa: 33:bd:fb:a3:29:45:dd:b9:36:52:bb:26:59:d3:55:88:63:09: 65:76:ff:19:b4:9e:7d:a3:a3:24:82:53:57:6e:e2:68:62:3b: a3:d8:a4:d9:21:c3:5a:9f:de:ff:2f:1a:a3:87:f3:1c:68:7c: ad:93:1d:48:55:ea:c9:fe:71:d1:84:39:c5:a5:35:19:1c:01: 42:32:75:20:fe:a2:be:b7:90:3c:72:9e:9b:9e:3e:06:99:3b: f8:fa:16:cb:ef:00:51:93:6b:9e:cc:ff:8b:af:a8:63:a0:80: 42:29:a8:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTFFQjExMC8GA1UEBRMoQkUzRjgxM0IyMDJGRkIwQTM4MkY3Mzc5NjhFRTE2NjU5 OEUwRThBQjAeFw0yNDA5MDMwNDA0MjZaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDY4YWM5LWQ1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLqCxiXC02VBdQ/yT8DRWwrZEbJXIO+07jq5fokUk5kYsyeoU2k7iLMnqTDqMO HoJknysi1mZdxNFdvYrLdZQXfgsyjXErPVF26aInFyYNIJ2foO1Yhy2w8k+IIAxG zxJ7/GYB1fAVLG3Ue9RCouLgIUWfnd8ynBY2O84qDvBixZK9pzK3fOzz6JcACJeA /r+HIT+BKd3zS/G6wXx9B/d+i9VINcDrD/zC5KyjpH5Nfo3scSlhD3gmCNL8f5gy f+U1opsCPaKeEU3RzmRBsiVUIowDjYXjR/J9s9PFUueQtZePts0iaKqxNocelBZP 2b9ORPwEF7NMHnGYM2HLCJEPAgMBAAGjggKpMIICpTAdBgNVHQ4EFgQUc/02zhax 1K1H690Tk4Aw6OyzqAswHwYDVR0jBBgwFoAUvj+BOyAv+wo4L3N5aO4WZZjg6Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMUVCL0VEQTk3MkIyNjlB MjExRUZBRTNBQjM1QUM0RjlBRTAyL3ZqLUJPeUF2LXdvNEwzTjVhTzRXWlpqZzZL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmotQk95QXYtd280TDNONWFPNFdaWmpnNktzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTFFQi9FREE5NzJCMjY5QTIxMUVGQUUzQUIzNUFDNEY5QUUwMi85QkM3NzgyMDY5 QTkxMUVGQkY2NjgwMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQk MCIwIAQCAAEwGjAMAwQEy56QAwQBy56UAwQAy56YAwQDy57oMA0GCSqGSIb3DQEB CwUAA4IBAQCSWJ8o4jlIE+g3WmdLHfz4NJGLH9ONcY3xUE3ifz8AMoendZ8iF+/D 7IUYTuRRvEsHG8d315fbFcmuKvul5KxYbNl5NjwXVPridWPbqUo+yX0rQ011omuS TEQHaAKmXhhh0uYnzqS4+RR8cS4vKnHg8MTniAXfb06LIMsevNrkUNjfxrVAACZb Ak0fz8yZYPozvfujKUXduTZSuyZZ01WIYwlldv8ZtJ59o6MkglNXbuJoYjuj2KTZ IcNan97/Lxqjh/McaHytkx1IVerJ/nHRhDnFpTUZHAFCMnUg/qK+t5A8cp6bnj4G mTv4+hbL7wBRk2uezP+Lr6hjoIBCKajO -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org