$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa File: 094ECC9A9DB311EEA5CE2852C4F9AE02.roa (raw, json) Hash identifier: 4fGpkM4uc7xbFXkRm01J1qXuwdve0jCOevf+O5zJcj0= Subject key identifier: 2E:6F:AA:EC:C5:8C:39:3A:DB:B6:C5:66:03:87:71:42:1A:84:DB:4A Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: 0197 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa Signing time: Tue 22 Oct 2024 07:42:58 +0000 ROA not before: Tue 22 Oct 2024 07:42:58 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 132204 IP address blocks: 206.131.192.0/24 maxlen: 24 206.131.199.0/24 maxlen: 24 206.131.200.0/24 maxlen: 24 206.131.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Oct 22 07:42:58 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=67175782-6003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:18:4e:e7:c5:28:3d:12:9b:3f:a6:c1:81:f8: ea:de:79:04:d7:60:99:4c:e0:d4:8b:8d:06:67:47: 6a:a3:67:07:56:3f:34:94:b6:61:3b:48:1e:46:9a: 69:52:77:eb:76:63:35:cc:e6:a2:cc:21:f1:b8:6d: 49:ee:0e:34:0a:9c:a0:61:04:b0:fd:1a:f0:c7:f2: be:5f:17:56:35:b9:40:68:55:cf:a3:cc:4b:39:ce: 35:6d:a2:f5:28:99:15:29:27:ac:b7:46:c9:bb:54: 05:09:27:37:f9:ec:49:c2:cb:aa:c8:87:10:d4:32: 79:22:ce:59:9b:a4:54:4d:84:0b:f5:9f:d7:91:b3: c6:8f:b2:f0:be:cf:37:62:ef:11:2a:3c:df:5c:2a: dd:dc:53:d0:61:f6:22:95:4d:74:44:d9:d6:3d:5b: 7a:2c:99:84:ce:e5:ee:cb:74:4f:64:0e:c3:f0:0b: 42:d5:96:3c:c2:12:df:36:5c:48:86:f9:ef:b0:1e: 3f:b9:43:c5:b4:a1:e2:5e:4c:17:5a:a2:c5:89:3c: f1:66:9c:27:e4:91:03:89:65:14:e0:2a:f2:ca:6d: 9d:2c:49:1f:0c:5a:c0:04:c6:35:d8:44:f4:26:d1: 48:81:2c:31:2b:aa:f9:56:8a:ff:bf:c8:d4:b7:65: bc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6F:AA:EC:C5:8C:39:3A:DB:B6:C5:66:03:87:71:42:1A:84:DB:4A X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/094ECC9A9DB311EEA5CE2852C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.131.192.0/24 206.131.199.0-206.131.201.255 Signature Algorithm: sha256WithRSAEncryption 0e:39:71:b2:ce:26:c7:4c:df:b3:57:48:89:88:58:a6:47:a3: 00:76:3a:b9:ec:aa:0a:76:79:7f:dd:30:35:0c:97:4e:f7:b6: 96:4a:7d:6d:91:e4:c8:cd:98:97:a0:a7:96:41:b3:c8:98:aa: 34:17:9f:54:db:35:d3:b9:d7:34:bd:54:f1:33:3f:1a:a6:54: 6b:40:14:88:a9:71:da:8a:1e:fc:d8:e0:d8:45:d4:fe:3a:7d: b2:ed:b0:55:15:fd:f5:dc:26:15:17:b9:7d:5e:52:5f:cb:74: 10:5f:a6:94:10:85:df:59:2e:60:b4:b8:c2:1b:8b:b9:86:f3: b3:5d:03:59:b8:eb:82:64:e0:ec:f2:a7:2f:38:30:9a:77:47: b8:f0:74:90:51:4d:7f:4b:6b:78:da:3c:4d:db:47:e1:87:b3: 01:41:dd:3f:79:68:cc:2f:61:ff:3d:f3:52:76:17:0a:01:b2: ef:cb:18:b4:17:ad:1a:da:c1:f7:9d:ce:80:7c:9b:5d:15:b9: 48:45:05:05:c5:bd:b4:63:1d:94:ab:66:62:e7:d3:e3:9d:56: e6:3f:e1:be:a0:d7:06:c6:aa:90:14:40:22:37:fd:3d:ca:ef: 19:bb:6b:b1:51:25:47:a2:7c:f6:6b:1f:78:f4:46:75:33:68: c5:56:13:b0 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjQxMDIyMDc0MjU4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE3NTc4Mi02MDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhhO58UoPRKbP6bBgfjq3nkE12CZTODUi40GZ0dqo2cHVj80lLZhO0geRppp UnfrdmM1zOaizCHxuG1J7g40CpygYQSw/Rrwx/K+XxdWNblAaFXPo8xLOc41baL1 KJkVKSest0bJu1QFCSc3+exJwsuqyIcQ1DJ5Is5Zm6RUTYQL9Z/XkbPGj7Lwvs83 Yu8RKjzfXCrd3FPQYfYilU10RNnWPVt6LJmEzuXuy3RPZA7D8AtC1ZY8whLfNlxI hvnvsB4/uUPFtKHiXkwXWqLFiTzxZpwn5JEDiWUU4Cryym2dLEkfDFrABMY12ET0 JtFIgSwxK6r5Vor/v8jUt2W8WwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFC5vquzF jDk627bFZgOHcUIahNtKMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzQvREEyMjQwRTY0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvMDk0RUNDOUE5 REIzMTFFRUE1Q0UyODUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBADOg8AwDAMEAM6DxwMEAc6DyDANBgkqhkiG9w0BAQsFAAOC AQEADjlxss4mx0zfs1dIiYhYpkejAHY6ueyqCnZ5f90wNQyXTve2lkp9bZHkyM2Y l6CnlkGzyJiqNBefVNs107nXNL1U8TM/GqZUa0AUiKlx2ooe/Njg2EXU/jp9su2w VRX99dwmFRe5fV5SX8t0EF+mlBCF31kuYLS4whuLuYbzs10DWbjrgmTg7PKnLzgw mndHuPB0kFFNf0treNo8TdtH4YezAUHdP3lozC9h/z3zUnYXCgGy78sYtBetGtrB 953OgHybXRW5SEUFBcW9tGMdlKtmYufT451W5j/hvqDXBsaqkBRAIjf9PcrvGbtr sVElR6J89msfePRGdTNoxVYTsA== -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:01 2024 by rpki-client on console-fra.rpki-client.org