$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa File: 5B3369383DC911EFAFD59635C4F9AE02.roa (raw, json) Hash identifier: UWOq5fkDm5PGl0caT9Tr6ZlfhuDlbM6ptz9WKoZ9jFM= Subject key identifier: ED:1D:0F:C1:F5:DF:2A:0F:F7:7C:84:F6:CA:86:10:93:8E:58:23:48 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: 34 Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa Signing time: Wed 02 Oct 2024 22:32:05 +0000 ROA not before: Wed 02 Oct 2024 22:32:05 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138995 IP address blocks: 185.203.36.0/24 maxlen: 24 185.203.37.0/24 maxlen: 24 185.203.38.0/24 maxlen: 24 185.203.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Oct 2 22:32:05 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66fdc9e5-ee5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:72:bb:ce:17:ac:79:76:8c:ee:a2:5c:bf: 84:36:e3:3d:11:83:16:3c:88:40:e6:7d:0c:de:1f: 3a:a5:42:25:c9:01:08:f3:56:4b:2b:18:75:29:ac: 07:19:88:1a:f1:0b:92:94:7e:8b:4a:e7:0e:ea:62: a4:09:50:0e:06:05:f1:22:3b:44:45:c3:a2:6e:bf: f2:3a:14:a6:57:8e:de:18:59:e7:78:83:c0:7b:b5: fc:fb:95:ff:9d:11:86:f8:c7:39:96:2d:c6:73:af: 03:74:d7:34:84:83:de:cd:0c:e3:2f:a6:c4:9b:24: e6:ed:a7:94:e3:56:8b:ed:07:53:62:67:17:58:7b: 42:6f:dc:ae:94:d9:38:16:31:e8:29:bf:5c:3f:48: 55:9e:44:e7:12:09:03:37:55:94:d7:89:f7:11:f6: 35:db:b3:2d:db:e1:ed:ed:b9:76:31:a7:4d:d0:cb: c7:c9:91:d1:d9:cc:15:59:1a:e7:49:06:08:9c:5c: dd:27:d0:9a:c4:cb:64:b4:19:8b:7f:76:c2:87:ff: d7:d8:78:e3:6e:37:96:f4:65:72:fe:4a:c3:ee:0a: 1c:73:1b:e5:9d:9d:91:0c:bb:9d:63:e1:27:48:97: e5:20:cb:98:81:f8:0e:8e:f9:1c:84:de:54:d8:6f: 78:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1D:0F:C1:F5:DF:2A:0F:F7:7C:84:F6:CA:86:10:93:8E:58:23:48 X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/5B3369383DC911EFAFD59635C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.203.36.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:5f:c9:67:20:8b:d4:aa:db:4b:91:b9:2a:0a:c5:80:54:f1: ed:86:86:ed:03:71:fa:e9:2e:f5:69:62:99:1b:87:7e:e7:02: 50:54:d2:b4:03:bf:11:9f:65:a7:f5:22:a6:98:f8:29:c6:79: 04:a5:18:70:85:53:1c:84:e8:48:6e:a8:6c:d0:0c:56:11:20: 39:6b:5b:7e:10:eb:66:b1:c3:7c:8b:f4:33:bf:8f:de:33:4c: 43:6a:4a:05:c3:52:4b:17:1b:01:de:44:d2:3f:65:27:a5:70: 67:ad:a3:1b:0f:6e:b4:28:f9:0d:a3:52:a9:c2:2f:a3:be:3d: f1:8e:2d:fa:49:74:c6:37:ad:9c:a7:39:3e:88:58:2a:23:dc: 81:cd:92:62:f5:f1:8d:3b:65:89:60:85:8d:5e:39:0b:71:d3: 99:bc:d0:bd:d7:41:56:7d:c7:d4:78:b1:90:7a:de:8c:4c:be: 01:3b:7e:94:96:11:5e:e7:5d:db:46:28:a4:7e:d0:14:08:54: 54:f6:49:06:4c:f0:3a:92:90:5e:12:52:3b:f0:c2:f6:1a:f7: 55:fa:76:5a:2f:e0:8d:b4:99:84:39:34:ba:d4:b2:05:b8:97: 89:51:2a:b7:cc:21:3a:c4:7a:4b:ba:08:96:34:f8:50:54:82: c1:13:ba:b9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkJCODExMC8GA1UEBRMoQTRFNkVFMkEyQkQ0QjZERjNCMzUzQkFFNkJDNDg5MkE2 RDM4RUYyOTAeFw0yNDEwMDIyMjMyMDVaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZmRjOWU1LWVlNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdR3K7zheseXaM7qJcv4Q24z0RgxY8iEDmfQzeHzqlQiXJAQjzVksrGHUprAcZ iBrxC5KUfotK5w7qYqQJUA4GBfEiO0RFw6Juv/I6FKZXjt4YWed4g8B7tfz7lf+d EYb4xzmWLcZzrwN01zSEg97NDOMvpsSbJObtp5TjVovtB1NiZxdYe0Jv3K6U2TgW Megpv1w/SFWeROcSCQM3VZTXifcR9jXbsy3b4e3tuXYxp03Qy8fJkdHZzBVZGudJ BgicXN0n0JrEy2S0GYt/dsKH/9fYeONuN5b0ZXL+SsPuChxzG+WdnZEMu51j4SdI l+Ugy5iB+A6O+RyE3lTYb3h9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7R0PwfXf Kg/3fIT2yoYQk45YI0gwHwYDVR0jBBgwFoAUpObuKivUtt87NTuua8SJKm047ykw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QkI4Lzg2MTk2MzE2M0RB NDExRUZBRDNFQTgxOEM0RjlBRTAyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvcE9idUtpdlV0dDg3TlR1dWE4U0pLbTA0N3lrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi81QjMzNjkzODNE QzkxMUVGQUZENTk2MzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEArnLJDANBgkqhkiG9w0BAQsFAAOCAQEAXV/JZyCL1KrbS5G5 KgrFgFTx7YaG7QNx+uku9WlimRuHfucCUFTStAO/EZ9lp/Uippj4KcZ5BKUYcIVT HIToSG6obNAMVhEgOWtbfhDrZrHDfIv0M7+P3jNMQ2pKBcNSSxcbAd5E0j9lJ6Vw Z62jGw9utCj5DaNSqcIvo7498Y4t+kl0xjetnKc5PohYKiPcgc2SYvXxjTtliWCF jV45C3HTmbzQvddBVn3H1HixkHrejEy+ATt+lJYRXudd20YopH7QFAhUVPZJBkzw OpKQXhJSO/DC9hr3Vfp2Wi/gjbSZhDk0utSyBbiXiVEqt8whOsR6S7oIljT4UFSC wRO6uQ== -----END CERTIFICATE-----Generated at Wed Nov 20 23:55:35 2024 by rpki-client on console-ams.rpki-client.org