$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa File: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (raw, json) Hash identifier: GQ/0DZoDl9xWpjaBH7TYItVUTT3yJCpT0ToW8WsLkYc= Subject key identifier: AD:96:2E:58:00:6A:05:7D:D6:59:1B:44:1F:75:5F:31:96:CD:74:35 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 0F55 Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa Signing time: Sat 12 Aug 2023 17:55:03 +0000 ROA not before: Sat 12 Aug 2023 17:55:03 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 137989 IP address blocks: 87.247.160.0/21 maxlen: 22 87.247.160.0/24 maxlen: 24 87.247.161.0/24 maxlen: 24 87.247.162.0/24 maxlen: 24 87.247.163.0/24 maxlen: 24 87.247.164.0/24 maxlen: 24 87.247.165.0/24 maxlen: 24 87.247.166.0/24 maxlen: 24 87.247.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3925 (0xf55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: Aug 12 17:55:03 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64d7c777-af5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:f7:ef:a3:e3:09:56:d0:98:95:f2:04:66: 0e:1d:7a:37:af:ba:ce:e7:d1:12:aa:2c:6e:17:22: 80:8d:d4:8d:24:ab:0b:1e:b3:05:fb:12:d0:e7:4d: a4:81:a7:49:d3:f0:78:3b:5d:71:60:6c:fb:fb:f1: 63:f8:48:c7:4c:23:df:59:29:bd:bd:80:ea:1b:d1: d2:5f:5a:fd:42:a1:58:fb:eb:75:3c:24:9f:98:12: 19:b2:07:a7:58:50:f2:58:94:06:3b:4e:85:9a:bb: 60:eb:cc:98:06:81:fd:f5:05:bd:28:e5:58:cf:14: c3:c8:15:36:05:7d:d0:fd:3a:de:33:73:aa:97:43: 46:59:3a:12:b5:c6:8d:ed:8d:a4:6f:36:f5:68:9f: be:d3:49:36:3c:82:77:c2:db:f2:21:d6:b8:1d:fb: d5:eb:f4:eb:ab:e9:0c:1b:43:5a:66:7d:f8:76:d9: 29:7c:42:ac:8f:4b:b0:60:2a:e8:35:c8:3f:a3:87: 47:f7:db:5a:fd:ac:18:09:a9:23:99:d7:b6:7c:fb: 97:fa:e0:af:e2:1b:fb:1f:dd:77:8c:0e:90:df:87: d4:4e:fa:be:fc:e6:e2:9e:50:20:c1:a3:1d:65:25: b6:60:59:cb:a8:ad:0c:a5:d0:3b:bc:0c:8b:49:3d: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:96:2E:58:00:6A:05:7D:D6:59:1B:44:1F:75:5F:31:96:CD:74:35 X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.247.160.0/21 Signature Algorithm: sha256WithRSAEncryption 46:41:fd:41:e4:79:69:09:de:41:39:24:f9:bb:fa:b1:df:f2: e0:93:54:96:98:7f:45:0d:97:50:02:33:b5:f7:87:5c:11:66: 70:ac:92:0b:ea:a1:1f:c7:6e:f8:df:1c:60:90:c0:ae:7b:12: e9:33:a4:3d:70:06:ad:d0:49:a2:c4:66:e8:00:a3:0e:b1:c2: 89:b8:39:c6:0a:5c:1c:c8:91:92:36:78:0c:d3:16:10:f2:82: 98:e1:40:d7:13:f1:e3:96:6b:6f:46:c3:84:4f:06:43:51:64: b3:38:3d:78:d2:d3:e4:c3:5f:5e:b4:6f:1b:95:3f:98:2b:6c: 97:78:a3:fe:fc:1c:29:e1:c3:39:ce:41:bb:5a:10:60:68:9f: fc:ba:c4:d7:74:3f:cb:c8:72:55:d8:17:c0:39:a4:cf:44:8c: d7:ca:22:d4:c7:8f:ca:7b:71:06:e8:a7:1f:41:fe:1b:ae:4c: 3e:c5:c2:2f:e7:84:d6:e5:f1:5d:6b:4e:fa:78:e5:ee:d8:dc: ff:dd:d7:69:0e:aa:dd:60:6d:eb:f4:83:df:db:54:21:f4:2f: 32:18:c4:38:c9:8b:b5:42:8e:39:ef:19:8b:8a:0b:d1:23:95: 3a:04:4d:b6:80:37:65:59:3a:64:bb:da:bd:b2:75:e1:81:25: 8c:3e:2b:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjMwODEyMTc1NTAzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQ3Yzc3Ny1hZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAb376PjCVbQmJXyBGYOHXo3r7rO59ESqixuFyKAjdSNJKsLHrMF+xLQ502k gadJ0/B4O11xYGz7+/Fj+EjHTCPfWSm9vYDqG9HSX1r9QqFY++t1PCSfmBIZsgen WFDyWJQGO06Fmrtg68yYBoH99QW9KOVYzxTDyBU2BX3Q/TreM3Oql0NGWToStcaN 7Y2kbzb1aJ++00k2PIJ3wtvyIda4HfvV6/Trq+kMG0NaZn34dtkpfEKsj0uwYCro Ncg/o4dH99ta/awYCakjmde2fPuX+uCv4hv7H913jA6Q34fUTvq+/ObinlAgwaMd ZSW2YFnLqK0MpdA7vAyLST1lIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK2WLlgA agV91lkbRB91XzGWzXQ1MB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NEYvMDAwMzc1QTQyOTBCMTFFOTk5QzVFQjE0QzRGOUFFMDIvMTBDREU1M0Uy QzQxMTFFOThBQTUwNTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANX96AwDQYJKoZIhvcNAQELBQADggEBAEZB/UHkeWkJ3kE5 JPm7+rHf8uCTVJaYf0UNl1ACM7X3h1wRZnCskgvqoR/HbvjfHGCQwK57EukzpD1w Bq3QSaLEZugAow6xwom4OcYKXBzIkZI2eAzTFhDygpjhQNcT8eOWa29Gw4RPBkNR ZLM4PXjS0+TDX160bxuVP5grbJd4o/78HCnhwznOQbtaEGBon/y6xNd0P8vIclXY F8A5pM9EjNfKItTHj8p7cQbopx9B/huuTD7Fwi/nhNbl8V1rTvp45e7Y3P/d12kO qt1gbev0g9/bVCH0LzIYxDjJi7VCjjnvGYuKC9EjlToETbaAN2VZOmS72r2ydeGB JYw+K10= -----END CERTIFICATE-----Generated at Thu Jun 6 18:47:45 2024 by rpki-client on console-fra.rpki-client.org