$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa File: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (raw, json) Hash identifier: JpR0rDG4Cs0BP7f4Pwy0G0ZaJiuhalealzbnqlmcZY8= Subject key identifier: 3E:6E:5D:64:DC:2F:DD:A7:72:F4:87:A6:A9:BB:31:B3:59:99:98:23 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 0607 Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa Signing time: Wed 20 Dec 2023 10:17:45 +0000 ROA not before: Wed 20 Dec 2023 10:17:45 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 132203 IP address blocks: 129.226.144.0/20 maxlen: 20 129.226.152.0/24 maxlen: 24 162.62.48.0/20 maxlen: 24 162.62.64.0/20 maxlen: 24 162.62.96.0/19 maxlen: 24 162.62.128.0/19 maxlen: 24 162.62.255.0/24 maxlen: 24 170.106.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 20:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Dec 20 10:17:45 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6582bf48-36a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:52:45:ae:ab:4c:9a:c3:f6:8d:69:d1:b3: f7:0f:e6:21:91:28:b1:9c:d7:02:c9:cb:1a:06:9c: c5:de:d5:12:37:38:7a:96:d2:2a:e6:87:52:12:e3: 81:cd:9e:b7:46:e0:93:cb:52:56:5f:f3:c5:cc:85: f7:e9:7e:ba:9c:8b:83:d3:70:f1:7d:9f:ba:73:c6: fc:c7:51:d2:ed:f7:5e:9e:e8:2b:e4:03:e6:4e:96: 44:36:81:67:c9:d2:c9:e1:00:af:70:d7:53:cf:e0: b3:e5:8d:17:35:95:1c:ba:ed:4c:c8:7d:23:23:a9: 52:e7:41:3b:36:11:bb:d2:b7:1a:e7:86:4e:12:53: b1:b3:ba:9d:76:85:da:59:07:e3:ae:21:99:f9:b4: 83:4c:6d:e2:be:80:58:9e:3b:b1:ba:1e:f4:c6:bf: 19:c6:e4:71:1e:70:5a:3f:ee:a2:4b:fb:e2:26:6c: 7b:26:12:85:bb:72:71:e5:ab:d5:d3:e1:52:04:ce: 7d:bc:34:d7:f5:39:7c:69:f0:fe:bf:2e:d8:38:1c: c4:75:4c:e7:9e:a2:a8:bb:fe:ad:c2:ae:71:67:aa: f0:ec:a1:94:66:15:ab:9e:a3:90:68:9f:b6:b7:d5: 4c:a2:f7:c8:ec:9d:bb:60:86:a0:75:91:35:99:d7: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6E:5D:64:DC:2F:DD:A7:72:F4:87:A6:A9:BB:31:B3:59:99:98:23 X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/AA3A944A27EA11ECB1EBEA82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 129.226.144.0/20 162.62.48.0-162.62.79.255 162.62.96.0-162.62.159.255 162.62.255.0/24 170.106.149.0/24 Signature Algorithm: sha256WithRSAEncryption ac:99:79:82:60:86:c0:84:87:ae:04:4f:d4:eb:1f:8e:16:c6: bf:a1:e4:86:85:cf:8d:08:2e:64:17:7a:69:0e:9e:08:e0:ef: cc:5f:e6:6e:f3:fc:95:5c:b3:31:1d:ea:2e:30:bb:6b:4a:9c: 3d:e1:c0:0d:76:5c:83:36:db:66:32:29:6e:63:c5:8c:42:cf: 0c:95:d9:21:74:2a:a7:93:4f:e1:64:1b:00:dd:1b:c5:ef:a7: 84:14:6d:0e:f2:f5:7d:c7:a3:1c:83:d3:63:92:fe:0a:d1:60: f4:77:04:2f:62:34:d2:e2:ab:fe:27:25:03:7c:3c:e5:0c:c5: c5:1a:76:d3:1e:ce:4d:4e:98:44:45:49:b1:31:ea:6d:15:04: b5:81:0e:e7:43:fe:9a:d7:94:ca:ff:ab:f8:a5:a5:5e:f7:18: fc:69:db:27:98:3f:9c:c3:81:43:41:c3:ec:24:62:6b:05:ab: c5:5a:ff:8d:34:32:e9:ee:8e:05:ad:22:44:c1:b1:a9:0d:1d: 6d:b2:3b:dc:5e:6e:33:da:a9:66:c6:ce:85:2e:3f:10:54:d2: f2:08:4a:ac:f0:13:f9:30:9e:1b:d9:a2:38:16:59:9c:e6:45: f1:db:e2:cd:a9:5d:09:43:c1:bc:d7:f1:58:3a:f0:93:88:b4: 2d:fb:a4:4e -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjMxMjIwMTAxNzQ1WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgyYmY0OC0zNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGlSRa6rTJrD9o1p0bP3D+YhkSixnNcCycsaBpzF3tUSNzh6ltIq5odSEuOB zZ63RuCTy1JWX/PFzIX36X66nIuD03DxfZ+6c8b8x1HS7fdenugr5APmTpZENoFn ydLJ4QCvcNdTz+Cz5Y0XNZUcuu1MyH0jI6lS50E7NhG70rca54ZOElOxs7qddoXa WQfjriGZ+bSDTG3ivoBYnjuxuh70xr8ZxuRxHnBaP+6iS/viJmx7JhKFu3Jx5avV 0+FSBM59vDTX9Tl8afD+vy7YOBzEdUznnqKou/6twq5xZ6rw7KGUZhWrnqOQaJ+2 t9VMovfI7J27YIagdZE1mddXpwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFD5uXWTc L92ncvSHpqm7MbNZmZgjMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTdENjcvNjAyODY2Mzg0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvQUEzQTk0NEEy N0VBMTFFQ0IxRUJFQTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MDQEAgABMC4DBASB4pAwDAMEBKI+MAMEBKI+QDAMAwQFoj5gAwQFoj6AAwQA oj7/AwQAqmqVMA0GCSqGSIb3DQEBCwUAA4IBAQCsmXmCYIbAhIeuBE/U6x+OFsa/ oeSGhc+NCC5kF3ppDp4I4O/MX+Zu8/yVXLMxHeouMLtrSpw94cANdlyDNttmMilu Y8WMQs8MldkhdCqnk0/hZBsA3RvF76eEFG0O8vV9x6Mcg9Njkv4K0WD0dwQvYjTS 4qv+JyUDfDzlDMXFGnbTHs5NTphERUmxMeptFQS1gQ7nQ/6a15TK/6v4paVe9xj8 adsnmD+cw4FDQcPsJGJrBavFWv+NNDLp7o4FrSJEwbGpDR1tsjvcXm4z2qlmxs6F Lj8QVNLyCEqs8BP5MJ4b2aI4Flmc5kXx2+LNqV0JQ8G81/FYOvCTiLQt+6RO -----END CERTIFICATE-----Generated at Fri Jun 7 02:20:50 2024 by rpki-client on console-fra.rpki-client.org