$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa File: 887E73265B9A11EF80F47C41C4F9AE02.roa (raw, json) Hash identifier: CexljjC7wRSe/lloivtx612T1a6cjKsaqz6uhDTMArU= Subject key identifier: 86:1C:E4:48:AB:36:F0:52:23:AC:EF:7F:E6:59:49:30:97:9B:F9:DC Certificate issuer: /CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Certificate serial: 16 Authority key identifier: 55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa Signing time: Tue 10 Sep 2024 00:35:14 +0000 ROA not before: Tue 10 Sep 2024 00:35:14 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 10143 IP address blocks: 160.30.95.0/24 maxlen: 24 160.187.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B75A/serialNumber=55770F63A0E65F4C2FC96AF198BC5784DCE78A46 Validity Not Before: Sep 10 00:35:14 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66df9441-8f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:88:bd:a8:85:bc:5f:5e:b7:a8:77:dd:c4: b4:e5:79:85:00:73:9f:e1:08:ea:9a:61:99:c5:aa: 55:d3:92:52:91:5e:e8:b0:cb:90:1f:1a:60:05:00: d3:d5:30:2f:31:23:be:51:e3:3d:a2:41:40:e5:c6: f5:b8:ec:e2:e2:92:0d:21:22:aa:d5:36:12:62:0d: 7b:f0:ae:74:4a:46:4c:94:54:c4:e3:c8:38:9e:24: 4a:99:b6:73:b8:39:3b:cc:2a:d4:7b:30:48:ff:79: 8f:73:e8:5e:12:88:5a:c4:cf:ad:27:4b:c8:68:ee: 0b:33:54:28:c3:4e:ee:48:ed:89:2a:89:fe:41:b5: 4e:35:83:e3:40:42:45:8b:55:cd:68:0b:77:06:5e: fe:68:6b:7a:79:13:62:45:8c:4e:64:ac:ee:f3:48: 6e:8f:54:35:25:ae:6c:bf:eb:5c:a3:72:09:08:7a: dc:62:56:36:92:8d:22:de:ed:c1:38:7c:6f:cc:bf: ff:b6:af:c9:74:21:61:40:89:d4:e0:5b:56:76:f8: 43:21:cd:c8:ed:31:51:c9:34:c4:2d:2c:24:65:7e: 92:b6:97:08:71:78:12:3c:6f:8f:c6:c8:47:f1:06: 73:f0:13:06:1f:8f:a8:7e:9f:8f:8f:1d:d8:32:23: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:E4:48:AB:36:F0:52:23:AC:EF:7F:E6:59:49:30:97:9B:F9:DC X509v3 Authority Key Identifier: keyid:55:77:0F:63:A0:E6:5F:4C:2F:C9:6A:F1:98:BC:57:84:DC:E7:8A:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/VXcPY6DmX0wvyWrxmLxXhNznikY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXcPY6DmX0wvyWrxmLxXhNznikY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/12D30FD85B9A11EF82027640C4F9AE02/887E73265B9A11EF80F47C41C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.95.0/24 160.187.24.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:a7:81:b4:31:58:d4:26:90:34:fb:eb:81:13:6a:b6:1b:7d: 97:d7:e6:2d:52:8d:ad:63:37:b9:a5:a5:98:cc:bc:55:06:0e: e7:4a:c1:64:c0:68:8d:b3:84:0c:65:33:51:b0:e0:79:6c:f9: 60:27:4c:21:20:0a:bb:6c:85:fe:08:a5:f5:2c:a5:68:64:6f: da:df:8f:e1:20:b8:77:d3:69:18:ba:ac:34:00:37:db:d7:20: 05:6d:b5:9b:da:d6:c7:1a:38:f8:6f:82:73:0c:12:99:38:e5: ae:25:3b:9f:ed:a1:66:8f:36:39:df:0e:bb:77:73:85:17:cd: 1b:f3:c1:ba:46:e4:d1:7d:e6:53:d3:5f:ed:69:08:91:1d:13: b1:8d:0b:71:e8:31:c8:9c:68:4f:9a:cd:bd:db:b3:59:d6:26: d5:98:cb:31:f3:68:08:3a:aa:25:6c:21:a8:ae:5c:e8:11:ce: b3:ca:c5:b0:fa:16:8a:a9:8b:ae:0b:4a:e1:24:d9:39:64:40: 14:a5:c8:1c:fa:49:10:a4:d0:68:28:c1:d6:c7:be:5f:ff:2a: 14:b3:7e:50:fa:b3:4a:98:8a:0a:97:c9:ec:18:8f:d4:95:37: a0:18:3e:bc:4a:f6:cc:c1:3b:af:53:20:c8:83:fb:1c:b7:95: 99:9a:fe:f1 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy Qjc1QTExMC8GA1UEBRMoNTU3NzBGNjNBMEU2NUY0QzJGQzk2QUYxOThCQzU3ODRE Q0U3OEE0NjAeFw0yNDA5MTAwMDM1MTRaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZGY5NDQxLThmMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCepIi9qIW8X163qHfdxLTleYUAc5/hCOqaYZnFqlXTklKRXuiwy5AfGmAFANPV MC8xI75R4z2iQUDlxvW47OLikg0hIqrVNhJiDXvwrnRKRkyUVMTjyDieJEqZtnO4 OTvMKtR7MEj/eY9z6F4SiFrEz60nS8ho7gszVCjDTu5I7Ykqif5BtU41g+NAQkWL Vc1oC3cGXv5oa3p5E2JFjE5krO7zSG6PVDUlrmy/61yjcgkIetxiVjaSjSLe7cE4 fG/Mv/+2r8l0IWFAidTgW1Z2+EMhzcjtMVHJNMQtLCRlfpK2lwhxeBI8b4/GyEfx BnPwEwYfj6h+n4+PHdgyI9ZvAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUhhzkSKs2 8FIjrO9/5llJMJeb+dwwHwYDVR0jBBgwFoAUVXcPY6DmX0wvyWrxmLxXhNznikYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCNzVBLzEyRDMwRkQ4NUI5 QTExRUY4MjAyNzY0MEM0RjlBRTAyL1ZYY1BZNkRtWDB3dnlXcnhtTHhYaE56bmlr WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhjUFk2RG1YMHd2eVdyeG1MeFhoTnpuaWtZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1QS8xMkQzMEZEODVCOUExMUVGODIwMjc2NDBDNEY5QUUwMi84ODdFNzMyNjVC OUExMUVGODBGNDdDNDFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAKAeXwMEAKC7GDANBgkqhkiG9w0BAQsFAAOCAQEAjKeBtDFY 1CaQNPvrgRNqtht9l9fmLVKNrWM3uaWlmMy8VQYO50rBZMBojbOEDGUzUbDgeWz5 YCdMISAKu2yF/gil9SylaGRv2t+P4SC4d9NpGLqsNAA329cgBW21m9rWxxo4+G+C cwwSmTjlriU7n+2hZo82Od8Ou3dzhRfNG/PBukbk0X3mU9Nf7WkIkR0TsY0Lcegx yJxoT5rNvduzWdYm1ZjLMfNoCDqqJWwhqK5c6BHOs8rFsPoWiqmLrgtK4STZOWRA FKXIHPpJEKTQaCjB1se+X/8qFLN+UPqzSpiKCpfJ7BiP1JU3oBg+vEr2zME7r1Mg yIP7HLeVmZr+8Q== -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:48 2024 by rpki-client on console-ams.rpki-client.org