$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/FFCBC5B4819B11EBA2616775C4F9AE02.roa File: FFCBC5B4819B11EBA2616775C4F9AE02.roa (raw, json) Hash identifier: y4wdYQxL3+/JBU+hlA/z6ECaUqlQLW0+pWnE4ACl1B4= Subject key identifier: 5F:EB:78:9A:62:31:6C:47:45:B9:A1:EB:63:24:B9:2A:D4:A7:F6:73 Certificate issuer: /CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604 Certificate serial: 0626 Authority key identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/FFCBC5B4819B11EBA2616775C4F9AE02.roa Signing time: Thu 02 Nov 2023 23:31:33 +0000 ROA not before: Thu 02 Nov 2023 23:31:33 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132847 IP address blocks: 89.147.120.0/22 maxlen: 24 176.116.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604 Validity Not Before: Nov 2 23:31:33 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65443154-37f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:83:2d:ca:7c:81:a2:6d:8d:cb:2f:c2:c7: 30:ce:b9:96:35:84:27:c4:cb:8a:0a:44:e1:e6:a3: 3f:b5:41:56:0e:a8:3f:5b:70:d6:63:6f:ac:8a:e5: 21:f0:93:21:f2:44:dc:30:b1:d9:e7:27:98:45:e9: c6:f1:9d:bf:43:3a:4b:3d:9e:85:34:28:eb:1d:a9: 58:54:35:e0:99:5d:12:bd:a7:62:71:6b:41:53:26: 83:2e:cf:69:2a:12:f3:47:45:60:7e:f9:ed:25:9c: c5:0d:59:1d:83:2e:05:28:b6:b3:d7:5c:d5:b2:7b: ac:db:01:b6:4d:0f:a3:3d:df:1d:0c:b3:9b:02:5d: f7:02:86:77:cf:13:26:eb:ae:e2:8d:27:01:22:12: fc:ce:0c:5b:56:9c:90:17:0a:0d:d7:05:04:76:da: 97:99:4d:31:0d:88:f8:c8:e2:f2:27:d2:33:fe:f1: ac:c2:70:5d:73:cc:59:17:d5:ce:46:2b:2f:5d:22: 75:df:ff:69:3b:53:f8:7b:93:0f:d7:b6:79:89:92: 1a:d0:30:8e:cc:b0:b8:c2:d5:61:5a:e0:8a:15:85: 57:c0:5a:0a:3f:2d:46:42:62:4e:83:fb:15:c1:3a: 90:33:d3:7e:c3:72:91:93:f9:f6:cd:d4:34:0c:64: 6a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EB:78:9A:62:31:6C:47:45:B9:A1:EB:63:24:B9:2A:D4:A7:F6:73 X509v3 Authority Key Identifier: keyid:7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/FFCBC5B4819B11EBA2616775C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 89.147.120.0/22 176.116.127.0/24 Signature Algorithm: sha256WithRSAEncryption 04:0e:b8:65:b4:d2:1e:72:5b:37:a3:86:49:8c:b9:7d:cc:36: 1a:fa:18:2a:e1:a6:3b:a8:4c:45:d0:5f:eb:25:23:7f:9b:63: 8a:32:65:3a:6a:70:2f:68:a4:ff:8d:0f:32:78:16:85:64:73: 63:c0:89:ef:61:ae:e2:ff:cc:65:3e:17:32:84:07:7f:99:7d: 23:fe:2a:6f:53:90:6c:76:2e:61:51:ea:4d:eb:95:8a:19:e0: 64:db:7d:66:a8:60:b4:95:f5:cd:cf:26:1a:ae:d0:a3:1f:dd: 36:7c:72:69:54:67:a5:5b:6d:e2:cf:33:c7:5a:02:32:20:54: e5:1d:9a:45:1f:75:30:d7:c7:79:60:bc:7c:8d:01:bb:3e:30: 96:4d:b6:7b:c1:b3:82:6d:ea:1d:de:30:08:18:27:48:d1:0e: 9f:d8:94:53:97:f9:1e:c8:1c:ce:5e:8a:6f:d5:e4:7f:c7:4f: e4:ee:66:71:25:47:a5:be:bd:db:3c:14:71:ab:a9:5a:4f:0a: 1e:76:66:af:80:78:3d:8f:ae:20:02:fb:f4:5f:41:95:c1:15: a9:02:6a:13:75:a3:31:ef:d0:6a:5c:17:85:89:2f:04:2e:b5: 77:e8:64:11:d4:9f:4c:2f:1a:5d:18:cb:e3:3a:08:87:8c:f4: 3b:92:37:9c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUxOEQxMTAvBgNVBAUTKDdCMkY5NUNFNkZEQzI1MzFCQkNBM0U1M0MxRDZFRDFC QTJBQTM2MDQwHhcNMjMxMTAyMjMzMTMzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ0MzE1NC0zN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCaDLcp8gaJtjcsvwscwzrmWNYQnxMuKCkTh5qM/tUFWDqg/W3DWY2+siuUh 8JMh8kTcMLHZ5yeYRenG8Z2/QzpLPZ6FNCjrHalYVDXgmV0SvadicWtBUyaDLs9p KhLzR0VgfvntJZzFDVkdgy4FKLaz11zVsnus2wG2TQ+jPd8dDLObAl33AoZ3zxMm 667ijScBIhL8zgxbVpyQFwoN1wUEdtqXmU0xDYj4yOLyJ9Iz/vGswnBdc8xZF9XO RisvXSJ13/9pO1P4e5MP17Z5iZIa0DCOzLC4wtVhWuCKFYVXwFoKPy1GQmJOg/sV wTqQM9N+w3KRk/n2zdQ0DGRqHQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFF/reJpi MWxHRbmh62MkuSrUp/ZzMB8GA1UdIwQYMBaAFHsvlc5v3CUxu8o+U8HW7RuiqjYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTE4RC83MDAxNUM0MjJB RTIxMUVCQkJGQzRGMEFDNEY5QUUwMi9leS1Wem1fY0pURzd5ajVUd2RidEc2S3FO Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2V5LVZ6bV9jSlRHN3lqNVR3ZGJ0RzZLcU5nUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUUxOEQvNzAwMTVDNDIyQUUyMTFFQkJCRkM0RjBBQzRGOUFFMDIvRkZDQkM1QjQ4 MTlCMTFFQkEyNjE2Nzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJZk3gDBACwdH8wDQYJKoZIhvcNAQELBQADggEBAAQOuGW0 0h5yWzejhkmMuX3MNhr6GCrhpjuoTEXQX+slI3+bY4oyZTpqcC9opP+NDzJ4FoVk c2PAie9hruL/zGU+FzKEB3+ZfSP+Km9TkGx2LmFR6k3rlYoZ4GTbfWaoYLSV9c3P Jhqu0KMf3TZ8cmlUZ6VbbeLPM8daAjIgVOUdmkUfdTDXx3lgvHyNAbs+MJZNtnvB s4Jt6h3eMAgYJ0jRDp/YlFOX+R7IHM5eim/V5H/HT+TuZnElR6W+vds8FHGrqVpP Ch52Zq+AeD2PriAC+/RfQZXBFakCahN1ozHv0GpcF4WJLwQutXfoZBHUn0wvGl0Y y+M6CIeM9DuSN5w= -----END CERTIFICATE-----Generated at Sat Jun 1 01:41:44 2024 by rpki-client on console-fra.rpki-client.org