$ rpki-client -vvf rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/38161248A26911EFBF6D0319C4F9AE02.roa File: 38161248A26911EFBF6D0319C4F9AE02.roa (raw, json) Hash identifier: ask+BZFU8F8z7xA+3YaObHPYrB9zSG3srAnnNSVnzDc= Subject key identifier: 27:AC:E4:45:18:DE:94:AD:98:1A:AE:B8:04:67:D0:BA:8C:6A:6D:62 Certificate issuer: /CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC Certificate serial: 02 Authority key identifier: 29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/38161248A26911EFBF6D0319C4F9AE02.roa Signing time: Thu 14 Nov 2024 09:17:07 +0000 ROA not before: Thu 14 Nov 2024 09:17:07 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153354 IP address blocks: 160.187.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152329/serialNumber=293AC6405309DE94951687FE17296ADDCD9572FC Validity Not Before: Nov 14 09:17:07 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6735c013-f100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2a:80:db:d9:ae:ea:62:d7:ff:8b:8b:fa:b4: da:97:29:19:0b:95:a1:94:b8:77:bf:ad:e9:b2:19: 6e:15:5d:7c:c5:03:1f:05:f0:af:ca:fb:c8:d2:8d: 89:68:f1:92:7f:cc:30:72:f2:27:08:22:43:07:40: c4:47:71:3e:99:20:16:ca:c3:cc:1b:da:d3:1a:0a: f6:7e:8f:7d:fd:d4:59:8c:b4:97:b7:58:fe:4a:bf: d5:75:b8:06:59:e2:b6:76:d3:46:0c:bf:08:c9:41: 22:08:9e:c3:9b:4a:55:d8:dd:31:e7:b6:90:2a:ce: 2b:e7:87:4a:88:fa:fe:c8:52:fa:6e:b0:f5:d8:de: d1:9f:98:ea:8d:50:b9:35:1a:76:b7:a0:bb:0c:46: 72:7b:e5:81:cb:28:52:2f:a9:5f:82:e5:2e:fa:35: 22:8e:46:9c:3e:16:dd:b0:46:cb:74:f1:32:80:b6: 24:90:ab:36:e9:4e:ce:29:e8:4c:89:e7:bb:73:f3: d8:9f:96:42:82:dc:1e:03:58:74:4a:64:32:5a:ba: a5:27:06:01:b9:e8:8c:68:39:02:ac:58:4c:34:34: 64:87:9f:d0:9f:52:8a:35:20:67:db:c5:5b:40:04: a3:f1:b3:24:1f:33:dd:0b:65:66:10:d1:de:d8:a5: 3f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:E4:45:18:DE:94:AD:98:1A:AE:B8:04:67:D0:BA:8C:6A:6D:62 X509v3 Authority Key Identifier: keyid:29:3A:C6:40:53:09:DE:94:95:16:87:FE:17:29:6A:DD:CD:95:72:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KTrGQFMJ3pSVFof-Fylq3c2Vcvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152329/C7FAD368A26811EF9D914118C4F9AE02/38161248A26911EFBF6D0319C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.180.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:ac:b6:74:98:26:9a:ae:47:6c:d7:f1:db:55:01:55:bf:6c: 1e:f5:bc:1a:f6:c8:dc:44:08:31:61:d5:86:97:ac:b9:20:43: 1a:49:a4:96:40:6d:b5:e0:6f:ae:4e:f3:fe:ff:51:2a:11:e9: d0:1d:0d:90:f3:ed:01:58:c5:b6:ea:57:ca:c5:10:76:5e:38: 8f:dc:90:33:85:90:ce:32:07:3f:f0:e1:c5:e3:e6:9d:f2:a7: 59:47:44:64:33:fd:7c:e0:ed:4d:62:73:b1:c1:d7:d6:ae:6f: c9:0d:84:36:73:ac:af:10:cd:f6:28:32:78:d8:da:00:79:05: 4a:2d:82:14:90:ac:35:88:93:54:04:df:2b:54:1f:37:47:8a: 35:22:f3:7e:9b:64:fe:0d:ad:9e:e5:11:c2:06:32:f0:10:35: 86:a0:8a:37:d6:a6:5f:8b:c8:6b:20:02:7f:35:8d:48:a1:b9: d4:86:ab:3c:27:28:f3:81:51:3c:b2:fb:ee:ba:63:0c:de:0b: 0a:c8:3e:69:d3:59:b4:06:74:d4:c0:1b:a3:b5:7f:c9:17:b5: d8:06:4a:ae:4e:28:b9:4d:f5:96:fb:71:ef:fd:93:0a:4e:9e: 85:0c:bb:17:a4:38:83:93:f3:0d:5e:5d:da:49:4a:8e:42:4d: 60:e0:fe:b8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjMyOTExMC8GA1UEBRMoMjkzQUM2NDA1MzA5REU5NDk1MTY4N0ZFMTcyOTZBRERD RDk1NzJGQzAeFw0yNDExMTQwOTE3MDdaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MzVjMDEzLWYxMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiKoDb2a7qYtf/i4v6tNqXKRkLlaGUuHe/remyGW4VXXzFAx8F8K/K+8jSjYlo 8ZJ/zDBy8icIIkMHQMRHcT6ZIBbKw8wb2tMaCvZ+j3391FmMtJe3WP5Kv9V1uAZZ 4rZ200YMvwjJQSIInsObSlXY3THntpAqzivnh0qI+v7IUvpusPXY3tGfmOqNULk1 Gna3oLsMRnJ75YHLKFIvqV+C5S76NSKORpw+Ft2wRst08TKAtiSQqzbpTs4p6EyJ 57tz89iflkKC3B4DWHRKZDJauqUnBgG56IxoOQKsWEw0NGSHn9CfUoo1IGfbxVtA BKPxsyQfM90LZWYQ0d7YpT/5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJ6zkRRje lK2YGq64BGfQuoxqbWIwHwYDVR0jBBgwFoAUKTrGQFMJ3pSVFof+Fylq3c2Vcvww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMzI5L0M3RkFEMzY4QTI2 ODExRUY5RDkxNDExOEM0RjlBRTAyL0tUckdRRk1KM3BTVkZvZi1GeWxxM2MyVmN2 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS1RyR1FGTUozcFNWRm9mLUZ5bHEzYzJWY3Z3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjMyOS9DN0ZBRDM2OEEyNjgxMUVGOUQ5MTQxMThDNEY5QUUwMi8zODE2MTI0OEEy NjkxMUVGQkY2RDAzMTlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC7tDANBgkqhkiG9w0BAQsFAAOCAQEAXqy2dJgmmq5HbNfx 21UBVb9sHvW8GvbI3EQIMWHVhpesuSBDGkmklkBtteBvrk7z/v9RKhHp0B0NkPPt AVjFtupXysUQdl44j9yQM4WQzjIHP/DhxePmnfKnWUdEZDP9fODtTWJzscHX1q5v yQ2ENnOsrxDN9igyeNjaAHkFSi2CFJCsNYiTVATfK1QfN0eKNSLzfptk/g2tnuUR wgYy8BA1hqCKN9amX4vIayACfzWNSKG51IarPCco84FRPLL77rpjDN4LCsg+adNZ tAZ01MAbo7V/yRe12AZKrk4ouU31lvtx7/2TCk6ehQy7F6Q4g5PzDV5d2klKjkJN YOD+uA== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:04 2024 by rpki-client on console-ams.rpki-client.org