$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa File: CB42B95CBD4511EB9A852313C4F9AE02.roa (raw, json) Hash identifier: ispORvhiZYuVBbLjB8YNYcrT7UXhoaYEKTJcCMimu8w= Subject key identifier: 11:EE:EB:EF:89:F2:38:50:15:B6:9C:A8:4A:A2:94:8E:E8:94:F5:70 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 90A0 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa Signing time: Thu 30 May 2024 16:28:44 +0000 ROA not before: Thu 30 May 2024 16:28:44 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 17771 IP address blocks: 45.127.188.0/22 maxlen: 24 49.238.32.0/19 maxlen: 24 103.246.44.0/22 maxlen: 24 202.63.96.0/19 maxlen: 24 2405:1e00::/32 maxlen: 32 2405:1e00::/40 maxlen: 48 2405:1e00:100::/40 maxlen: 48 2405:1e00:200::/40 maxlen: 48 2405:1e00:300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 10:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37024 (0x90a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 30 16:28:44 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6658a93c-1155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:91:22:7d:7c:ed:9d:ac:32:5c:6f:43:97:31: 97:d8:0a:bc:53:bb:82:b7:0a:b9:8b:fc:6b:31:f6: 8f:9b:0c:5f:a7:80:0d:0d:b7:64:e6:07:7c:b6:0e: 0f:8a:6a:1d:d2:11:ad:74:43:f9:be:91:16:ba:d6: 12:f2:87:66:43:af:98:d1:17:31:d4:1d:29:44:a6: 7d:dc:da:32:2e:0f:18:56:a2:d7:6f:9f:f5:28:f3: 53:22:ec:fb:5c:90:81:0f:91:b9:92:ec:a1:46:e3: c0:e5:f0:a0:c1:35:86:01:3b:47:39:46:df:e3:90: a2:4e:86:04:c8:8b:43:98:39:73:08:70:fe:29:77: be:5b:5f:57:04:2a:8b:a4:2b:ac:91:98:2e:01:e6: c5:ee:96:2f:66:06:33:03:72:11:52:bd:c3:a7:8f: 91:e5:c5:3d:51:62:30:95:3e:64:ec:d4:8b:bd:97: 7f:eb:bd:08:f6:a1:6d:3f:79:09:5f:00:6e:6b:41: b4:97:cb:a0:1d:ff:c6:62:39:0d:18:25:bd:50:77: d0:63:48:9d:8d:65:dc:a6:6b:50:87:0f:3c:c7:76: bd:8f:d2:3b:d9:bc:23:fd:b3:af:dd:cd:f1:22:08: d2:29:77:61:79:b4:eb:a4:89:c6:ef:34:f9:5a:9b: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EE:EB:EF:89:F2:38:50:15:B6:9C:A8:4A:A2:94:8E:E8:94:F5:70 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB42B95CBD4511EB9A852313C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.127.188.0/22 49.238.32.0/19 103.246.44.0/22 202.63.96.0/19 IPv6: 2405:1e00::/32 Signature Algorithm: sha256WithRSAEncryption 47:b5:15:81:38:eb:fb:37:b2:85:2a:4f:31:08:d7:7c:87:9f: 44:d9:52:cd:57:96:0a:f0:48:e3:7b:e6:9d:28:70:3f:ae:ac: 4b:46:18:2d:df:3c:2d:49:69:c9:63:0f:29:e6:d0:05:68:48: 49:c8:14:81:fc:0e:b3:54:18:df:70:61:6d:dc:c1:8c:ff:97: a5:3a:01:57:b4:09:60:63:8f:56:9d:eb:ee:e0:25:c3:4a:51: 12:aa:f0:e5:bd:91:89:cf:bf:0f:26:64:c6:4d:5c:65:d0:6a: b5:70:75:64:4e:53:d8:77:8b:7b:92:2f:d4:c9:c8:e1:a7:0c: fa:27:af:d8:fe:04:92:2c:04:41:92:f6:7c:d1:53:62:dc:79: 10:ac:ce:b2:30:e1:3f:30:db:28:e9:ae:44:5c:32:d4:16:46: 5a:4b:87:60:ee:37:62:18:d5:86:20:55:58:20:d2:1a:7e:a4: ba:5d:e1:5b:1e:e3:5b:52:bc:b1:e4:08:2d:8c:42:75:bc:67: 7b:f6:bc:be:97:b7:df:da:bc:44:a0:1a:49:09:e0:6e:cb:ba: 5e:0a:d9:cc:81:21:94:5e:6f:67:21:02:6a:19:e9:db:e2:57: 58:8a:bb:40:f9:a5:2d:fa:cf:01:fb:5d:5a:16:58:fb:19:af: 3f:46:9e:dc -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIDAJCgMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDUzMDE2Mjg0NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY1OGE5M2MtMTE1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2RIn187Z2sMlxvQ5cxl9gKvFO7grcKuYv8azH2j5sMX6eADQ23ZOYHfLYO D4pqHdIRrXRD+b6RFrrWEvKHZkOvmNEXMdQdKUSmfdzaMi4PGFai12+f9SjzUyLs +1yQgQ+RuZLsoUbjwOXwoME1hgE7RzlG3+OQok6GBMiLQ5g5cwhw/il3vltfVwQq i6QrrJGYLgHmxe6WL2YGMwNyEVK9w6ePkeXFPVFiMJU+ZOzUi72Xf+u9CPahbT95 CV8AbmtBtJfLoB3/xmI5DRglvVB30GNInY1l3KZrUIcPPMd2vY/SO9m8I/2zr93N 8SII0il3YXm066SJxu80+Vqb4f0CAwEAAaOCArYwggKyMB0GA1UdDgQWBBQR7uvv ifI4UBW2nKhKopSO6JT1cDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NCNDJCOTVD QkQ0NTExRUI5QTg1MjMxM0M0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEAGCCsGAQUFBwEHAQH/ BDEwLzAeBAIAATAYAwQCLX+8AwQFMe4gAwQCZ/YsAwQFyj9gMA0EAgACMAcDBQAk BR4AMA0GCSqGSIb3DQEBCwUAA4IBAQBHtRWBOOv7N7KFKk8xCNd8h59E2VLNV5YK 8Ejje+adKHA/rqxLRhgt3zwtSWnJYw8p5tAFaEhJyBSB/A6zVBjfcGFt3MGM/5el OgFXtAlgY49Wnevu4CXDSlESqvDlvZGJz78PJmTGTVxl0Gq1cHVkTlPYd4t7ki/U ycjhpwz6J6/Y/gSSLARBkvZ80VNi3HkQrM6yMOE/MNso6a5EXDLUFkZaS4dg7jdi GNWGIFVYINIafqS6XeFbHuNbUryx5AgtjEJ1vGd79ry+l7ff2rxEoBpJCeBuy7pe CtnMgSGUXm9nIQJqGenb4ldYirtA+aUt+s8B+11aFlj7Ga8/Rp7c -----END CERTIFICATE-----Generated at Mon Nov 25 13:17:26 2024 by rpki-client on console-ams.rpki-client.org