$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/168AD09A04EF11EA9060B76BC4F9AE02.roa File: 168AD09A04EF11EA9060B76BC4F9AE02.roa (raw, json) Hash identifier: 8ZRYSXtg5HDUZuCMB3d8EdToPRSyP0xYvVFsMZiV9Eg= Subject key identifier: CA:F2:BE:F0:51:D5:3E:78:DD:F3:C1:C3:7E:E2:07:45:7B:CF:E1:EF Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0B4E Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/168AD09A04EF11EA9060B76BC4F9AE02.roa Signing time: Thu 28 Dec 2023 19:16:52 +0000 ROA not before: Thu 28 Dec 2023 19:16:52 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 139360 IP address blocks: 202.47.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2894 (0xb4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Dec 28 19:16:52 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658dc9a4-75cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:a3:5e:d9:9e:8e:31:c7:cb:1f:bf:0f:97: be:60:08:94:37:1f:3d:23:f3:98:b4:b4:cc:59:8e: 54:f9:f6:5f:e2:6c:13:a9:2f:12:99:aa:39:43:6a: a2:1a:53:5a:2c:0f:59:49:12:24:65:b2:b4:4c:05: 1a:45:35:32:08:a7:e8:8a:20:7b:55:89:76:3c:50: bb:f9:fe:cd:77:c8:46:a5:b9:41:b5:93:fc:90:78: a1:a2:87:8c:55:e3:0a:af:98:4b:83:7e:19:12:73: 5a:35:c5:b7:d6:8e:b4:04:6d:b7:6b:f7:df:db:b7: 1d:7e:24:3b:ae:d6:b5:9d:33:59:6d:b4:e5:da:f0: ce:15:5d:37:b0:10:ac:2a:c9:5d:b2:01:a3:d7:6f: a0:ea:9e:e0:27:70:70:80:87:dc:87:33:c2:81:28: d1:d2:51:ba:b1:03:de:69:8e:2c:95:83:6d:1e:57: 8e:1f:0d:29:b0:f0:a7:a5:2b:4c:c7:39:2f:5b:0e: 06:e6:47:f2:75:38:75:ac:e8:2f:71:65:db:03:2a: 3c:e6:e3:1b:f2:59:21:13:a9:7c:62:05:eb:ed:bc: fa:7e:c3:5f:5c:b9:12:68:e3:61:87:d8:7d:57:63: ff:db:7c:69:64:bd:a6:9d:ee:60:ec:59:6a:33:52: ac:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F2:BE:F0:51:D5:3E:78:DD:F3:C1:C3:7E:E2:07:45:7B:CF:E1:EF X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/168AD09A04EF11EA9060B76BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.124.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:cf:5b:ba:4c:2e:69:0e:fa:42:ce:c5:c0:3c:de:27:b4:21: 96:5b:72:6c:2f:c4:33:bc:e3:b5:51:44:2b:7b:80:6f:55:f2: 8d:21:8e:a3:a7:62:7e:79:7c:9d:d4:3c:9d:60:9c:be:34:e5: 9f:77:97:4e:80:8f:e8:4a:cd:70:32:f1:26:ec:f4:93:40:9b: b2:41:39:a5:05:c4:6f:e4:a3:f1:11:bc:50:17:9c:b6:64:d9: 12:d6:db:9d:a5:11:3e:4e:56:b0:92:c4:36:f1:c1:2f:af:bd: 33:66:72:e8:44:d1:4e:c8:e1:52:50:60:04:07:5a:b0:54:ac: f4:be:a8:94:34:22:b8:f2:59:65:49:8a:77:a3:56:e4:99:59: d6:32:de:ff:ae:48:cd:75:04:39:77:f2:46:b0:bd:fc:f5:31: 50:1c:2b:df:7a:fd:25:c0:a9:d5:f8:a8:8a:f7:51:9b:24:0d: 30:7b:e8:9b:61:73:0d:01:82:22:fc:a8:b4:7e:c4:16:55:3b: c5:c8:91:40:10:10:4f:0f:d4:ab:ab:f3:ae:f1:64:0e:8a:95: 5b:56:a4:61:74:14:7b:10:29:34:bf:1b:2f:51:bb:e8:63:d9: 56:16:05:c9:81:2f:3d:63:11:40:09:88:34:52:38:d3:8f:23: 6f:4e:af:dc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjMxMjI4MTkxNjUyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzlhNC03NWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwejXtmejjHHyx+/D5e+YAiUNx89I/OYtLTMWY5U+fZf4mwTqS8Smao5Q2qi GlNaLA9ZSRIkZbK0TAUaRTUyCKfoiiB7VYl2PFC7+f7Nd8hGpblBtZP8kHihooeM VeMKr5hLg34ZEnNaNcW31o60BG23a/ff27cdfiQ7rta1nTNZbbTl2vDOFV03sBCs KsldsgGj12+g6p7gJ3BwgIfchzPCgSjR0lG6sQPeaY4slYNtHleOHw0psPCnpStM xzkvWw4G5kfydTh1rOgvcWXbAyo85uMb8lkhE6l8YgXr7bz6fsNfXLkSaONhh9h9 V2P/23xpZL2mne5g7FlqM1Ks1QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMryvvBR 1T543fPBw37iB0V7z+HvMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhFQUYvMTBCMEUzRDAwNEVBMTFFQUJFREM4MTYxQzRGOUFFMDIvMTY4QUQwOUEw NEVGMTFFQTkwNjBCNzZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKL3wwDQYJKoZIhvcNAQELBQADggEBAGzPW7pMLmkO+kLO xcA83ie0IZZbcmwvxDO847VRRCt7gG9V8o0hjqOnYn55fJ3UPJ1gnL405Z93l06A j+hKzXAy8Sbs9JNAm7JBOaUFxG/ko/ERvFAXnLZk2RLW252lET5OVrCSxDbxwS+v vTNmcuhE0U7I4VJQYAQHWrBUrPS+qJQ0IrjyWWVJinejVuSZWdYy3v+uSM11BDl3 8kawvfz1MVAcK996/SXAqdX4qIr3UZskDTB76Jthcw0BgiL8qLR+xBZVO8XIkUAQ EE8P1Kur867xZA6KlVtWpGF0FHsQKTS/Gy9Ru+hj2VYWBcmBLz1jEUAJiDRSONOP I29Or9w= -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org