$ rpki-client -vvf rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/ACFCE162DAFB11EE902F6539C4F9AE02.roa File: ACFCE162DAFB11EE902F6539C4F9AE02.roa (raw, json) Hash identifier: 0d61zSOY/wZFeh1uE1nvRknYjYUGq3avNxYpjmwAOcs= Subject key identifier: 41:D3:E0:A6:ED:CF:E2:AA:AE:12:6D:1C:0A:EF:F8:89:55:F3:ED:5C Certificate issuer: /CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Certificate serial: 033E Authority key identifier: CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/ACFCE162DAFB11EE902F6539C4F9AE02.roa Signing time: Tue 05 Mar 2024 14:21:37 +0000 ROA not before: Tue 05 Mar 2024 14:21:37 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 7018 IP address blocks: 223.29.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 03:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FC73/serialNumber=CEE41601EEA9F51B3525DA55DD4AC95CEFAF5ABC Validity Not Before: Mar 5 14:21:37 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65e72a71-3ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:ef:57:e0:1d:ba:41:a2:82:62:ac:86:38: 35:10:43:07:f2:f0:8e:c2:ae:f4:b2:4b:61:00:9a: f8:50:67:d2:bd:2f:fd:48:e4:a6:b1:3b:b9:fa:0c: fa:41:31:c2:b9:75:f4:b4:42:c6:77:5e:85:81:3c: fe:77:9c:b9:be:72:ed:c1:18:c9:43:ea:a4:0d:e7: c7:89:ae:11:24:fa:81:0c:2b:84:9b:ee:ae:10:bc: 48:15:dd:be:49:c7:c6:de:b4:7c:c2:e0:5b:93:fa: 13:4a:82:39:59:cd:b4:b7:e9:05:44:d2:a4:99:83: 2e:12:c7:56:75:57:27:f0:96:ea:93:6e:37:8f:b5: 13:ee:2d:01:4f:61:5d:98:3c:c0:67:15:24:99:09: 67:37:df:48:78:50:b9:5a:c0:db:9e:69:20:3c:19: e5:4c:15:96:94:16:04:3a:cb:80:2f:30:d0:71:ac: 36:2e:e1:59:7f:60:b9:fa:43:40:c7:de:34:e9:df: 26:e2:a1:1d:57:f2:9b:54:01:b5:e1:9f:22:2a:9b: 8f:19:86:8c:00:3e:a4:a2:dd:6d:6a:78:19:01:8d: 2d:8d:a7:52:ff:43:5d:62:db:1b:1c:c0:a3:ea:0d: e5:5c:ee:8a:17:6a:0d:73:6b:83:f0:4f:34:d9:c5: 32:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D3:E0:A6:ED:CF:E2:AA:AE:12:6D:1C:0A:EF:F8:89:55:F3:ED:5C X509v3 Authority Key Identifier: keyid:CE:E4:16:01:EE:A9:F5:1B:35:25:DA:55:DD:4A:C9:5C:EF:AF:5A:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuQWAe6p9Rs1JdpV3UrJXO-vWrw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FC73/0144CDF89F3411EC9CEBC670C4F9AE02/ACFCE162DAFB11EE902F6539C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.29.132.0/22 Signature Algorithm: sha256WithRSAEncryption c7:00:1b:b6:10:22:91:81:d7:c8:60:77:87:2e:75:b3:cf:01: 6d:82:6a:d6:4c:94:fe:51:76:a2:02:6e:da:a0:55:8e:7a:ed: c9:25:0f:17:86:74:a5:15:e8:ea:e4:03:a1:43:29:26:30:7b: 69:8f:3a:90:4a:f8:0c:fb:73:c5:31:38:c9:2e:52:ed:1e:13: d7:d7:24:2c:78:4c:2a:5a:f9:4d:7a:08:1a:73:db:fb:29:cd: dd:e9:bb:ae:95:06:fa:54:31:9a:9b:cc:c3:91:fd:ea:49:b4: 40:37:7f:81:ce:c5:00:76:0a:59:27:9d:74:ca:98:56:f5:9f: 06:cf:48:03:89:33:b6:c6:78:64:58:d9:ab:b0:58:7a:5f:74: b9:b2:07:8f:0e:21:31:28:6e:6a:52:a3:8c:4f:4a:8c:11:1b: eb:f4:f8:f9:d7:01:f9:5a:3a:09:bb:62:29:6c:46:de:79:b3: 43:a0:5b:f4:e3:ab:ff:a1:a1:b7:a2:25:ee:8b:7a:f7:99:79: 4a:51:da:ed:1a:58:12:1f:5b:c5:71:eb:7b:ec:49:15:bf:47: ac:de:00:1d:b4:53:69:8f:40:ff:48:e8:93:61:b1:ce:b2:9c: c7:ac:70:37:70:5a:24:9d:f5:11:c2:3d:db:d6:63:4b:0a:2f: 88:82:bd:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDNzMxMTAvBgNVBAUTKENFRTQxNjAxRUVBOUY1MUIzNTI1REE1NURENEFDOTVD RUZBRjVBQkMwHhcNMjQwMzA1MTQyMTM3WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWU3MmE3MS0zY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwHjvV+AdukGigmKshjg1EEMH8vCOwq70skthAJr4UGfSvS/9SOSmsTu5+gz6 QTHCuXX0tELGd16FgTz+d5y5vnLtwRjJQ+qkDefHia4RJPqBDCuEm+6uELxIFd2+ ScfG3rR8wuBbk/oTSoI5Wc20t+kFRNKkmYMuEsdWdVcn8Jbqk243j7UT7i0BT2Fd mDzAZxUkmQlnN99IeFC5WsDbnmkgPBnlTBWWlBYEOsuALzDQcaw2LuFZf2C5+kNA x9406d8m4qEdV/KbVAG14Z8iKpuPGYaMAD6kot1tangZAY0tjadS/0NdYtsbHMCj 6g3lXO6KF2oNc2uD8E802cUyuQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEHT4Kbt z+KqrhJtHArv+IlV8+1cMB8GA1UdIwQYMBaAFM7kFgHuqfUbNSXaVd1KyVzvr1q8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkM3My8wMTQ0Q0RGODlG MzQxMUVDOUNFQkM2NzBDNEY5QUUwMi96dVFXQWU2cDlSczFKZHBWM1VySlhPLXZX cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1UVdBZTZwOVJzMUpkcFYzVXJKWE8tdldydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkZDNzMvMDE0NENERjg5RjM0MTFFQzlDRUJDNjcwQzRGOUFFMDIvQUNGQ0UxNjJE QUZCMTFFRTkwMkY2NTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALfHYQwDQYJKoZIhvcNAQELBQADggEBAMcAG7YQIpGB18hg d4cudbPPAW2CatZMlP5RdqICbtqgVY567cklDxeGdKUV6OrkA6FDKSYwe2mPOpBK +Az7c8UxOMkuUu0eE9fXJCx4TCpa+U16CBpz2/spzd3pu66VBvpUMZqbzMOR/epJ tEA3f4HOxQB2ClknnXTKmFb1nwbPSAOJM7bGeGRY2auwWHpfdLmyB48OITEobmpS o4xPSowRG+v0+PnXAflaOgm7YilsRt55s0OgW/Tjq/+hobeiJe6LeveZeUpR2u0a WBIfW8Vx63vsSRW/R6zeAB20U2mPQP9I6JNhsc6ynMescDdwWiSd9RHCPdvWY0sK L4iCvRA= -----END CERTIFICATE-----Generated at Fri May 3 04:45:09 2024 by rpki-client on console-fra.rpki-client.org