$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa File: 9156042083EB11ECB7EC3B76C4F9AE02.roa (raw, json) Hash identifier: dPrx3cF0sDj9FTl2qCoRHJgtgGOLW5ACbJ0tx2wVxmU= Subject key identifier: E9:55:4A:B7:EF:D6:99:6E:42:5F:0D:8C:2E:48:D4:21:20:74:37:EC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0A8F Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa Signing time: Fri 30 Aug 2024 20:28:35 +0000 ROA not before: Fri 30 Aug 2024 20:28:35 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24014 IP address blocks: 131.244.0.0/15 maxlen: 15 192.48.109.0/24 maxlen: 24 192.48.110.0/24 maxlen: 24 192.88.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Aug 30 20:28:35 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d22b72-bddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:3c:12:f6:d7:77:0d:f1:03:b6:49:80:88: e4:78:4a:d5:82:d6:3b:a8:28:62:65:fd:23:7c:0f: 7b:23:d5:45:8d:b3:bf:b6:73:ef:28:f5:d5:81:39: e6:07:5b:af:c9:b0:2b:0d:bd:53:8c:f2:82:89:65: ca:cb:c5:65:ab:37:9e:aa:5f:1c:ae:58:0c:12:15: a8:05:66:61:7d:e5:a2:78:16:be:fa:60:68:9b:de: d3:ad:c3:27:d6:f4:aa:6e:33:d2:04:f4:5b:d6:a4: de:09:75:16:65:25:40:3e:e3:0e:00:e4:2a:61:23: 7b:ab:63:15:64:e1:81:42:b1:ea:bb:b9:df:2b:1a: ae:8c:9f:00:36:26:82:c2:bb:d1:62:21:58:ca:30: e7:c6:43:f5:ae:41:fd:13:4f:de:c4:3b:5d:11:8c: f9:87:29:71:fd:5e:a0:35:89:0d:d7:dc:f7:3b:7d: cf:18:b2:d7:e9:0c:65:53:0f:79:34:4d:74:57:99: fa:f0:78:a0:dc:66:3a:6d:60:0a:87:9a:41:f8:f8: 64:95:91:e5:f2:55:e7:b0:6f:53:55:d8:d8:f8:e0: 11:f4:ae:cd:64:2e:08:a8:fc:9f:25:2a:09:7a:82: 2e:18:41:5f:8f:05:24:ed:a9:1c:43:1b:b6:60:6f: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:55:4A:B7:EF:D6:99:6E:42:5F:0D:8C:2E:48:D4:21:20:74:37:EC X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/9156042083EB11ECB7EC3B76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 131.244.0.0/15 192.48.109.0-192.48.110.255 192.88.187.0/24 Signature Algorithm: sha256WithRSAEncryption b4:67:10:af:82:e6:a5:03:f8:5d:df:3a:48:a8:e6:8b:75:ce: 00:32:0d:6a:40:98:56:8a:43:7c:81:ea:d8:2c:d9:32:98:72: 1e:94:51:79:09:81:1d:fc:35:25:3c:e4:68:78:eb:bc:a8:d0: b2:16:fe:40:a9:f5:b8:47:48:94:93:b6:fa:41:22:ee:b2:cf: 3e:3b:d2:7d:37:d9:5a:c4:a0:42:7e:fd:6b:e6:05:d6:b2:53: 19:05:59:6a:4a:b5:a2:e1:d3:75:1e:02:d6:43:91:f7:ab:08: a6:68:a5:75:c0:bc:8a:dd:b0:67:5e:a2:d8:df:55:97:46:06: 72:70:eb:95:bb:e9:6e:8d:05:94:83:c5:06:7c:33:f1:97:b9: 9c:39:6b:99:43:f6:23:6e:71:dd:8b:7c:f7:85:9c:86:bb:d0: 5a:cc:a5:22:72:84:4a:e4:df:2f:e4:41:13:87:30:ae:66:6e: 3a:27:cf:61:4b:2b:20:e2:83:8e:6a:57:1b:6c:9e:8a:99:09: 46:49:5a:6e:88:a0:6e:f0:7a:31:42:ee:53:6a:10:93:cd:04: db:8f:7a:01:b0:9a:f1:bc:7a:0f:71:ff:98:ef:c4:81:43:80: cc:af:ca:07:d3:81:52:ac:ef:9e:05:8a:2a:01:1c:02:78:2a: 0a:22:05:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjQwODMwMjAyODM1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQyMmI3Mi1iZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwS08EvbXdw3xA7ZJgIjkeErVgtY7qChiZf0jfA97I9VFjbO/tnPvKPXVgTnm B1uvybArDb1TjPKCiWXKy8Vlqzeeql8crlgMEhWoBWZhfeWieBa++mBom97TrcMn 1vSqbjPSBPRb1qTeCXUWZSVAPuMOAOQqYSN7q2MVZOGBQrHqu7nfKxqujJ8ANiaC wrvRYiFYyjDnxkP1rkH9E0/exDtdEYz5hylx/V6gNYkN19z3O33PGLLX6QxlUw95 NE10V5n68Hig3GY6bWAKh5pB+PhklZHl8lXnsG9TVdjY+OAR9K7NZC4IqPyfJSoJ eoIuGEFfjwUk7akcQxu2YG/zvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOlVSrfv 1pluQl8NjC5I1CEgdDfsMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDI0N0MvOEExQzQ2MTY0MzBBMTFFQTg1OENEQzc2QzRGOUFFMDIvOTE1NjA0MjA4 M0VCMTFFQ0I3RUMzQjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgABMBkDAwGD9DAMAwQAwDBtAwQAwDBuAwQAwFi7MA0GCSqGSIb3DQEB CwUAA4IBAQC0ZxCvgualA/hd3zpIqOaLdc4AMg1qQJhWikN8gerYLNkymHIelFF5 CYEd/DUlPORoeOu8qNCyFv5AqfW4R0iUk7b6QSLuss8+O9J9N9laxKBCfv1r5gXW slMZBVlqSrWi4dN1HgLWQ5H3qwimaKV1wLyK3bBnXqLY31WXRgZycOuVu+lujQWU g8UGfDPxl7mcOWuZQ/YjbnHdi3z3hZyGu9BazKUicoRK5N8v5EEThzCuZm46J89h Sysg4oOOalcbbJ6KmQlGSVpuiKBu8HoxQu5TahCTzQTbj3oBsJrxvHoPcf+Y78SB Q4DMr8oH04FSrO+eBYoqARwCeCoKIgWJ -----END CERTIFICATE-----Generated at Wed Nov 20 20:07:23 2024 by rpki-client on console-fra.rpki-client.org