$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa File: 658A332E5C0311E999AF9478C4F9AE02.roa (raw, json) Hash identifier: suUdH6Ugfv0O0zo3EWdu2SzDw7vZm7qfcDa3w/SPffc= Subject key identifier: 9F:FF:23:EC:81:E7:FE:41:2A:A2:51:24:76:75:34:26:E9:49:58:6D Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Certificate serial: 0F73 Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa Signing time: Mon 20 Nov 2023 18:15:52 +0000 ROA not before: Mon 20 Nov 2023 18:15:52 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 4773 IP address blocks: 129.126.208.0/24 maxlen: 24 129.126.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3955 (0xf73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8 Validity Not Before: Nov 20 18:15:52 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=655ba258-7252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:f5:3e:74:40:10:23:97:dd:ab:e3:1f:bc: c0:ec:69:fc:2b:bd:bb:21:d3:4c:37:47:05:f3:ca: da:15:cd:0e:0b:d6:93:a9:65:c2:03:46:60:a5:64: e3:9e:e0:92:71:7e:14:09:27:3a:34:0b:17:28:be: 17:8b:d6:b3:0e:75:50:4c:31:19:f3:0c:02:15:6d: c5:93:0b:73:76:a7:d8:c6:45:59:bc:d5:0e:4d:63: da:17:94:89:81:07:17:f9:d7:b7:90:6a:5e:1b:9b: 16:34:94:b3:9f:58:87:25:06:a5:a8:b8:f1:99:a2: 47:06:a4:5c:ce:05:68:85:d6:44:e8:56:47:df:ec: c9:05:db:3d:9e:ea:9f:6a:68:2b:20:28:ce:06:9b: d7:39:28:b3:f1:72:6f:b5:37:d5:89:53:c0:7a:3f: 43:d2:b5:99:c9:f4:10:4f:31:ff:0a:df:de:84:bd: d6:e5:33:dc:8f:ca:e2:9f:1f:63:d5:9b:ff:ac:64: 9b:17:aa:e8:16:45:5f:ba:fd:7c:4b:1d:44:a8:29: 7e:c4:9c:09:74:a6:71:0f:3b:cf:90:e3:c4:51:0f: 03:12:a9:51:81:49:75:24:0d:bc:d5:2b:6a:3e:15: ed:28:4d:0f:89:36:d6:9a:e7:fe:0d:49:c1:85:58: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FF:23:EC:81:E7:FE:41:2A:A2:51:24:76:75:34:26:E9:49:58:6D X509v3 Authority Key Identifier: keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/658A332E5C0311E999AF9478C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 129.126.208.0/23 Signature Algorithm: sha256WithRSAEncryption 93:27:b1:ee:d9:2f:19:79:15:65:a0:c9:bc:8e:a7:d5:a2:20: 49:0f:81:07:de:69:c7:80:ec:02:4b:b5:47:2c:0e:4a:4a:25: c4:be:c3:e2:4c:2d:4c:50:29:f6:c3:ef:a2:79:04:b6:05:f4: 03:c7:11:d3:9a:f9:a0:8d:90:0a:92:7b:16:22:c9:fd:8e:98: e0:04:f3:0c:31:48:bd:d0:14:31:a3:e9:79:63:cd:d6:b1:0c: 8b:fa:42:40:0f:6e:50:fe:7f:27:86:fb:36:ea:fa:77:f7:31: a8:e1:fc:df:1a:c2:a8:86:42:78:c6:c4:ef:69:f8:68:76:a1: bb:48:36:7d:c9:c9:70:62:d6:0f:2b:83:79:6d:03:f2:5d:91: 63:d5:3a:a6:71:21:69:8d:c6:22:c1:6c:77:c9:7b:36:c5:f6: 2f:7e:01:fe:df:53:f5:d0:db:61:4d:a7:45:79:f9:88:b4:63: d0:6c:66:64:ee:c5:f3:62:e9:44:7d:51:4d:ed:09:ae:81:cf: 3d:bc:e7:ef:fc:22:e1:e3:17:c3:0d:75:0d:71:52:eb:0a:69: 3b:92:30:b7:bf:85:0d:ee:94:a6:f1:be:21:d5:cd:6d:6c:16: ed:9e:36:fc:35:6c:cc:c5:b0:67:97:a0:48:a8:f2:67:10:fe: 28:34:6b:3b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZERDYxMTAvBgNVBAUTKDdDN0NBMDgxOTUwREFFRkM3QzU0QjhDNDQ2OThCNDhF OEQ3QzY5QjgwHhcNMjMxMTIwMTgxNTUyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTViYTI1OC03MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhj1PnRAECOX3avjH7zA7Gn8K727IdNMN0cF88raFc0OC9aTqWXCA0ZgpWTj nuCScX4UCSc6NAsXKL4Xi9azDnVQTDEZ8wwCFW3FkwtzdqfYxkVZvNUOTWPaF5SJ gQcX+de3kGpeG5sWNJSzn1iHJQalqLjxmaJHBqRczgVohdZE6FZH3+zJBds9nuqf amgrICjOBpvXOSiz8XJvtTfViVPAej9D0rWZyfQQTzH/Ct/ehL3W5TPcj8rinx9j 1Zv/rGSbF6roFkVfuv18Sx1EqCl+xJwJdKZxDzvPkOPEUQ8DEqlRgUl1JA281Stq PhXtKE0PiTbWmuf+DUnBhVjUXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ//I+yB 5/5BKqJRJHZ1NCbpSVhtMB8GA1UdIwQYMBaAFHx8oIGVDa78fFS4xEaYtI6NfGm4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkRENi9EMzYyQTFDQTNC MzcxMUU5QTAzOEFCMkFDNEY5QUUwMi9mSHlnZ1pVTnJ2eDhWTGpFUnBpMGpvMThh YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZIeWdnWlVOcnZ4OFZMakVScGkwam8xOGFiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzZERDYvRDM2MkExQ0EzQjM3MTFFOUEwMzhBQjJBQzRGOUFFMDIvNjU4QTMzMkU1 QzAzMTFFOTk5QUY5NDc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGBftAwDQYJKoZIhvcNAQELBQADggEBAJMnse7ZLxl5FWWg ybyOp9WiIEkPgQfeaceA7AJLtUcsDkpKJcS+w+JMLUxQKfbD76J5BLYF9APHEdOa +aCNkAqSexYiyf2OmOAE8wwxSL3QFDGj6XljzdaxDIv6QkAPblD+fyeG+zbq+nf3 Majh/N8awqiGQnjGxO9p+Gh2obtINn3JyXBi1g8rg3ltA/JdkWPVOqZxIWmNxiLB bHfJezbF9i9+Af7fU/XQ22FNp0V5+Yi0Y9BsZmTuxfNi6UR9UU3tCa6Bzz285+/8 IuHjF8MNdQ1xUusKaTuSMLe/hQ3ulKbxviHVzW1sFu2eNvw1bMzFsGeXoEio8mcQ /ig0azs= -----END CERTIFICATE-----Generated at Thu May 16 19:10:54 2024 by rpki-client on console-fra.rpki-client.org