$ rpki-client -vvf rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/F406C3F26AE311EF82D7860FC4F9AE02.roa File: F406C3F26AE311EF82D7860FC4F9AE02.roa (raw, json) Hash identifier: u+nDAmTsN9U/qRK2Mim5xbq4P4OFqXQ2M9J0CfEiZDU= Subject key identifier: 34:0A:9B:86:51:C3:E0:EE:CB:15:D1:7D:1D:67:15:40:DD:53:2D:92 Certificate issuer: /CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Certificate serial: 8C Authority key identifier: 89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/F406C3F26AE311EF82D7860FC4F9AE02.roa Signing time: Wed 04 Sep 2024 17:34:36 +0000 ROA not before: Wed 04 Sep 2024 17:34:36 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 4760 IP address blocks: 202.4.202.0/23 maxlen: 23 202.4.204.0/23 maxlen: 23 202.4.215.0/24 maxlen: 24 202.4.216.0/23 maxlen: 23 202.4.218.0/23 maxlen: 23 202.4.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 04:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195F7B/serialNumber=890B1DEFE88D59196BCC7B65268C62E86E54D46D Validity Not Before: Sep 4 17:34:36 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66d89a2b-2d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:6a:2c:65:fc:7b:fa:e7:85:6f:d0:75:eb: 63:c1:6a:f6:95:90:ad:e8:89:f9:20:b8:71:89:dc: c1:28:a3:db:ec:b6:0b:19:19:8e:4e:1d:3b:87:41: c9:18:c4:47:51:49:f8:ba:fa:ef:7e:65:9e:25:dc: a5:e9:82:35:1e:8b:a2:49:1b:5f:cf:b8:25:b3:14: f3:77:ed:4d:43:4d:4f:65:35:03:ef:46:91:fe:4e: 03:51:a8:ab:98:32:af:ce:42:79:68:35:8c:20:be: e7:10:20:2c:3e:71:58:20:07:84:1a:df:df:c4:7e: 0d:4d:78:23:ba:8d:29:03:cd:e1:b5:ab:8d:78:bc: ea:c0:46:50:1c:51:a8:09:51:26:97:fe:1a:ae:a3: a8:2d:a8:7b:58:e1:76:fa:88:2f:ed:95:60:ab:64: cf:f2:d0:0e:e7:84:8a:01:bd:60:fe:34:88:f2:21: 1b:24:77:e4:8d:7a:d6:74:6f:26:7b:b1:86:8e:10: 8e:b0:aa:c5:4d:92:7c:1d:71:da:08:a6:31:4d:1f: 34:12:11:39:42:1f:e8:60:3c:eb:b7:90:da:6d:c9: 8c:49:f8:31:b9:9a:e9:64:cb:fa:91:1f:5f:08:6c: a6:95:eb:37:ec:40:ce:81:51:ec:48:c0:9c:12:df: 06:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0A:9B:86:51:C3:E0:EE:CB:15:D1:7D:1D:67:15:40:DD:53:2D:92 X509v3 Authority Key Identifier: keyid:89:0B:1D:EF:E8:8D:59:19:6B:CC:7B:65:26:8C:62:E8:6E:54:D4:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/iQsd7-iNWRlrzHtlJoxi6G5U1G0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQsd7-iNWRlrzHtlJoxi6G5U1G0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195F7B/A131B394BB3911EEA655417EC4F9AE02/F406C3F26AE311EF82D7860FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.4.202.0-202.4.205.255 202.4.215.0-202.4.220.255 Signature Algorithm: sha256WithRSAEncryption 22:fe:ad:cd:f1:7d:23:38:db:2a:68:d3:2c:bd:ba:71:d8:1b: 8d:10:dd:44:35:0d:c4:d6:1f:99:cc:c2:fd:60:bd:68:f7:74: 79:ad:7f:6d:b2:61:0d:54:99:c0:12:8b:f7:43:42:8e:fa:29: bd:4d:c9:6a:13:3d:8c:26:c9:e7:9a:69:b0:17:91:32:d1:4b: b6:ce:36:32:14:bc:8d:b2:16:87:ca:03:5f:e0:e4:03:49:0e: 57:e9:b5:2e:6c:75:6c:90:5e:01:de:92:54:2b:8d:03:55:26: c3:29:3a:59:71:07:e2:2d:ce:a4:1f:7f:c5:29:f9:14:f7:0a: 52:70:bc:21:d3:4c:b8:70:3a:a4:b8:ad:fc:bf:21:63:29:ab: b7:a9:4b:3b:50:88:8d:6d:7c:20:cd:73:41:dd:6e:16:b6:26: 95:a4:8c:b4:09:3d:30:81:90:7c:d6:81:63:4d:f2:3a:d4:4b: fc:b4:65:40:55:28:1f:e9:5c:dd:e2:71:77:1c:cf:01:25:ee: f1:76:d0:6f:df:2e:75:a9:1f:d9:25:f1:bf:75:9c:93:17:25: fb:af:c5:c2:b7:01:1e:39:f9:92:b8:fa:1b:ff:04:a3:ad:8e: c2:97:2c:ff:4a:a1:14:f8:75:92:48:13:67:f9:48:27:ad:25: b5:45:25:09 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGN0IxMTAvBgNVBAUTKDg5MEIxREVGRTg4RDU5MTk2QkNDN0I2NTI2OEM2MkU4 NkU1NEQ0NkQwHhcNMjQwOTA0MTczNDM2WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4OWEyYi0yZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXNqLGX8e/rnhW/QdetjwWr2lZCt6In5ILhxidzBKKPb7LYLGRmOTh07h0HJ GMRHUUn4uvrvfmWeJdyl6YI1HouiSRtfz7glsxTzd+1NQ01PZTUD70aR/k4DUair mDKvzkJ5aDWMIL7nECAsPnFYIAeEGt/fxH4NTXgjuo0pA83htauNeLzqwEZQHFGo CVEml/4arqOoLah7WOF2+ogv7ZVgq2TP8tAO54SKAb1g/jSI8iEbJHfkjXrWdG8m e7GGjhCOsKrFTZJ8HXHaCKYxTR80EhE5Qh/oYDzrt5DabcmMSfgxuZrpZMv6kR9f CGymles37EDOgVHsSMCcEt8GbQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDQKm4ZR w+DuyxXRfR1nFUDdUy2SMB8GA1UdIwQYMBaAFIkLHe/ojVkZa8x7ZSaMYuhuVNRt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUY3Qi9BMTMxQjM5NEJC MzkxMUVFQTY1NTQxN0VDNEY5QUUwMi9pUXNkNy1pTldSbHJ6SHRsSm94aTZHNVUx RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lRc2Q3LWlOV1JscnpIdGxKb3hpNkc1VTFHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTVGN0IvQTEzMUIzOTRCQjM5MTFFRUE2NTU0MTdFQzRGOUFFMDIvRjQwNkMzRjI2 QUUzMTFFRjgyRDc4NjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAcoEygMEAcoEzDAMAwQAygTXAwQAygTcMA0GCSqGSIb3 DQEBCwUAA4IBAQAi/q3N8X0jONsqaNMsvbpx2BuNEN1ENQ3E1h+ZzML9YL1o93R5 rX9tsmENVJnAEov3Q0KO+im9TclqEz2MJsnnmmmwF5Ey0Uu2zjYyFLyNshaHygNf 4OQDSQ5X6bUubHVskF4B3pJUK40DVSbDKTpZcQfiLc6kH3/FKfkU9wpScLwh00y4 cDqkuK38vyFjKau3qUs7UIiNbXwgzXNB3W4WtiaVpIy0CT0wgZB81oFjTfI61Ev8 tGVAVSgf6Vzd4nF3HM8BJe7xdtBv3y51qR/ZJfG/dZyTFyX7r8XCtwEeOfmSuPob /wSjrY7Clyz/SqEU+HWSSBNn+UgnrSW1RSUJ -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org