$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/A4049C06213E11EAAA89A95DC4F9AE02.roa File: A4049C06213E11EAAA89A95DC4F9AE02.roa (raw, json) Hash identifier: fJj5V7B0tj2U/amxOYn7MfT1h8cR0RvRgHTxKdHbOM4= Subject key identifier: 44:41:37:AF:98:1A:3A:BA:1C:41:F7:66:A5:A0:B1:4A:E6:6C:B0:3D Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0BA0 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/A4049C06213E11EAAA89A95DC4F9AE02.roa Signing time: Sat 02 Nov 2024 18:26:54 +0000 ROA not before: Sat 02 Nov 2024 18:26:54 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 136972 IP address blocks: 161.38.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2976 (0xba0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Nov 2 18:26:54 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67266eee-121d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:55:f9:d6:b6:cb:01:11:1b:7b:e4:67:f2: 10:10:cf:5e:ec:3b:e1:32:12:cb:d6:b5:56:2d:a9: 16:4f:92:a1:89:9b:7f:72:f9:eb:ee:35:11:56:28: 24:eb:cc:2b:88:f2:5e:bd:de:48:6f:9f:98:e6:67: 93:88:ca:fc:9f:4a:f8:e8:2f:7f:68:b2:4c:e5:06: 89:8b:c7:c3:5e:02:ce:cb:47:87:c8:d0:e6:40:31: 5e:37:01:ad:e8:c4:fa:61:b9:cc:60:26:7c:61:95: c8:0a:97:b7:2f:4a:ea:9a:61:da:12:98:3f:bf:bc: e3:98:4c:c9:c0:d8:97:a4:b8:57:64:98:b7:d7:c3: cb:2b:ac:17:eb:46:46:a1:35:d0:ef:af:b6:d5:cf: 68:9f:65:37:d8:13:c5:fe:c1:ef:31:be:b3:fb:2d: 08:d9:ba:d4:6b:84:86:95:11:22:c2:17:79:2b:9c: 06:00:0f:0a:4e:e5:cb:e7:e5:bd:e2:59:e3:e6:86: 00:aa:03:40:af:61:16:40:84:9b:bc:e5:c8:c8:04: 21:cf:5f:d9:2e:bc:ac:ed:21:ed:d9:dc:98:db:f3: 38:5a:a7:38:d2:ff:ec:57:e2:61:8a:a7:34:ca:2d: 8b:58:5e:62:f2:ba:34:4a:8a:75:52:8c:cc:b7:68: 1c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:41:37:AF:98:1A:3A:BA:1C:41:F7:66:A5:A0:B1:4A:E6:6C:B0:3D X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/A4049C06213E11EAAA89A95DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.38.216.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:d3:9e:5b:3b:56:30:a6:6d:33:28:4e:e4:86:b5:c3:b6:4f: 67:82:bc:c5:18:ac:86:3a:07:c7:20:eb:f0:a6:64:b3:74:40: 2e:34:63:8d:c1:99:64:63:89:fa:07:53:e5:eb:7b:fd:00:b6: 2a:1c:1c:1d:df:52:f6:7b:8b:8b:d8:7f:da:43:0f:b2:02:9e: c4:70:1d:07:1a:67:5b:91:9c:02:00:19:bd:63:45:a8:10:4b: b8:d9:ac:df:aa:1f:0d:6a:8e:40:84:05:0c:56:91:37:5a:2a: e9:72:aa:1a:10:93:5d:1f:40:e3:5a:7b:5f:d4:61:40:57:83: 6d:9b:69:39:e4:1a:4a:7b:ec:26:03:1d:69:17:d3:66:40:86: 0c:42:cf:0b:94:f4:17:ac:5c:42:f0:25:9f:51:b6:61:d8:42: 75:fc:9d:5c:e6:86:80:a6:89:cf:f1:f8:6c:34:89:82:04:81: 96:59:fa:2c:49:e4:d7:a3:c8:26:97:a2:c7:c0:15:fc:71:c6: 1e:6e:b8:f6:ca:f5:77:e3:cb:ef:c0:ec:fa:98:11:a2:99:c6: 07:ca:01:0b:b0:c1:dd:24:fa:81:91:bc:bf:af:b9:c7:98:98: eb:cb:58:27:b6:30:d1:56:c1:50:f4:c0:69:51:5d:9b:a2:b9: af:9b:58:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjQxMTAyMTgyNjU0WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2NmVlZS0xMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhBV+da2ywERG3vkZ/IQEM9e7DvhMhLL1rVWLakWT5KhiZt/cvnr7jURVigk 68wriPJevd5Ib5+Y5meTiMr8n0r46C9/aLJM5QaJi8fDXgLOy0eHyNDmQDFeNwGt 6MT6YbnMYCZ8YZXICpe3L0rqmmHaEpg/v7zjmEzJwNiXpLhXZJi318PLK6wX60ZG oTXQ76+21c9on2U32BPF/sHvMb6z+y0I2brUa4SGlREiwhd5K5wGAA8KTuXL5+W9 4lnj5oYAqgNAr2EWQISbvOXIyAQhz1/ZLrys7SHt2dyY2/M4Wqc40v/sV+Jhiqc0 yi2LWF5i8ro0Sop1UozMt2gc4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFERBN6+Y Gjq6HEH3ZqWgsUrmbLA9MB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTk2MjQvQzY5NDgyMzYxMEUwMTFFQTlCRDFBNTVEQzRGOUFFMDIvQTQwNDlDMDYy MTNFMTFFQUFBODlBOTVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGhJtgwDQYJKoZIhvcNAQELBQADggEBABrTnls7VjCmbTMo TuSGtcO2T2eCvMUYrIY6B8cg6/CmZLN0QC40Y43BmWRjifoHU+Xre/0AtiocHB3f UvZ7i4vYf9pDD7ICnsRwHQcaZ1uRnAIAGb1jRagQS7jZrN+qHw1qjkCEBQxWkTda KulyqhoQk10fQONae1/UYUBXg22baTnkGkp77CYDHWkX02ZAhgxCzwuU9BesXELw JZ9RtmHYQnX8nVzmhoCmic/x+Gw0iYIEgZZZ+ixJ5NejyCaXosfAFfxxxh5uuPbK 9Xfjy+/A7PqYEaKZxgfKAQuwwd0k+oGRvL+vuceYmOvLWCe2MNFWwVD0wGlRXZui ua+bWAY= -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:44 2024 by rpki-client on console-fra.rpki-client.org