$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/7E15FE0C27B711EF8867AA49C4F9AE02.roa File: 7E15FE0C27B711EF8867AA49C4F9AE02.roa (raw, json) Hash identifier: bkjGd2fWeRuAi3rbmd0l8StmCAy/JWREckf9XTM50O8= Subject key identifier: CF:22:0A:DB:0E:67:97:FC:A9:27:2A:38:8B:A7:F1:61:15:DA:05:5D Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 1A Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/7E15FE0C27B711EF8867AA49C4F9AE02.roa Signing time: Tue 11 Jun 2024 05:57:32 +0000 ROA not before: Tue 11 Jun 2024 05:57:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 138607 IP address blocks: 78.138.12.0/24 maxlen: 24 78.138.13.0/24 maxlen: 24 78.138.14.0/24 maxlen: 24 78.138.15.0/24 maxlen: 24 213.255.200.0/24 maxlen: 24 213.255.201.0/24 maxlen: 24 213.255.202.0/24 maxlen: 24 213.255.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Jun 11 05:57:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6667e74c-4fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:af:81:09:20:8b:0c:35:d3:c0:80:c0:e7:fc: eb:be:0e:15:d5:a1:aa:17:9d:86:5a:9a:b7:89:27: 56:eb:9f:a7:9f:55:bf:f7:c1:77:9e:a4:1b:80:b0: 93:fc:60:c5:54:29:26:88:73:eb:74:f5:34:db:a9: a5:84:df:5f:6c:d7:a3:ae:79:7c:b7:72:79:1e:52: 94:0c:25:b4:be:02:62:32:e7:c2:91:38:3b:a6:24: 38:1f:a9:c0:fe:aa:32:a7:eb:ac:cc:fb:51:0c:38: cb:69:e3:b6:6c:8a:ab:a1:da:ff:fe:e4:1b:94:cc: 7a:0d:ce:11:db:df:4c:3f:69:3f:0d:19:fe:42:4f: 1a:84:fe:02:9d:8e:d0:ff:97:17:26:4e:57:ef:b5: 0a:e2:00:8f:03:7d:3d:a3:9a:a4:c6:e4:18:4b:d4: cd:34:c0:ec:4f:fb:01:21:f3:1c:20:bb:f3:3d:63: 66:c7:1c:b0:74:9e:2e:5e:83:cc:49:31:2e:c4:76: 1b:e0:14:3b:9b:bf:8b:4a:2e:80:dd:1f:e3:aa:10: 00:94:ba:b3:be:8f:8e:d6:3c:7e:5f:30:5a:7e:fe: 33:f8:44:2a:de:1c:34:d8:aa:57:0a:00:6c:48:d4: fe:e3:20:fc:e4:9d:40:24:ea:8b:c0:e0:03:89:01: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:0A:DB:0E:67:97:FC:A9:27:2A:38:8B:A7:F1:61:15:DA:05:5D X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/7E15FE0C27B711EF8867AA49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 78.138.12.0/22 213.255.200.0/22 Signature Algorithm: sha256WithRSAEncryption 02:10:e0:ab:61:8d:e0:b0:4b:55:cf:55:60:74:85:70:84:51: ba:65:73:27:7e:a5:ab:12:cd:c2:a6:a6:74:df:d8:17:e2:d2: ba:93:b6:4f:ee:30:81:8b:56:e5:02:28:9e:65:3e:42:10:eb: f2:08:bd:97:00:c4:23:3a:b6:94:70:93:80:92:db:85:da:40: bd:04:f0:0b:03:e6:e4:1c:c4:e1:22:e9:1b:8a:22:b6:e6:90: bd:d9:4a:c5:c6:29:3f:9a:1b:a4:1a:69:20:f2:6d:95:c6:61: 58:69:11:20:88:21:97:c3:0f:d2:f2:07:fb:b9:c6:95:08:d2: d8:b2:78:e3:90:76:46:e6:ac:7e:53:d7:f2:68:a9:82:9e:91: 6b:53:7e:9c:3f:f2:3d:ae:cb:7f:aa:fa:d5:43:dd:91:6d:f6: 28:7e:df:70:79:1b:2c:94:fc:cd:6c:b5:8e:00:e3:d8:cc:d8: b9:c7:ef:41:bd:a3:e7:89:d1:79:21:15:3e:d9:ab:6f:01:60: c6:b7:39:ba:a3:4d:ad:22:65:90:2f:8e:37:1f:3a:d8:0c:3c: f8:6c:98:fa:c2:0f:55:58:5b:89:ea:fd:8f:20:62:74:fd:01: c9:24:f3:3c:68:54:11:43:3d:8b:ca:97:8b:9e:ff:8c:47:38: 61:21:0a:9f -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjVDQTExMC8GA1UEBRMoQjNENzVBRTFFQ0VFRjZGOTJCRDE3RDBDNEIzNjUxOEQ1 QkU3NzZGMTAeFw0yNDA2MTEwNTU3MzJaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NjdlNzRjLTRmZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7r4EJIIsMNdPAgMDn/Ou+DhXVoaoXnYZamreJJ1brn6efVb/3wXeepBuAsJP8 YMVUKSaIc+t09TTbqaWE319s16OueXy3cnkeUpQMJbS+AmIy58KRODumJDgfqcD+ qjKn66zM+1EMOMtp47Zsiquh2v/+5BuUzHoNzhHb30w/aT8NGf5CTxqE/gKdjtD/ lxcmTlfvtQriAI8DfT2jmqTG5BhL1M00wOxP+wEh8xwgu/M9Y2bHHLB0ni5eg8xJ MS7EdhvgFDubv4tKLoDdH+OqEACUurO+j47WPH5fMFp+/jP4RCreHDTYqlcKAGxI 1P7jIPzknUAk6ovA4AOJAYrdAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUzyIK2w5n l/ypJyo4i6fxYRXaBV0wHwYDVR0jBBgwFoAUs9da4ezu9vkr0X0MSzZRjVvndvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNUNBLzlFN0MyQ0VFMDI0 RjExRUZBQzY1RjU3N0M0RjlBRTAyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvczlkYTRlenU5dmtyMFgwTVN6WlJqVnZuZHZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi83RTE1RkUwQzI3 QjcxMUVGODg2N0FBNDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAk6KDAMEAtX/yDANBgkqhkiG9w0BAQsFAAOCAQEAAhDgq2GN 4LBLVc9VYHSFcIRRumVzJ36lqxLNwqamdN/YF+LSupO2T+4wgYtW5QIonmU+QhDr 8gi9lwDEIzq2lHCTgJLbhdpAvQTwCwPm5BzE4SLpG4oituaQvdlKxcYpP5obpBpp IPJtlcZhWGkRIIghl8MP0vIH+7nGlQjS2LJ445B2RuasflPX8mipgp6Ra1N+nD/y Pa7Lf6r61UPdkW32KH7fcHkbLJT8zWy1jgDj2MzYucfvQb2j54nReSEVPtmrbwFg xrc5uqNNrSJlkC+ONx862Aw8+GyY+sIPVVhbier9jyBidP0BySTzPGhUEUM9i8qX i57/jEc4YSEKnw== -----END CERTIFICATE-----Generated at Sat Nov 23 06:13:01 2024 by rpki-client on console-ams.rpki-client.org