$ rpki-client -vvf rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa File: CD168A226C2111EFB0ACC153C4F9AE02.roa (raw, json) Hash identifier: gZsn2HT8wdkk8V9kPIX/PrYWbNbTXu5bTe/wvaT34e0= Subject key identifier: A6:22:CF:32:90:BB:79:76:67:5D:E3:BA:89:79:3A:84:E6:10:71:DD Certificate issuer: /CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Certificate serial: 011E Authority key identifier: A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa Signing time: Tue 19 Nov 2024 03:37:24 +0000 ROA not before: Tue 19 Nov 2024 03:37:24 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 153318 IP address blocks: 202.6.80.0/24 maxlen: 24 203.153.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197390/serialNumber=A135B814E1EB1E27C9597EED2E822854930D3FCF Validity Not Before: Nov 19 03:37:24 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=673c07f3-dd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:7c:de:7b:69:59:10:20:f7:ee:e9:a6:31: c8:bb:ff:c5:88:57:f3:32:5d:0e:a6:59:9b:7b:78: ed:13:60:fc:87:39:b4:1f:c8:3c:25:39:09:1f:67: 25:28:fc:92:2f:3f:14:ba:2b:75:a6:06:20:76:38: 22:b5:b5:5c:d2:71:68:9d:87:05:d0:02:01:68:38: f0:bf:20:89:2e:03:54:96:5b:4b:8e:61:a0:aa:66: 5b:61:17:13:25:4e:af:b8:6d:95:3a:13:f5:fc:a0: 16:df:4d:01:f3:34:61:06:90:af:04:78:fc:44:90: b3:78:2d:3f:e1:9b:9f:58:a3:16:99:b7:5c:f8:59: 75:1c:cf:7f:8b:cb:46:f4:74:30:52:fe:e6:de:5f: 3f:d8:cf:f8:f6:3d:ea:37:54:a0:d3:57:23:33:0a: 30:1a:81:c4:dc:39:cd:31:fa:47:ae:2d:f2:31:1d: f8:9f:a1:87:23:ce:7d:48:f7:6d:c8:96:af:8e:69: bb:92:e7:13:8d:1c:81:3d:58:2c:b6:3c:1c:e9:56: b4:f4:8f:75:64:fa:72:38:6a:74:cd:f2:37:27:94: 67:9a:b9:24:07:5c:20:1f:75:3f:db:c2:e9:bf:ed: 32:ea:1c:b1:4e:11:68:aa:e8:bb:0a:4e:e8:e1:df: 3e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:22:CF:32:90:BB:79:76:67:5D:E3:BA:89:79:3A:84:E6:10:71:DD X509v3 Authority Key Identifier: keyid:A1:35:B8:14:E1:EB:1E:27:C9:59:7E:ED:2E:82:28:54:93:0D:3F:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/oTW4FOHrHifJWX7tLoIoVJMNP88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oTW4FOHrHifJWX7tLoIoVJMNP88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197390/D2C7E7163E7A11EEA977D620C4F9AE02/CD168A226C2111EFB0ACC153C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.6.80.0/24 203.153.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:0b:25:77:a7:f2:05:84:ac:58:5d:02:89:0b:5f:15:ea:fc: 86:17:f1:6e:df:cd:80:11:ed:6c:24:36:90:15:22:29:04:59: 46:0b:eb:d7:e1:cd:17:fc:e6:d6:6a:d8:48:63:4b:f9:83:8c: c5:e0:56:ff:8f:23:0e:ab:9c:0f:9d:3b:8a:f5:99:17:e5:1c: 36:4f:c7:9e:fe:db:10:10:37:8b:d1:5f:d3:c0:54:a1:59:99: b7:97:1f:15:e7:6f:b7:69:5b:ee:30:08:1c:10:37:d9:84:fe: 2b:cf:2d:29:e5:e5:97:02:62:ad:9f:fe:be:7e:e7:4d:89:11: 23:2c:8b:54:f2:05:67:0a:ec:04:ae:8a:83:f7:33:f1:a6:b3: fd:b9:46:31:c0:1f:45:af:15:ca:ea:f7:32:c3:79:44:4e:2f: a7:c1:f3:23:05:66:72:32:4d:19:2e:c8:b9:75:e4:dc:7b:2f: fc:89:69:00:f4:35:00:6c:8e:92:6e:ee:fd:13:02:1e:0e:da: f0:7f:63:9d:9b:b1:99:2c:5f:eb:13:93:90:11:0c:96:67:6f: 13:2b:ba:fe:1a:d0:41:f2:84:a7:a2:e6:28:2b:34:85:ff:e6: 3a:81:e4:ad:d3:65:c9:ef:c6:b0:f9:f9:e2:5a:af:ad:0b:dc: 2b:67:4a:4a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTczOTAxMTAvBgNVBAUTKEExMzVCODE0RTFFQjFFMjdDOTU5N0VFRDJFODIyODU0 OTMwRDNGQ0YwHhcNMjQxMTE5MDMzNzI0WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNjMDdmMy1kZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8p83ntpWRAg9+7ppjHIu//FiFfzMl0Oplmbe3jtE2D8hzm0H8g8JTkJH2cl KPySLz8Uuit1pgYgdjgitbVc0nFonYcF0AIBaDjwvyCJLgNUlltLjmGgqmZbYRcT JU6vuG2VOhP1/KAW300B8zRhBpCvBHj8RJCzeC0/4ZufWKMWmbdc+Fl1HM9/i8tG 9HQwUv7m3l8/2M/49j3qN1Sg01cjMwowGoHE3DnNMfpHri3yMR34n6GHI859SPdt yJavjmm7kucTjRyBPVgstjwc6Va09I91ZPpyOGp0zfI3J5RnmrkkB1wgH3U/28Lp v+0y6hyxThFoqui7Ck7o4d8+5QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKYizzKQ u3l2Z13juol5OoTmEHHdMB8GA1UdIwQYMBaAFKE1uBTh6x4nyVl+7S6CKFSTDT/P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzM5MC9EMkM3RTcxNjNF N0ExMUVFQTk3N0Q2MjBDNEY5QUUwMi9vVFc0Rk9IckhpZkpXWDd0TG9Jb1ZKTU5Q ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29UVzRGT0hySGlmSldYN3RMb0lvVkpNTlA4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTczOTAvRDJDN0U3MTYzRTdBMTFFRUE5NzdENjIwQzRGOUFFMDIvQ0QxNjhBMjI2 QzIxMTFFRkIwQUNDMTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKBlADBADLmdAwDQYJKoZIhvcNAQELBQADggEBAAsLJXen 8gWErFhdAokLXxXq/IYX8W7fzYAR7WwkNpAVIikEWUYL69fhzRf85tZq2EhjS/mD jMXgVv+PIw6rnA+dO4r1mRflHDZPx57+2xAQN4vRX9PAVKFZmbeXHxXnb7dpW+4w CBwQN9mE/ivPLSnl5ZcCYq2f/r5+502JESMsi1TyBWcK7ASuioP3M/Gms/25RjHA H0WvFcrq9zLDeUROL6fB8yMFZnIyTRkuyLl15Nx7L/yJaQD0NQBsjpJu7v0TAh4O 2vB/Y52bsZksX+sTk5ARDJZnbxMruv4a0EHyhKei5igrNIX/5jqB5K3TZcnvxrD5 +eJar60L3CtnSko= -----END CERTIFICATE-----Generated at Thu Nov 21 05:37:13 2024 by rpki-client on console-ams.rpki-client.org