$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/664604CCD8E211ED913C4684C4F9AE02.roa File: 664604CCD8E211ED913C4684C4F9AE02.roa (raw, json) Hash identifier: bF+cQvGTN6hj6Su+AW4ebeZcP3ajFMubLlVPlkZn8CY= Subject key identifier: F5:6B:C5:F2:74:1D:E3:90:FC:A6:79:0F:47:81:21:E7:3D:5D:03:8A Certificate issuer: /CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Certificate serial: 080A Authority key identifier: 7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/664604CCD8E211ED913C4684C4F9AE02.roa Signing time: Tue 22 Oct 2024 14:50:59 +0000 ROA not before: Tue 22 Oct 2024 14:50:59 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 138322 IP address blocks: 23.88.192.0/19 maxlen: 19 23.88.192.0/20 maxlen: 20 23.88.192.0/21 maxlen: 21 23.88.192.0/23 maxlen: 23 23.88.192.0/24 maxlen: 24 23.88.193.0/24 maxlen: 24 23.88.198.0/23 maxlen: 23 23.88.200.0/22 maxlen: 22 23.88.200.0/24 maxlen: 24 23.88.201.0/24 maxlen: 24 23.88.202.0/24 maxlen: 24 23.88.203.0/24 maxlen: 24 23.88.204.0/22 maxlen: 22 23.88.204.0/24 maxlen: 24 23.88.205.0/24 maxlen: 24 23.88.206.0/24 maxlen: 24 23.88.207.0/24 maxlen: 24 23.88.222.0/24 maxlen: 24 23.88.223.0/24 maxlen: 24 152.36.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C7B/serialNumber=7F79665E63BF3CD56DC24A0A70D57F9A942DD1B8 Validity Not Before: Oct 22 14:50:59 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6717bbd3-cb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:fc:be:8c:3a:c9:4b:b9:5f:20:7c:f6:dc: 0b:7a:97:a0:37:e8:38:79:6f:af:84:8c:5d:f0:26: 83:16:d5:c6:65:95:7e:0e:b3:db:63:4b:94:47:d0: c4:ee:14:9e:f6:ee:9c:7b:dd:8c:3e:2e:0c:6a:47: 3c:d1:96:35:96:ee:c5:cd:94:be:01:09:0e:0e:fe: 87:a2:78:18:d2:38:1f:c3:93:c3:ff:0e:32:f6:2d: 81:ed:3b:ed:6d:56:dd:c2:6d:a9:09:78:a1:57:fc: f6:84:0b:a7:4c:3b:89:04:0e:e4:84:08:cd:55:e9: 4b:c2:d9:ec:85:d0:b4:d8:8b:ea:6e:c9:ed:8e:ae: 41:6c:e9:6d:e4:b8:5e:42:1d:e5:77:b6:b7:29:43: 5c:ba:d5:bb:57:bf:61:ce:97:23:64:19:b1:f7:79: 00:0f:80:17:9a:75:5a:a5:73:7e:6f:f4:83:dc:7c: 3e:8b:d9:bd:2d:21:b3:17:be:3b:33:40:d5:38:18: 6f:05:e4:c0:41:7a:1d:2b:9f:bb:84:7b:18:0c:c7: 1e:f2:12:77:6e:09:4c:ab:76:57:96:56:ce:21:df: 77:0a:04:4c:d5:02:3e:89:90:e9:bb:98:59:18:88: e7:57:ae:4d:e7:c7:f8:83:f6:b5:a1:ad:17:30:ed: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6B:C5:F2:74:1D:E3:90:FC:A6:79:0F:47:81:21:E7:3D:5D:03:8A X509v3 Authority Key Identifier: keyid:7F:79:66:5E:63:BF:3C:D5:6D:C2:4A:0A:70:D5:7F:9A:94:2D:D1:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/f3lmXmO_PNVtwkoKcNV_mpQt0bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f3lmXmO_PNVtwkoKcNV_mpQt0bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C7B/5BFCFF8CD63011EA940DA039C4F9AE02/664604CCD8E211ED913C4684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 23.88.192.0/19 152.36.192.0/19 Signature Algorithm: sha256WithRSAEncryption 53:96:65:18:bf:fe:e1:87:52:dc:59:f1:ce:74:c5:8e:e3:bf: e8:96:a1:cc:e8:66:a3:36:9c:f5:5b:b1:da:55:84:34:07:20: 9d:e1:ba:ac:cb:82:27:4c:d8:d7:74:bd:18:be:2f:88:4e:04: bc:c5:94:0d:d7:63:5a:e8:76:5d:2d:81:b8:a0:cf:ef:f1:63: df:35:ec:45:ce:6a:25:ed:8d:0f:3d:d1:5c:68:6b:88:5e:d5: 6f:9c:12:d4:9e:84:bf:6a:a6:b1:61:cb:cd:c3:ad:3a:ae:16: 34:97:44:da:c3:55:00:4f:b8:1b:42:ef:0e:26:fa:05:71:50: 2d:ba:c6:35:bf:22:76:fe:21:b9:e2:84:1e:eb:77:d4:d0:ca: e0:ed:8a:6f:fe:1a:07:ad:98:59:2e:e9:2d:d1:0b:41:6f:95: 86:8f:8f:c6:57:d8:8a:64:68:e9:89:ca:60:d4:2c:58:03:42: 41:26:8f:4e:73:6c:59:9d:01:73:62:33:91:4a:03:48:2c:96: 35:73:04:19:5a:b6:58:19:4b:01:cc:52:7c:67:e4:eb:e5:77: 43:69:50:68:e6:a4:15:a0:57:11:4e:5d:64:37:dd:64:37:87: 17:63:5c:0c:9a:37:40:3a:08:4c:f5:5d:df:b7:34:a3:e3:b0: 0f:a2:20:8d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDN0IxMTAvBgNVBAUTKDdGNzk2NjVFNjNCRjNDRDU2REMyNEEwQTcwRDU3RjlB OTQyREQxQjgwHhcNMjQxMDIyMTQ1MDU5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzE3YmJkMy1jYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0j8vow6yUu5XyB89twLepegN+g4eW+vhIxd8CaDFtXGZZV+DrPbY0uUR9DE 7hSe9u6ce92MPi4Makc80ZY1lu7FzZS+AQkODv6HongY0jgfw5PD/w4y9i2B7Tvt bVbdwm2pCXihV/z2hAunTDuJBA7khAjNVelLwtnshdC02Ivqbsntjq5BbOlt5Lhe Qh3ld7a3KUNcutW7V79hzpcjZBmx93kAD4AXmnVapXN+b/SD3Hw+i9m9LSGzF747 M0DVOBhvBeTAQXodK5+7hHsYDMce8hJ3bglMq3ZXllbOId93CgRM1QI+iZDpu5hZ GIjnV65N58f4g/a1oa0XMO0qxQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPVrxfJ0 HeOQ/KZ5D0eBIec9XQOKMB8GA1UdIwQYMBaAFH95Zl5jvzzVbcJKCnDVf5qULdG4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEM3Qi81QkZDRkY4Q0Q2 MzAxMUVBOTQwREEwMzlDNEY5QUUwMi9mM2xtWG1PX1BOVnR3a29LY05WX21wUXQw YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2YzbG1YbU9fUE5WdHdrb0tjTlZfbXBRdDBiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDhDN0IvNUJGQ0ZGOENENjMwMTFFQTk0MERBMDM5QzRGOUFFMDIvNjY0NjA0Q0NE OEUyMTFFRDkxM0M0Njg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAUXWMADBAWYJMAwDQYJKoZIhvcNAQELBQADggEBAFOWZRi/ /uGHUtxZ8c50xY7jv+iWoczoZqM2nPVbsdpVhDQHIJ3huqzLgidM2Nd0vRi+L4hO BLzFlA3XY1rodl0tgbigz+/xY9817EXOaiXtjQ890Vxoa4he1W+cEtSehL9qprFh y83DrTquFjSXRNrDVQBPuBtC7w4m+gVxUC26xjW/Inb+IbnihB7rd9TQyuDtim/+ GgetmFku6S3RC0FvlYaPj8ZX2IpkaOmJymDULFgDQkEmj05zbFmdAXNiM5FKA0gs ljVzBBlatlgZSwHMUnxn5Ovld0NpUGjmpBWgVxFOXWQ33WQ3hxdjXAyaN0A6CEz1 Xd+3NKPjsA+iII0= -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:07 2024 by rpki-client on console-ams.rpki-client.org