$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/4DB84668F3B211EEB1567D09C4F9AE02.roa File: 4DB84668F3B211EEB1567D09C4F9AE02.roa (raw, json) Hash identifier: ztKXhDhJ14EfJaZkgDLzDwykYjsdVTuhrCRbiAIQ468= Subject key identifier: D3:4F:50:72:DA:82:67:B2:33:AA:F1:87:1C:6F:77:A7:37:9D:97:01 Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Certificate serial: 0731 Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/4DB84668F3B211EEB1567D09C4F9AE02.roa Signing time: Mon 28 Oct 2024 21:52:33 +0000 ROA not before: Mon 28 Oct 2024 21:52:33 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150447 IP address blocks: 61.245.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63 Validity Not Before: Oct 28 21:52:33 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=672007a1-6708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:99:91:b1:53:dd:e7:35:85:9a:8a:c1:8f: 70:6c:51:a6:5d:1a:80:49:c2:60:71:ee:dc:e5:95: 51:c6:9d:1f:6a:f6:b1:69:f9:1b:e2:3f:df:ac:00: 50:11:a7:94:24:b2:e2:bd:e5:2c:cd:95:b4:41:d1: b7:51:51:02:c2:9d:5c:3c:ec:7a:10:f0:f5:77:a3: 73:79:8f:56:d9:c1:46:e5:b2:11:0a:d9:72:20:33: 48:bb:32:9f:36:44:bf:b5:bb:6a:2c:8c:b6:67:1b: ce:38:a4:7a:4e:c6:60:7f:23:ed:00:40:60:6f:6d: f1:ba:58:35:67:3c:5a:d3:c6:53:81:cc:68:d9:83: b7:0d:5c:b1:8a:d0:4e:10:92:15:09:95:f1:b7:41: e3:75:42:49:89:89:7f:b8:cc:7e:95:8f:f1:e6:28: 65:b5:57:36:7c:6d:a8:ea:39:94:f8:a5:1b:46:f2: 38:9d:49:70:fa:7f:d7:c1:fe:43:28:8a:07:e7:75: 13:e0:e9:0f:a3:53:fc:63:f8:b7:0b:c1:ea:91:53: 3e:7d:82:c1:a9:75:d3:57:50:f1:e8:73:5c:b6:40: 1a:45:3a:44:be:0f:75:78:13:cf:9a:24:2d:48:97: c7:8c:8b:cd:47:c6:da:81:1c:d9:6d:65:78:a6:74: 19:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4F:50:72:DA:82:67:B2:33:AA:F1:87:1C:6F:77:A7:37:9D:97:01 X509v3 Authority Key Identifier: keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/4DB84668F3B211EEB1567D09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.245.120.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:68:76:e2:31:8c:12:72:e5:8f:bd:77:1f:12:49:a3:e4:ff: 44:99:9b:81:3e:77:4b:e1:e0:01:54:7e:77:63:89:a9:a7:6a: d0:eb:ef:fe:7e:0c:73:41:9f:c5:61:fc:99:74:a7:d0:e4:2f: 37:fc:39:08:5c:0d:f2:65:f8:fd:84:1a:d2:7b:b2:b2:16:d6: 7f:0a:0d:fd:13:40:57:00:8e:d1:23:29:c2:ca:17:8f:1f:e5: 69:b8:e2:3b:fc:c0:ce:25:fc:35:10:49:c7:f6:60:e1:cd:b7: fa:88:45:28:72:85:76:69:43:d1:c6:ad:4d:a9:fd:eb:d9:c6: 29:9c:d4:c5:4f:e0:18:12:fe:0a:9f:ff:e1:0b:99:17:36:ce: f3:e2:f2:b2:9c:76:ec:4f:90:0c:44:f4:9a:c0:79:d9:8b:23: f1:0a:56:3b:c3:ba:66:fd:59:ff:60:91:9a:f2:6c:92:68:09: 27:71:57:ce:90:be:95:6d:17:b0:33:c0:69:5c:4d:43:b6:8c: b8:dc:64:04:ea:59:4b:5b:e8:53:3e:67:09:0e:64:ec:83:ea: b5:df:f6:88:59:92:73:f0:7a:33:1d:a1:3e:6d:be:9d:6d:7b: 2c:fe:db:78:5a:11:da:a6:b1:aa:b8:98:12:f7:96:0b:42:37: 6f:83:d3:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE QzNDQkNENjMwHhcNMjQxMDI4MjE1MjMzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzIwMDdhMS02NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuGZkbFT3ec1hZqKwY9wbFGmXRqAScJgce7c5ZVRxp0favaxafkb4j/frABQ EaeUJLLiveUszZW0QdG3UVECwp1cPOx6EPD1d6NzeY9W2cFG5bIRCtlyIDNIuzKf NkS/tbtqLIy2ZxvOOKR6TsZgfyPtAEBgb23xulg1Zzxa08ZTgcxo2YO3DVyxitBO EJIVCZXxt0HjdUJJiYl/uMx+lY/x5ihltVc2fG2o6jmU+KUbRvI4nUlw+n/Xwf5D KIoH53UT4OkPo1P8Y/i3C8HqkVM+fYLBqXXTV1Dx6HNctkAaRTpEvg91eBPPmiQt SJfHjIvNR8bagRzZbWV4pnQZYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNNPUHLa gmeyM6rxhxxvd6c3nZcBMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3 M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvNERCODQ2NjhG M0IyMTFFRUIxNTY3RDA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA99XgwDQYJKoZIhvcNAQELBQADggEBAAxoduIxjBJy5Y+9 dx8SSaPk/0SZm4E+d0vh4AFUfndjiamnatDr7/5+DHNBn8Vh/Jl0p9DkLzf8OQhc DfJl+P2EGtJ7srIW1n8KDf0TQFcAjtEjKcLKF48f5Wm44jv8wM4l/DUQScf2YOHN t/qIRShyhXZpQ9HGrU2p/evZximc1MVP4BgS/gqf/+ELmRc2zvPi8rKcduxPkAxE 9JrAedmLI/EKVjvDumb9Wf9gkZrybJJoCSdxV86QvpVtF7AzwGlcTUO2jLjcZATq WUtb6FM+ZwkOZOyD6rXf9ohZknPwejMdoT5tvp1teyz+23haEdqmsaq4mBL3lgtC N2+D0/8= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:38 2024 by rpki-client on console-ams.rpki-client.org