$ rpki-client -vvf rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/B67DC27A60E311EEB04BEA49C4F9AE02.roa File: B67DC27A60E311EEB04BEA49C4F9AE02.roa (raw, json) Hash identifier: Uh7NExbaYKDBSUUKd+crKnXeWpl3+22sEhcewGQ9kp8= Subject key identifier: 6B:F6:44:C2:58:B5:C8:95:9F:B5:4D:DF:20:F7:AB:D3:F6:AC:0F:EC Certificate issuer: /CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE Certificate serial: E4 Authority key identifier: 3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/B67DC27A60E311EEB04BEA49C4F9AE02.roa Signing time: Mon 11 Nov 2024 03:57:36 +0000 ROA not before: Mon 11 Nov 2024 03:57:36 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 55860 IP address blocks: 202.74.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D109/serialNumber=3EAEB4B516F703EA58F16E08DA8A667703FB5CAE Validity Not Before: Nov 11 03:57:36 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=673180b0-97f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f0:e2:ec:24:33:8c:52:d5:ae:28:c1:fd:18: 41:4e:6e:54:86:52:69:0a:19:cd:f1:4b:ce:8b:19: eb:83:81:16:f5:3e:5f:fa:8b:fc:c2:38:e9:dc:4b: 51:7b:4f:74:59:4a:79:ce:bc:c7:ef:f6:73:35:34: 67:46:9c:a5:85:8f:73:2d:ac:19:d8:28:29:cf:b7: 0c:0c:33:f7:c2:a9:c8:97:37:69:19:7a:4f:91:08: b6:b8:b4:20:65:87:87:04:cd:e9:fb:34:aa:a1:77: d1:2e:14:e6:b6:b2:55:bb:8b:e0:84:30:bd:31:2c: 8a:a3:53:0d:ab:25:ad:28:70:7d:08:d8:72:c2:ec: 69:26:a3:d3:f0:50:8a:1e:8a:62:db:fa:cc:81:e0: 35:6d:bc:fa:3b:d1:1b:22:21:f2:16:90:cc:10:4e: 9a:c7:90:a1:ba:4f:29:54:48:4c:2c:64:70:6a:57: 06:f5:3b:03:59:00:05:d8:c5:04:27:c7:6d:07:d1: 51:0f:56:44:a6:e5:c8:05:1c:be:be:58:6b:75:72: 48:3d:ab:b3:ca:f8:96:67:2f:d0:be:37:9f:fb:36: 90:8f:fd:48:42:07:86:8a:c2:96:23:07:3c:64:48: 8d:74:f4:63:35:52:f3:8d:a1:4a:27:43:34:5c:cb: e3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F6:44:C2:58:B5:C8:95:9F:B5:4D:DF:20:F7:AB:D3:F6:AC:0F:EC X509v3 Authority Key Identifier: keyid:3E:AE:B4:B5:16:F7:03:EA:58:F1:6E:08:DA:8A:66:77:03:FB:5C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/Pq60tRb3A-pY8W4I2opmdwP7XK4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pq60tRb3A-pY8W4I2opmdwP7XK4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D109/DAC666C05CE011EEB6C1B513C4F9AE02/B67DC27A60E311EEB04BEA49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.74.39.0/24 Signature Algorithm: sha256WithRSAEncryption 07:66:65:88:be:91:db:ec:da:92:91:1b:48:c0:d8:7f:27:ac: 56:7c:c0:ef:28:df:9c:e6:e3:32:d9:05:1c:b4:1f:a0:4d:09: 91:0e:c7:68:ba:02:d8:48:fe:6a:1f:c5:fd:fb:72:b3:94:05: 18:26:54:07:ff:0b:86:b4:d6:70:e6:38:69:45:08:e2:82:b7: dd:ae:c6:b9:e4:32:a6:6d:d0:a8:33:8f:6e:87:db:5c:07:10: e1:8c:a8:5e:a3:12:6d:bc:15:b6:de:4a:39:49:c9:08:e2:4d: ed:c5:bf:ad:63:19:1d:2b:71:68:fe:db:6a:ed:fa:14:d7:1b: 5e:3f:3a:e5:09:33:17:6f:b7:88:a2:1b:8a:3d:34:21:ff:e6: 69:28:f2:6d:ad:b3:40:e4:ff:21:90:46:12:04:19:e3:30:28: bb:ab:3f:bf:21:07:33:d1:4b:41:e1:17:d4:63:af:c5:09:05: 82:34:72:ca:3b:2c:7b:0e:d0:5f:82:e8:ce:f5:0a:93:fc:68: 4b:54:aa:6c:0f:a3:2e:e5:c3:ac:1e:47:9a:6c:cd:0c:0f:f8: be:61:0f:e0:fe:e4:5a:35:a2:9c:9e:79:fb:31:aa:80:88:fe: 65:5b:8b:67:6a:b1:76:fc:2b:a2:ce:f0:6b:e5:b5:70:a4:ae: 1a:0f:f3:25 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMDkxMTAvBgNVBAUTKDNFQUVCNEI1MTZGNzAzRUE1OEYxNkUwOERBOEE2Njc3 MDNGQjVDQUUwHhcNMjQxMTExMDM1NzM2WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzMxODBiMC05N2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vDi7CQzjFLVrijB/RhBTm5UhlJpChnN8UvOixnrg4EW9T5f+ov8wjjp3EtR e090WUp5zrzH7/ZzNTRnRpylhY9zLawZ2Cgpz7cMDDP3wqnIlzdpGXpPkQi2uLQg ZYeHBM3p+zSqoXfRLhTmtrJVu4vghDC9MSyKo1MNqyWtKHB9CNhywuxpJqPT8FCK Hopi2/rMgeA1bbz6O9EbIiHyFpDMEE6ax5Chuk8pVEhMLGRwalcG9TsDWQAF2MUE J8dtB9FRD1ZEpuXIBRy+vlhrdXJIPauzyviWZy/Qvjef+zaQj/1IQgeGisKWIwc8 ZEiNdPRjNVLzjaFKJ0M0XMvjDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGv2RMJY tciVn7VN3yD3q9P2rA/sMB8GA1UdIwQYMBaAFD6utLUW9wPqWPFuCNqKZncD+1yu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDEwOS9EQUM2NjZDMDVD RTAxMUVFQjZDMUI1MTNDNEY5QUUwMi9QcTYwdFJiM0EtcFk4VzRJMm9wbWR3UDdY SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxNjB0UmIzQS1wWThXNEkyb3BtZHdQN1hLNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUQxMDkvREFDNjY2QzA1Q0UwMTFFRUI2QzFCNTEzQzRGOUFFMDIvQjY3REMyN0E2 MEUzMTFFRUIwNEJFQTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKSicwDQYJKoZIhvcNAQELBQADggEBAAdmZYi+kdvs2pKR G0jA2H8nrFZ8wO8o35zm4zLZBRy0H6BNCZEOx2i6AthI/mofxf37crOUBRgmVAf/ C4a01nDmOGlFCOKCt92uxrnkMqZt0Kgzj26H21wHEOGMqF6jEm28FbbeSjlJyQji Te3Fv61jGR0rcWj+22rt+hTXG14/OuUJMxdvt4iiG4o9NCH/5mko8m2ts0Dk/yGQ RhIEGeMwKLurP78hBzPRS0HhF9Rjr8UJBYI0cso7LHsO0F+C6M71CpP8aEtUqmwP oy7lw6weR5pszQwP+L5hD+D+5Fo1opyeefsxqoCI/mVbi2dqsXb8K6LO8GvltXCk rhoP8yU= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org