$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa File: 60FCDED2F48F11E89651151FC4F9AE02.roa (raw, json) Hash identifier: sBWfqMdrbgHXkc/ZfAmcs+ee3JGLkHqnwdG8y4HuuaQ= Subject key identifier: 9F:E6:76:B0:F9:AB:F7:C7:9A:77:17:C8:EA:BF:8A:D7:27:D9:B6:5F Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 10F6 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa Signing time: Fri 12 Apr 2024 17:55:50 +0000 ROA not before: Fri 12 Apr 2024 17:55:50 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135273 IP address blocks: 167.179.48.0/20 maxlen: 20 167.179.48.0/24 maxlen: 24 167.179.49.0/24 maxlen: 24 167.179.50.0/24 maxlen: 24 167.179.51.0/24 maxlen: 24 167.179.52.0/24 maxlen: 24 167.179.53.0/24 maxlen: 24 167.179.54.0/24 maxlen: 24 167.179.55.0/24 maxlen: 24 167.179.56.0/21 maxlen: 21 167.179.56.0/24 maxlen: 24 167.179.57.0/24 maxlen: 24 167.179.58.0/24 maxlen: 24 167.179.59.0/24 maxlen: 24 167.179.60.0/24 maxlen: 24 167.179.61.0/24 maxlen: 24 167.179.62.0/24 maxlen: 24 167.179.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4342 (0x10f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Apr 12 17:55:50 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661975a6-b783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:07:32:d4:4f:08:65:b2:c4:93:0e:cb:9d:cb: 7e:1a:c0:5a:05:ee:b2:b8:01:e3:75:a8:0e:13:0d: 08:45:52:5f:ae:b7:f5:3d:08:9d:da:88:55:11:48: fd:c0:34:e3:db:da:f9:4f:5a:4c:fb:77:71:dd:fb: 56:a5:51:40:45:81:73:27:18:ef:76:41:fd:3e:f3: 30:d3:64:4b:6a:21:7b:ef:b8:de:4d:c6:6e:06:f4: b3:c9:1e:31:d3:37:bc:c6:d5:c9:84:ff:f8:09:28: af:20:f3:79:92:99:38:f2:24:60:c7:02:d9:c1:de: f8:5d:a0:19:aa:27:7e:10:ac:eb:40:d0:65:bd:c5: ab:65:0a:cc:a5:18:ed:49:50:16:75:30:05:de:10: ac:22:e9:3d:bc:b4:e4:2d:ea:a7:f8:f3:ba:74:e9: 09:17:a2:80:19:52:70:c9:e2:ef:ab:52:64:50:cf: e2:e5:5e:6f:e5:52:a3:de:ea:58:0d:d0:9c:a8:4e: 86:1b:d2:c7:62:66:e8:e8:70:1d:50:ec:b8:28:9c: f8:fb:5b:93:9c:d1:04:4c:6f:fc:cd:f1:b6:73:38: cf:ef:39:eb:da:4a:00:76:65:4e:0b:bd:5b:60:2c: d5:2a:fd:1a:dc:08:0d:1b:87:97:84:2f:c1:68:dc: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E6:76:B0:F9:AB:F7:C7:9A:77:17:C8:EA:BF:8A:D7:27:D9:B6:5F X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/60FCDED2F48F11E89651151FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.48.0/20 Signature Algorithm: sha256WithRSAEncryption 76:06:e0:d4:11:57:a5:3b:84:72:fc:c2:6e:d1:4a:6d:06:88: ba:63:c8:df:42:de:51:1e:f5:13:98:cc:76:45:34:55:93:3a: d0:ad:97:ac:9f:d8:bb:81:78:69:d5:4a:6b:0e:f3:22:2e:af: 88:aa:78:e5:d2:f8:ff:49:14:68:8b:83:bf:5a:74:75:24:10: 4b:f6:36:ae:23:2d:55:8f:86:44:cb:fc:ea:fc:b1:4d:b0:fe: 9a:1a:40:20:02:0b:93:37:a8:f9:c4:5c:34:25:3f:75:bc:ba: 2e:af:da:95:44:85:52:25:00:6e:dd:fd:1b:31:26:16:43:15: 47:9e:07:85:68:41:01:9e:51:4a:57:8e:b2:06:72:88:a8:5b: 46:ea:f7:fc:91:09:d3:af:a8:3f:c4:f4:51:48:7e:52:22:ac: f3:10:ce:75:61:7a:0b:14:f0:81:fc:7b:5d:c8:3e:9d:5b:4f: 7e:ab:79:f1:ad:4a:0d:d6:b7:a8:50:e5:ed:9c:db:25:cc:c4: 8d:f0:2e:c4:61:f2:33:7d:2f:39:51:6a:39:94:53:c5:d7:6c: 4d:94:f7:bf:dc:33:a5:55:bc:c3:9c:4b:ee:2f:ee:dd:fb:61: dd:f1:ae:ad:43:bc:0c:43:71:90:e1:76:92:05:51:90:2d:de: d5:70:e0:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjQwNDEyMTc1NTUwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE5NzVhNi1iNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmwcy1E8IZbLEkw7Lnct+GsBaBe6yuAHjdagOEw0IRVJfrrf1PQid2ohVEUj9 wDTj29r5T1pM+3dx3ftWpVFARYFzJxjvdkH9PvMw02RLaiF777jeTcZuBvSzyR4x 0ze8xtXJhP/4CSivIPN5kpk48iRgxwLZwd74XaAZqid+EKzrQNBlvcWrZQrMpRjt SVAWdTAF3hCsIuk9vLTkLeqn+PO6dOkJF6KAGVJwyeLvq1JkUM/i5V5v5VKj3upY DdCcqE6GG9LHYmbo6HAdUOy4KJz4+1uTnNEETG/8zfG2czjP7znr2koAdmVOC71b YCzVKv0a3AgNG4eXhC/BaNy+cwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ/mdrD5 q/fHmncXyOq/itcn2bZfMB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY2NDYvQ0VDRThDOUFGNDhFMTFFOEIxNEEzNDFFQzRGOUFFMDIvNjBGQ0RFRDJG NDhGMTFFODk2NTExNTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBASnszAwDQYJKoZIhvcNAQELBQADggEBAHYG4NQRV6U7hHL8 wm7RSm0GiLpjyN9C3lEe9ROYzHZFNFWTOtCtl6yf2LuBeGnVSmsO8yIur4iqeOXS +P9JFGiLg79adHUkEEv2Nq4jLVWPhkTL/Or8sU2w/poaQCACC5M3qPnEXDQlP3W8 ui6v2pVEhVIlAG7d/RsxJhZDFUeeB4VoQQGeUUpXjrIGcoioW0bq9/yRCdOvqD/E 9FFIflIirPMQznVhegsU8IH8e13IPp1bT36refGtSg3Wt6hQ5e2c2yXMxI3wLsRh 8jN9LzlRajmUU8XXbE2U97/cM6VVvMOcS+4v7t37Yd3xrq1DvAxDcZDhdpIFUZAt 3tVw4MY= -----END CERTIFICATE-----Generated at Fri May 31 20:34:08 2024 by rpki-client on console-ams.rpki-client.org