$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa File: 87662556555511EF88D9F680C4F9AE02.roa (raw, json) Hash identifier: F2zRfngIy1XKfWbRP4qGhGAXZ04rgb/bhy6u2J8p1xM= Subject key identifier: 7A:8D:B9:C2:B8:08:9F:42:D7:16:37:E8:EF:4B:90:BE:65:CF:C6:53 Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 71 Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa Signing time: Thu 08 Aug 2024 08:12:15 +0000 ROA not before: Thu 08 Aug 2024 08:12:15 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9444 IP address blocks: 120.88.192.0/18 maxlen: 18 120.88.192.0/19 maxlen: 19 120.88.224.0/20 maxlen: 20 120.88.224.0/24 maxlen: 24 120.88.225.0/24 maxlen: 24 120.88.226.0/24 maxlen: 24 120.88.227.0/24 maxlen: 24 120.88.230.0/24 maxlen: 24 120.88.232.0/24 maxlen: 24 120.88.236.0/24 maxlen: 24 120.88.237.0/24 maxlen: 24 120.88.240.0/24 maxlen: 24 120.88.241.0/24 maxlen: 24 120.88.242.0/24 maxlen: 24 120.88.243.0/24 maxlen: 24 120.88.245.0/24 maxlen: 24 120.88.246.0/24 maxlen: 24 120.88.252.0/24 maxlen: 24 120.88.253.0/24 maxlen: 24 120.88.254.0/24 maxlen: 24 202.4.192.0/19 maxlen: 19 202.4.196.0/24 maxlen: 24 202.4.208.0/24 maxlen: 24 223.130.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Aug 8 08:12:15 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66b47dde-e7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:12:0d:ac:33:d4:e1:97:b1:db:08:77:ef:90: 97:36:00:2a:f6:88:50:e0:c0:95:5b:2d:25:7a:ff: 46:69:0f:ec:84:ae:3c:d1:34:5d:eb:fa:1e:d1:7f: 77:14:8b:b0:ee:4c:86:53:ef:17:4d:6c:42:6e:a6: 73:19:c6:bd:7a:96:97:c4:26:a2:7b:69:42:dc:a1: c5:1d:0c:59:a7:df:3d:d7:4e:73:5c:f0:74:ec:15: e7:1f:bf:62:52:a5:8a:51:4d:1f:c0:d4:df:05:9f: 85:9e:92:ec:70:4d:55:7c:23:e2:38:80:f5:23:46: 44:6f:a1:16:6b:a1:a9:70:f8:65:2d:7e:9b:37:c8: 9e:d8:0f:cf:27:78:55:36:2d:a1:b8:1c:31:b7:03: 2a:ab:a1:e9:2a:cb:f7:d0:37:d1:a8:14:7b:af:a9: 25:76:f6:04:8c:2f:b1:f1:e8:ac:af:6d:e3:79:31: b3:93:5b:18:58:f2:cf:93:88:58:b9:6e:5c:c6:fe: a4:f7:d7:df:65:4c:c2:b1:8b:26:19:c1:fb:0f:89: 40:f4:7f:88:d4:20:7f:f0:34:2c:23:ae:f2:1a:21: 92:35:15:d0:e1:dc:50:4e:be:b7:06:e6:a6:c7:d5: e6:b2:50:a1:19:4e:7c:44:56:52:a8:20:6e:7f:23: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8D:B9:C2:B8:08:9F:42:D7:16:37:E8:EF:4B:90:BE:65:CF:C6:53 X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/87662556555511EF88D9F680C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.88.192.0/18 202.4.192.0/19 223.130.32.0/19 Signature Algorithm: sha256WithRSAEncryption 13:3b:55:e3:41:3d:ef:0c:56:6a:6a:22:c4:5b:19:de:5a:de: 2e:1f:8c:c3:28:56:a6:cf:4a:10:bb:eb:7e:bd:4d:84:24:d7: 2b:fc:68:56:35:e8:3f:8e:6b:cf:d9:67:57:8f:e2:d6:49:96: fb:59:f6:14:7b:fd:6d:cc:12:51:8c:23:61:8b:e8:ee:16:8f: b5:48:f1:f3:da:5e:1d:ea:87:16:2b:ce:59:57:90:71:a5:79: cf:a9:22:53:0a:c5:a4:84:5d:a6:bf:6b:1c:eb:6c:bd:6b:ee: 6d:1e:77:01:71:af:e2:fd:f8:d9:b3:14:88:e6:c4:0b:4e:05: 22:c6:d1:56:f5:ad:96:10:84:85:df:a5:a7:99:e0:0e:a7:77: a6:d5:0b:56:dd:32:3c:2d:0b:ab:96:9a:9d:7c:b1:3c:76:9d: 63:2e:8f:0b:ac:b5:38:36:4e:04:52:e9:4d:bd:ff:1b:1b:32: 8f:5c:5f:81:cc:dc:0c:b5:ad:99:89:1b:8f:db:4f:34:e2:39: 7a:82:9a:2a:0f:f2:b7:84:4f:0b:97:01:7e:90:ee:e5:ce:7c: de:70:d6:74:28:99:e5:4b:44:7b:14:ef:b9:21:d5:7f:69:99: db:88:59:1b:fc:27:11:4c:50:33:a6:c5:65:6b:7e:f9:56:88: 74:95:c3:34 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NUY3QjExMC8GA1UEBRMoODkwQjFERUZFODhENTkxOTZCQ0M3QjY1MjY4QzYyRTg2 RTU0RDQ2RDAeFw0yNDA4MDgwODEyMTVaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YjQ3ZGRlLWU3YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgEg2sM9Thl7HbCHfvkJc2ACr2iFDgwJVbLSV6/0ZpD+yErjzRNF3r+h7Rf3cU i7DuTIZT7xdNbEJupnMZxr16lpfEJqJ7aULcocUdDFmn3z3XTnNc8HTsFecfv2JS pYpRTR/A1N8Fn4WekuxwTVV8I+I4gPUjRkRvoRZroalw+GUtfps3yJ7YD88neFU2 LaG4HDG3Ayqroekqy/fQN9GoFHuvqSV29gSML7Hx6KyvbeN5MbOTWxhY8s+TiFi5 blzG/qT3199lTMKxiyYZwfsPiUD0f4jUIH/wNCwjrvIaIZI1FdDh3FBOvrcG5qbH 1eayUKEZTnxEVlKoIG5/I7l1AgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUeo25wrgI n0LXFjfo70uQvmXPxlMwHwYDVR0jBBgwFoAUiQsd7+iNWRlrzHtlJoxi6G5U1G0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1RjdCL0ExMzFCMzk0QkIz OTExRUVBNjU1NDE3RUM0RjlBRTAyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVFzZDctaU5XUmxyekh0bEpveGk2RzVVMUcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUY3Qi9BMTMxQjM5NEJCMzkxMUVFQTY1NTQxN0VDNEY5QUUwMi84NzY2MjU1NjU1 NTUxMUVGODhEOUY2ODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEBnhYwAMEBcoEwAMEBd+CIDANBgkqhkiG9w0BAQsFAAOCAQEA EztV40E97wxWamoixFsZ3lreLh+MwyhWps9KELvrfr1NhCTXK/xoVjXoP45rz9ln V4/i1kmW+1n2FHv9bcwSUYwjYYvo7haPtUjx89peHeqHFivOWVeQcaV5z6kiUwrF pIRdpr9rHOtsvWvubR53AXGv4v342bMUiObEC04FIsbRVvWtlhCEhd+lp5ngDqd3 ptULVt0yPC0Lq5aanXyxPHadYy6PC6y1ODZOBFLpTb3/Gxsyj1xfgczcDLWtmYkb j9tPNOI5eoKaKg/yt4RPC5cBfpDu5c583nDWdCiZ5UtEexTvuSHVf2mZ24hZG/wn EUxQM6bFZWt++VaIdJXDNA== -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org