$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/44CA8E9C7A2811EFA43D2558C4F9AE02.roa File: 44CA8E9C7A2811EFA43D2558C4F9AE02.roa (raw, json) Hash identifier: 8Cc+PLs+/tx+lp1/rLLPaUvNT8vXFRU1NrLduLeiq2w= Subject key identifier: 74:67:91:6B:25:11:E0:0A:48:B2:E5:6A:A3:A6:9F:E0:DF:E7:43:76 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 099A Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/44CA8E9C7A2811EFA43D2558C4F9AE02.roa Signing time: Wed 06 Nov 2024 20:09:47 +0000 ROA not before: Wed 06 Nov 2024 20:09:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 2914 IP address blocks: 137.220.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2458 (0x99a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 6 20:09:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bcd0b-b385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:29:1d:93:c2:52:8f:75:7a:b7:49:77:1e: 73:d2:92:ee:27:a6:e3:46:c8:bf:46:f3:16:10:f5: 87:af:32:fd:b0:e1:fb:64:37:05:80:82:1a:a6:30: 1a:69:06:66:1c:94:9d:29:56:18:01:35:d2:83:e7: e8:a8:c3:0e:54:71:53:d1:a9:e1:42:46:33:38:f6: b7:35:5c:cd:be:39:91:9d:36:1a:c6:69:02:81:27: fa:05:f6:27:0d:7c:f2:5e:28:ef:64:d2:74:30:56: 93:92:75:c2:bb:e9:14:2b:93:5a:82:67:ff:4a:1c: 94:37:02:7c:f7:5f:3d:e8:bf:db:f9:92:8c:28:cf: 30:b8:18:33:f0:3c:19:cb:35:e9:0c:73:76:36:a3: a9:c1:0d:d8:2f:67:cc:82:b7:14:bb:5e:06:ff:6c: 96:da:b9:36:c5:2d:8e:53:45:2b:87:2f:78:6d:cd: 19:84:21:8c:3a:45:e5:61:a3:61:12:f3:7a:dd:84: 1f:0e:bf:ef:2f:4c:87:c7:90:e9:30:55:77:a9:9d: 29:49:51:8b:8a:d8:cc:ff:67:63:4d:8e:ab:d0:54: 3e:d7:43:46:19:e9:bf:6f:69:24:ce:28:da:99:4a: 0e:d9:2d:95:9a:5d:4f:8f:ce:a2:fc:58:dc:d3:11: 48:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:67:91:6B:25:11:E0:0A:48:B2:E5:6A:A3:A6:9F:E0:DF:E7:43:76 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/44CA8E9C7A2811EFA43D2558C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.220.151.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:a0:57:a5:3e:50:e1:5e:41:bf:a2:cf:7e:5f:ae:64:a5:5e: b1:2c:aa:f1:8d:52:f0:c6:b8:9f:2d:de:2f:91:09:f8:41:30: 9d:43:31:38:b5:93:0f:46:4d:13:b1:68:8a:56:6e:87:f6:a0: 79:a3:fa:de:7f:9e:ec:24:e7:b8:d3:09:c0:da:57:1e:b6:8a: 55:80:9d:07:a6:ea:1e:9d:89:14:6b:03:d9:c9:11:e2:ad:c6: 84:c7:ba:7f:89:b8:94:8b:3a:ca:de:2d:f3:2f:e4:3b:f1:78: 6a:56:ea:e8:0c:60:3c:42:d6:be:7f:33:e4:c9:30:00:aa:a4: f6:be:54:18:58:8f:0a:c9:75:f2:bf:94:e0:d9:65:38:3e:ba: fb:b9:ea:82:fc:b2:ce:c0:68:8f:34:4f:d1:48:b5:da:d7:2a: 6e:5d:cf:68:2c:aa:08:0c:3c:bc:2a:87:c7:69:6a:e0:f8:ac: 1b:72:fe:82:94:43:fe:d7:14:e2:8e:95:d8:f0:77:1d:43:cd: 8e:e6:c1:81:a0:6f:3a:32:c3:6c:55:3d:b9:89:fb:1e:08:27: f0:8d:0b:ec:45:c6:b5:2f:d5:a7:1d:72:63:39:3a:27:77:83: e3:51:ba:70:ff:90:04:3f:da:53:90:15:de:f4:c3:b7:09:0f: 3d:3d:4b:7c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjQxMTA2MjAwOTQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiY2QwYi1iMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS8pHZPCUo91erdJdx5z0pLuJ6bjRsi/RvMWEPWHrzL9sOH7ZDcFgIIapjAa aQZmHJSdKVYYATXSg+foqMMOVHFT0anhQkYzOPa3NVzNvjmRnTYaxmkCgSf6BfYn DXzyXijvZNJ0MFaTknXCu+kUK5Nagmf/ShyUNwJ891896L/b+ZKMKM8wuBgz8DwZ yzXpDHN2NqOpwQ3YL2fMgrcUu14G/2yW2rk2xS2OU0Urhy94bc0ZhCGMOkXlYaNh EvN63YQfDr/vL0yHx5DpMFV3qZ0pSVGLitjM/2djTY6r0FQ+10NGGem/b2kkzija mUoO2S2Vml1Pj86i/Fjc0xFI1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFHRnkWsl EeAKSLLlaqOmn+Df50N2MB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvNDRDQThFOUM3 QTI4MTFFRkE0M0QyNTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACJ3JcwDQYJKoZIhvcNAQELBQADggEBAEugV6U+UOFeQb+i z35frmSlXrEsqvGNUvDGuJ8t3i+RCfhBMJ1DMTi1kw9GTROxaIpWbof2oHmj+t5/ nuwk57jTCcDaVx62ilWAnQem6h6diRRrA9nJEeKtxoTHun+JuJSLOsreLfMv5Dvx eGpW6ugMYDxC1r5/M+TJMACqpPa+VBhYjwrJdfK/lODZZTg+uvu56oL8ss7AaI80 T9FItdrXKm5dz2gsqggMPLwqh8dpauD4rBty/oKUQ/7XFOKOldjwdx1DzY7mwYGg bzoyw2xVPbmJ+x4IJ/CNC+xFxrUv1acdcmM5Oid3g+NRunD/kAQ/2lOQFd70w7cJ Dz09S3w= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org