$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/FD969234F2D211EC89771C5AC4F9AE02.roa File: FD969234F2D211EC89771C5AC4F9AE02.roa (raw, json) Hash identifier: 7FaVtW9pPHjWV7CAxVegUQzPI6d8IOVHfw2sCMVtG80= Subject key identifier: 47:71:09:2A:42:F0:EA:E2:F9:B6:D7:5A:71:1C:02:7F:6D:FB:05:B9 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0B3F Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/FD969234F2D211EC89771C5AC4F9AE02.roa Signing time: Thu 07 Mar 2024 09:27:33 +0000 ROA not before: Thu 07 Mar 2024 09:27:33 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 141180 IP address blocks: 87.119.2.0/24 maxlen: 24 87.119.3.0/24 maxlen: 24 87.119.4.0/24 maxlen: 24 87.119.5.0/24 maxlen: 24 87.119.6.0/24 maxlen: 24 87.119.7.0/24 maxlen: 24 87.119.8.0/24 maxlen: 24 87.119.10.0/24 maxlen: 24 87.119.11.0/24 maxlen: 24 87.119.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Jun 2024 14:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2879 (0xb3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Mar 7 09:27:33 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65e98884-1c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:37:3e:8c:8d:bb:97:26:11:c9:24:21:c4:0b: 7e:97:54:bb:70:3b:03:15:54:2d:71:26:8f:00:be: a1:a2:d0:65:4a:7c:34:01:5c:27:70:66:2b:04:98: 36:38:8c:9a:88:41:61:3c:db:0c:a8:15:d9:db:13: 57:57:59:aa:69:8d:ba:94:96:a6:84:0e:98:6a:e6: c7:cd:e8:bf:7b:e9:11:44:03:39:1f:25:77:69:86: d7:25:81:15:31:84:2f:8c:58:da:10:4b:94:e1:58: c6:7b:bb:37:f6:c9:dd:74:d6:da:4c:47:33:98:14: 3b:6c:86:93:53:1e:94:6f:22:18:16:53:72:14:74: 31:31:43:70:59:e7:9c:7e:05:ce:be:14:be:a6:77: 6d:25:d8:e8:6f:80:5f:df:68:16:15:ad:92:ac:d6: dc:0d:9f:2b:dd:91:b3:e4:9b:7f:16:0b:33:7a:8d: 9e:28:8e:62:ae:88:ca:04:90:21:8d:e0:d7:4f:c3: 17:76:1f:4d:1f:5d:53:c3:f1:4f:e5:28:57:1a:c5: c3:d1:f3:72:97:55:23:c7:63:4e:1f:b0:3e:8d:3c: 76:3f:41:1a:a7:b4:23:d6:34:7f:19:f5:9d:1c:bb: 61:4b:04:90:7b:58:64:27:52:a7:0e:e6:42:9c:c2: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:71:09:2A:42:F0:EA:E2:F9:B6:D7:5A:71:1C:02:7F:6D:FB:05:B9 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/FD969234F2D211EC89771C5AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.119.2.0-87.119.8.255 87.119.10.0-87.119.12.255 Signature Algorithm: sha256WithRSAEncryption b0:5f:d5:e1:79:f5:37:e3:7f:db:2c:9f:b9:4f:21:7b:99:23: f6:17:56:1e:b7:64:14:d1:05:3c:cc:5c:d3:9f:b1:56:ac:d7: 7b:73:cd:8e:67:51:ce:d7:1c:71:2e:a9:15:4f:58:66:d7:7c: 8a:77:df:3f:b1:94:6b:d5:97:ef:82:ff:34:8e:b5:e7:93:ac: 60:3c:81:b4:23:b3:2a:21:a1:f1:97:12:12:3c:2e:64:65:25: e3:3c:6d:40:ba:2d:ee:5b:76:54:b1:51:f8:28:af:0c:98:b0: c1:4c:af:98:16:a7:12:e4:8e:e5:b1:b0:28:b5:aa:40:ac:b1: a4:db:c3:9d:2c:8d:5b:01:f4:75:82:4f:76:da:0d:97:e8:93: 8c:9c:bb:56:3c:08:90:a8:4f:fb:7a:97:c0:ad:e1:6f:bf:28: b9:c8:aa:9f:f5:8b:c1:e7:31:f0:02:e9:c5:57:6c:d5:a8:47: 26:d2:0c:b3:03:0e:68:1c:21:77:5e:98:76:af:dd:6d:06:2a: 7f:c7:14:e8:7a:41:13:9e:0d:da:0b:5f:6b:c7:1e:85:03:69: 98:cf:d3:63:77:64:3c:cb:a0:1f:df:a6:70:92:3b:5f:a1:18: e8:f7:0c:5c:bb:90:08:de:20:d6:ca:f5:77:6e:2b:19:f6:b8: 5f:bf:59:d3 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICCz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjQwMzA3MDkyNzMzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU5ODg4NC0xYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzc+jI27lyYRySQhxAt+l1S7cDsDFVQtcSaPAL6hotBlSnw0AVwncGYrBJg2 OIyaiEFhPNsMqBXZ2xNXV1mqaY26lJamhA6YaubHzei/e+kRRAM5HyV3aYbXJYEV MYQvjFjaEEuU4VjGe7s39snddNbaTEczmBQ7bIaTUx6UbyIYFlNyFHQxMUNwWeec fgXOvhS+pndtJdjob4Bf32gWFa2SrNbcDZ8r3ZGz5Jt/Fgszeo2eKI5irojKBJAh jeDXT8MXdh9NH11Tw/FP5ShXGsXD0fNyl1Ujx2NOH7A+jTx2P0Eap7Qj1jR/GfWd HLthSwSQe1hkJ1KnDuZCnMKj1QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEdxCSpC 8Ori+bbXWnEcAn9t+wW5MB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0U2NzgvQkVCMzMzRkEyMjUxMTFFQUIyQ0I4NDY5QzRGOUFFMDIvRkQ5NjkyMzRG MkQyMTFFQzg5NzcxQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAVd3AgMEAFd3CDAMAwQBV3cKAwQAV3cMMA0GCSqGSIb3 DQEBCwUAA4IBAQCwX9XhefU343/bLJ+5TyF7mSP2F1Yet2QU0QU8zFzTn7FWrNd7 c82OZ1HO1xxxLqkVT1hm13yKd98/sZRr1Zfvgv80jrXnk6xgPIG0I7MqIaHxlxIS PC5kZSXjPG1Aui3uW3ZUsVH4KK8MmLDBTK+YFqcS5I7lsbAotapArLGk28OdLI1b AfR1gk922g2X6JOMnLtWPAiQqE/7epfAreFvvyi5yKqf9YvB5zHwAunFV2zVqEcm 0gyzAw5oHCF3Xph2r91tBip/xxToekETng3aC19rxx6FA2mYz9Njd2Q8y6Af36Zw kjtfoRjo9wxcu5AI3iDWyvV3bisZ9rhfv1nT -----END CERTIFICATE-----Generated at Wed Jun 12 19:37:25 2024 by rpki-client on console-ams.rpki-client.org