$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa File: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (raw, json) Hash identifier: EqoKaFe/87HyN55cS8ajKAt9sghrHZq2lzsUTdHDvaA= Subject key identifier: 2A:CB:AF:F2:59:B3:3C:FA:BF:2E:64:8B:18:65:12:AE:89:58:D7:29 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 029E Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa Signing time: Tue 03 Sep 2024 05:15:27 +0000 ROA not before: Tue 03 Sep 2024 05:15:27 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 45248 IP address blocks: 116.193.150.0/23 maxlen: 24 117.121.212.0/24 maxlen: 24 117.121.213.0/24 maxlen: 24 119.63.64.0/24 maxlen: 24 119.63.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 01:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Sep 3 05:15:27 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66d69b6f-2599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d4:b6:2c:a5:bb:0e:15:66:5f:a7:cc:3d:2c: 05:e9:bf:dc:9a:8e:6b:ef:26:df:95:2a:99:5a:bd: 28:a8:13:73:97:0d:8a:f6:f3:9d:af:15:15:59:a6: 1f:07:0e:34:9f:ff:1f:d5:2f:88:0d:ab:70:1d:b3: fb:f5:3e:e6:ed:bb:42:42:d5:dc:38:2b:7c:8c:29: dc:32:9c:99:f5:fa:82:1a:bd:f7:b6:65:d0:f8:7c: 8b:72:a3:1d:e2:f2:2c:5b:d0:97:34:99:5b:73:1c: 40:64:fe:73:ff:95:8e:7b:79:c8:df:c2:ca:ba:5c: ca:be:0e:e9:bd:7c:f1:03:d4:b4:41:eb:34:ae:94: 30:1c:72:0e:b7:80:4a:d6:40:e6:21:cf:c7:e2:0e: 9a:91:21:7f:fa:e1:58:f0:59:44:7a:ef:bf:cd:3d: 74:9b:25:e2:79:a5:18:8e:8c:e1:8f:48:bf:f0:93: cd:8c:8e:58:b9:f5:4b:2d:b6:c8:40:49:47:e6:f2: b1:e6:32:c7:5d:a5:62:bd:4b:ca:cd:08:19:fc:8d: 72:6e:d5:4d:6f:86:b6:fe:84:88:db:e0:9c:ba:ff: 29:16:84:90:5e:cd:0b:e9:43:17:bb:14:58:da:67: 70:6c:80:ea:c2:62:00:5f:81:bf:09:9a:4e:7d:a0: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:AF:F2:59:B3:3C:FA:BF:2E:64:8B:18:65:12:AE:89:58:D7:29 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.150.0/23 117.121.212.0/23 119.63.64.0/24 119.63.71.0/24 Signature Algorithm: sha256WithRSAEncryption 37:07:2d:f7:db:3a:5d:3c:3e:04:56:10:89:bb:3f:36:02:76: 48:42:8c:47:db:c7:75:93:ee:61:83:40:da:be:41:ac:b3:04: 58:41:b8:26:9f:aa:6a:7a:87:0a:74:52:b7:36:79:07:ed:eb: 8e:a2:93:e1:90:21:40:17:37:53:55:f1:f5:bb:9a:6e:de:3a: a0:25:6c:97:9a:5b:08:b8:b1:9c:cd:8e:bd:d5:d7:81:56:0e: d1:e4:ce:5f:3a:f0:b1:21:37:aa:41:ca:cd:6d:18:95:8a:37: 80:11:75:98:f9:a0:cf:89:6a:5d:3c:0f:8b:ef:88:f3:5f:32: 74:b1:01:13:8c:55:f0:d0:a1:5c:3f:30:ba:ff:3d:d5:9f:61: 3b:6f:13:4f:52:7f:db:4d:13:ce:fa:eb:c3:ff:0d:ab:1a:0a: 14:d8:be:84:b2:43:df:dd:18:a8:24:e8:8e:1e:72:74:2b:d1: 42:8c:6f:d9:aa:07:31:15:83:13:51:ee:59:45:a7:40:33:34: 59:17:7f:73:6a:85:34:e5:cf:73:55:ec:a1:5a:60:4a:c8:a2: f9:47:30:7d:7e:57:b2:db:60:93:83:db:62:54:be:21:81:1b: 75:af:b2:38:3b:24:96:f1:62:eb:01:e7:65:ed:c7:af:15:97: af:35:a9:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjQwOTAzMDUxNTI3WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ2OWI2Zi0yNTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtS2LKW7DhVmX6fMPSwF6b/cmo5r7ybflSqZWr0oqBNzlw2K9vOdrxUVWaYf Bw40n/8f1S+IDatwHbP79T7m7btCQtXcOCt8jCncMpyZ9fqCGr33tmXQ+HyLcqMd 4vIsW9CXNJlbcxxAZP5z/5WOe3nI38LKulzKvg7pvXzxA9S0Qes0rpQwHHIOt4BK 1kDmIc/H4g6akSF/+uFY8FlEeu+/zT10myXieaUYjozhj0i/8JPNjI5YufVLLbbI QElH5vKx5jLHXaVivUvKzQgZ/I1ybtVNb4a2/oSI2+Ccuv8pFoSQXs0L6UMXuxRY 2mdwbIDqwmIAX4G/CZpOfaBN9QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFCrLr/JZ szz6vy5kixhlEq6JWNcpMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjQ0MkEvMjBGMkNCMDBFQjlDMTFFQ0E2ODIxMjBDQzRGOUFFMDIvREZCN0ExRkU2 OEZBMTFFRkIyQ0I2RTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAF0wZYDBAF1edQDBAB3P0ADBAB3P0cwDQYJKoZIhvcNAQEL BQADggEBADcHLffbOl08PgRWEIm7PzYCdkhCjEfbx3WT7mGDQNq+QayzBFhBuCaf qmp6hwp0Urc2eQft646ik+GQIUAXN1NV8fW7mm7eOqAlbJeaWwi4sZzNjr3V14FW DtHkzl868LEhN6pBys1tGJWKN4ARdZj5oM+Jal08D4vviPNfMnSxAROMVfDQoVw/ MLr/PdWfYTtvE09Sf9tNE87668P/DasaChTYvoSyQ9/dGKgk6I4ecnQr0UKMb9mq BzEVgxNR7llFp0AzNFkXf3NqhTTlz3NV7KFaYErIovlHMH1+V7LbYJOD22JUviGB G3Wvsjg7JJbxYusB52Xtx68Vl681qec= -----END CERTIFICATE-----Generated at Wed Oct 23 04:01:03 2024 by rpki-client on console-fra.rpki-client.org