$ rpki-client -vvf rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa File: 518E90D088BC11EB8D00B631C4F9AE02.roa (raw, json) Hash identifier: g3rv5WuB/2jOwkWM0ldEj38JTMg4kjD/MkrFaJE5IvY= Subject key identifier: EF:ED:DA:FF:C0:7D:93:BA:C8:89:46:04:5A:10:A4:5A:6F:27:4A:13 Certificate issuer: /CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD Certificate serial: 0713 Authority key identifier: E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa Signing time: Tue 24 Sep 2024 22:11:26 +0000 ROA not before: Tue 24 Sep 2024 22:11:26 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 141695 IP address blocks: 202.0.156.0/24 maxlen: 24 202.0.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121D26/serialNumber=E95EFFC29416584BF37C0C8F9EB73B920F9A41AD Validity Not Before: Sep 24 22:11:26 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f3390d-81d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:dc:c4:1b:67:b5:53:d9:df:9f:ad:2f:55: ad:3a:fd:9f:3b:89:59:9c:8a:96:a6:2d:cf:33:f1: 33:23:94:9e:ff:a9:cd:a4:5e:61:1d:bd:bc:cd:5a: a9:a6:0c:0f:43:62:20:2c:c2:72:93:bd:33:b3:7e: 04:08:fd:9d:2b:1e:29:0e:1d:76:a7:3d:36:94:bb: 1b:f2:86:26:68:e5:00:7d:64:03:a8:6f:0e:52:3d: 73:1e:c8:7a:be:8f:9e:82:93:99:64:1e:43:70:cf: 39:89:a1:11:cb:79:13:68:c5:af:3f:a3:74:f0:27: 03:7b:ff:1d:fb:af:17:1a:b3:2f:39:4c:c3:71:7f: 69:72:c0:90:3d:c8:2f:31:e7:fe:7e:df:d1:16:49: 4f:15:b7:2e:d2:d2:e1:08:f6:d1:5b:4e:96:fe:37: 83:48:00:7b:57:2f:74:42:2a:f5:0e:c4:7e:cb:97: 2f:1b:46:64:23:f9:8d:d9:cb:88:9d:c5:59:c4:da: ce:dd:79:d7:e0:0a:ea:05:c6:fd:c6:4c:07:8e:ed: 3c:57:9a:b2:f3:e7:6c:13:0c:a2:04:0f:78:e7:d0: 73:9e:72:7d:13:3b:e3:c5:9d:7d:6b:c5:7e:60:35: 1c:99:5c:c0:54:05:6f:37:f1:9e:17:6c:59:3a:fb: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:ED:DA:FF:C0:7D:93:BA:C8:89:46:04:5A:10:A4:5A:6F:27:4A:13 X509v3 Authority Key Identifier: keyid:E9:5E:FF:C2:94:16:58:4B:F3:7C:0C:8F:9E:B7:3B:92:0F:9A:41:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/6V7_wpQWWEvzfAyPnrc7kg-aQa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6V7_wpQWWEvzfAyPnrc7kg-aQa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121D26/07F0848018AD11EB9EE33485C4F9AE02/518E90D088BC11EB8D00B631C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.156.0/24 202.0.158.0/24 Signature Algorithm: sha256WithRSAEncryption 43:5c:68:f6:8e:c5:43:f1:db:1c:4d:9b:cb:46:a4:12:cd:05: d2:3a:f2:33:5a:74:04:ac:b2:5b:71:1a:f4:c8:d2:5d:9e:72: bb:39:b3:0c:5b:16:3a:da:87:45:49:fa:6f:f6:74:27:06:70: 65:57:16:6a:5d:00:b7:27:76:5a:5b:7f:fd:0f:94:6f:be:00: 16:bd:ff:20:94:e4:2b:bc:4e:cb:4d:ac:be:9d:41:d3:58:66: e8:79:26:01:6a:3f:96:28:2d:dc:48:94:af:f5:cb:45:d3:43: a7:c7:a9:bb:7b:84:97:1d:0d:6a:72:b2:cc:4d:32:d3:21:fb: f7:fd:30:06:2f:69:eb:7e:d7:08:fe:d7:8e:f1:44:74:1e:66: e2:0f:a5:34:f0:8e:5b:78:2c:5c:8a:d6:b2:52:2a:d1:17:0b: cc:f4:22:11:32:c8:e4:49:d7:b8:75:22:50:5e:5e:23:f4:6b: a7:42:84:98:bd:71:70:5c:9f:6e:41:6e:52:a2:e5:f3:57:32: 76:11:64:94:a3:ce:ef:73:91:08:7d:6c:9a:e9:4d:9f:ba:08: ce:22:6f:34:af:15:a2:dd:18:76:f5:13:0a:57:20:f0:18:28: 9e:c9:7f:9b:f9:91:f0:c1:75:d0:a2:f4:ee:6d:15:6a:7d:99: 42:0a:19:ac -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFEMjYxMTAvBgNVBAUTKEU5NUVGRkMyOTQxNjU4NEJGMzdDMEM4RjlFQjczQjky MEY5QTQxQUQwHhcNMjQwOTI0MjIxMTI2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYzMzkwZC04MWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPLcxBtntVPZ35+tL1WtOv2fO4lZnIqWpi3PM/EzI5Se/6nNpF5hHb28zVqp pgwPQ2IgLMJyk70zs34ECP2dKx4pDh12pz02lLsb8oYmaOUAfWQDqG8OUj1zHsh6 vo+egpOZZB5DcM85iaERy3kTaMWvP6N08CcDe/8d+68XGrMvOUzDcX9pcsCQPcgv Mef+ft/RFklPFbcu0tLhCPbRW06W/jeDSAB7Vy90Qir1DsR+y5cvG0ZkI/mN2cuI ncVZxNrO3XnX4ArqBcb9xkwHju08V5qy8+dsEwyiBA9459BznnJ9EzvjxZ19a8V+ YDUcmVzAVAVvN/GeF2xZOvt0UQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO/t2v/A fZO6yIlGBFoQpFpvJ0oTMB8GA1UdIwQYMBaAFOle/8KUFlhL83wMj563O5IPmkGt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUQyNi8wN0YwODQ4MDE4 QUQxMUVCOUVFMzM0ODVDNEY5QUUwMi82Vjdfd3BRV1dFdnpmQXlQbnJjN2tnLWFR YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWN193cFFXV0V2emZBeVBucmM3a2ctYVFhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjFEMjYvMDdGMDg0ODAxOEFEMTFFQjlFRTMzNDg1QzRGOUFFMDIvNTE4RTkwRDA4 OEJDMTFFQjhEMDBCNjMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKAJwDBADKAJ4wDQYJKoZIhvcNAQELBQADggEBAENcaPaO xUPx2xxNm8tGpBLNBdI68jNadASssltxGvTI0l2ecrs5swxbFjrah0VJ+m/2dCcG cGVXFmpdALcndlpbf/0PlG++ABa9/yCU5Cu8TstNrL6dQdNYZuh5JgFqP5YoLdxI lK/1y0XTQ6fHqbt7hJcdDWpyssxNMtMh+/f9MAYvaet+1wj+147xRHQeZuIPpTTw jlt4LFyK1rJSKtEXC8z0IhEyyORJ17h1IlBeXiP0a6dChJi9cXBcn25BblKi5fNX MnYRZJSjzu9zkQh9bJrpTZ+6CM4ibzSvFaLdGHb1EwpXIPAYKJ7Jf5v5kfDBddCi 9O5tFWp9mUIKGaw= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:06 2024 by rpki-client on console-fra.rpki-client.org