$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/B374CCF4764F11EFA343104DC4F9AE02.roa File: B374CCF4764F11EFA343104DC4F9AE02.roa (raw, json) Hash identifier: JamDzk8ma6Y5sRRvTEiptFXI/raRuD5l7hFVTlSgzVM= Subject key identifier: 9D:82:DA:C4:5D:BE:58:A8:7A:16:60:EF:D7:5C:04:4E:58:10:97:79 Certificate issuer: /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921 Certificate serial: 68 Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/B374CCF4764F11EFA343104DC4F9AE02.roa Signing time: Mon 07 Oct 2024 08:32:27 +0000 ROA not before: Mon 07 Oct 2024 08:32:27 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 45248 IP address blocks: 85.204.253.0/24 maxlen: 24 89.39.91.0/24 maxlen: 24 89.47.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 01:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921 Validity Not Before: Oct 7 08:32:27 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=67039c9b-a568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:56:a7:94:96:0c:3e:03:88:62:44:2b:66:21: 37:94:77:63:eb:a9:63:49:dd:ae:2f:a9:df:a9:07: 6c:76:84:42:19:b5:d0:c3:56:e6:a2:53:fb:b8:00: 3c:e9:86:c4:ba:06:bb:7e:76:85:6f:a6:47:69:3d: 4d:10:38:72:78:c3:e0:5c:7a:9a:5a:b9:34:ec:62: d9:1c:81:f9:c1:cb:6e:e7:f3:b9:64:8f:75:3e:80: ac:31:a9:a9:70:06:ac:90:ba:67:c2:39:9f:73:ec: 46:9d:f5:04:90:f9:00:b6:0b:3d:4a:db:aa:cc:ba: 80:56:ad:47:b0:a3:d1:25:5d:6f:69:3f:2a:c2:24: 35:44:ff:69:67:47:2d:92:58:1d:10:d8:12:b3:a3: 97:bb:0b:1e:52:27:ae:a6:00:1d:48:ed:73:08:cc: 9e:13:76:b4:58:d2:6f:53:d4:07:ac:48:e4:63:a1: f0:56:a9:dd:d5:f1:c7:a6:e7:f6:ce:ec:82:b2:d1: 57:ca:4d:51:50:81:dd:2a:0b:a6:01:12:dc:4f:fd: 02:05:87:33:66:f4:c4:36:9b:4d:45:88:27:be:4a: 8f:93:ec:2a:bd:ff:d4:6d:15:4b:02:9e:fb:e6:28: 0c:1b:0d:17:e2:11:6b:71:db:b0:06:df:87:1c:bf: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:82:DA:C4:5D:BE:58:A8:7A:16:60:EF:D7:5C:04:4E:58:10:97:79 X509v3 Authority Key Identifier: keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/B374CCF4764F11EFA343104DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 85.204.253.0/24 89.39.91.0/24 89.47.94.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:25:30:1a:09:29:b6:1e:99:04:03:7e:e6:51:57:86:9b:e3: bb:ba:8b:43:92:e0:21:27:d3:80:b1:f8:97:b9:5a:e9:2e:64: 89:a4:41:17:64:22:93:f6:3d:01:52:52:16:87:eb:5e:7b:dc: da:e5:38:bc:7c:86:04:a3:36:ac:48:de:31:83:c8:35:d6:2b: 8c:0a:13:84:35:7a:65:21:72:35:5c:b9:96:9c:56:09:e8:97: 92:b1:ed:d2:d0:da:b1:43:cd:03:16:5b:ce:d9:84:07:a3:d6: 1a:89:1a:5a:72:cb:fd:17:d3:bc:c5:d7:89:73:86:bf:92:ef: 91:90:86:74:2e:8b:ff:5f:92:51:88:69:97:2e:97:cf:9f:72: 24:5c:89:58:e5:61:43:2a:94:e5:5b:da:d1:cf:d9:0d:04:50: a9:f8:9c:b1:47:65:e6:74:61:37:38:06:79:cd:16:31:d3:e6: 09:70:f4:4d:bb:43:77:3d:f3:78:d3:c8:dc:cc:86:5a:d5:76: 7b:e7:68:70:24:13:1f:e7:da:29:68:34:94:28:de:ff:16:aa: 1b:d5:7f:37:35:fc:ca:91:77:56:d8:b3:0a:fd:67:f1:6c:e2: c1:46:1d:b1:30:3d:13:4a:73:9a:7a:ce:71:40:73:50:2e:87: f0:2a:09:46 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NDQyQTExMC8GA1UEBRMoN0RFNjA3QzQ2MTVEN0EwMUZCREQ0QTg2QUQ1NDU5NDAx QTc1OTkyMTAeFw0yNDEwMDcwODMyMjdaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MDM5YzliLWE1NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGVqeUlgw+A4hiRCtmITeUd2PrqWNJ3a4vqd+pB2x2hEIZtdDDVuaiU/u4ADzp hsS6Brt+doVvpkdpPU0QOHJ4w+BceppauTTsYtkcgfnBy27n87lkj3U+gKwxqalw BqyQumfCOZ9z7Ead9QSQ+QC2Cz1K26rMuoBWrUewo9ElXW9pPyrCJDVE/2lnRy2S WB0Q2BKzo5e7Cx5SJ66mAB1I7XMIzJ4TdrRY0m9T1AesSORjofBWqd3V8cem5/bO 7IKy0VfKTVFQgd0qC6YBEtxP/QIFhzNm9MQ2m01FiCe+So+T7Cq9/9RtFUsCnvvm KAwbDRfiEWtx27AG34ccv6DDAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUnYLaxF2+ WKh6FmDv11wETlgQl3kwHwYDVR0jBBgwFoAUfeYHxGFdegH73UqGrVRZQBp1mSEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI0NDJBL0U3QzRGOURFRjYy NTExRUU4REFEOEUzNUM0RjlBRTAyL2ZlWUh4R0ZkZWdINzNVcUdyVlJaUUJwMW1T RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZmVZSHhHRmRlZ0g3M1VxR3JWUlpRQnAxbVNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS9FN0M0RjlERUY2MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9CMzc0Q0NGNDc2 NEYxMUVGQTM0MzEwNERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEAFXM/QMEAFknWwMEAFkvXjANBgkqhkiG9w0BAQsFAAOCAQEA eyUwGgkpth6ZBAN+5lFXhpvju7qLQ5LgISfTgLH4l7la6S5kiaRBF2Qik/Y9AVJS FofrXnvc2uU4vHyGBKM2rEjeMYPINdYrjAoThDV6ZSFyNVy5lpxWCeiXkrHt0tDa sUPNAxZbztmEB6PWGokaWnLL/RfTvMXXiXOGv5LvkZCGdC6L/1+SUYhply6Xz59y JFyJWOVhQyqU5Vva0c/ZDQRQqficsUdl5nRhNzgGec0WMdPmCXD0TbtDdz3zeNPI 3MyGWtV2e+docCQTH+faKWg0lCje/xaqG9V/NzX8ypF3VtizCv1n8WziwUYdsTA9 E0pzmnrOcUBzUC6H8CoJRg== -----END CERTIFICATE-----Generated at Wed Oct 23 04:41:29 2024 by rpki-client on console-ams.rpki-client.org