$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa File: C3623470CF4611EBBBA79165C4F9AE02.roa (raw, json) Hash identifier: 3vFM77FagLpqFr/nJpGYMXl7CPSlGG/bVu+mI2HwRkY= Subject key identifier: 90:6A:B4:F1:1A:21:31:23:5A:B6:D3:4B:72:F9:7D:F1:61:30:56:58 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 056B Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa Signing time: Thu 26 Dec 2024 06:02:36 +0000 ROA not before: Thu 26 Dec 2024 06:02:36 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 16509 IP address blocks: 199.166.34.0/23 maxlen: 23 199.166.37.0/24 maxlen: 24 207.189.185.0/24 maxlen: 24 207.189.186.0/24 maxlen: 24 207.189.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1387 (0x56b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738 Validity Not Before: Dec 26 06:02:36 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=676cf17c-78b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:2a:d7:c4:cf:c2:14:c7:ea:4d:62:07:5f: 51:ea:db:3c:df:ae:5c:bd:49:8b:9d:10:38:4b:08: 10:5e:18:ca:2a:c5:43:30:0f:6a:08:a0:71:4d:18: c3:0d:00:29:d7:54:59:cc:fe:95:d7:2b:4d:fd:15: e8:04:de:de:57:64:dc:88:1f:29:9f:ca:b2:f2:19: bf:4e:26:fe:cc:2a:45:2d:bf:c2:0b:89:a2:53:77: 3f:2e:0a:f6:b2:71:97:6a:34:d8:6e:a7:ce:12:b3: 71:90:84:f8:0c:ff:72:95:a8:8f:af:de:6c:44:43: 70:68:e5:54:7a:60:03:01:fb:2f:dc:df:64:1f:33: 4a:08:10:44:2f:1c:16:3b:54:48:17:3d:24:7d:e9: 34:16:60:5d:cf:14:c0:6a:c6:59:39:58:26:fe:b8: 45:f6:a7:6b:69:e2:8c:b8:e4:9d:d6:15:1e:92:a9: 4e:17:e2:3a:6d:7d:f7:15:5c:90:04:91:32:79:31: 39:bc:cd:41:a4:ba:b1:b9:c3:ac:17:5e:9b:61:41: f7:42:69:4d:c0:99:af:dc:5a:9b:6c:c1:f7:07:23: 58:27:b0:19:2c:70:54:ac:06:73:0e:4e:bc:97:39: f8:bd:26:1c:c3:e2:4f:3c:ac:01:8e:a5:06:7b:47: 94:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6A:B4:F1:1A:21:31:23:5A:B6:D3:4B:72:F9:7D:F1:61:30:56:58 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 199.166.34.0/23 199.166.37.0/24 207.189.185.0-207.189.187.255 Signature Algorithm: sha256WithRSAEncryption 5d:ed:c3:05:09:00:0c:5c:71:0d:9d:a7:5b:db:8f:c3:82:a1: 27:2a:c6:64:18:1b:18:da:9f:f2:d7:48:20:9e:af:cf:56:9e: 4e:a5:26:53:75:cb:d9:95:03:4a:59:95:54:e3:98:c7:06:4a: a3:41:b3:9b:07:8e:9d:84:9c:82:c6:66:af:d0:40:26:a9:d8: c3:dc:a7:7b:01:1c:3e:b5:f9:02:0a:28:74:b7:be:9d:09:df: 78:51:50:c2:79:05:e0:46:12:ec:32:9a:cc:fa:e6:f2:8d:41: c2:42:8f:a8:54:f8:ff:b4:56:8c:3f:c5:cc:e8:9e:ae:cb:12: 1d:d4:36:34:35:8d:be:a4:74:7b:ed:1d:9c:c3:07:19:2b:7b: c6:6e:64:ea:b5:86:f0:78:7e:3a:6a:22:3b:e4:3a:ed:f9:80: 70:3b:c1:5d:e1:03:7c:9c:20:8a:58:f1:31:38:a2:9f:b2:27: 0d:70:12:94:c1:3d:f8:2b:07:c9:1f:4c:1f:62:87:ec:bf:f7: bc:ba:c1:ac:ce:28:5c:b0:52:20:e8:bc:69:f1:34:5d:3d:b4: 0d:eb:b8:cb:57:66:6b:0e:b7:bc:1b:a8:a8:6a:c1:0b:74:84: f0:86:08:c5:de:64:94:fe:84:10:e0:21:25:1a:41:ea:66:1b: 86:c7:45:47 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjQxMjI2MDYwMjM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzZjZjE3Yy03OGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUUq18TPwhTH6k1iB19R6ts8365cvUmLnRA4SwgQXhjKKsVDMA9qCKBxTRjD DQAp11RZzP6V1ytN/RXoBN7eV2TciB8pn8qy8hm/Tib+zCpFLb/CC4miU3c/Lgr2 snGXajTYbqfOErNxkIT4DP9ylaiPr95sRENwaOVUemADAfsv3N9kHzNKCBBELxwW O1RIFz0kfek0FmBdzxTAasZZOVgm/rhF9qdraeKMuOSd1hUekqlOF+I6bX33FVyQ BJEyeTE5vM1BpLqxucOsF16bYUH3QmlNwJmv3FqbbMH3ByNYJ7AZLHBUrAZzDk68 lzn4vSYcw+JPPKwBjqUGe0eUvwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFJBqtPEa ITEjWrbTS3L5ffFhMFZYMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3MzgvMzIwQzNBOUFDOUQxMTFFQjhEQzVEMjEwQzRGOUFFMDIvQzM2MjM0NzBD RjQ2MTFFQkJCQTc5MTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBoDBAHHpiIDBADHpiUwDAMEAM+9uQMEAs+9uDANBgkqhkiG9w0B AQsFAAOCAQEAXe3DBQkADFxxDZ2nW9uPw4KhJyrGZBgbGNqf8tdIIJ6vz1aeTqUm U3XL2ZUDSlmVVOOYxwZKo0GzmweOnYScgsZmr9BAJqnYw9ynewEcPrX5AgoodLe+ nQnfeFFQwnkF4EYS7DKazPrm8o1BwkKPqFT4/7RWjD/FzOierssSHdQ2NDWNvqR0 e+0dnMMHGSt7xm5k6rWG8Hh+OmoiO+Q67fmAcDvBXeEDfJwgiljxMTiin7InDXAS lME9+CsHyR9MH2KH7L/3vLrBrM4oXLBSIOi8afE0XT20Deu4y1dmaw63vBuoqGrB C3SE8IYIxd5klP6EEOAhJRpB6mYbhsdFRw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:43 2025 by rpki-client