$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/050079585AC911EF9DF4275AC4F9AE02.roa File: 050079585AC911EF9DF4275AC4F9AE02.roa (raw, json) Hash identifier: FQoFMhaO39gGEcc2pn8CyPB8yz5sPKJ5LS8scOVr+nU= Subject key identifier: 7E:41:0D:8F:B9:3F:DD:0C:D8:5C:AA:C7:DD:46:5B:C5:C6:E2:B7:30 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: 03 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/050079585AC911EF9DF4275AC4F9AE02.roa Signing time: Thu 15 Aug 2024 05:41:29 +0000 ROA not before: Thu 15 Aug 2024 05:41:29 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 16509 IP address blocks: 202.160.113.0/24 maxlen: 24 202.160.115.0/24 maxlen: 24 202.160.117.0/24 maxlen: 24 202.160.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Oct 2024 06:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Aug 15 05:41:29 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66bd9509-1cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:6b:99:0d:24:c6:b3:31:9e:4b:2b:10:1b: ea:6a:c1:db:ed:8e:25:01:26:22:2e:a1:1a:87:c0: 38:67:18:7d:32:93:f4:0b:ac:5e:09:2d:66:29:a7: d8:26:86:f4:9d:1b:74:b2:03:2c:05:38:b4:14:ab: 49:f7:ab:31:f3:7c:8d:82:8d:69:28:7f:c0:ac:3e: 30:d7:b2:ef:a8:7a:fc:86:05:0d:f6:e5:37:d2:19: 99:9a:aa:7c:76:48:d0:81:a2:71:28:85:b4:f8:2f: 97:0d:0d:f3:6c:13:e6:1e:c6:4e:34:07:dc:45:f8: a8:5e:f7:b6:99:1a:1d:45:61:af:50:85:81:88:9e: cc:0b:b0:a2:2b:5d:86:06:60:96:2a:0c:7c:3f:13: f1:23:fc:17:1c:d4:cb:b1:7f:ff:b0:30:78:54:07: 54:e8:5f:3c:10:a9:5b:c8:73:21:ea:7f:11:f7:5b: 3b:60:b6:f6:c4:fd:e1:5c:ff:19:f6:58:a7:36:74: 08:55:68:f8:91:d4:01:f4:aa:3e:6c:d6:a4:b7:da: e8:20:1c:7c:d7:bb:71:65:2c:60:85:9b:4a:f3:05: 91:c9:5e:63:ea:a3:5e:4b:00:4e:0d:0e:3f:15:8c: ce:8e:3a:0a:df:db:14:a7:29:53:8c:b9:a6:d7:32: 1c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:41:0D:8F:B9:3F:DD:0C:D8:5C:AA:C7:DD:46:5B:C5:C6:E2:B7:30 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/050079585AC911EF9DF4275AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.160.113.0/24 202.160.115.0/24 202.160.117.0/24 202.160.119.0/24 Signature Algorithm: sha256WithRSAEncryption 36:a3:7d:01:02:ce:74:28:e9:f7:c0:1b:e8:6b:e5:56:71:9a: 55:8e:97:8d:fb:fc:48:63:43:4e:0d:c6:f5:fb:e1:ee:a0:66: 59:23:a8:96:f0:c3:bb:74:7c:b4:73:9c:b1:6f:b9:04:ad:5d: 5a:94:3f:61:01:07:0c:51:36:c9:59:4d:de:4a:4a:a6:81:7d: 2f:e9:60:dc:6e:80:2c:f6:76:37:93:bb:dd:e2:94:98:f5:b5: 1e:23:41:eb:a0:69:02:53:b8:bd:a7:e7:9e:ae:1f:c0:2b:84: f0:98:54:ad:da:44:70:69:1c:fa:0d:a4:3e:fd:43:bb:cb:a7: b9:be:49:7e:73:46:ca:0e:79:0a:b3:ce:06:6d:b3:e2:70:df: 99:81:a4:6f:fb:60:da:d0:fb:de:45:14:94:ee:b1:7f:20:4b: 2b:02:6a:d1:7b:d3:56:ff:1c:44:2a:9c:66:48:f7:67:fb:f8: 21:81:21:b7:c5:8f:f3:bb:74:8c:84:88:3f:e6:fc:d0:78:04: f3:4d:f6:d5:53:2d:c4:c0:ca:c9:66:4a:23:3c:47:ea:f8:e3: 5b:7e:d5:0f:8c:df:89:4c:61:eb:49:69:c1:91:db:54:28:f5: 63:d5:a5:45:00:bb:29:8e:55:00:52:98:b7:bd:42:e5:4c:b3: 22:9d:d0:cd -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REYyNTExMC8GA1UEBRMoOTY4MzU0NTBEMzIxQzFFN0M0OENBMEM1RENEMkJBNkMx RDJENDhGMTAeFw0yNDA4MTUwNTQxMjlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmQ5NTA5LTFjZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQFWuZDSTGszGeSysQG+pqwdvtjiUBJiIuoRqHwDhnGH0yk/QLrF4JLWYpp9gm hvSdG3SyAywFOLQUq0n3qzHzfI2CjWkof8CsPjDXsu+oevyGBQ325TfSGZmaqnx2 SNCBonEohbT4L5cNDfNsE+Yexk40B9xF+Khe97aZGh1FYa9QhYGInswLsKIrXYYG YJYqDHw/E/Ej/Bcc1Muxf/+wMHhUB1ToXzwQqVvIcyHqfxH3WztgtvbE/eFc/xn2 WKc2dAhVaPiR1AH0qj5s1qS32uggHHzXu3FlLGCFm0rzBZHJXmPqo15LAE4NDj8V jM6OOgrf2xSnKVOMuabXMhwrAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUfkENj7k/ 3QzYXKrH3UZbxcbitzAwHwYDVR0jBBgwFoAUloNUUNMhwefEjKDF3NK6bB0tSPEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJERjI1LzdGN0IxREFDNUFD NzExRUY5OUVBRkM0M0M0RjlBRTAyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbG9OVVVOTWh3ZWZFaktERjNOSzZiQjB0U1BFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi8wNTAwNzk1ODVB QzkxMUVGOURGNDI3NUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAEwGAMEAMqgcQMEAMqgcwMEAMqgdQMEAMqgdzANBgkqhkiG9w0BAQsF AAOCAQEANqN9AQLOdCjp98Ab6GvlVnGaVY6Xjfv8SGNDTg3G9fvh7qBmWSOolvDD u3R8tHOcsW+5BK1dWpQ/YQEHDFE2yVlN3kpKpoF9L+lg3G6ALPZ2N5O73eKUmPW1 HiNB66BpAlO4vafnnq4fwCuE8JhUrdpEcGkc+g2kPv1Du8unub5JfnNGyg55CrPO Bm2z4nDfmYGkb/tg2tD73kUUlO6xfyBLKwJq0XvTVv8cRCqcZkj3Z/v4IYEht8WP 87t0jISIP+b80HgE80321VMtxMDKyWZKIzxH6vjjW37VD4zfiUxh60lpwZHbVCj1 Y9WlRQC7KY5VAFKYt71C5UyzIp3QzQ== -----END CERTIFICATE-----Generated at Mon Oct 21 07:54:11 2024 by rpki-client on console-ams.rpki-client.org