$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/0886DE60D4D311ECBE99375AC4F9AE02.roa File: 0886DE60D4D311ECBE99375AC4F9AE02.roa (raw, json) Hash identifier: i42rO/0Bb4471P7OnsqWd5SCWNZABNZS/YPCx6t2J74= Subject key identifier: C2:EC:12:0E:52:63:03:B6:BC:FD:76:A6:F3:BB:90:F4:58:07:17:F6 Certificate issuer: /CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Certificate serial: 06D2 Authority key identifier: B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/0886DE60D4D311ECBE99375AC4F9AE02.roa Signing time: Thu 11 Apr 2024 14:40:41 +0000 ROA not before: Thu 11 Apr 2024 14:40:41 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 132825 IP address blocks: 185.135.72.0/24 maxlen: 24 185.135.75.0/24 maxlen: 24 185.135.76.0/24 maxlen: 24 185.135.77.0/24 maxlen: 24 185.135.78.0/24 maxlen: 24 185.135.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1746 (0x6d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123072/serialNumber=B658EF6B27929C7B7F5FB26CB9EE6A412CE85DD4 Validity Not Before: Apr 11 14:40:41 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6617f669-175c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:28:18:c4:c8:2c:c8:0a:1d:ec:c5:3f:eb: 4b:80:12:54:b2:15:06:8c:c8:0f:27:1f:7b:ce:6d: 56:fb:40:57:8f:f2:37:ab:87:90:a2:76:24:47:f1: 08:22:b1:59:3d:ae:37:a9:9c:00:4e:f6:0b:66:8f: 4b:80:d4:71:52:76:94:d4:cb:87:4d:3c:0a:5c:19: ae:ec:bb:b5:f1:fa:25:d3:57:c1:15:3f:ad:c5:7e: 2e:fe:2b:29:a1:22:ad:24:12:46:6a:56:01:a4:04: 39:ae:d1:8c:8f:a7:2e:29:78:d9:e5:db:05:4f:c0: 09:16:56:8b:95:2c:c3:22:13:53:3e:1f:fe:c8:b9: 56:92:13:65:f5:c0:8b:6d:98:e9:23:94:1f:44:a3: 11:1d:9b:22:63:16:e7:a0:e1:a0:a6:0c:3b:0d:bc: bf:02:95:2f:df:19:77:35:1c:0f:70:26:a3:c3:75: c9:b4:0a:b2:75:75:2f:85:08:a6:04:f5:11:41:33: fe:47:6c:6f:c3:d4:f7:50:c7:c7:6b:bf:bd:46:93: 89:d3:99:75:17:6c:a0:c7:f5:ed:7e:be:4f:12:c8: 42:b8:41:49:0a:05:3b:c8:33:9a:0d:22:c3:77:83: 4b:bf:18:d5:34:2b:20:b3:9d:40:33:57:f2:69:0e: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EC:12:0E:52:63:03:B6:BC:FD:76:A6:F3:BB:90:F4:58:07:17:F6 X509v3 Authority Key Identifier: keyid:B6:58:EF:6B:27:92:9C:7B:7F:5F:B2:6C:B9:EE:6A:41:2C:E8:5D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/tljvayeSnHt_X7Jsue5qQSzoXdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tljvayeSnHt_X7Jsue5qQSzoXdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/069A06E60B5C11EB99A17562C4F9AE02/0886DE60D4D311ECBE99375AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.135.72.0/24 185.135.75.0-185.135.79.255 Signature Algorithm: sha256WithRSAEncryption 4e:43:95:bd:e5:7f:03:54:86:db:f1:84:46:aa:be:97:7d:59: e0:af:a1:ec:9d:52:ee:9a:65:90:14:00:e9:e4:15:48:1a:d9: c4:30:62:ff:db:f3:39:ff:8b:f5:7c:4f:07:9a:3f:6e:05:b8: 1f:82:73:bf:a5:59:89:7c:86:30:32:f0:22:de:54:c9:aa:e0: a3:fe:1d:a7:23:92:c1:83:79:8e:19:aa:ee:44:ec:fa:d2:c9: 72:c3:af:e1:3f:53:1d:e3:8f:4b:d7:97:1d:d2:14:ef:1d:5e: 10:7d:37:be:5d:8a:06:89:99:4b:96:6d:f2:ca:99:d1:40:ec: 63:a1:8a:9d:e3:70:b2:26:1b:69:bc:96:cf:5c:58:6b:4a:f8: 9d:b2:da:3c:bb:52:80:37:21:e1:50:7b:c5:03:66:42:8a:41: d9:fa:bc:d1:fd:7c:ef:eb:ad:59:6d:1e:0b:0d:ba:8f:cc:11: b4:f6:01:f3:80:9a:b9:cb:93:67:69:dc:64:c7:87:27:81:ed: 09:6e:f5:c5:8c:7e:b8:47:b9:f5:c2:c3:e2:d6:01:cb:d1:99: ef:ee:96:35:0e:e3:e0:08:e9:9b:45:78:97:2d:2a:41:86:36: a1:91:8f:36:e5:fd:7a:25:27:c3:48:8e:d9:d8:d4:18:cd:88: a6:e5:b6:8c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwNzIxMTAvBgNVBAUTKEI2NThFRjZCMjc5MjlDN0I3RjVGQjI2Q0I5RUU2QTQx MkNFODVERDQwHhcNMjQwNDExMTQ0MDQxWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE3ZjY2OS0xNzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BgoGMTILMgKHezFP+tLgBJUshUGjMgPJx97zm1W+0BXj/I3q4eQonYkR/EI IrFZPa43qZwATvYLZo9LgNRxUnaU1MuHTTwKXBmu7Lu18fol01fBFT+txX4u/isp oSKtJBJGalYBpAQ5rtGMj6cuKXjZ5dsFT8AJFlaLlSzDIhNTPh/+yLlWkhNl9cCL bZjpI5QfRKMRHZsiYxbnoOGgpgw7Dby/ApUv3xl3NRwPcCajw3XJtAqydXUvhQim BPURQTP+R2xvw9T3UMfHa7+9RpOJ05l1F2ygx/Xtfr5PEshCuEFJCgU7yDOaDSLD d4NLvxjVNCsgs51AM1fyaQ7mVQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFMLsEg5S YwO2vP12pvO7kPRYBxf2MB8GA1UdIwQYMBaAFLZY72snkpx7f1+ybLnuakEs6F3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wNjlBMDZFNjBC NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi90bGp2YXllU25IdF9YN0pzdWU1cVFTem9Y ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3RsanZheWVTbkh0X1g3SnN1ZTVxUVN6b1hkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjMwNzIvMDY5QTA2RTYwQjVDMTFFQjk5QTE3NTYyQzRGOUFFMDIvMDg4NkRFNjBE NEQzMTFFQ0JFOTkzNzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAC5h0gwDAMEALmHSwMEBLmHQDANBgkqhkiG9w0BAQsFAAOC AQEATkOVveV/A1SG2/GERqq+l31Z4K+h7J1S7pplkBQA6eQVSBrZxDBi/9vzOf+L 9XxPB5o/bgW4H4Jzv6VZiXyGMDLwIt5Uyargo/4dpyOSwYN5jhmq7kTs+tLJcsOv 4T9THeOPS9eXHdIU7x1eEH03vl2KBomZS5Zt8sqZ0UDsY6GKneNwsiYbabyWz1xY a0r4nbLaPLtSgDch4VB7xQNmQopB2fq80f187+utWW0eCw26j8wRtPYB84CaucuT Z2ncZMeHJ4HtCW71xYx+uEe59cLD4tYBy9GZ7+6WNQ7j4Ajpm0V4ly0qQYY2oZGP NuX9eiUnw0iO2djUGM2IpuW2jA== -----END CERTIFICATE-----Generated at Sat Jun 1 02:01:11 2024 by rpki-client on console-ams.rpki-client.org