$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F03C370AE3E11EF9289306CC4F9AE02.roa File: 9F03C370AE3E11EF9289306CC4F9AE02.roa (raw, json) Hash identifier: acG9tYsmo8XiWvsmjcRt/ihNeY5uozstlDBh9V8aHz8= Subject key identifier: 05:51:F6:1B:D4:4B:E2:30:B5:9C:91:B3:03:E8:70:A6:FF:B2:CD:5B Certificate issuer: /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB Certificate serial: 02 Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F03C370AE3E11EF9289306CC4F9AE02.roa Signing time: Fri 29 Nov 2024 10:42:25 +0000 ROA not before: Fri 29 Nov 2024 10:42:25 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 153460 IP address blocks: 160.250.114.0/24 maxlen: 24 160.250.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jan 2025 05:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB Validity Not Before: Nov 29 10:42:25 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=67499a91-9dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0e:b6:0d:27:e1:a4:de:dd:f6:75:6f:12:75: 10:9b:dc:11:7a:0b:24:de:df:b2:1b:d6:df:41:f9: 11:76:86:eb:69:67:18:9b:16:5b:8d:e1:6d:8d:5d: cf:a6:6b:0a:a8:2a:f3:8d:65:63:31:32:d4:ad:b2: a5:ad:5b:a5:97:4f:a4:59:7d:ff:2a:62:f3:c7:fc: 34:0d:ed:73:40:a3:37:23:96:db:c4:6b:f0:00:2b: 4d:15:83:dd:4d:ee:6f:de:55:98:af:71:56:ea:c1: 4b:c2:03:b7:20:37:59:38:44:67:e0:5c:36:e0:85: c8:d0:a1:ed:d9:46:81:5b:06:57:e9:9d:26:30:61: 6c:38:e6:ff:da:4e:96:54:28:d6:de:20:37:8d:51: 81:5b:00:31:c5:0a:f0:d7:26:ab:f2:a7:5f:42:80: db:30:2d:3d:a1:83:ab:b5:73:35:ee:94:37:3d:a4: d2:5f:05:ef:84:0f:49:1b:82:03:01:d7:ee:e3:1e: 9a:ef:ca:12:30:90:83:44:9c:bc:67:ec:de:0a:8b: e9:ca:13:7a:df:f2:15:ea:26:9a:29:82:53:89:3f: 7a:9f:ec:6d:a8:ee:94:17:0d:3b:58:e8:01:c7:26: 99:a2:c9:21:11:d7:ff:bd:4e:40:d3:6f:c4:cf:6b: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:F6:1B:D4:4B:E2:30:B5:9C:91:B3:03:E8:70:A6:FF:B2:CD:5B X509v3 Authority Key Identifier: keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F03C370AE3E11EF9289306CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.114.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:d0:4f:c7:ae:c6:e1:ba:e1:d4:b3:3b:96:62:bb:3a:0e:6e: 10:74:78:05:5a:92:6c:d7:d0:f7:8a:84:3a:3d:9f:6d:07:be: 62:0b:5a:3b:25:f1:34:10:dc:e9:e5:49:a6:dd:fe:86:41:b6: 0d:3a:9b:90:4d:97:d8:8b:72:26:52:4e:90:64:ae:3f:ec:73: df:cf:a4:de:cb:2b:c8:99:23:c8:f8:07:d8:6d:3f:3c:b7:da: 2b:0a:cf:60:f8:21:9f:79:ba:0b:f2:53:7f:32:f2:11:95:8c: 71:54:23:5b:97:c5:2d:40:13:4c:7b:c9:5a:bc:f3:f8:39:25: 51:c8:a0:fa:43:68:bb:98:51:1c:b1:05:ea:9a:14:3b:2d:b6: 08:11:c9:b2:30:28:55:c9:8e:ce:96:f4:ce:9b:b2:77:c1:d5: 21:1e:90:b8:64:c3:00:4e:e2:7b:d1:5a:38:85:4f:00:72:10: 34:87:95:7e:bb:15:db:01:66:38:2a:aa:19:11:0b:f4:a4:ee: d2:ed:73:da:56:21:18:0b:e0:98:ee:f3:4f:3a:e3:b7:c6:6f: f8:c4:9c:f7:13:31:72:68:f1:68:c4:51:b4:7f:24:05:37:36: bd:33:4e:6b:15:a3:b2:d0:0e:78:d5:d1:c5:03:79:29:15:08: 0a:b7:ec:38 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjEyQTExMC8GA1UEBRMoMjcyMkM1QUJCRUU2M0I3NkI5REE5NjZDNzhENzNBNjY1 N0QyNDRFQjAeFw0yNDExMjkxMDQyMjVaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDk5YTkxLTlkZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+DrYNJ+Gk3t32dW8SdRCb3BF6CyTe37Ib1t9B+RF2hutpZxibFluN4W2NXc+m awqoKvONZWMxMtStsqWtW6WXT6RZff8qYvPH/DQN7XNAozcjltvEa/AAK00Vg91N 7m/eVZivcVbqwUvCA7cgN1k4RGfgXDbghcjQoe3ZRoFbBlfpnSYwYWw45v/aTpZU KNbeIDeNUYFbADHFCvDXJqvyp19CgNswLT2hg6u1czXulDc9pNJfBe+ED0kbggMB 1+7jHprvyhIwkINEnLxn7N4Ki+nKE3rf8hXqJpopglOJP3qf7G2o7pQXDTtY6AHH JpmiySER1/+9TkDTb8TPaw55AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUBVH2G9RL 4jC1nJGzA+hwpv+yzVswHwYDVR0jBBgwFoAUJyLFq77mO3a52pZseNc6ZlfSROsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTJBL0IxRDRBNTlDQUUz RDExRUY5NkI3NkM2QUM0RjlBRTAyL0p5TEZxNzdtTzNhNTJwWnNlTmM2WmxmU1JP cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSnlMRnE3N21PM2E1MnBac2VOYzZabGZTUk9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyQS9CMUQ0QTU5Q0FFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi85RjAzQzM3MEFF M0UxMUVGOTI4OTMwNkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6cjANBgkqhkiG9w0BAQsFAAOCAQEAnNBPx67G4brh1LM7 lmK7Og5uEHR4BVqSbNfQ94qEOj2fbQe+YgtaOyXxNBDc6eVJpt3+hkG2DTqbkE2X 2ItyJlJOkGSuP+xz38+k3ssryJkjyPgH2G0/PLfaKwrPYPghn3m6C/JTfzLyEZWM cVQjW5fFLUATTHvJWrzz+DklUcig+kNou5hRHLEF6poUOy22CBHJsjAoVcmOzpb0 zpuyd8HVIR6QuGTDAE7ie9FaOIVPAHIQNIeVfrsV2wFmOCqqGREL9KTu0u1z2lYh GAvgmO7zTzrjt8Zv+MSc9xMxcmjxaMRRtH8kBTc2vTNOaxWjstAOeNXRxQN5KRUI CrfsOA== -----END CERTIFICATE-----Generated at Fri Dec 27 08:43:08 2024 by rpki-client on console-fra.rpki-client.org