$ rpki-client -vvf rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa File: 10CDE53E2C4111E98AA5057DC4F9AE02.roa (raw, json) Hash identifier: XRUvAzYaseIVxGtch+U0AQhcNiwJ6tjLkzEhHdxkHCM= Subject key identifier: 65:25:56:6A:36:D6:18:F4:30:1D:6C:F2:3E:57:B6:98:8C:8B:E7:87 Certificate issuer: /CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Certificate serial: 1016 Authority key identifier: 4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa Signing time: Wed 14 Aug 2024 17:55:14 +0000 ROA not before: Wed 14 Aug 2024 17:55:14 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 137989 IP address blocks: 87.247.160.0/21 maxlen: 22 87.247.160.0/24 maxlen: 24 87.247.161.0/24 maxlen: 24 87.247.162.0/24 maxlen: 24 87.247.163.0/24 maxlen: 24 87.247.164.0/24 maxlen: 24 87.247.165.0/24 maxlen: 24 87.247.166.0/24 maxlen: 24 87.247.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4118 (0x1016) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913344F/serialNumber=4CB4C30B24AF8138895FA4E5D187297379060603 Validity Not Before: Aug 14 17:55:14 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66bcef82-1aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:e9:32:9a:aa:aa:0e:6a:61:b7:d8:2c:a2: 4c:6c:5b:df:b7:11:66:30:f6:4e:44:c1:e9:c9:49: a1:1b:37:fc:eb:00:fb:22:ff:c4:78:0c:3d:45:14: a8:a7:e7:e9:31:11:fa:c4:19:d7:55:16:66:28:48: de:89:68:ed:6c:b1:3d:36:66:6c:bb:37:1b:38:8c: ae:2c:2a:d7:fa:86:7a:d0:cd:a8:b8:84:35:a2:32: d3:a1:33:08:ec:d3:d4:3d:ec:a8:0d:4e:94:37:3c: 04:fc:91:e2:e3:c2:f5:9a:6a:82:fa:93:f8:cb:e7: 06:1f:fb:e5:46:85:82:2d:ca:ed:fc:34:3c:03:5b: ee:3d:70:88:ff:f5:11:be:1f:b3:bb:8a:b8:ad:29: af:8a:3a:09:f6:5f:8e:d9:24:73:33:c7:dd:0b:bc: e2:a9:60:66:3d:26:cf:76:9c:dc:45:f1:70:31:a3: b6:6e:43:48:22:59:7c:26:9e:b0:91:0b:7a:64:1f: dd:bb:cc:d6:25:3e:f7:ca:cb:20:54:b7:9f:52:39: bf:78:1a:ec:85:dd:c8:75:14:65:d5:a3:b5:28:e0: cb:f1:8e:4f:b6:80:45:f2:71:91:15:48:11:da:c4: 3e:d1:28:1a:dc:61:b2:b1:5b:f1:90:7b:ec:3e:61: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:25:56:6A:36:D6:18:F4:30:1D:6C:F2:3E:57:B6:98:8C:8B:E7:87 X509v3 Authority Key Identifier: keyid:4C:B4:C3:0B:24:AF:81:38:89:5F:A4:E5:D1:87:29:73:79:06:06:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/TLTDCySvgTiJX6Tl0Ycpc3kGBgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913344F/000375A4290B11E999C5EB14C4F9AE02/10CDE53E2C4111E98AA5057DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 87.247.160.0/21 Signature Algorithm: sha256WithRSAEncryption 59:39:b6:e5:c4:e1:ec:a3:f2:70:c1:a5:3d:d4:59:15:e4:6f: 80:3f:56:3b:d7:ef:a5:a5:32:04:0d:7e:63:3b:0c:f9:9b:c8: a6:13:14:09:0f:8e:2b:a7:59:29:60:00:10:9d:d4:98:fe:b8: fb:6b:24:fb:a3:f8:9b:f0:a5:4f:7c:c1:48:05:e2:96:81:f1: b6:ee:e0:fe:6f:a3:6c:59:39:ef:92:cb:e8:d1:22:dd:d5:52: 6d:98:2c:73:bd:a0:f7:16:71:4a:1b:cc:59:2c:a2:73:1b:6c: 9a:82:f3:bb:bf:c5:e3:ef:ae:89:7a:dc:2e:00:66:77:23:5a: 34:02:5f:03:cf:ac:a4:75:1b:61:bb:f6:41:52:aa:09:cf:90: cd:78:e8:b4:b1:be:0d:41:2d:9b:03:3f:7f:45:80:5c:38:cd: b5:92:3d:54:7f:b1:d4:3c:9a:51:17:59:0e:41:8f:1a:1a:15: 36:2d:ac:cd:45:c5:16:ac:97:2a:76:e7:f7:05:00:58:cf:b0: 1d:17:b2:60:b3:9a:13:88:59:44:f1:0b:d8:ed:50:30:4b:f0: 58:52:cd:6f:59:69:e1:dc:5e:cc:4c:82:db:1f:b0:1c:40:49: 3f:8b:0f:d0:0d:b5:c6:67:e9:03:70:28:5f:c3:b9:ef:2f:54: 81:98:c0:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NEYxMTAvBgNVBAUTKDRDQjRDMzBCMjRBRjgxMzg4OTVGQTRFNUQxODcyOTcz NzkwNjA2MDMwHhcNMjQwODE0MTc1NTE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmJjZWY4Mi0xYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xPpMpqqqg5qYbfYLKJMbFvftxFmMPZORMHpyUmhGzf86wD7Iv/EeAw9RRSo p+fpMRH6xBnXVRZmKEjeiWjtbLE9NmZsuzcbOIyuLCrX+oZ60M2ouIQ1ojLToTMI 7NPUPeyoDU6UNzwE/JHi48L1mmqC+pP4y+cGH/vlRoWCLcrt/DQ8A1vuPXCI//UR vh+zu4q4rSmvijoJ9l+O2SRzM8fdC7ziqWBmPSbPdpzcRfFwMaO2bkNIIll8Jp6w kQt6ZB/du8zWJT73yssgVLefUjm/eBrshd3IdRRl1aO1KODL8Y5PtoBF8nGRFUgR 2sQ+0Sga3GGysVvxkHvsPmEusQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGUlVmo2 1hj0MB1s8j5XtpiMi+eHMB8GA1UdIwQYMBaAFEy0wwskr4E4iV+k5dGHKXN5BgYD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ0Ri8wMDAzNzVBNDI5 MEIxMUU5OTlDNUVCMTRDNEY5QUUwMi9UTFREQ3lTdmdUaUpYNlRsMFljcGMza0dC Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1RMVERDeVN2Z1RpSlg2VGwwWWNwYzNrR0JnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzM0NEYvMDAwMzc1QTQyOTBCMTFFOTk5QzVFQjE0QzRGOUFFMDIvMTBDREU1M0Uy QzQxMTFFOThBQTUwNTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANX96AwDQYJKoZIhvcNAQELBQADggEBAFk5tuXE4eyj8nDB pT3UWRXkb4A/VjvX76WlMgQNfmM7DPmbyKYTFAkPjiunWSlgABCd1Jj+uPtrJPuj +JvwpU98wUgF4paB8bbu4P5vo2xZOe+Sy+jRIt3VUm2YLHO9oPcWcUobzFksonMb bJqC87u/xePvrol63C4AZncjWjQCXwPPrKR1G2G79kFSqgnPkM146LSxvg1BLZsD P39FgFw4zbWSPVR/sdQ8mlEXWQ5BjxoaFTYtrM1FxRaslyp25/cFAFjPsB0XsmCz mhOIWUTxC9jtUDBL8FhSzW9ZaeHcXsxMgtsfsBxAST+LD9ANtcZn6QNwKF/Due8v VIGYwD0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:44:57 2024 by rpki-client on console-fra.rpki-client.org