$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa File: 1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa (raw, json) Hash identifier: jx7hnJAbOWXi06R8EaUqGVH9j+g4HwGKu5sUmUZqpVQ= Subject key identifier: D5:8B:14:BB:7E:49:D0:CB:F7:DB:96:56:DE:A6:97:D2:D2:89:58:58 Certificate issuer: /CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25 Certificate serial: 0115 Authority key identifier: 3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa Signing time: Wed 06 Nov 2024 19:09:03 +0000 ROA not before: Wed 06 Nov 2024 19:09:03 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 4788 IP address blocks: 147.158.0.0/16 maxlen: 16 147.158.0.0/17 maxlen: 17 147.158.0.0/18 maxlen: 18 147.158.128.0/19 maxlen: 19 147.158.160.0/19 maxlen: 19 147.158.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:03:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CA78/serialNumber=3E7232048DCBD2C69BAB225B8A42216046C18B25 Validity Not Before: Nov 6 19:09:03 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672bbecf-7ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5c:82:8a:cd:e3:4d:e9:18:da:dd:eb:66:48: b8:8b:69:36:c5:e4:36:a9:b0:ca:f0:65:df:cc:c5: 18:85:33:81:5e:ce:1d:8b:fa:1d:a2:92:c2:98:f1: 3f:08:5b:53:cc:2a:04:83:17:a0:e5:6e:b5:db:4a: 10:55:72:7f:c1:ce:15:ea:6f:9f:ed:15:db:04:18: f8:f5:0e:e3:d5:a1:76:33:e4:c5:0a:83:b1:74:c9: 4d:a0:b4:9b:f4:35:dc:e8:c3:15:cc:e8:66:79:a0: 8b:3a:17:55:d0:2e:7a:28:ef:83:31:ec:b1:c1:2e: cb:a7:9a:e6:c4:96:94:45:cb:9d:91:0f:0c:39:ca: c1:e0:4c:ff:60:2a:ce:4e:48:eb:a7:4b:6c:06:20: 97:e7:23:80:6d:40:b7:bc:0d:c4:9a:f0:f6:a1:fc: 6c:27:e7:8b:e0:b0:6b:82:56:c6:31:ed:12:ae:bc: 98:35:5d:26:47:c8:02:25:ba:85:e3:be:53:66:63: 0c:47:73:78:e2:ba:41:44:c3:12:c9:18:9c:dd:0f: 77:a5:8d:cd:bf:89:be:eb:12:a8:22:02:e4:e0:90: 9c:06:87:44:bc:42:04:10:07:c5:50:0e:4b:31:14: 65:a9:53:44:27:0f:a0:35:69:3f:63:06:d5:d7:8b: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:8B:14:BB:7E:49:D0:CB:F7:DB:96:56:DE:A6:97:D2:D2:89:58:58 X509v3 Authority Key Identifier: keyid:3E:72:32:04:8D:CB:D2:C6:9B:AB:22:5B:8A:42:21:60:46:C1:8B:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/PnIyBI3L0sabqyJbikIhYEbBiyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PnIyBI3L0sabqyJbikIhYEbBiyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/028F58FE16D911EE9F175315C4F9AE02/1ABB6C4E17DB11EE92B1C26FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.158.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:ff:a9:6e:e3:3f:f0:eb:e5:e0:1c:f8:56:bf:9a:8e:9a:86: 0d:90:52:20:76:f5:fd:d0:c5:e6:69:e0:01:54:b7:3c:d0:ba: 45:2b:72:94:9d:fd:38:b4:59:e8:91:f9:ce:35:b8:02:88:11: ed:71:16:85:c5:7f:b6:1f:65:41:a5:ce:4e:0a:12:73:ea:79: 12:40:96:38:16:fe:79:40:71:39:3f:60:06:c7:90:9a:57:db: 02:8c:11:68:04:19:7a:63:93:6b:f8:1a:61:24:91:c1:0a:a9: 43:3a:7e:24:40:a9:2c:7d:73:96:60:d9:e8:20:ba:3b:2a:cc: cc:e1:cb:e0:57:aa:e9:76:ca:47:2a:b8:6d:b5:6a:ec:a6:77: 96:21:29:a7:2a:ae:18:69:16:e2:33:87:55:c4:3a:58:6c:84: a9:12:96:27:a0:31:7b:80:2b:63:0c:ee:55:b3:ef:ac:54:ac: 82:80:7b:f9:6a:8b:48:0b:9f:4b:47:c3:85:30:a5:14:c4:eb: 44:cf:b6:d3:67:85:85:1a:ee:90:b8:e8:ec:8b:92:d5:23:41: ac:81:03:35:08:6b:bf:69:94:0f:0e:35:48:20:51:d2:03:c6: b9:82:4b:1f:da:a2:d5:2c:d9:fb:6c:44:b2:6f:a8:7c:25:b7: 15:93:aa:a4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNBNzgxMTAvBgNVBAUTKDNFNzIzMjA0OERDQkQyQzY5QkFCMjI1QjhBNDIyMTYw NDZDMThCMjUwHhcNMjQxMTA2MTkwOTAzWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiYmVjZi03Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1yCis3jTekY2t3rZki4i2k2xeQ2qbDK8GXfzMUYhTOBXs4di/odopLCmPE/ CFtTzCoEgxeg5W6120oQVXJ/wc4V6m+f7RXbBBj49Q7j1aF2M+TFCoOxdMlNoLSb 9DXc6MMVzOhmeaCLOhdV0C56KO+DMeyxwS7Lp5rmxJaURcudkQ8MOcrB4Ez/YCrO Tkjrp0tsBiCX5yOAbUC3vA3EmvD2ofxsJ+eL4LBrglbGMe0SrryYNV0mR8gCJbqF 475TZmMMR3N44rpBRMMSyRic3Q93pY3Nv4m+6xKoIgLk4JCcBodEvEIEEAfFUA5L MRRlqVNEJw+gNWk/YwbV14uDFwIDAQABo4IClDCCApAwHQYDVR0OBBYEFNWLFLt+ SdDL99uWVt6ml9LSiVhYMB8GA1UdIwQYMBaAFD5yMgSNy9LGm6siW4pCIWBGwYsl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0E3OC8wMjhGNThGRTE2 RDkxMUVFOUYxNzUzMTVDNEY5QUUwMi9Qbkl5QkkzTDBzYWJxeUpiaWtJaFlFYkJp eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BuSXlCSTNMMHNhYnF5SmJpa0loWUViQml5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUNBNzgvMDI4RjU4RkUxNkQ5MTFFRTlGMTc1MzE1QzRGOUFFMDIvMUFCQjZDNEUx N0RCMTFFRTkyQjFDMjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCTnjANBgkqhkiG9w0BAQsFAAOCAQEAVP+pbuM/8Ovl4Bz4 Vr+ajpqGDZBSIHb1/dDF5mngAVS3PNC6RStylJ39OLRZ6JH5zjW4AogR7XEWhcV/ th9lQaXOTgoSc+p5EkCWOBb+eUBxOT9gBseQmlfbAowRaAQZemOTa/gaYSSRwQqp Qzp+JECpLH1zlmDZ6CC6OyrMzOHL4Feq6XbKRyq4bbVq7KZ3liEppyquGGkW4jOH VcQ6WGyEqRKWJ6Axe4ArYwzuVbPvrFSsgoB7+WqLSAufS0fDhTClFMTrRM+202eF hRrukLjo7IuS1SNBrIEDNQhrv2mUDw41SCBR0gPGuYJLH9qi1SzZ+2xEsm+ofCW3 FZOqpA== -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:45 2024 by rpki-client on console-ams.rpki-client.org