$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa File: 1C977098A54911EEA5726C58C4F9AE02.roa (raw, json) Hash identifier: IW3Bfd+rgSMou5rI1BSeIMiI4ri0dwNjsPZefW1j9aA= Subject key identifier: 9B:7A:BD:A7:E2:85:8C:8C:4C:B8:41:3E:96:5D:06:98:E4:BB:B0:BC Certificate issuer: /CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Certificate serial: 92 Authority key identifier: CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa Signing time: Wed 11 Sep 2024 11:37:32 +0000 ROA not before: Wed 11 Sep 2024 11:37:32 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 152178 IP address blocks: 36.50.148.0/23 maxlen: 23 36.50.148.0/24 maxlen: 24 36.50.149.0/24 maxlen: 24 2401:c220::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE01/serialNumber=CB7E8E54C87E01CE8679CFE550F1FE9B2361083E Validity Not Before: Sep 11 11:37:32 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66e180fc-3c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:31:1d:7f:85:20:fb:03:70:d9:2f:74:e8: 93:43:bc:08:e7:88:62:75:36:27:06:00:6f:21:be: c1:a1:4d:53:f2:57:c6:31:97:82:01:be:8e:cc:e0: 7f:a5:e6:bb:98:22:db:28:af:49:60:c3:70:2e:f0: dc:11:96:2c:bb:fd:92:25:89:31:16:59:7f:cf:f8: 77:7c:75:21:70:44:4c:74:ae:7d:65:38:20:2d:27: 5e:5b:e0:8f:b0:c7:32:ed:f1:c9:0e:68:8a:9a:a8: 08:0a:32:9e:3b:a2:8d:a0:c3:33:81:ae:92:c5:9c: a1:c2:03:f7:2e:09:7c:92:36:c5:66:b0:f7:13:5d: 71:21:ca:e9:5e:03:a1:4c:0f:3b:35:af:21:8e:1e: 28:a6:da:5c:89:7a:03:37:c9:d9:24:fa:24:39:90: c7:0b:9f:22:ed:a8:d7:16:ba:8f:c2:13:e8:83:2f: 5b:2b:59:b9:2e:40:94:8a:9d:a5:89:64:cf:43:79: a0:aa:68:87:ce:0c:88:68:f9:55:ae:c3:67:26:0f: 09:4d:89:7f:68:13:1a:b1:bf:6d:51:08:11:70:b4: d8:10:8b:34:68:bf:d2:ee:55:5c:1c:8b:d2:9c:31: b8:85:4e:10:ea:76:a1:46:d9:d6:7b:59:1b:fa:e3: 05:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7A:BD:A7:E2:85:8C:8C:4C:B8:41:3E:96:5D:06:98:E4:BB:B0:BC X509v3 Authority Key Identifier: keyid:CB:7E:8E:54:C8:7E:01:CE:86:79:CF:E5:50:F1:FE:9B:23:61:08:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/y36OVMh-Ac6Gec_lUPH-myNhCD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y36OVMh-Ac6Gec_lUPH-myNhCD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE01/A4F9CD669F5C11EE8A23047EC4F9AE02/1C977098A54911EEA5726C58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.148.0/23 IPv6: 2401:c220::/32 Signature Algorithm: sha256WithRSAEncryption 6d:c3:3c:ec:db:6f:f5:ed:36:d7:a3:12:0e:08:9a:f2:9e:d4: 57:df:d3:f0:41:ac:77:ea:89:a5:f6:a1:85:df:1f:5f:e9:33: c1:a0:14:04:5d:87:e6:32:0c:22:77:c8:85:10:15:0f:fd:80: bd:60:72:70:4d:75:70:ca:94:53:f1:35:1e:1c:7f:e3:90:94: 6b:6b:76:07:00:c5:a7:91:78:71:ff:21:35:fb:94:f6:43:5c: d3:a3:ad:43:6d:f3:4d:b1:cc:c4:d1:de:c2:02:58:31:7e:81: 5b:9d:6b:d6:15:92:49:e8:5f:df:00:ba:5a:51:6d:a7:d9:db: 48:36:f3:0f:d5:86:fb:98:e8:ad:aa:14:38:91:4d:d6:9b:4f: 53:8c:e8:84:6c:9b:c9:23:eb:19:2d:70:d9:65:b2:d7:80:0d: 87:28:f9:37:04:d1:e4:be:92:75:6d:8f:95:20:ee:b4:d4:95: 9c:96:c6:7e:7a:96:d9:da:d4:3e:b8:0c:3b:4d:d1:7e:e3:b6: 0d:08:f8:ee:58:f5:a6:f6:0f:20:22:63:59:b7:83:0e:d6:de: d0:c3:8e:2f:6d:f3:2f:b4:80:a7:be:6f:66:4c:60:ab:fd:6c: fa:76:52:8a:99:5c:22:c5:48:48:d4:b1:f5:a1:38:d0:dd:83: 97:3c:71:d9 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFMDExMTAvBgNVBAUTKENCN0U4RTU0Qzg3RTAxQ0U4Njc5Q0ZFNTUwRjFGRTlC MjM2MTA4M0UwHhcNMjQwOTExMTEzNzMyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUxODBmYy0zYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MUxHX+FIPsDcNkvdOiTQ7wI54hidTYnBgBvIb7BoU1T8lfGMZeCAb6OzOB/ pea7mCLbKK9JYMNwLvDcEZYsu/2SJYkxFll/z/h3fHUhcERMdK59ZTggLSdeW+CP sMcy7fHJDmiKmqgICjKeO6KNoMMzga6SxZyhwgP3Lgl8kjbFZrD3E11xIcrpXgOh TA87Na8hjh4optpciXoDN8nZJPokOZDHC58i7ajXFrqPwhPogy9bK1m5LkCUip2l iWTPQ3mgqmiHzgyIaPlVrsNnJg8JTYl/aBMasb9tUQgRcLTYEIs0aL/S7lVcHIvS nDG4hU4Q6nahRtnWe1kb+uMFnwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJt6vafi hYyMTLhBPpZdBpjku7C8MB8GA1UdIwQYMBaAFMt+jlTIfgHOhnnP5VDx/psjYQg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkUwMS9BNEY5Q0Q2NjlG NUMxMUVFOEEyMzA0N0VDNEY5QUUwMi95MzZPVk1oLUFjNkdlY19sVVBILW15TmhD RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kzNk9WTWgtQWM2R2VjX2xVUEgtbXlOaENENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUZFMDEvQTRGOUNENjY5RjVDMTFFRThBMjMwNDdFQzRGOUFFMDIvMUM5NzcwOThB NTQ5MTFFRUE1NzI2QzU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAEkMpQwDQQCAAIwBwMFACQBwiAwDQYJKoZIhvcNAQELBQAD ggEBAG3DPOzbb/XtNtejEg4ImvKe1Fff0/BBrHfqiaX2oYXfH1/pM8GgFARdh+Yy DCJ3yIUQFQ/9gL1gcnBNdXDKlFPxNR4cf+OQlGtrdgcAxaeReHH/ITX7lPZDXNOj rUNt802xzMTR3sICWDF+gVuda9YVkknoX98AulpRbafZ20g28w/VhvuY6K2qFDiR TdabT1OM6IRsm8kj6xktcNllsteADYco+TcE0eS+knVtj5Ug7rTUlZyWxn56ltna 1D64DDtN0X7jtg0I+O5Y9ab2DyAiY1m3gw7W3tDDji9t8y+0gKe+b2ZMYKv9bPp2 UoqZXCLFSEjUsfWhONDdg5c8cdk= -----END CERTIFICATE-----Generated at Sat Nov 23 05:02:54 2024 by rpki-client on console-fra.rpki-client.org