$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B87A46B4FEA211EDB9013076C4F9AE02.roa File: B87A46B4FEA211EDB9013076C4F9AE02.roa (raw, json) Hash identifier: 7DnrOBV+2NUrU5X6zz5SZm2S9etq/L6sq71V5Wzy0Aw= Subject key identifier: 0B:14:64:EF:FA:0D:46:86:DB:00:14:24:C7:F5:90:AA:D4:68:2E:1E Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Certificate serial: 0577 Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B87A46B4FEA211EDB9013076C4F9AE02.roa Signing time: Sat 02 Nov 2024 23:02:20 +0000 ROA not before: Sat 02 Nov 2024 23:02:19 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 134441 IP address blocks: 45.125.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1399 (0x577) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365 Validity Not Before: Nov 2 23:02:19 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6726af7b-ca47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:02:90:00:4a:a2:a1:b5:47:3c:51:f7:87: cb:ba:56:1e:b3:13:53:5c:cf:1b:e0:20:27:bb:39: 1b:5a:44:0e:9c:4a:aa:1d:e9:d7:c2:05:35:27:1b: fb:ee:63:0f:46:24:32:5f:60:75:8a:cd:4a:5f:ce: ad:86:7d:5a:51:4c:21:47:f9:23:27:f3:24:9e:6b: 08:85:88:c6:3d:2b:36:f6:2e:c3:65:da:92:0f:00: e7:ad:10:5c:6e:01:33:76:6e:61:90:56:30:8f:3b: 6e:1f:50:d1:00:b1:e4:f9:69:1c:b0:41:00:50:2e: 0a:c1:8b:36:f1:0f:07:09:88:0d:1a:0e:f0:23:e2: b9:a1:f9:f7:4d:29:01:0f:96:65:75:c8:c0:bd:d7: eb:f2:a0:16:ad:25:5f:10:94:b1:35:c5:c7:02:9f: 5a:09:85:15:84:7b:cc:c5:8f:26:83:e4:51:23:3c: 3d:e8:6d:bd:2d:f7:f6:0c:95:17:fc:d6:f6:6b:f0: f7:8b:af:c0:78:8b:f3:42:28:fd:59:57:50:84:79: 6b:f0:42:42:3a:88:8d:f8:f8:a0:c2:59:6d:b2:ee: be:f6:4a:a5:b7:7e:9d:29:79:26:38:a5:bf:f2:07: a9:4f:f1:d3:36:5a:5f:6b:8f:f2:8b:4b:b5:4a:33: 9c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:14:64:EF:FA:0D:46:86:DB:00:14:24:C7:F5:90:AA:D4:68:2E:1E X509v3 Authority Key Identifier: keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B87A46B4FEA211EDB9013076C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.125.127.0/24 Signature Algorithm: sha256WithRSAEncryption 71:3e:6f:3d:f8:bb:9a:73:e4:2a:20:7f:58:b0:62:ba:42:00: c7:02:bc:d5:44:de:bd:65:21:ce:1d:ef:a9:07:bf:98:8e:ca: e0:02:53:db:5c:1e:7b:ff:9d:20:1b:a0:2c:c3:6d:d9:5a:4d: 48:1d:a1:fe:84:4f:f4:6b:1e:d8:99:76:dc:e9:b8:e5:ac:7e: fa:25:3f:9b:47:fb:c3:f4:2f:81:26:5a:44:a2:e1:0c:38:2e: f6:21:bd:8d:a6:83:88:54:63:a1:8a:2b:bc:88:0d:b5:e6:72: 96:95:33:fd:92:82:02:27:cd:c6:44:89:19:f7:4a:9d:06:04: 5b:c2:89:8b:0a:5d:2a:a0:71:4a:11:57:eb:a1:73:a7:00:0c: 2b:f4:d2:20:e7:b6:d9:7e:5d:bd:c0:5e:e2:85:94:08:03:b0: 22:10:4f:47:ca:bd:5d:72:1f:33:ad:7f:ed:c8:cd:a9:a4:d4: f5:2a:50:ec:f8:55:25:94:df:26:dc:6f:1e:11:4f:17:b8:05: a7:88:f5:c3:d4:ea:90:aa:1a:da:18:be:5e:04:fc:26:b9:e9: e0:f9:8a:52:08:6a:4c:47:18:d0:b1:f6:23:80:98:f0:81:83: 17:b4:5e:52:2c:14:21:ba:e6:c1:f5:90:20:da:8b:79:50:f3: 98:c1:53:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5 RTYyRjkzNjUwHhcNMjQxMTAyMjMwMjE5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI2YWY3Yi1jYTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt38CkABKoqG1RzxR94fLulYesxNTXM8b4CAnuzkbWkQOnEqqHenXwgU1Jxv7 7mMPRiQyX2B1is1KX86thn1aUUwhR/kjJ/MknmsIhYjGPSs29i7DZdqSDwDnrRBc bgEzdm5hkFYwjztuH1DRALHk+WkcsEEAUC4KwYs28Q8HCYgNGg7wI+K5ofn3TSkB D5ZldcjAvdfr8qAWrSVfEJSxNcXHAp9aCYUVhHvMxY8mg+RRIzw96G29Lff2DJUX /Nb2a/D3i6/AeIvzQij9WVdQhHlr8EJCOoiN+Pigwlltsu6+9kqlt36dKXkmOKW/ 8gepT/HTNlpfa4/yi0u1SjOcmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAsUZO/6 DUaG2wAUJMf1kKrUaC4eMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvQjg3QTQ2QjRG RUEyMTFFREI5MDEzMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAtfX8wDQYJKoZIhvcNAQELBQADggEBAHE+bz34u5pz5Cog f1iwYrpCAMcCvNVE3r1lIc4d76kHv5iOyuACU9tcHnv/nSAboCzDbdlaTUgdof6E T/RrHtiZdtzpuOWsfvolP5tH+8P0L4EmWkSi4Qw4LvYhvY2mg4hUY6GKK7yIDbXm cpaVM/2SggInzcZEiRn3Sp0GBFvCiYsKXSqgcUoRV+uhc6cADCv00iDnttl+Xb3A XuKFlAgDsCIQT0fKvV1yHzOtf+3Izamk1PUqUOz4VSWU3ybcbx4RTxe4BaeI9cPU 6pCqGtoYvl4E/Ca56eD5ilIIakxHGNCx9iOAmPCBgxe0XlIsFCG65sH1kCDai3lQ 85jBU9g= -----END CERTIFICATE-----Generated at Sat Nov 23 00:49:32 2024 by rpki-client on console-fra.rpki-client.org