$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa File: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (raw, json) Hash identifier: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0= Subject key identifier: 88:F2:8E:7E:32:BD:62:C2:48:22:3B:40:C0:C5:5B:D9:B5:EE:EB:75 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 02 Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa Signing time: Fri 08 Nov 2024 06:38:18 +0000 ROA not before: Fri 08 Nov 2024 06:38:18 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 142294 IP address blocks: 160.191.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Nov 8 06:38:18 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672db1da-cf09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:17:60:d9:23:43:ba:ef:b3:70:f1:36:88: f3:c6:c7:4a:02:2f:12:d8:c8:20:2b:bc:0e:33:c2: fe:e8:e6:ef:45:28:a3:f8:ac:42:0e:a8:bf:8b:53: be:de:de:f1:9c:e8:96:36:94:0e:1d:8e:29:7e:59: 53:50:f7:0b:f8:f2:19:84:1e:ee:b5:6b:2a:ea:79: 74:a1:e2:49:46:6e:19:04:46:0e:03:4d:48:6e:14: db:77:54:43:52:47:3b:84:41:84:ac:00:50:8e:04: 75:6d:41:9c:3f:6f:36:2e:d4:ff:7a:73:77:f2:39: 95:98:8d:ce:64:b6:a4:91:9d:e1:67:61:14:82:80: 57:5c:95:bd:3c:fc:7c:5e:05:e3:56:75:d7:50:ab: 34:44:bd:b5:af:71:a5:a4:d9:0d:db:c0:ab:41:82: d2:4d:78:3b:e2:4f:e4:e9:bd:45:1d:b4:ac:54:46: fd:1a:a9:96:2f:8e:c6:b7:2b:de:e2:b7:85:f5:66: c8:0a:8a:53:4e:4f:4b:09:2d:ba:e3:e4:b6:b0:e3: 7d:60:74:da:2e:fd:37:f6:39:df:41:70:dd:e6:ec: 13:eb:9f:81:a8:9b:fc:f1:56:16:f8:14:67:e0:bb: 09:90:f7:75:c5:8d:de:e2:01:f9:d1:ef:f3:1a:bd: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F2:8E:7E:32:BD:62:C2:48:22:3B:40:C0:C5:5B:D9:B5:EE:EB:75 X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.16.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:90:16:da:b7:cd:67:3f:fe:f3:63:52:82:3c:b0:8e:5a:83: cf:0d:d6:68:2e:9b:18:bb:d9:9c:0c:c1:ee:b6:38:86:ce:ee: da:84:7b:fc:56:ff:d9:69:b7:43:d0:4b:c8:a5:47:c9:f6:83: ce:38:4b:01:fd:10:c7:45:df:03:19:31:b2:3e:14:60:4f:09: ce:e9:10:4b:bd:71:5a:ba:7d:24:86:a9:67:94:74:ea:4c:a1: 7f:1c:b7:62:62:9f:35:1f:86:71:65:48:d1:aa:a7:bb:3a:0e: 89:92:40:19:3e:41:e0:2c:85:26:8c:9a:53:73:2d:00:a4:1f: 31:4b:bd:ed:ef:0a:17:a9:7a:24:9d:64:0f:b6:6b:93:bb:2f: 15:8c:d9:dd:82:b1:0c:7a:ba:c0:69:2a:75:76:1f:3d:aa:0a: 85:49:b8:61:16:b7:7c:75:46:ee:c8:9f:b2:b0:7d:37:ca:25: 3b:4f:56:3c:25:19:93:e0:6c:ae:43:f0:1d:d3:39:e0:b8:91: 27:a3:4f:4a:ca:48:d9:99:b5:98:c5:56:cf:6b:19:10:f4:9d: d0:14:30:ac:43:3b:0e:fa:fa:1b:dc:db:7a:dc:d9:41:bb:f7: 4f:ca:15:73:d5:1a:e2:0c:f5:04:fe:aa:86:ab:c9:cf:5f:24: f8:21:05:4f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNDRCQzc4RURFNjNENUI2MjJCN0JBQzAzQjM0OTk2QjJG RTQyRTMyNzAeFw0yNDExMDgwNjM4MThaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmRiMWRhLWNmMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDOBdg2SNDuu+zcPE2iPPGx0oCLxLYyCArvA4zwv7o5u9FKKP4rEIOqL+LU77e 3vGc6JY2lA4djil+WVNQ9wv48hmEHu61ayrqeXSh4klGbhkERg4DTUhuFNt3VENS RzuEQYSsAFCOBHVtQZw/bzYu1P96c3fyOZWYjc5ktqSRneFnYRSCgFdclb08/Hxe BeNWdddQqzREvbWvcaWk2Q3bwKtBgtJNeDviT+TpvUUdtKxURv0aqZYvjsa3K97i t4X1ZsgKilNOT0sJLbrj5Law431gdNou/Tf2Od9BcN3m7BPrn4Gom/zxVhb4FGfg uwmQ93XFjd7iAfnR7/MavW/BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiPKOfjK9 YsJIIjtAwMVb2bXu63UwHwYDVR0jBBgwFoAURLx47eY9W2Ire6wDs0mWsv5C4ycw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0EyNDUxMTQ2OUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkx4NDdlWTlXMklyZTZ3RHMwbVdzdjVDNHljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BMjQ1MTE0NjlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi8wQTE4RUY0QTlE OUMxMUVGQkFGMEQ3NkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/EDANBgkqhkiG9w0BAQsFAAOCAQEAjZAW2rfNZz/+82NS gjywjlqDzw3WaC6bGLvZnAzB7rY4hs7u2oR7/Fb/2Wm3Q9BLyKVHyfaDzjhLAf0Q x0XfAxkxsj4UYE8JzukQS71xWrp9JIapZ5R06kyhfxy3YmKfNR+GcWVI0aqnuzoO iZJAGT5B4CyFJoyaU3MtAKQfMUu97e8KF6l6JJ1kD7Zrk7svFYzZ3YKxDHq6wGkq dXYfPaoKhUm4YRa3fHVG7sifsrB9N8olO09WPCUZk+BsrkPwHdM54LiRJ6NPSspI 2Zm1mMVWz2sZEPSd0BQwrEM7Dvr6G9zbetzZQbv3T8oVc9Ua4gz1BP6qhqvJz18k +CEFTw== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:30 2024 by rpki-client on console-fra.rpki-client.org