$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa File: 744F6602B5B511EEACE32B4DC4F9AE02.roa (raw, json) Hash identifier: a3YB0azE3UpbBmCho636O391auKGjyd+jEVLSbWX2yg= Subject key identifier: E9:3B:62:0C:BF:C7:71:1D:75:87:D2:13:FE:D2:DC:E5:06:5C:BE:31 Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Certificate serial: 02 Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa Signing time: Thu 18 Jan 2024 03:55:44 +0000 ROA not before: Thu 18 Jan 2024 03:55:44 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 56304 IP address blocks: 192.156.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A Validity Not Before: Jan 18 03:55:44 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a8a140-ae85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:d9:25:23:71:97:82:3e:ef:66:59:b2:d9: 36:6a:56:1a:2f:0e:9a:d0:02:df:35:4c:87:66:25: 84:61:a7:62:61:2a:11:11:0e:92:03:04:ce:2b:72: bb:17:43:33:bf:aa:02:15:98:2e:92:91:ca:2d:be: d1:97:96:ef:7d:41:fe:6e:f3:73:0f:50:9e:31:48: 9a:df:f3:c3:49:e8:39:83:ec:83:f5:5e:4a:19:f5: 82:2b:13:71:3a:2a:73:8f:ae:5a:8d:49:28:e0:9c: 73:d4:8d:04:8b:4a:0a:45:4e:16:51:ff:91:db:e8: 91:45:e7:89:fe:65:88:ff:ee:6c:98:fc:72:4f:6f: 72:54:70:64:ce:6d:3d:38:a1:e5:43:ec:24:90:2d: f5:df:bc:8c:ed:76:49:51:67:48:fc:7d:b7:88:18: 9f:20:7e:81:ec:13:bb:91:73:6a:1a:45:27:c1:d1: d1:78:ba:66:dc:93:eb:44:2f:5d:4f:df:48:bf:d9: 6c:1c:44:a8:87:19:e6:2a:40:9e:38:61:0a:5e:17: b2:9c:de:7b:07:bd:0a:bc:99:9c:cc:1d:a9:a7:5b: db:46:30:34:1c:00:be:94:e6:96:f2:7b:c5:ef:ee: bb:2f:6e:9a:94:1c:e6:ba:81:0e:6b:2e:da:84:d9: be:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3B:62:0C:BF:C7:71:1D:75:87:D2:13:FE:D2:DC:E5:06:5C:BE:31 X509v3 Authority Key Identifier: keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/744F6602B5B511EEACE32B4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.156.225.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:fd:c1:f1:44:33:75:d8:fd:f9:fc:18:02:ca:23:ca:73:a4: 34:9a:3f:98:e1:89:9b:07:1b:13:7a:2d:a4:09:75:5a:c8:5d: 57:9b:21:23:b6:6f:2a:d1:0c:ab:ef:cf:0d:54:84:48:a0:52: 8a:b0:7e:05:c5:5b:4b:dc:2f:55:30:50:75:bf:6c:00:f0:74: 0d:16:d0:9d:43:77:0b:2d:b9:a4:8c:21:d1:25:65:23:e7:6f: e4:b3:9e:63:6c:2a:7a:c3:33:60:e9:f1:21:85:d6:2e:99:27: 71:18:9c:4b:b2:ee:4e:ea:1b:53:e7:ef:b4:8b:f6:55:6f:ec: e6:a6:93:53:2d:64:c2:4d:2e:29:36:4a:92:a9:b9:5e:54:4c: 8b:94:98:8a:7b:a0:d8:a7:2e:8f:5a:77:1a:d6:ca:ef:92:d4: 28:99:cd:59:af:23:54:97:78:6b:79:03:35:59:c8:47:f3:37: a1:4c:d7:3b:d3:4c:43:91:d2:5f:b8:96:20:dd:1d:c7:87:64: 73:76:3d:ed:bc:6a:36:17:39:aa:7e:fb:25:51:c5:84:44:f5: ef:70:b6:5f:1e:a4:c7:b4:1a:f3:b2:d0:01:9c:af:9f:b7:fc: 8c:51:bc:f9:72:69:c0:3d:51:87:e9:db:1d:49:95:f6:87:66: 9b:70:36:cf -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RkRERDExMC8GA1UEBRMoQkMxNzg4MkJGQzRBODYzMEExQkJGNkFGMDY1MThCOTBC QTREMTY4QTAeFw0yNDAxMTgwMzU1NDRaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1YThhMTQwLWFlODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCojNklI3GXgj7vZlmy2TZqVhovDprQAt81TIdmJYRhp2JhKhERDpIDBM4rcrsX QzO/qgIVmC6SkcotvtGXlu99Qf5u83MPUJ4xSJrf88NJ6DmD7IP1XkoZ9YIrE3E6 KnOPrlqNSSjgnHPUjQSLSgpFThZR/5Hb6JFF54n+ZYj/7myY/HJPb3JUcGTObT04 oeVD7CSQLfXfvIztdklRZ0j8fbeIGJ8gfoHsE7uRc2oaRSfB0dF4umbck+tEL11P 30i/2WwcRKiHGeYqQJ44YQpeF7Kc3nsHvQq8mZzMHamnW9tGMDQcAL6U5pbye8Xv 7rsvbpqUHOa6gQ5rLtqE2b4bAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6TtiDL/H cR11h9IT/tLc5QZcvjEwHwYDVR0jBBgwFoAUvBeIK/xKhjChu/avBlGLkLpNFoow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGREREL0VDREVBMUY2QjVC NDExRUVCN0U3MEM0Q0M0RjlBRTAyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZv by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdkJlSUtfeEtoakNodV9hdkJsR0xrTHBORm9vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi83NDRGNjYwMkI1 QjUxMUVFQUNFMzJCNERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMCc4TANBgkqhkiG9w0BAQsFAAOCAQEAPP3B8UQzddj9+fwY AsojynOkNJo/mOGJmwcbE3otpAl1WshdV5shI7ZvKtEMq+/PDVSESKBSirB+BcVb S9wvVTBQdb9sAPB0DRbQnUN3Cy25pIwh0SVlI+dv5LOeY2wqesMzYOnxIYXWLpkn cRicS7LuTuobU+fvtIv2VW/s5qaTUy1kwk0uKTZKkqm5XlRMi5SYinug2Kcuj1p3 GtbK75LUKJnNWa8jVJd4a3kDNVnIR/M3oUzXO9NMQ5HSX7iWIN0dx4dkc3Y97bxq Nhc5qn77JVHFhET173C2Xx6kx7Qa87LQAZyvn7f8jFG8+XJpwD1Rh+nbHUmV9odm m3A2zw== -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:26 2024 by rpki-client on console-fra.rpki-client.org