$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa File: 9C594FD469A911EFBF66800FC4F9AE02.roa (raw, json) Hash identifier: 7dymspRIbNYwH/8/oG9ZCKWg0/glOc+bAFGY7NTbhkY= Subject key identifier: 6A:8D:05:7C:4F:84:EC:56:D7:50:73:D8:47:35:01:84:A5:3B:A0:B7 Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB Certificate serial: 03 Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa Signing time: Tue 03 Sep 2024 04:04:27 +0000 ROA not before: Tue 03 Sep 2024 04:04:27 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 137546 IP address blocks: 203.158.118.0/24 maxlen: 24 203.158.244.0/22 maxlen: 22 203.158.244.0/24 maxlen: 24 203.158.245.0/24 maxlen: 24 203.158.246.0/23 maxlen: 23 203.158.246.0/24 maxlen: 24 203.158.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB Validity Not Before: Sep 3 04:04:27 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=66d68aca-ffd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:7b:fe:af:66:6f:1b:fb:4a:47:d1:b2:13: 6e:03:2c:49:22:fa:c7:7e:2f:8d:7d:4a:e7:95:30: 69:73:cb:40:f5:32:7f:db:c7:b3:0a:7c:a1:11:21: 75:36:e3:c5:2f:91:99:04:8b:82:c7:d7:44:36:76: 28:93:6d:6f:cb:ac:61:28:98:cf:2d:8c:27:91:27: 8a:13:2e:05:55:62:25:84:a1:81:17:2e:1e:28:95: ab:e6:83:a2:34:ee:15:62:20:a8:6d:f7:a2:84:40: 10:53:19:f7:00:84:e1:c0:26:3f:01:4a:33:87:83: 90:1b:08:4b:08:56:cf:a9:b5:84:8f:81:f8:3d:6b: 5c:bb:22:de:17:a6:6e:9f:bc:b0:77:51:4a:dc:5e: 10:be:7e:bf:ad:08:2f:6a:a7:7c:fe:f4:8d:1d:d0: b4:45:42:6c:85:18:5d:0b:e8:0e:dc:d5:ba:c2:d3: 31:90:68:6c:1d:7e:80:f9:01:10:1d:88:52:9d:36: 54:2a:83:1b:18:73:20:17:f0:71:21:8c:d0:df:07: 93:9e:1a:05:b1:90:58:f3:83:0d:e4:36:68:3d:3a: 43:c3:48:5f:0a:92:f3:87:52:be:69:c6:9f:ab:c3: 11:6b:03:08:61:e5:8b:02:94:a1:d6:f2:36:a4:bb: 5e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:05:7C:4F:84:EC:56:D7:50:73:D8:47:35:01:84:A5:3B:A0:B7 X509v3 Authority Key Identifier: keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/9C594FD469A911EFBF66800FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.158.118.0/24 203.158.244.0/22 Signature Algorithm: sha256WithRSAEncryption 06:99:fc:bd:71:c4:6b:1e:98:fc:48:88:eb:12:f6:72:b8:48: f2:2d:d4:88:6c:ef:81:43:22:13:a6:e2:b5:53:4b:1e:70:3b: a7:ec:31:fc:c8:a8:ec:d4:ff:0d:c9:79:a8:40:2d:80:9f:fd: 5e:ce:a0:ec:ba:81:fe:3f:92:b7:0c:4b:ae:b4:f7:fd:16:0b: c6:a1:c0:98:08:a3:a7:6c:b0:96:0d:a9:b7:1a:e0:11:67:9e: ad:eb:d3:0b:a9:e8:cb:98:8e:13:1e:bb:71:2e:bd:45:9a:12: c0:46:62:15:2c:8e:48:54:54:2c:24:a2:ba:49:7c:e4:09:02: ba:29:52:cc:bb:34:c8:09:0b:c3:d5:2e:ac:4e:a9:38:bd:18: cc:a1:66:d6:a2:59:cb:db:92:7a:17:85:9a:f0:f3:95:cf:c5: 5b:1f:77:c8:d9:ab:08:c8:91:f8:a9:db:ec:13:95:86:92:b3: 7d:68:51:58:09:a1:ae:db:d8:84:8f:98:ab:9e:4f:6e:16:18: 25:8e:23:8c:3a:8d:0d:ca:40:db:28:0e:e5:df:40:fa:f9:5a: 46:45:37:60:c8:46:5f:86:a1:b2:94:11:e0:7e:ea:e0:2b:8b: ea:8c:a1:e9:4b:87:82:f5:a1:6e:30:76:b9:07:e2:d7:3a:6b: 87:93:bd:9c -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MTFFQjExMC8GA1UEBRMoQkUzRjgxM0IyMDJGRkIwQTM4MkY3Mzc5NjhFRTE2NjU5 OEUwRThBQjAeFw0yNDA5MDMwNDA0MjdaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDY4YWNhLWZmZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5+Hv+r2ZvG/tKR9GyE24DLEki+sd+L419SueVMGlzy0D1Mn/bx7MKfKERIXU2 48UvkZkEi4LH10Q2diiTbW/LrGEomM8tjCeRJ4oTLgVVYiWEoYEXLh4olavmg6I0 7hViIKht96KEQBBTGfcAhOHAJj8BSjOHg5AbCEsIVs+ptYSPgfg9a1y7It4Xpm6f vLB3UUrcXhC+fr+tCC9qp3z+9I0d0LRFQmyFGF0L6A7c1brC0zGQaGwdfoD5ARAd iFKdNlQqgxsYcyAX8HEhjNDfB5OeGgWxkFjzgw3kNmg9OkPDSF8KkvOHUr5pxp+r wxFrAwhh5YsClKHW8jaku16jAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUao0FfE+E 7FbXUHPYRzUBhKU7oLcwHwYDVR0jBBgwFoAUvj+BOyAv+wo4L3N5aO4WZZjg6Ksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxMUVCL0VEQTk3MkIyNjlB MjExRUZBRTNBQjM1QUM0RjlBRTAyL3ZqLUJPeUF2LXdvNEwzTjVhTzRXWlpqZzZL cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmotQk95QXYtd280TDNONWFPNFdaWmpnNktzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTFFQi9FREE5NzJCMjY5QTIxMUVGQUUzQUIzNUFDNEY5QUUwMi85QzU5NEZENDY5 QTkxMUVGQkY2NjgwMEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAMuedgMEAsue9DANBgkqhkiG9w0BAQsFAAOCAQEABpn8vXHE ax6Y/EiI6xL2crhI8i3UiGzvgUMiE6bitVNLHnA7p+wx/Mio7NT/Dcl5qEAtgJ/9 Xs6g7LqB/j+StwxLrrT3/RYLxqHAmAijp2ywlg2ptxrgEWeerevTC6noy5iOEx67 cS69RZoSwEZiFSyOSFRULCSiukl85AkCuilSzLs0yAkLw9UurE6pOL0YzKFm1qJZ y9uSeheFmvDzlc/FWx93yNmrCMiR+Knb7BOVhpKzfWhRWAmhrtvYhI+Yq55PbhYY JY4jjDqNDcpA2ygO5d9A+vlaRkU3YMhGX4ahspQR4H7q4CuL6oyh6UuHgvWhbjB2 uQfi1zprh5O9nA== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:04 2024 by rpki-client on console-ams.rpki-client.org