$ rpki-client -vvf rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/23CFDCD244BE11EF8FA8A37FC4F9AE02.roa File: 23CFDCD244BE11EF8FA8A37FC4F9AE02.roa (raw, json) Hash identifier: KO9be2ih3evd/G7Xj3aWfUd6LRda9sk0HzRbNMPyFO0= Subject key identifier: 98:44:E8:A5:5C:07:53:BC:4B:D0:27:0F:44:7E:EE:10:E5:A7:CC:C7 Certificate issuer: /CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Certificate serial: 31 Authority key identifier: D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/23CFDCD244BE11EF8FA8A37FC4F9AE02.roa Signing time: Thu 18 Jul 2024 04:40:22 +0000 ROA not before: Thu 18 Jul 2024 04:40:22 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 24007 IP address blocks: 180.188.204.0/22 maxlen: 22 180.188.205.0/24 maxlen: 24 180.188.206.0/24 maxlen: 24 180.188.207.0/24 maxlen: 24 202.12.24.0/24 maxlen: 24 203.3.130.0/24 maxlen: 24 203.4.232.0/24 maxlen: 24 203.4.233.0/24 maxlen: 24 203.4.234.0/24 maxlen: 24 203.4.235.0/24 maxlen: 24 203.4.236.0/24 maxlen: 24 203.4.237.0/24 maxlen: 24 203.4.238.0/24 maxlen: 24 203.4.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F190/serialNumber=D6BF3DE16441ED7D87506DE09E4DD5D638E0BA69 Validity Not Before: Jul 18 04:40:22 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=66989cb5-3984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:76:84:95:40:9c:4d:5b:c9:77:48:44:64:19: 0b:38:2a:65:50:6d:89:df:ea:9e:fd:43:97:98:43: 4f:2f:2a:4f:da:61:db:b2:da:56:5a:e7:c1:e8:36: 87:ad:bd:49:96:54:85:08:d4:ba:99:0a:63:c5:8d: db:57:90:e9:fd:1c:cd:f4:f5:c1:b7:86:9e:37:bc: 54:dc:9d:b8:9b:3d:e1:fe:5b:e4:92:dc:e7:d7:41: b5:b0:ef:24:57:9e:2d:e1:53:60:24:31:39:5a:7d: 9f:1f:e4:7b:66:e8:06:a5:04:ae:ef:f4:20:7d:eb: ad:4a:6e:ef:24:27:cf:03:61:a7:74:96:6a:ce:e7: d7:6f:e5:74:89:73:b3:c1:a5:35:25:b4:15:ae:1c: 4f:0b:02:18:be:e0:e2:26:71:18:e2:78:b7:f7:d7: 66:16:83:91:84:50:39:0a:91:83:80:ad:af:52:75: 95:db:27:dd:cd:2e:03:09:59:54:35:89:e0:a4:d7: 57:2b:f2:73:32:77:6b:e8:d5:3c:c4:79:0c:5f:48: fc:a7:77:56:d9:a0:2e:8b:fd:4c:f9:34:40:9d:24: dd:98:8a:3e:88:b8:eb:31:76:47:b6:d4:f4:75:bf: c4:22:f0:ed:ae:84:b8:f1:36:a5:19:81:ea:95:f5: 77:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:44:E8:A5:5C:07:53:BC:4B:D0:27:0F:44:7E:EE:10:E5:A7:CC:C7 X509v3 Authority Key Identifier: keyid:D6:BF:3D:E1:64:41:ED:7D:87:50:6D:E0:9E:4D:D5:D6:38:E0:BA:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/1r894WRB7X2HUG3gnk3V1jjgumk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1r894WRB7X2HUG3gnk3V1jjgumk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F190/57B405943A8411EFA5731584C4F9AE02/23CFDCD244BE11EF8FA8A37FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 180.188.204.0/22 202.12.24.0/24 203.3.130.0/24 203.4.232.0/21 Signature Algorithm: sha256WithRSAEncryption c2:d5:d0:53:b1:22:35:f0:d2:d8:c4:53:d3:83:de:21:7c:b0: 6d:38:8c:0a:d6:2e:ee:06:1f:0a:75:ad:2c:16:f1:fb:f8:38: 6a:6f:f1:57:d8:c6:cb:b7:06:9a:58:12:85:c7:ce:83:af:cd: ee:97:33:83:61:14:db:c8:4f:fa:55:9d:d8:09:e2:d3:f7:8e: a5:b3:88:8c:a9:8c:99:5e:3c:6e:f4:ab:07:ce:38:cb:91:ca: 20:2c:ac:4c:d3:81:a7:bf:28:5f:70:f2:48:38:79:4b:33:de: 38:5e:0c:3f:fb:62:bb:e1:d5:7f:e7:6e:2a:a2:7f:ac:de:f5: 80:dc:bf:ad:a9:5b:ea:fc:70:56:4f:03:7d:4f:d8:bc:1f:45: 29:3e:30:49:98:e7:1f:d5:67:b1:01:1d:c5:10:77:dc:8c:0b: ac:4b:41:51:19:7b:d7:1b:04:ad:90:ec:e2:bd:85:29:14:e3: d5:2f:58:a5:20:be:b6:13:bb:32:8a:5a:26:4e:5e:35:ec:ff: 2a:b4:0f:c8:13:c1:68:46:44:c9:0a:8e:61:1f:75:27:b8:f2: c4:d6:b4:4e:c2:6e:8a:9b:dc:9e:40:f4:0e:53:3f:52:30:b0: 66:23:72:64:bd:2e:5b:0e:e8:91:11:80:c8:ae:d6:c1:ec:4b: 55:b0:e9:a8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjE5MDExMC8GA1UEBRMoRDZCRjNERTE2NDQxRUQ3RDg3NTA2REUwOUU0REQ1RDYz OEUwQkE2OTAeFw0yNDA3MTgwNDQwMjJaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OTg5Y2I1LTM5ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6doSVQJxNW8l3SERkGQs4KmVQbYnf6p79Q5eYQ08vKk/aYduy2lZa58HoNoet vUmWVIUI1LqZCmPFjdtXkOn9HM309cG3hp43vFTcnbibPeH+W+SS3OfXQbWw7yRX ni3hU2AkMTlafZ8f5Htm6AalBK7v9CB9661Kbu8kJ88DYad0lmrO59dv5XSJc7PB pTUltBWuHE8LAhi+4OImcRjieLf312YWg5GEUDkKkYOAra9SdZXbJ93NLgMJWVQ1 ieCk11cr8nMyd2vo1TzEeQxfSPynd1bZoC6L/Uz5NECdJN2Yij6IuOsxdke21PR1 v8Qi8O2uhLjxNqUZgeqV9XdRAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUmETopVwH U7xL0CcPRH7uEOWnzMcwHwYDVR0jBBgwFoAU1r894WRB7X2HUG3gnk3V1jjgumkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMTkwLzU3QjQwNTk0M0E4 NDExRUZBNTczMTU4NEM0RjlBRTAyLzFyODk0V1JCN1gySFVHM2duazNWMWpqZ3Vt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXI4OTRXUkI3WDJIVUczZ25rM1YxampndW1rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE5MC81N0I0MDU5NDNBODQxMUVGQTU3MzE1ODRDNEY5QUUwMi8yM0NGRENEMjQ0 QkUxMUVGOEZBOEEzN0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAEwGAMEArS8zAMEAMoMGAMEAMsDggMEA8sE6DANBgkqhkiG9w0BAQsF AAOCAQEAwtXQU7EiNfDS2MRT04PeIXywbTiMCtYu7gYfCnWtLBbx+/g4am/xV9jG y7cGmlgShcfOg6/N7pczg2EU28hP+lWd2Ani0/eOpbOIjKmMmV48bvSrB844y5HK ICysTNOBp78oX3DySDh5SzPeOF4MP/tiu+HVf+duKqJ/rN71gNy/ralb6vxwVk8D fU/YvB9FKT4wSZjnH9VnsQEdxRB33IwLrEtBURl71xsErZDs4r2FKRTj1S9YpSC+ thO7MopaJk5eNez/KrQPyBPBaEZEyQqOYR91J7jyxNa0TsJuipvcnkD0DlM/UjCw ZiNyZL0uWw7okRGAyK7WwexLVbDpqA== -----END CERTIFICATE-----Generated at Tue Sep 17 07:38:14 2024 by rpki-client on console-fra.rpki-client.org