$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/7E1ADD74E00E11EDA7E1B640C4F9AE02.roa File: 7E1ADD74E00E11EDA7E1B640C4F9AE02.roa (raw, json) Hash identifier: l8rbVcrxpBL4K1nr5JzCpQg12eUyxOnsIOK36gYUlKo= Subject key identifier: 9F:7B:47:73:8D:12:5B:6D:A3:5F:5B:6C:CC:34:07:EE:91:88:5B:F9 Certificate issuer: /CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Certificate serial: 1A8E Authority key identifier: 42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/7E1ADD74E00E11EDA7E1B640C4F9AE02.roa Signing time: Fri 20 Sep 2024 16:34:32 +0000 ROA not before: Fri 20 Sep 2024 16:34:32 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 23764 IP address blocks: 139.189.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6798 (0x1a8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=429ECE1938CC8924B1110965C9CF4F9648602018 Validity Not Before: Sep 20 16:34:32 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eda418-ce48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:85:86:dc:68:9c:5d:39:cc:4b:3c:35:90: 66:2b:c1:92:40:93:ce:ac:67:da:da:d2:a5:0a:bf: 08:03:64:78:a0:3f:d0:d6:64:a5:c5:64:3a:38:bd: 73:b0:b2:a2:47:64:7f:39:08:6d:ac:8b:37:d0:e3: c6:2f:f2:c2:39:94:dd:31:97:bf:e6:8a:d3:da:cd: 11:29:e4:65:f5:d0:3e:05:c7:45:c6:69:97:c0:dc: ca:62:39:ed:93:02:b4:75:6f:22:04:53:3a:62:9a: af:cf:8e:62:41:09:39:e7:f4:63:e7:e0:d6:92:31: b6:a3:79:89:c8:39:8d:11:35:59:77:01:8b:6c:9d: d5:a8:34:c1:f4:0f:d5:af:93:ef:e1:95:5a:e7:a9: 1a:3f:32:b4:87:f2:0f:0d:c4:0b:26:64:a4:86:d8: 63:f8:ae:d2:b1:4e:8b:75:ca:a6:e6:1b:8a:2e:66: 6d:bc:15:a2:7d:58:15:4c:6c:c3:c1:9e:83:17:1e: 0d:3a:08:26:09:e4:30:bf:ec:0d:72:02:da:10:e6: 87:cc:50:90:bc:22:20:4f:e7:e6:69:cb:95:8b:fe: 4c:c5:1c:55:80:67:4d:0c:25:b7:7a:f5:50:4f:11: b1:45:10:43:5b:98:ab:e8:9f:f8:71:fa:86:10:04: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7B:47:73:8D:12:5B:6D:A3:5F:5B:6C:CC:34:07:EE:91:88:5B:F9 X509v3 Authority Key Identifier: keyid:42:9E:CE:19:38:CC:89:24:B1:11:09:65:C9:CF:4F:96:48:60:20:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/Qp7OGTjMiSSxEQllyc9PlkhgIBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Qp7OGTjMiSSxEQllyc9PlkhgIBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/5ECC15AA257511E7AC0D172AC4F9AE02/7E1ADD74E00E11EDA7E1B640C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.189.127.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:aa:6e:7e:92:68:b2:50:51:da:36:e1:eb:60:a3:c3:02:f0: 40:fd:7e:25:26:93:69:a8:64:84:45:26:29:d8:51:43:89:67: ae:61:be:cd:9a:66:6c:cc:09:8e:c3:e7:d8:e0:46:fe:6e:21: 76:c8:21:5e:e8:6d:01:40:c2:c3:73:52:8a:3d:f3:a5:20:28: 3c:1b:41:7c:9a:0c:6b:f6:85:0e:4c:23:08:51:01:0e:e7:80: 0a:ce:31:bd:9e:ff:be:8e:27:31:5a:f3:f1:d3:01:94:90:d3: 68:64:29:68:e4:5e:50:d5:1c:44:f9:f7:4b:6f:a1:d2:0f:0a: 2d:45:64:72:79:98:ca:33:91:f5:2a:6c:eb:5d:ab:ab:3d:df: 89:dc:0a:3f:e6:a0:9e:5e:ad:42:60:e7:12:bd:4d:15:56:44: 8c:9f:db:fc:d6:d9:fe:8a:a8:35:74:ba:1d:df:bf:4d:5e:8f: 35:b3:df:ec:1c:ca:22:98:97:e0:f9:eb:d4:f6:b0:3a:82:07: 20:e8:79:49:75:32:24:8b:43:70:96:66:9d:76:42:43:5b:6e: f2:b6:3a:4e:58:0a:1d:bc:a7:d3:f9:3e:a6:86:e4:35:b0:ab: d2:00:5c:04:8d:71:d6:5f:c8:c4:24:27:33:20:f2:75:da:a0: 50:32:a0:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKDQyOUVDRTE5MzhDQzg5MjRCMTExMDk2NUM5Q0Y0Rjk2 NDg2MDIwMTgwHhcNMjQwOTIwMTYzNDMyWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVkYTQxOC1jZTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD2FhtxonF05zEs8NZBmK8GSQJPOrGfa2tKlCr8IA2R4oD/Q1mSlxWQ6OL1z sLKiR2R/OQhtrIs30OPGL/LCOZTdMZe/5orT2s0RKeRl9dA+BcdFxmmXwNzKYjnt kwK0dW8iBFM6Ypqvz45iQQk55/Rj5+DWkjG2o3mJyDmNETVZdwGLbJ3VqDTB9A/V r5Pv4ZVa56kaPzK0h/IPDcQLJmSkhthj+K7SsU6Ldcqm5huKLmZtvBWifVgVTGzD wZ6DFx4NOggmCeQwv+wNcgLaEOaHzFCQvCIgT+fmacuVi/5MxRxVgGdNDCW3evVQ TxGxRRBDW5ir6J/4cfqGEATQUQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ97R3ON Eltto19bbMw0B+6RiFv5MB8GA1UdIwQYMBaAFEKezhk4zIkksREJZcnPT5ZIYCAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC81RUNDMTVBQTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9RcDdPR1RqTWlTU3hFUWxseWM5UGxraGdJ QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FwN09HVGpNaVNTeEVRbGx5YzlQbGtoZ0lCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNUVDQzE1QUEyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvN0UxQURENzRF MDBFMTFFREE3RTFCNjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACLvX8wDQYJKoZIhvcNAQELBQADggEBADuqbn6SaLJQUdo2 4etgo8MC8ED9fiUmk2moZIRFJinYUUOJZ65hvs2aZmzMCY7D59jgRv5uIXbIIV7o bQFAwsNzUoo986UgKDwbQXyaDGv2hQ5MIwhRAQ7ngArOMb2e/76OJzFa8/HTAZSQ 02hkKWjkXlDVHET590tvodIPCi1FZHJ5mMozkfUqbOtdq6s934ncCj/moJ5erUJg 5xK9TRVWRIyf2/zW2f6KqDV0uh3fv01ejzWz3+wcyiKYl+D569T2sDqCByDoeUl1 MiSLQ3CWZp12QkNbbvK2Ok5YCh28p9P5PqaG5DWwq9IAXASNcdZfyMQkJzMg8nXa oFAyoFA= -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:53 2024 by rpki-client on console-fra.rpki-client.org