$ rpki-client -vvf rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa File: 486F81CE4B4B11E79F2FF37BC4F9AE02.roa (raw, json) Hash identifier: dgOhhCgJNmqIABfmqn7RZ7HEHVhf8zRLQCOO0zkoj5c= Subject key identifier: 1D:A3:7C:5F:80:84:4C:2D:7C:4F:DF:1F:E1:9C:08:A2:6A:3E:80:FA Certificate issuer: /CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Certificate serial: 1B8D Authority key identifier: 1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa Signing time: Fri 30 Aug 2024 16:54:05 +0000 ROA not before: Fri 30 Aug 2024 16:54:05 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 134808 IP address blocks: 203.33.22.0/24 maxlen: 24 2001:df3:ba00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 16:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7053 (0x1b8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CAE9/serialNumber=1D56FE4DA42B8866FE96A297F772EE80B518A40A Validity Not Before: Aug 30 16:54:05 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d1f92d-2156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b6:e0:65:fb:aa:f4:21:8a:e6:49:68:ed:26: fc:2a:0f:93:01:ca:af:7f:88:3a:40:33:ff:c9:09: db:7c:02:ca:8e:8f:9c:5b:1a:05:b4:03:67:38:2a: 54:95:0c:b4:f4:e3:a4:52:2f:8f:9f:bf:a1:c4:4e: 89:77:fb:b0:43:89:61:21:23:58:fb:ee:00:b5:d1: 51:22:f2:8c:1b:4b:63:27:98:3c:c8:e1:c7:90:aa: fc:f3:b3:31:cf:df:e3:89:17:ff:cf:d7:0b:8f:88: 2d:a9:15:9c:1c:1a:d6:ac:47:36:38:ca:72:3d:3f: d1:b0:c7:b0:ab:67:fd:5d:8b:9f:2e:d3:1a:30:ca: ed:09:b2:7b:e6:df:df:a6:8d:7b:97:c7:0a:8e:12: f5:c0:bb:ff:78:93:a9:2b:5f:98:5c:aa:02:91:a3: 1a:89:b8:0b:9c:a0:3c:e5:56:7f:ed:27:27:11:60: 00:4b:96:c7:34:e4:7e:da:fd:8d:51:59:2c:20:a0: 17:c8:47:6d:13:0d:b1:62:98:42:ca:c3:8b:ed:a6: da:3d:6d:28:fc:b9:7b:17:55:42:02:07:c0:2d:0e: d6:b2:1e:c1:1f:40:41:71:87:52:0c:ab:f0:59:9f: 19:50:57:c3:ee:9f:a9:5f:ec:5e:91:83:dc:f6:8f: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A3:7C:5F:80:84:4C:2D:7C:4F:DF:1F:E1:9C:08:A2:6A:3E:80:FA X509v3 Authority Key Identifier: keyid:1D:56:FE:4D:A4:2B:88:66:FE:96:A2:97:F7:72:EE:80:B5:18:A4:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/HVb-TaQriGb-lqKX93LugLUYpAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVb-TaQriGb-lqKX93LugLUYpAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CAE9/08DA60C6F1B211E68E74A26CC4F9AE02/486F81CE4B4B11E79F2FF37BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.33.22.0/24 IPv6: 2001:df3:ba00::/48 Signature Algorithm: sha256WithRSAEncryption 5c:d4:0f:f1:9f:ca:37:60:a3:00:e8:97:8a:62:0b:bc:b0:4e: 69:06:a2:e1:7f:57:4d:8d:eb:cc:fc:3e:e1:07:c6:89:86:53: a5:19:e8:f7:fe:de:0e:ef:bf:9e:17:85:72:22:b9:29:09:e0: 0c:be:4f:ba:4e:5e:ad:51:f4:2b:10:31:eb:0c:7c:2f:82:79: bc:2c:23:fc:44:85:00:62:74:d4:6c:a3:a9:7e:4b:ee:d5:93: 02:11:5a:39:54:0a:e5:8a:bd:b4:fa:bd:84:36:38:4e:90:9e: 2b:57:c5:7a:1a:c7:af:52:2b:9c:43:de:53:66:4f:75:e6:cd: d6:db:80:fa:cb:f6:70:16:55:7b:bc:fe:30:46:46:8c:3c:c8: 9a:7e:6e:72:ea:17:10:dc:34:1a:ca:91:05:fe:ae:24:43:8c: f2:5f:a1:1b:7f:9b:de:59:a3:a2:ea:d6:26:51:d4:df:b1:f6: fc:bd:76:05:64:cf:fd:3c:7a:3d:36:a6:42:ef:9f:70:ea:86: 78:4a:f1:1f:fa:e1:ca:85:77:60:59:33:54:c9:bd:a0:00:9a: 26:00:e7:a9:bf:a8:13:61:41:da:7b:ef:b0:a9:5f:ad:1a:c8: a1:0f:28:41:cb:7d:b3:2c:2a:dc:bc:55:67:5a:87:1c:d6:36: 90:82:10:76 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICG40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBRTkxMTAvBgNVBAUTKDFENTZGRTREQTQyQjg4NjZGRTk2QTI5N0Y3NzJFRTgw QjUxOEE0MEEwHhcNMjQwODMwMTY1NDA1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQxZjkyZC0yMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrbgZfuq9CGK5klo7Sb8Kg+TAcqvf4g6QDP/yQnbfALKjo+cWxoFtANnOCpU lQy09OOkUi+Pn7+hxE6Jd/uwQ4lhISNY++4AtdFRIvKMG0tjJ5g8yOHHkKr887Mx z9/jiRf/z9cLj4gtqRWcHBrWrEc2OMpyPT/RsMewq2f9XYufLtMaMMrtCbJ75t/f po17l8cKjhL1wLv/eJOpK1+YXKoCkaMaibgLnKA85VZ/7ScnEWAAS5bHNOR+2v2N UVksIKAXyEdtEw2xYphCysOL7abaPW0o/Ll7F1VCAgfALQ7Wsh7BH0BBcYdSDKvw WZ8ZUFfD7p+pX+xekYPc9o9nBQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB2jfF+A hEwtfE/fH+GcCKJqPoD6MB8GA1UdIwQYMBaAFB1W/k2kK4hm/pail/dy7oC1GKQK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0FFOS8wOERBNjBDNkYx QjIxMUU2OEU3NEEyNkNDNEY5QUUwMi9IVmItVGFRcmlHYi1scUtYOTNMdWdMVVlw QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hWYi1UYVFyaUdiLWxxS1g5M0x1Z0xVWXBBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NBRTkvMDhEQTYwQzZGMUIyMTFFNjhFNzRBMjZDQzRGOUFFMDIvNDg2RjgxQ0U0 QjRCMTFFNzlGMkZGMzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLIRYwDwQCAAIwCQMHACABDfO6ADANBgkqhkiG9w0BAQsF AAOCAQEAXNQP8Z/KN2CjAOiXimILvLBOaQai4X9XTY3rzPw+4QfGiYZTpRno9/7e Du+/nheFciK5KQngDL5Puk5erVH0KxAx6wx8L4J5vCwj/ESFAGJ01GyjqX5L7tWT AhFaOVQK5Yq9tPq9hDY4TpCeK1fFehrHr1IrnEPeU2ZPdebN1tuA+sv2cBZVe7z+ MEZGjDzImn5ucuoXENw0GsqRBf6uJEOM8l+hG3+b3lmjourWJlHU37H2/L12BWTP /Tx6PTamQu+fcOqGeErxH/rhyoV3YFkzVMm9oACaJgDnqb+oE2FB2nvvsKlfrRrI oQ8oQct9sywq3LxVZ1qHHNY2kIIQdg== -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:50 2024 by rpki-client on console-fra.rpki-client.org