$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1A2A87A49A7C11EFBD23E931C4F9AE02.roa File: 1A2A87A49A7C11EFBD23E931C4F9AE02.roa (raw, json) Hash identifier: 7K2xflgEe2f5oUDUJpCuX0VdQYf9blRsU24adUj9J0o= Subject key identifier: B2:99:47:E2:BE:42:D8:59:DF:32:6F:B3:03:59:9C:6B:AB:92:CF:13 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 260F Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1A2A87A49A7C11EFBD23E931C4F9AE02.roa Signing time: Mon 04 Nov 2024 07:12:58 +0000 ROA not before: Mon 04 Nov 2024 07:12:58 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 139215 IP address blocks: 150.107.48.0/24 maxlen: 24 150.107.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9743 (0x260f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Nov 4 07:12:58 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=672873fa-b399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:49:fe:46:42:a8:64:92:55:37:ce:5d:a9: ff:23:97:fa:db:68:c1:2d:a2:8a:c9:08:c7:3f:a6: 20:be:dc:a4:96:5b:2f:0a:7f:4d:38:78:fe:c8:18: 65:fd:80:b4:48:52:2c:81:40:b2:a6:59:42:a4:2a: 25:8c:dc:01:1c:77:77:d7:f9:2f:27:37:55:4d:b6: 4e:0a:18:ff:1f:ba:f8:41:d5:64:da:58:00:84:05: f8:80:b0:8a:93:78:60:5d:1a:49:38:a8:c3:6c:4b: ac:1e:11:f8:19:8d:a9:7b:fe:72:3e:32:19:0d:4c: c1:85:25:46:c9:e4:0f:af:1e:a8:91:99:e5:34:a4: 1a:cd:7c:dd:fd:c3:63:1f:e8:fb:d5:98:6c:3d:0e: c9:27:fa:53:04:73:fa:fe:9b:82:91:61:0c:68:32: 61:91:d3:60:65:56:dd:17:ac:6a:63:e2:57:7f:9a: 3d:68:4d:74:0c:4e:fc:05:28:43:56:19:53:d6:fd: 44:b8:31:6a:6b:e0:72:ad:65:36:28:c4:52:7f:90: 32:4a:43:d1:8c:b1:a6:c8:53:fe:83:2d:91:3b:e5: d2:4e:6c:77:20:78:a2:08:29:ff:16:fd:74:e9:8e: 9e:06:4c:41:cc:89:c6:2b:81:27:26:05:95:59:ae: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:99:47:E2:BE:42:D8:59:DF:32:6F:B3:03:59:9C:6B:AB:92:CF:13 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/1A2A87A49A7C11EFBD23E931C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.107.48.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:ec:69:5a:39:45:71:26:5e:8a:99:b5:9e:63:f0:9e:76:a9: 88:4d:29:52:d7:8d:93:6d:10:7a:27:fe:d6:e9:5b:b6:87:82: 04:98:ae:94:c7:0e:2b:6d:19:0d:49:25:ec:9e:60:9e:51:e0: c7:60:46:7a:1e:0d:9f:dd:e1:16:89:c7:c5:ff:8a:c6:24:65: b4:77:f8:7e:97:3f:44:ef:0c:85:1a:6a:93:ea:4a:e2:e6:40: 79:40:ed:f9:8e:fb:49:56:36:54:72:21:82:e6:10:17:85:5a: 5f:e8:f5:07:ce:2d:a6:c4:e1:1d:2d:ff:fe:5a:5c:e6:38:cd: 32:96:78:81:4a:5f:d5:4d:73:b2:0e:68:42:8a:5f:c5:97:c0: 17:48:ff:4a:e7:70:c0:f9:ac:75:23:e1:3a:56:c5:31:7a:3f: 8d:11:7f:b1:78:60:63:a1:90:f1:fb:d0:f7:86:ef:87:93:67: 79:7b:58:ef:2f:f2:e7:99:d0:eb:60:ad:91:5e:24:35:72:c2: 14:c3:25:9a:72:81:0f:b5:e6:16:70:aa:6f:e7:e8:16:11:ed: 62:0a:63:ac:d8:ad:1a:9c:d8:f9:1a:fc:fe:ca:3d:97:21:d6: 54:99:61:da:45:a6:9a:ce:67:bb:67:ca:af:48:de:6f:8a:6e: 0a:a5:47:7d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjQxMTA0MDcxMjU4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NzI4NzNmYS1iMzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+9J/kZCqGSSVTfOXan/I5f622jBLaKKyQjHP6YgvtykllsvCn9NOHj+yBhl /YC0SFIsgUCypllCpColjNwBHHd31/kvJzdVTbZOChj/H7r4QdVk2lgAhAX4gLCK k3hgXRpJOKjDbEusHhH4GY2pe/5yPjIZDUzBhSVGyeQPrx6okZnlNKQazXzd/cNj H+j71ZhsPQ7JJ/pTBHP6/puCkWEMaDJhkdNgZVbdF6xqY+JXf5o9aE10DE78BShD VhlT1v1EuDFqa+ByrWU2KMRSf5AySkPRjLGmyFP+gy2RO+XSTmx3IHiiCCn/Fv10 6Y6eBkxBzInGK4EnJgWVWa7XzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLKZR+K+ QthZ3zJvswNZnGurks8TMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNEQjAvQjg5NUFGNzQwNTE1MTFFNThENDlBRTQyQzRGOUFFMDIvMUEyQTg3QTQ5 QTdDMTFFRkJEMjNFOTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGWazAwDQYJKoZIhvcNAQELBQADggEBAI3saVo5RXEmXoqZ tZ5j8J52qYhNKVLXjZNtEHon/tbpW7aHggSYrpTHDittGQ1JJeyeYJ5R4MdgRnoe DZ/d4RaJx8X/isYkZbR3+H6XP0TvDIUaapPqSuLmQHlA7fmO+0lWNlRyIYLmEBeF Wl/o9QfOLabE4R0t//5aXOY4zTKWeIFKX9VNc7IOaEKKX8WXwBdI/0rncMD5rHUj 4TpWxTF6P40Rf7F4YGOhkPH70PeG74eTZ3l7WO8v8ueZ0OtgrZFeJDVywhTDJZpy gQ+15hZwqm/n6BYR7WIKY6zYrRqc2Pka/P7KPZch1lSZYdpFpprOZ7tnyq9I3m+K bgqlR30= -----END CERTIFICATE-----Generated at Fri Nov 22 17:55:42 2024 by rpki-client on console-fra.rpki-client.org