$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/C07738FE9F4511EB88EBCA76C4F9AE02.roa File: C07738FE9F4511EB88EBCA76C4F9AE02.roa (raw, json) Hash identifier: L4PZLtK5gV9MGLgQdeJJjS/yiPhtcCFrLkTSYObN7Oo= Subject key identifier: 34:E7:96:60:7A:FA:96:7B:46:B6:00:D6:89:C2:3F:C0:9D:B5:5A:CB Certificate issuer: /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Certificate serial: 087F Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/C07738FE9F4511EB88EBCA76C4F9AE02.roa Signing time: Wed 20 Dec 2023 21:29:02 +0000 ROA not before: Wed 20 Dec 2023 21:29:02 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134798 IP address blocks: 49.0.4.0/24 maxlen: 24 49.0.5.0/24 maxlen: 24 49.0.6.0/24 maxlen: 24 49.0.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2175 (0x87f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA Validity Not Before: Dec 20 21:29:02 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65835c9e-dd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e8:91:b3:50:ad:01:b2:c8:97:33:21:27:0d: fe:22:0a:88:58:8a:2e:b3:68:05:57:69:7f:43:b1: 4a:e2:29:a8:57:e8:52:fb:a5:24:78:e0:ed:05:79: 59:30:68:47:55:8d:5e:9b:25:96:d8:28:9b:9d:05: 57:ea:4d:3a:b2:08:66:15:b1:9b:95:6c:7e:aa:46: 77:9e:e8:cb:ba:a3:d4:57:a0:5e:ee:32:ee:5e:f9: 4f:47:f2:f3:af:39:da:98:f9:38:ed:93:f0:69:69: c1:45:0b:9b:04:7d:5c:e9:26:a4:0b:56:27:fd:6d: 21:96:94:2b:90:4b:d0:53:8c:64:69:27:3b:20:92: a9:08:e1:4a:d2:78:ff:d3:f9:53:51:11:b5:72:83: bc:dc:db:47:58:2c:50:b4:de:6f:6a:b5:15:42:e1: 99:b7:e0:47:a5:3e:f2:98:e9:85:dd:3f:5d:f6:cb: 08:7e:65:a2:49:87:bc:27:ef:94:3c:08:4e:66:72: c1:d2:b7:08:4b:0a:bf:35:c9:0f:2d:cb:b9:35:43: d8:f1:cf:41:f6:5e:82:10:10:1a:21:44:e1:34:11: 26:89:1f:93:d2:fd:5e:40:06:8c:3a:08:48:28:ea: b8:ff:05:b8:01:6b:36:18:5f:e1:a9:59:8a:2d:02: 94:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E7:96:60:7A:FA:96:7B:46:B6:00:D6:89:C2:3F:C0:9D:B5:5A:CB X509v3 Authority Key Identifier: keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/C07738FE9F4511EB88EBCA76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.0.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:91:51:af:e1:1c:14:f4:26:b2:2e:b5:60:7f:8f:c7:96:3e: 7b:c7:b6:a2:f6:0f:28:38:21:d9:db:e1:6c:da:18:fa:72:0e: ac:8f:af:71:54:cc:6a:3f:3d:f7:64:9e:79:7f:9f:e0:4a:87: f9:4d:c6:1d:d7:71:be:72:b0:f5:ef:95:4c:c9:6e:98:f3:90: a7:c5:35:83:b5:d2:74:66:85:63:b5:6a:1b:02:b0:5a:a9:ea: 4c:ae:97:08:77:11:da:87:5d:13:2a:71:1b:9d:23:d6:5f:d4: 9e:c5:bd:e8:9f:16:94:22:66:75:23:81:b2:04:fb:04:8c:08: a8:d8:09:42:fa:90:d1:fc:c5:82:d5:50:0c:10:73:41:85:e6: 0b:5b:e6:78:d4:bf:fb:ba:d7:27:89:7d:78:2b:a2:21:6d:b3: 75:90:91:c6:13:d8:8b:21:c2:ad:7f:fc:f5:cc:ed:1c:46:51: 64:38:70:65:6b:4d:f3:35:28:36:1b:3c:86:75:f1:ad:4a:db: 5a:6b:3c:70:0c:3a:14:f1:f1:2e:85:cd:89:1f:0f:d4:15:3f: ef:3f:ee:4d:cf:eb:31:f3:1c:a7:f4:5c:34:9c:b4:de:3a:63: 60:01:65:e8:41:ce:1d:ca:ed:df:ae:da:27:4c:95:71:b4:bb: e9:4b:88:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNERTIxMTAvBgNVBAUTKERGNkQwMDJCQkNBQkEyNTBEMkFFNkI0NDU0RTNDQkZE NjdEMkM3RUEwHhcNMjMxMjIwMjEyOTAyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgzNWM5ZS1kZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweiRs1CtAbLIlzMhJw3+IgqIWIous2gFV2l/Q7FK4imoV+hS+6UkeODtBXlZ MGhHVY1emyWW2CibnQVX6k06sghmFbGblWx+qkZ3nujLuqPUV6Be7jLuXvlPR/Lz rznamPk47ZPwaWnBRQubBH1c6SakC1Yn/W0hlpQrkEvQU4xkaSc7IJKpCOFK0nj/ 0/lTURG1coO83NtHWCxQtN5varUVQuGZt+BHpT7ymOmF3T9d9ssIfmWiSYe8J++U PAhOZnLB0rcISwq/NckPLcu5NUPY8c9B9l6CEBAaIUThNBEmiR+T0v1eQAaMOghI KOq4/wW4AWs2GF/hqVmKLQKUWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDTnlmB6 +pZ7RrYA1onCP8CdtVrLMB8GA1UdIwQYMBaAFN9tACu8q6JQ0q5rRFTjy/1n0sfq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RFMi9EMjE4REQ1MjhF OTcxMUVBOEMyREU1MzdDNEY5QUUwMi8zMjBBSzd5cm9sRFNybXRFVk9QTF9XZlN4 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMyMEFLN3lyb2xEU3JtdEVWT1BMX1dmU3gtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDNERTIvRDIxOERENTI4RTk3MTFFQThDMkRFNTM3QzRGOUFFMDIvQzA3NzM4RkU5 RjQ1MTFFQjg4RUJDQTc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIxAAQwDQYJKoZIhvcNAQELBQADggEBACyRUa/hHBT0JrIu tWB/j8eWPnvHtqL2Dyg4Idnb4WzaGPpyDqyPr3FUzGo/Pfdknnl/n+BKh/lNxh3X cb5ysPXvlUzJbpjzkKfFNYO10nRmhWO1ahsCsFqp6kyulwh3EdqHXRMqcRudI9Zf 1J7FveifFpQiZnUjgbIE+wSMCKjYCUL6kNH8xYLVUAwQc0GF5gtb5njUv/u61yeJ fXgroiFts3WQkcYT2Ishwq1//PXM7RxGUWQ4cGVrTfM1KDYbPIZ18a1K21prPHAM OhTx8S6FzYkfD9QVP+8/7k3P6zHzHKf0XDSctN46Y2ABZehBzh3K7d+u2idMlXG0 u+lLiPs= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org