$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa File: C3623470CF4611EBBBA79165C4F9AE02.roa (raw, json) Hash identifier: rgWYkJMIKCy/+cDut/DrKgQZ/ahGBNA4CeK+i59E9po= Subject key identifier: 55:79:CF:63:D4:7B:FE:B0:3B:E3:BD:86:78:3E:D6:A0:AF:3C:9C:D9 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 04D2 Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa Signing time: Tue 19 Mar 2024 01:33:36 +0000 ROA not before: Tue 19 Mar 2024 01:33:36 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 16509 IP address blocks: 207.189.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Apr 2024 22:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1234 (0x4d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Mar 19 01:33:36 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f8eb70-04f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ae:f4:9b:42:d8:0c:66:64:49:00:b9:04:1a: 7a:9f:76:22:48:a7:88:ae:7f:fb:f0:f1:bd:5e:44: c2:11:b8:dd:a0:ce:31:28:bd:d0:00:2c:70:96:18: 00:65:82:f1:db:6b:8a:39:7c:dd:9e:e9:52:7c:bd: e2:bc:d0:88:ca:3d:72:c9:5e:36:1d:7b:3e:36:1b: cb:a1:b3:d3:9f:8b:1e:3a:74:16:1f:26:0b:22:5b: 68:22:82:a6:12:37:02:b7:86:59:30:05:f0:93:e8: 86:af:e0:5e:60:c2:79:e9:a1:44:79:57:28:7a:8f: a1:cb:f5:75:69:56:57:82:5e:e4:87:72:2d:e4:4e: 6f:94:e6:d6:32:38:2b:c2:7d:c9:e1:08:40:55:d3: e1:38:98:b6:d0:23:58:0f:60:b7:0e:ba:fe:e8:b8: a4:94:99:6e:f2:16:79:57:15:c3:a0:c0:1d:b0:56: 67:fe:5f:91:4d:ba:cb:08:fe:a4:59:71:1a:84:7c: dc:ed:a2:3a:c4:21:11:59:72:37:56:9f:bb:36:70: 85:b7:cd:01:be:1e:d5:d2:ec:16:77:ff:df:f1:7a: 42:45:69:aa:4c:44:2f:0e:fb:21:9f:71:4d:e0:53: 17:9d:e8:31:e3:51:65:f7:41:ff:47:5f:26:12:b8: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:79:CF:63:D4:7B:FE:B0:3B:E3:BD:86:78:3E:D6:A0:AF:3C:9C:D9 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/C3623470CF4611EBBBA79165C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 207.189.185.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:13:c6:5d:94:57:dd:23:e2:95:0a:70:22:5e:89:4d:6e:7a: 43:f1:8f:31:ab:71:4d:9f:e0:3f:99:8b:f0:4b:54:87:bb:bd: 76:dd:77:7b:c5:fc:b3:69:8e:e0:0a:85:31:ac:81:a0:27:c7: fb:f2:3a:4a:b5:69:8a:69:cf:56:97:55:28:68:fc:1c:61:6c: 87:09:15:26:5f:37:c2:59:ea:8c:41:de:d9:b3:d6:00:93:89: a5:02:86:57:06:20:88:b0:62:7c:29:4e:f7:47:92:83:1f:b4: 16:d4:5c:a2:5b:3d:cb:31:ac:44:7e:93:ff:0c:56:d9:ea:3e: 7f:84:e7:03:48:13:8d:38:0e:42:c7:45:0c:60:f4:b0:57:20: 5e:c9:53:cd:c1:f5:14:f8:aa:9d:64:9a:d5:95:1a:27:72:09: 6b:de:cf:6f:c0:47:17:7b:e8:b5:1c:a1:2b:ac:8d:74:0d:c3: 01:32:b8:a1:0e:b7:96:7c:fd:62:42:13:22:4f:75:0b:d6:69: da:e0:ce:bb:94:87:c1:4c:20:d0:89:32:2a:1c:f3:32:00:40: 91:c5:30:8d:f9:22:69:15:ff:1f:78:88:e7:37:4e:f2:bf:d5: f8:d8:57:52:5e:21:d3:b9:80:e8:53:17:76:1e:2b:69:9a:3f: 96:b0:c8:13 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjQwMzE5MDEzMzM2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4ZWI3MC0wNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1670m0LYDGZkSQC5BBp6n3YiSKeIrn/78PG9XkTCEbjdoM4xKL3QACxwlhgA ZYLx22uKOXzdnulSfL3ivNCIyj1yyV42HXs+NhvLobPTn4seOnQWHyYLIltoIoKm EjcCt4ZZMAXwk+iGr+BeYMJ56aFEeVcoeo+hy/V1aVZXgl7kh3It5E5vlObWMjgr wn3J4QhAVdPhOJi20CNYD2C3Drr+6LiklJlu8hZ5VxXDoMAdsFZn/l+RTbrLCP6k WXEahHzc7aI6xCERWXI3Vp+7NnCFt80Bvh7V0uwWd//f8XpCRWmqTEQvDvshn3FN 4FMXnegx41Fl90H/R18mErjzGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFV5z2PU e/6wO+O9hng+1qCvPJzZMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkM3MzgvMzIwQzNBOUFDOUQxMTFFQjhEQzVEMjEwQzRGOUFFMDIvQzM2MjM0NzBD RjQ2MTFFQkJCQTc5MTY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADPvbkwDQYJKoZIhvcNAQELBQADggEBAHsTxl2UV90j4pUK cCJeiU1uekPxjzGrcU2f4D+Zi/BLVIe7vXbdd3vF/LNpjuAKhTGsgaAnx/vyOkq1 aYppz1aXVSho/BxhbIcJFSZfN8JZ6oxB3tmz1gCTiaUChlcGIIiwYnwpTvdHkoMf tBbUXKJbPcsxrER+k/8MVtnqPn+E5wNIE404DkLHRQxg9LBXIF7JU83B9RT4qp1k mtWVGidyCWvez2/ARxd76LUcoSusjXQNwwEyuKEOt5Z8/WJCEyJPdQvWadrgzruU h8FMINCJMioc8zIAQJHFMI35ImkV/x94iOc3TvK/1fjYV1JeIdO5gOhTF3YeK2ma P5awyBM= -----END CERTIFICATE-----Generated at Wed Apr 17 01:46:03 2024 by rpki-client on console-fra.rpki-client.org