$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa File: 882AC358E1F511EE9188A919C4F9AE02.roa (raw, json) Hash identifier: fGaqipOEAJZROlVHqINmszGLW3Dq7A8zFedH5L1wbHs= Subject key identifier: 3A:8D:2F:3F:65:AC:90:80:29:8C:17:C9:DA:E2:31:E4:71:08:3E:F1 Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1DBE Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa Signing time: Tue 19 Mar 2024 11:57:45 +0000 ROA not before: Tue 19 Mar 2024 11:57:45 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 138296 IP address blocks: 202.179.70.0/24 maxlen: 24 202.179.71.0/24 maxlen: 24 202.179.72.0/24 maxlen: 24 202.179.73.0/24 maxlen: 24 202.179.74.0/24 maxlen: 24 202.179.75.0/24 maxlen: 24 202.179.76.0/24 maxlen: 24 202.179.79.0/24 maxlen: 24 202.179.81.0/24 maxlen: 24 202.179.82.0/24 maxlen: 24 202.179.83.0/24 maxlen: 24 202.179.84.0/24 maxlen: 24 202.179.85.0/24 maxlen: 24 202.179.86.0/24 maxlen: 24 202.179.87.0/24 maxlen: 24 202.179.88.0/24 maxlen: 24 202.179.90.0/24 maxlen: 24 202.179.91.0/24 maxlen: 24 202.179.92.0/24 maxlen: 24 202.179.93.0/24 maxlen: 24 202.179.94.0/24 maxlen: 24 202.179.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:37:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7614 (0x1dbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Mar 19 11:57:45 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65f97db9-b417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:94:dc:04:d4:db:1f:45:bd:01:da:59:89: 2b:99:2d:af:ae:2c:40:86:c9:20:0c:17:c9:a9:63: 25:99:ba:6a:98:88:85:d5:b8:b6:94:57:3f:fd:fa: 52:a7:7b:7f:90:3d:9d:e5:6d:03:43:41:30:69:bf: 74:ee:7d:c4:e0:e7:df:bc:14:bd:81:a9:ad:85:e7: 66:32:49:a0:67:30:4a:f6:90:ba:bb:10:75:77:73: c2:d3:e3:8d:a4:e4:b5:62:8b:17:c1:a2:58:65:51: 9a:e4:2d:10:3f:dd:e8:e9:c7:13:35:08:6b:8a:60: a6:5d:24:8f:ac:39:2b:b0:80:68:bc:cb:83:0d:b3: c1:f9:64:92:fc:25:13:3a:5b:5e:a0:46:b7:2e:a9: 96:60:3b:ac:26:c1:42:4d:a8:39:31:a8:a5:90:87: 20:cb:c3:0a:ca:3f:ff:cb:68:5f:0c:6d:3a:fc:65: 48:41:7a:bd:57:20:f6:9d:c1:16:dd:85:64:2d:c8: 4d:04:b0:56:8a:00:a0:01:13:a6:45:14:82:94:ab: 68:99:be:0c:cb:f5:f7:af:55:86:3a:60:a4:b0:4d: bb:09:1c:e5:a9:8c:03:95:a7:61:a9:d8:71:ee:f5: c8:69:65:ad:9d:c2:bf:4e:40:10:4c:ba:7a:fe:60: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:2F:3F:65:AC:90:80:29:8C:17:C9:DA:E2:31:E4:71:08:3E:F1 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/882AC358E1F511EE9188A919C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.179.70.0-202.179.76.255 202.179.79.0/24 202.179.81.0-202.179.88.255 202.179.90.0-202.179.95.255 Signature Algorithm: sha256WithRSAEncryption 0a:b0:cf:d8:b8:42:80:e5:e1:89:57:14:48:dd:ce:12:f3:67: a2:8a:e2:44:2b:e4:c5:b4:b5:dc:51:14:88:24:75:26:90:75: a6:8a:6a:c6:74:ea:64:26:78:c8:b5:ea:cc:cb:b5:bd:cb:64: 34:6a:59:fd:b0:c6:bd:40:93:24:73:0c:63:bf:9a:29:b4:48: 70:79:38:79:4d:1b:18:87:44:0c:07:a5:91:fe:d0:61:c0:f4: d4:76:6b:a8:97:ae:b9:91:4a:d9:55:80:1d:5b:91:5d:10:ec: f2:ec:70:f0:5e:3f:1d:e9:37:49:65:13:b0:57:f5:d1:23:e4: cb:2a:c9:9d:81:45:be:2f:9d:20:ac:eb:62:b5:2c:9d:88:d2: 70:2f:2c:b0:86:82:8f:42:79:53:74:c9:45:48:b3:c1:d8:df: eb:c6:8e:c0:db:4b:8d:d9:a0:1a:78:17:7c:a0:17:15:f8:59: 24:07:b7:aa:3b:4e:b6:db:0a:a4:c7:8a:bb:c1:96:65:16:42: bc:46:c0:45:e5:f5:f1:b3:ed:ce:62:98:08:a2:c0:6d:9a:bf: 56:b1:5d:62:36:41:b9:c9:f6:70:ee:45:51:4a:23:ed:1b:3c: 63:ba:d3:0d:4f:7b:ef:da:56:19:2d:f4:1d:77:21:f4:68:b9: 75:e5:5c:bb -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICHb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjQwMzE5MTE1NzQ1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY5N2RiOS1iNDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB2U3ATU2x9FvQHaWYkrmS2vrixAhskgDBfJqWMlmbpqmIiF1bi2lFc//fpS p3t/kD2d5W0DQ0Ewab907n3E4OffvBS9gamthedmMkmgZzBK9pC6uxB1d3PC0+ON pOS1YosXwaJYZVGa5C0QP93o6ccTNQhrimCmXSSPrDkrsIBovMuDDbPB+WSS/CUT OlteoEa3LqmWYDusJsFCTag5MailkIcgy8MKyj//y2hfDG06/GVIQXq9VyD2ncEW 3YVkLchNBLBWigCgAROmRRSClKtomb4My/X3r1WGOmCksE27CRzlqYwDladhqdhx 7vXIaWWtncK/TkAQTLp6/mBc9wIDAQABo4ICvzCCArswHQYDVR0OBBYEFDqNLz9l rJCAKYwXydriMeRxCD7xMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUFFNUYvOEI3OUI2Nzg4ODUxMTFFNkE2OTJERTc4QzRGOUFFMDIvODgyQUMzNThF MUY1MTFFRTkxODhBOTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDAwDAMEAcqzRgMEAMqzTAMEAMqzTzAMAwQAyrNRAwQAyrNYMAwD BAHKs1oDBAXKs0AwDQYJKoZIhvcNAQELBQADggEBAAqwz9i4QoDl4YlXFEjdzhLz Z6KK4kQr5MW0tdxRFIgkdSaQdaaKasZ06mQmeMi16szLtb3LZDRqWf2wxr1AkyRz DGO/mim0SHB5OHlNGxiHRAwHpZH+0GHA9NR2a6iXrrmRStlVgB1bkV0Q7PLscPBe Px3pN0llE7BX9dEj5MsqyZ2BRb4vnSCs62K1LJ2I0nAvLLCGgo9CeVN0yUVIs8HY 3+vGjsDbS43ZoBp4F3ygFxX4WSQHt6o7TrbbCqTHirvBlmUWQrxGwEXl9fGz7c5i mAiiwG2av1axXWI2QbnJ9nDuRVFKI+0bPGO60w1Pe+/aVhkt9B13IfRouXXlXLs= -----END CERTIFICATE-----Generated at Thu May 16 18:26:04 2024 by rpki-client on console-fra.rpki-client.org