$ rpki-client -vvf rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/75E6DD481BDA11EAB3F45D44C4F9AE02.roa File: 75E6DD481BDA11EAB3F45D44C4F9AE02.roa (raw, json) Hash identifier: rIKErlmiWA8+S4ht3UIu2T4gm2uHnfIxSPm+f5gxatE= Subject key identifier: CD:1A:A0:57:ED:40:CE:FF:C1:38:68:1D:78:E1:CA:00:2A:C5:BA:D4 Certificate issuer: /CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Certificate serial: 0B3C Authority key identifier: 46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/75E6DD481BDA11EAB3F45D44C4F9AE02.roa Signing time: Thu 08 Aug 2024 19:27:15 +0000 ROA not before: Thu 08 Aug 2024 19:27:15 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 135600 IP address blocks: 66.228.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128DE9/serialNumber=4623A9A4D2EA85E98FB5A11A0D2CB08038878F0F Validity Not Before: Aug 8 19:27:15 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b51c13-d09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:5f:7f:85:24:e8:03:7d:4b:00:09:6f:f7: 84:c2:c8:4c:93:df:06:04:49:d0:58:9d:1b:5f:7e: d8:b0:59:01:12:24:46:53:d9:53:8f:d9:26:b4:f0: de:5c:dc:7b:a0:10:db:eb:8f:24:dc:40:47:e7:42: 73:fa:0b:49:88:11:32:0a:fb:93:b4:0c:39:81:80: d9:36:1e:bd:a0:72:1a:f4:80:93:d3:69:7d:9d:2a: db:56:02:8c:ec:63:df:57:5d:d9:95:5d:a6:de:2d: c7:3b:20:53:df:86:86:0d:ef:65:19:da:1e:72:df: dd:89:40:8b:38:b7:5f:5c:ce:3f:af:08:bf:b3:4f: d6:72:69:1e:48:8e:08:e8:08:26:6b:33:76:dd:ca: 8a:db:5f:00:43:25:1d:88:86:8e:97:61:6f:11:2d: 6b:2b:31:75:54:99:04:3c:57:b1:1d:ec:b9:ef:07: d8:9c:9e:8c:ea:97:9d:2c:d9:f5:a9:ef:e4:b8:b0: b9:17:c7:61:ca:f0:7a:fd:b3:3d:49:c7:50:83:9b: 9d:40:c2:3c:bd:01:af:cc:0f:45:3a:93:82:1c:50: 69:ff:ab:9f:f2:db:b9:77:e1:7f:a2:bf:12:19:c3: ad:d3:e8:fb:03:ad:88:b9:67:9d:e0:65:c5:2a:96: ec:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:A0:57:ED:40:CE:FF:C1:38:68:1D:78:E1:CA:00:2A:C5:BA:D4 X509v3 Authority Key Identifier: keyid:46:23:A9:A4:D2:EA:85:E9:8F:B5:A1:1A:0D:2C:B0:80:38:87:8F:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/RiOppNLqhemPtaEaDSywgDiHjw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RiOppNLqhemPtaEaDSywgDiHjw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128DE9/D0049F861BD511EA80CBCF36C4F9AE02/75E6DD481BDA11EAB3F45D44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 66.228.0.0/20 Signature Algorithm: sha256WithRSAEncryption 87:04:64:38:a1:76:4d:56:36:8c:65:a1:8b:09:c3:87:bc:a9: 1d:68:c4:ec:c7:78:b9:05:9e:d3:56:48:83:a5:d0:08:8c:19: 84:29:a5:49:63:fd:70:91:c5:87:1a:b7:e2:37:0a:0a:ea:be: c1:c6:c9:eb:0a:0b:e2:48:57:5d:66:cf:4e:a9:b5:cd:c8:41: e1:45:67:17:e3:27:52:28:36:7d:2c:4f:df:3a:6f:89:f5:87: 36:3c:6c:e6:95:98:ad:3f:d8:b8:93:e1:8f:60:88:97:64:0d: 59:af:4e:89:8e:14:1a:13:5b:69:08:27:09:00:1f:64:c8:b2: 93:a4:89:0c:14:43:7c:c0:21:29:f2:49:a6:c6:be:85:c8:97: 38:70:5c:c2:02:da:58:dd:13:3e:aa:08:44:84:bf:68:b5:19: fd:ad:6a:b0:31:9a:a7:b1:04:d5:e4:52:26:89:f0:0a:98:6d: 5f:b3:bc:5d:f4:1e:e0:82:f4:8f:df:9a:0a:40:49:6c:ee:8d: 6b:b9:8a:ed:e9:8c:eb:c3:c7:74:de:e4:91:1f:06:d9:70:a1: 99:64:bf:a8:77:31:18:10:aa:b9:a3:37:7d:7a:ae:ff:d4:17: 40:39:f9:71:03:65:64:ea:2b:be:52:be:52:38:d3:12:39:01: 60:b2:db:77 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhERTkxMTAvBgNVBAUTKDQ2MjNBOUE0RDJFQTg1RTk4RkI1QTExQTBEMkNCMDgw Mzg4NzhGMEYwHhcNMjQwODA4MTkyNzE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI1MWMxMy1kMDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruZff4Uk6AN9SwAJb/eEwshMk98GBEnQWJ0bX37YsFkBEiRGU9lTj9kmtPDe XNx7oBDb648k3EBH50Jz+gtJiBEyCvuTtAw5gYDZNh69oHIa9ICT02l9nSrbVgKM 7GPfV13ZlV2m3i3HOyBT34aGDe9lGdoect/diUCLOLdfXM4/rwi/s0/WcmkeSI4I 6AgmazN23cqK218AQyUdiIaOl2FvES1rKzF1VJkEPFexHey57wfYnJ6M6pedLNn1 qe/kuLC5F8dhyvB6/bM9ScdQg5udQMI8vQGvzA9FOpOCHFBp/6uf8tu5d+F/or8S GcOt0+j7A62IuWed4GXFKpbs8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFM0aoFft QM7/wThoHXjhygAqxbrUMB8GA1UdIwQYMBaAFEYjqaTS6oXpj7WhGg0ssIA4h48P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOERFOS9EMDA0OUY4NjFC RDUxMUVBODBDQkNGMzZDNEY5QUUwMi9SaU9wcE5McWhlbVB0YUVhRFN5d2dEaUhq dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JpT3BwTkxxaGVtUHRhRWFEU3l3Z0RpSGp3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjhERTkvRDAwNDlGODYxQkQ1MTFFQTgwQ0JDRjM2QzRGOUFFMDIvNzVFNkRENDgx QkRBMTFFQUIzRjQ1RDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBARC5AAwDQYJKoZIhvcNAQELBQADggEBAIcEZDihdk1WNoxl oYsJw4e8qR1oxOzHeLkFntNWSIOl0AiMGYQppUlj/XCRxYcat+I3CgrqvsHGyesK C+JIV11mz06ptc3IQeFFZxfjJ1IoNn0sT986b4n1hzY8bOaVmK0/2LiT4Y9giJdk DVmvTomOFBoTW2kIJwkAH2TIspOkiQwUQ3zAISnySabGvoXIlzhwXMIC2ljdEz6q CESEv2i1Gf2tarAxmqexBNXkUiaJ8AqYbV+zvF30HuCC9I/fmgpASWzujWu5iu3p jOvDx3Te5JEfBtlwoZlkv6h3MRgQqrmjN316rv/UF0A5+XEDZWTqK75SvlI40xI5 AWCy23c= -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:21 2024 by rpki-client on console-fra.rpki-client.org