$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/474934DE5B1A11EFBF0E1F7CC4F9AE02.roa File: 474934DE5B1A11EFBF0E1F7CC4F9AE02.roa (raw, json) Hash identifier: AbR4JwNeIxvK28YKeU+rC69Mel7G0dy68L3LDpPyx/4= Subject key identifier: 14:8F:A7:01:50:EE:D9:34:A0:AD:C1:CA:4E:99:33:E5:2C:36:84:C4 Certificate issuer: /CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD Certificate serial: 02 Authority key identifier: 62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/474934DE5B1A11EFBF0E1F7CC4F9AE02.roa Signing time: Thu 15 Aug 2024 15:23:10 +0000 ROA not before: Thu 15 Aug 2024 15:23:10 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 137547 IP address blocks: 150.242.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 05:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DD08/serialNumber=62AC1BB9580A7119819E7B6B6EB2C351534787FD Validity Not Before: Aug 15 15:23:10 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66be1d5d-f87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:db:7c:37:6d:07:64:b4:4e:f3:22:37:05: a0:c5:5b:30:aa:ea:60:c3:f0:52:a9:7c:df:cc:25: 8f:e6:41:1a:52:1d:fa:f5:df:fe:c6:2c:aa:bf:5c: 64:dc:e7:c5:a0:f0:3b:32:5b:b3:9f:b3:e3:07:7a: 50:90:22:75:1f:cf:07:4e:58:68:e2:cc:69:04:27: 1a:b9:51:5a:05:40:68:8f:a7:6d:83:03:01:2e:96: 2b:48:cb:3d:49:8c:9a:09:12:60:de:d8:f4:7b:c3: d0:c4:d4:96:87:73:9e:54:d0:13:81:7d:73:6c:d6: f5:b5:29:13:44:7a:e7:0f:f6:a5:33:b9:66:64:55: fd:51:23:c9:62:de:8e:cb:50:d9:07:70:87:c2:68: 67:29:e3:c2:10:99:1b:22:8f:ce:14:8e:6e:bb:0b: 6b:2a:d9:c7:69:8d:bd:9f:bd:89:35:57:2f:7e:f2: 36:91:1e:78:ea:0c:dc:c8:e5:bf:55:66:c0:d2:93: d0:29:25:ff:d5:31:12:e4:6f:16:71:d3:63:4c:7c: 59:41:d6:b9:61:45:8d:c4:c8:bd:ec:56:02:c6:07: 8c:65:af:a4:b2:71:62:fd:69:44:70:2a:57:2c:9d: 7e:95:a7:66:75:9e:c3:ac:af:b5:f8:77:98:69:76: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8F:A7:01:50:EE:D9:34:A0:AD:C1:CA:4E:99:33:E5:2C:36:84:C4 X509v3 Authority Key Identifier: keyid:62:AC:1B:B9:58:0A:71:19:81:9E:7B:6B:6E:B2:C3:51:53:47:87:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/YqwbuVgKcRmBnntrbrLDUVNHh_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YqwbuVgKcRmBnntrbrLDUVNHh_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD08/9A5FBB625B1911EFBED0C47AC4F9AE02/474934DE5B1A11EFBF0E1F7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.242.216.0/23 Signature Algorithm: sha256WithRSAEncryption a3:31:8a:83:1b:85:6b:9b:87:ef:1c:10:f4:78:23:e6:49:91: 3c:30:30:da:91:94:d6:44:0b:cd:96:27:3f:77:0c:fc:20:4f: 78:44:c9:30:b4:11:24:d1:03:d0:e5:45:08:5f:ce:9c:74:c4: 62:88:7d:39:a0:a6:f8:1d:9f:32:fd:76:6f:0d:43:04:a2:7c: 36:fe:0e:cf:f2:c7:04:55:59:0d:9e:1c:35:09:88:62:d2:6a: 32:ce:82:95:70:b5:d6:ce:6b:44:56:9c:ff:6a:c0:20:9e:62: 2b:01:df:6a:5f:d6:81:0d:84:1a:56:bd:a2:b3:8e:8e:56:12: ab:93:c6:95:90:17:a4:12:f2:e6:ca:ff:92:bc:28:2d:94:2d: f9:3f:56:1a:37:31:ff:88:dd:1e:0b:67:55:bc:4f:c0:91:f4: f2:3a:ba:af:a9:52:7c:22:e7:3e:11:4b:7d:ec:59:a3:ff:15: 11:74:f0:1c:a8:80:cd:20:12:95:ba:f2:20:dd:7a:6d:09:94: e3:ba:9a:b1:ac:bb:39:a4:61:21:64:d5:14:84:7e:d6:ec:e4: cb:e3:8f:d7:37:91:16:8b:8b:3b:ad:a7:89:74:45:12:cb:4d: a7:6b:2a:e2:55:09:2a:fa:88:4e:7e:22:f7:80:cf:9f:22:77: 70:4c:51:32 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REQwODExMC8GA1UEBRMoNjJBQzFCQjk1ODBBNzExOTgxOUU3QjZCNkVCMkMzNTE1 MzQ3ODdGRDAeFw0yNDA4MTUxNTIzMTBaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmUxZDVkLWY4N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNO9t8N20HZLRO8yI3BaDFWzCq6mDD8FKpfN/MJY/mQRpSHfr13/7GLKq/XGTc 58Wg8DsyW7Ofs+MHelCQInUfzwdOWGjizGkEJxq5UVoFQGiPp22DAwEulitIyz1J jJoJEmDe2PR7w9DE1JaHc55U0BOBfXNs1vW1KRNEeucP9qUzuWZkVf1RI8li3o7L UNkHcIfCaGcp48IQmRsij84Ujm67C2sq2cdpjb2fvYk1Vy9+8jaRHnjqDNzI5b9V ZsDSk9ApJf/VMRLkbxZx02NMfFlB1rlhRY3EyL3sVgLGB4xlr6SycWL9aURwKlcs nX6Vp2Z1nsOsr7X4d5hpdnkdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUFI+nAVDu 2TSgrcHKTpkz5Sw2hMQwHwYDVR0jBBgwFoAUYqwbuVgKcRmBnntrbrLDUVNHh/0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERDA4LzlBNUZCQjYyNUIx OTExRUZCRUQwQzQ3QUM0RjlBRTAyL1lxd2J1VmdLY1JtQm5udHJickxEVVZOSGhf MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWXF3YnVWZ0tjUm1Cbm50cmJyTERVVk5IaF8wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REQwOC85QTVGQkI2MjVCMTkxMUVGQkVEMEM0N0FDNEY5QUUwMi80NzQ5MzRERTVC MUExMUVGQkYwRTFGN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZby2DANBgkqhkiG9w0BAQsFAAOCAQEAozGKgxuFa5uH7xwQ 9Hgj5kmRPDAw2pGU1kQLzZYnP3cM/CBPeETJMLQRJNED0OVFCF/OnHTEYoh9OaCm +B2fMv12bw1DBKJ8Nv4Oz/LHBFVZDZ4cNQmIYtJqMs6ClXC11s5rRFac/2rAIJ5i KwHfal/WgQ2EGla9orOOjlYSq5PGlZAXpBLy5sr/krwoLZQt+T9WGjcx/4jdHgtn VbxPwJH08jq6r6lSfCLnPhFLfexZo/8VEXTwHKiAzSASlbryIN16bQmU47qasay7 OaRhIWTVFIR+1uzky+OP1zeRFouLO62niXRFEstNp2sq4lUJKvqITn4i94DPnyJ3 cExRMg== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:00 2024 by rpki-client on console-ams.rpki-client.org