$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa File: B8E7D994D00711EAB66A1255C4F9AE02.roa (raw, json) Hash identifier: bBkt7enT88SRnJFTpBPLURewCJmnh9TTKfLXv4KFsQo= Subject key identifier: B9:92:0E:25:F4:00:B3:92:B0:0A:BB:2A:41:E1:63:62:10:16:46:78 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 34C3 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa Signing time: Wed 26 Jun 2024 15:00:59 +0000 ROA not before: Wed 26 Jun 2024 15:00:59 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 20940 IP address blocks: 220.227.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Jun 26 15:00:59 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=667c2d2b-6dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:a4:5c:67:b4:a5:ff:a3:e1:4d:9a:10:12: 4c:3c:f5:bf:d4:92:f7:36:fb:a4:74:2e:b4:16:31: 2a:ee:0c:71:97:a7:62:38:dc:7d:d0:d0:bc:23:e9: 04:ae:eb:b6:bf:d4:12:ca:58:58:0e:b8:59:4c:7e: 2a:dc:e0:4c:22:89:23:45:0f:0b:24:67:ab:4c:2e: df:14:d0:5e:ac:4b:c3:2a:d9:a4:67:82:67:01:9d: 14:31:75:c7:6d:ac:19:f1:8e:ec:38:d6:10:37:c8: 65:9e:49:a9:19:94:32:e5:cd:48:ff:bb:20:56:e8: 72:06:66:79:23:03:fe:18:96:73:38:56:16:57:a7: 03:ef:04:9a:55:dc:cc:ce:c0:7f:09:a4:70:1f:21: 0c:9c:7f:ae:75:6f:3b:e6:b9:e9:d6:fe:9e:c5:ad: 61:b7:3b:7b:66:78:3d:de:cc:a8:63:77:e7:b3:8f: 64:9c:78:53:fe:07:42:0a:14:e8:f3:af:7e:d6:a1: 3f:0c:64:9e:e8:ea:64:70:45:a8:ae:a4:ae:92:ef: 0c:eb:6b:34:a0:e8:ad:22:34:74:cb:a9:5c:3e:c7: 29:1d:19:63:d7:5c:f7:e7:bc:7d:2b:09:cc:8d:56: 43:c9:8b:7c:38:64:37:c0:c1:cd:4a:4f:d9:82:b3: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:92:0E:25:F4:00:B3:92:B0:0A:BB:2A:41:E1:63:62:10:16:46:78 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/B8E7D994D00711EAB66A1255C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.227.183.0/24 Signature Algorithm: sha256WithRSAEncryption 22:5d:e5:53:b2:7e:01:e4:d1:95:3a:5d:50:0b:4b:a1:9e:99: fe:b7:c1:f5:cb:88:b5:9c:87:6a:2f:76:42:d8:8a:2b:67:e6: 9a:1c:da:d2:89:26:9e:8e:1c:f8:81:a7:7c:2f:91:95:5d:65: 9f:68:29:d1:d7:01:57:68:c8:e6:bc:81:a9:e0:5d:c3:6a:6e: 44:24:00:b1:6d:b0:f5:29:bd:a2:91:7b:7b:62:38:59:69:2d: f9:0d:d6:02:2c:73:5a:a2:1f:78:5d:c8:f0:2f:0b:c3:49:dc: 82:fa:44:69:3a:05:6a:de:4b:12:a5:ff:28:fa:6a:24:4d:a3: 43:e0:46:1c:90:18:59:4c:cb:8d:6a:97:3c:ac:f1:62:48:ae: 1e:af:87:7f:bc:8d:ee:58:b9:1c:0e:bf:3d:16:63:9e:f0:0c: 44:93:dc:95:ff:93:7c:bc:5b:eb:fa:ba:44:9f:ac:ce:dc:32: ad:fc:20:57:ae:8f:95:68:f6:1f:71:ea:c1:d5:d0:31:da:70: 9e:eb:17:e3:2f:e8:0b:62:73:13:ef:ac:85:d9:51:99:5f:7c: bd:74:41:a4:35:fd:56:fc:82:db:f0:02:c5:b6:cf:d7:bc:90: 86:4f:0d:5d:c3:84:e1:87:88:ca:4e:05:f0:f2:24:19:76:68: 80:be:5e:d4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjQwNjI2MTUwMDU5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjdjMmQyYi02ZGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfukXGe0pf+j4U2aEBJMPPW/1JL3NvukdC60FjEq7gxxl6diONx90NC8I+kE ruu2v9QSylhYDrhZTH4q3OBMIokjRQ8LJGerTC7fFNBerEvDKtmkZ4JnAZ0UMXXH bawZ8Y7sONYQN8hlnkmpGZQy5c1I/7sgVuhyBmZ5IwP+GJZzOFYWV6cD7wSaVdzM zsB/CaRwHyEMnH+udW875rnp1v6exa1htzt7Zng93syoY3fns49knHhT/gdCChTo 869+1qE/DGSe6OpkcEWorqSuku8M62s0oOitIjR0y6lcPscpHRlj11z357x9KwnM jVZDyYt8OGQ3wMHNSk/ZgrNJnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLmSDiX0 ALOSsAq7KkHhY2IQFkZ4MB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTFGQTUvMDgwNTZDRTQxRDg3MTFFMjlERDNDNkRFMDhCMDJDRDIvQjhFN0Q5OTRE MDA3MTFFQUI2NkExMjU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADc47cwDQYJKoZIhvcNAQELBQADggEBACJd5VOyfgHk0ZU6 XVALS6Gemf63wfXLiLWch2ovdkLYiitn5poc2tKJJp6OHPiBp3wvkZVdZZ9oKdHX AVdoyOa8gangXcNqbkQkALFtsPUpvaKRe3tiOFlpLfkN1gIsc1qiH3hdyPAvC8NJ 3IL6RGk6BWreSxKl/yj6aiRNo0PgRhyQGFlMy41qlzys8WJIrh6vh3+8je5YuRwO vz0WY57wDEST3JX/k3y8W+v6ukSfrM7cMq38IFeuj5Vo9h9x6sHV0DHacJ7rF+Mv 6AticxPvrIXZUZlffL10QaQ1/Vb8gtvwAsW2z9e8kIZPDV3DhOGHiMpOBfDyJBl2 aIC+XtQ= -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:11 2024 by rpki-client on console-ams.rpki-client.org