$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EAE5FA0068F111EC8890FA3FC4F9AE02.roa File: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (raw, json) Hash identifier: EjWAvqG0p06YrvyVbdxSE0MmSKbTzSV0pAzJygZ+3+o= Subject key identifier: 3B:4C:38:8E:F7:DC:5A:24:6D:ED:0A:F2:66:B5:17:F8:7D:2B:E7:0A Certificate issuer: /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Certificate serial: 0FB5 Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EAE5FA0068F111EC8890FA3FC4F9AE02.roa Signing time: Thu 30 May 2024 18:51:10 +0000 ROA not before: Thu 30 May 2024 18:51:10 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 45090 IP address blocks: 114.117.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4021 (0xfb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75 Validity Not Before: May 30 18:51:10 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6658ca9e-586c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:64:69:1a:13:cf:b6:91:1f:3a:57:9d:f3: 77:f0:98:4c:86:d7:e9:f0:92:87:49:70:81:d8:ab: 41:c8:ee:1e:b1:c1:b2:66:c6:b1:29:17:32:b6:3a: be:6f:3c:ce:95:9d:9f:41:ca:1d:ba:f3:d7:b0:9e: 43:ca:18:0e:7a:94:fc:2f:a2:ba:7b:54:8f:0f:77: e7:6c:19:e9:fb:88:7a:4f:72:ab:a6:77:21:69:e4: 31:08:d1:c3:5b:b9:17:7b:87:aa:6b:55:40:76:3b: ac:75:8b:b8:c4:57:34:86:98:59:a0:b1:87:c3:d8: eb:bd:c9:06:52:0e:42:a9:60:b1:50:18:ab:92:50: c3:0f:16:a6:ad:0b:59:e1:25:f4:71:10:ad:73:e8: fc:76:01:9f:eb:1a:4d:3b:b4:13:f3:d6:70:41:f7: a5:ce:1c:43:23:0d:ab:e0:01:3e:90:2d:e3:76:fe: 5d:55:60:8c:cd:c5:34:e4:06:5c:0b:0e:8c:8e:49: 56:fd:48:18:b6:3b:1b:c4:8d:83:02:77:4b:0b:1e: 72:00:78:e8:3c:86:9e:61:86:cf:14:dc:6d:fd:12: bc:f0:ea:4c:6f:47:b0:26:09:82:9a:79:25:5e:35: f9:00:b6:e3:a6:96:d0:12:6e:85:a0:f1:f1:c3:6a: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4C:38:8E:F7:DC:5A:24:6D:ED:0A:F2:66:B5:17:F8:7D:2B:E7:0A X509v3 Authority Key Identifier: keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EAE5FA0068F111EC8890FA3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.117.128.0/21 Signature Algorithm: sha256WithRSAEncryption 5d:92:34:bf:15:23:82:4a:78:1d:7c:8e:ec:79:49:e1:3b:41: b3:0b:2c:03:1b:40:06:f0:1c:64:bf:a3:3e:f2:e9:17:b2:e1: 8b:06:79:8f:05:92:a6:a7:c2:3c:cb:89:0c:e0:7e:35:20:de: 2f:12:f2:2e:20:45:8f:da:74:48:77:42:07:7b:d6:7a:b0:32: 7d:b7:88:54:fd:9a:41:99:a1:e4:89:c4:4a:8e:08:f8:f8:ed: 91:be:c5:c4:dd:b9:84:20:fe:19:3f:b1:f1:f8:78:d5:8e:6f: 61:a9:56:2d:61:96:c7:f2:8a:84:8b:1d:5a:31:d3:ae:2e:13: 91:e8:26:f6:59:c6:2b:1f:f6:13:3b:52:21:4c:09:95:1d:11: b0:13:84:50:f9:f1:d8:b2:7b:9d:eb:e4:37:a1:0f:e0:c2:86: ea:4b:5c:b6:bc:f8:6e:1b:32:88:17:b7:74:ce:c6:65:20:c4: f2:b2:a6:ab:c8:53:9b:74:9e:df:fe:44:eb:15:b0:4e:34:a3: 2f:93:90:2f:92:91:66:88:46:8c:d6:40:f5:1a:ca:40:14:2d: 59:df:dd:c0:c2:20:0d:de:92:ee:2e:3b:8e:96:13:1c:f5:ab: 66:a4:b5:37:cd:6d:6c:2f:6f:8f:65:7b:e8:fd:29:19:85:32: 60:ea:da:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NzQxMTAvBgNVBAUTKDEwRjYxQzZCQkUzNjc0MDQ1MTJGQkM4M0NEREE4NUE5 OUM3RjNDNzUwHhcNMjQwNTMwMTg1MTEwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4Y2E5ZS01ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3hkaRoTz7aRHzpXnfN38JhMhtfp8JKHSXCB2KtByO4escGyZsaxKRcytjq+ bzzOlZ2fQcoduvPXsJ5DyhgOepT8L6K6e1SPD3fnbBnp+4h6T3KrpnchaeQxCNHD W7kXe4eqa1VAdjusdYu4xFc0hphZoLGHw9jrvckGUg5CqWCxUBirklDDDxamrQtZ 4SX0cRCtc+j8dgGf6xpNO7QT89ZwQfelzhxDIw2r4AE+kC3jdv5dVWCMzcU05AZc Cw6MjklW/UgYtjsbxI2DAndLCx5yAHjoPIaeYYbPFNxt/RK88OpMb0ewJgmCmnkl XjX5ALbjppbQEm6FoPHxw2pzYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDtMOI73 3Fokbe0K8ma1F/h9K+cKMB8GA1UdIwQYMBaAFBD2HGu+NnQEUS+8g83ahamcfzx1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk3NC9FQzgyMzBFMjNB NDkxMUU5OTQwRjJEMTZDNEY5QUUwMi9FUFljYTc0MmRBUlJMN3lEemRxRnFaeF9Q SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VQWWNhNzQyZEFSUkw3eUR6ZHFGcVp4X1BIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjA5NzQvRUM4MjMwRTIzQTQ5MTFFOTk0MEYyRDE2QzRGOUFFMDIvRUFFNUZBMDA2 OEYxMTFFQzg4OTBGQTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANydYAwDQYJKoZIhvcNAQELBQADggEBAF2SNL8VI4JKeB18 jux5SeE7QbMLLAMbQAbwHGS/oz7y6Rey4YsGeY8FkqanwjzLiQzgfjUg3i8S8i4g RY/adEh3Qgd71nqwMn23iFT9mkGZoeSJxEqOCPj47ZG+xcTduYQg/hk/sfH4eNWO b2GpVi1hlsfyioSLHVox064uE5HoJvZZxisf9hM7UiFMCZUdEbAThFD58diye53r 5DehD+DChupLXLa8+G4bMogXt3TOxmUgxPKypqvIU5t0nt/+ROsVsE40oy+TkC+S kWaIRozWQPUaykAULVnf3cDCIA3eku4uO46WExz1q2aktTfNbWwvb49le+j9KRmF MmDq2oo= -----END CERTIFICATE-----Generated at Fri May 31 20:33:58 2024 by rpki-client on console-ams.rpki-client.org