$ rpki-client -vvf rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa File: D8B25C54EC2211EA84C17E26C4F9AE02.roa (raw, json) Hash identifier: G8R2HGhEO91zZJR3k6r/R5FFkuswRD4+38OOZJqUih0= Subject key identifier: DF:E4:43:06:64:C3:8E:B7:9B:A4:4F:1F:3E:75:D2:61:F9:42:28:CE Certificate issuer: /CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Certificate serial: 0758 Authority key identifier: 82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa Signing time: Wed 10 Apr 2024 23:01:35 +0000 ROA not before: Wed 10 Apr 2024 23:01:35 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24049 IP address blocks: 203.119.18.0/24 maxlen: 24 2001:dd8:1b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B536/serialNumber=8210D43756654B10705D5AB3F37BF01A78B78C47 Validity Not Before: Apr 10 23:01:35 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66171a4f-1059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ca:b7:28:34:38:da:39:17:7c:99:a6:b5:13: 04:82:3b:aa:a1:fc:24:f7:0a:84:f6:90:0b:ba:39: 6e:4e:fc:89:40:4e:3a:bd:d9:c8:e4:f9:81:49:12: f6:65:04:eb:33:05:15:18:60:0a:98:30:68:c5:20: dd:ae:43:d4:00:84:81:26:2c:25:9a:83:df:35:c1: dd:85:f3:be:7e:b5:b0:0c:b5:f6:f0:4e:80:92:2b: 27:06:a2:d9:e3:20:35:9f:0f:5d:48:48:41:6a:40: 10:6f:58:17:ef:c4:4e:9b:52:89:91:74:85:d8:f7: dc:a2:1d:07:ed:00:4f:9f:6a:4e:16:0d:7f:ef:86: 9a:2b:30:98:6f:c7:3d:d0:58:c7:09:32:74:1d:63: 97:2b:b0:f1:06:e5:ab:d6:2a:b0:73:0b:18:95:d9: e1:69:9e:cd:6b:f7:7b:f5:7c:ab:6c:e2:7e:49:d6: b7:fa:8e:dc:25:47:e0:e3:72:e0:35:04:bc:c4:b8: 60:05:a2:39:10:33:4e:48:dd:64:99:8e:94:c1:01: dd:51:8a:2e:33:14:74:a9:b5:8c:7e:fe:18:67:9f: b6:3b:07:15:a9:32:89:9c:32:16:4e:73:a0:aa:ae: 38:8b:28:99:4f:2e:50:76:d6:01:c6:b0:93:68:ac: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E4:43:06:64:C3:8E:B7:9B:A4:4F:1F:3E:75:D2:61:F9:42:28:CE X509v3 Authority Key Identifier: keyid:82:10:D4:37:56:65:4B:10:70:5D:5A:B3:F3:7B:F0:1A:78:B7:8C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/ghDUN1ZlSxBwXVqz83vwGni3jEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ghDUN1ZlSxBwXVqz83vwGni3jEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B536/E4C88972EB7411EABA0A9E48C4F9AE02/D8B25C54EC2211EA84C17E26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.119.18.0/24 IPv6: 2001:dd8:1b::/48 Signature Algorithm: sha256WithRSAEncryption ac:de:17:f5:a8:1e:e7:f3:69:ef:55:55:0e:7b:32:65:c1:8f: ad:1a:2a:04:c4:33:43:1a:f2:46:13:31:e6:ed:74:c4:9d:b2: 3e:41:b9:e5:c6:85:b7:6e:28:17:f7:cf:ef:8e:a3:67:95:a1: c0:7d:6c:fb:41:1c:59:89:6e:a6:cd:ed:e6:19:11:f0:b6:77: fc:d5:48:7c:43:75:49:d5:a2:cb:6d:b5:10:bb:8a:57:d7:f3: f2:bc:e2:dd:28:f8:cf:cd:74:53:a6:4b:40:2c:9a:60:dd:82: 65:97:90:8f:ea:30:ca:21:82:e9:96:dc:11:e6:4d:82:ad:8d: 72:90:bf:36:9a:4a:78:dc:4f:50:0d:ba:03:dd:01:5b:15:6a: f3:00:57:60:c4:dc:c4:9e:79:06:33:01:1e:2f:c6:61:88:aa: 34:50:24:62:2d:b0:b8:fb:51:70:85:79:13:a4:34:1d:a8:02: 81:04:b7:38:ff:1e:e0:f4:8e:9b:c2:f4:0b:ee:9c:c1:09:35: 1a:08:67:a5:7a:7e:1e:17:53:b7:39:2c:c2:e4:db:f1:c3:2d: c3:15:65:4c:44:e2:e3:61:b3:ae:14:84:ed:b0:41:c7:f7:52: 1e:3a:27:f6:0d:2f:56:11:b7:6c:3d:c6:9d:3d:3a:6e:a7:2e: 45:00:60:37 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MzYxMTAvBgNVBAUTKDgyMTBENDM3NTY2NTRCMTA3MDVENUFCM0YzN0JGMDFB NzhCNzhDNDcwHhcNMjQwNDEwMjMwMTM1WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE3MWE0Zi0xMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucq3KDQ42jkXfJmmtRMEgjuqofwk9wqE9pALujluTvyJQE46vdnI5PmBSRL2 ZQTrMwUVGGAKmDBoxSDdrkPUAISBJiwlmoPfNcHdhfO+frWwDLX28E6AkisnBqLZ 4yA1nw9dSEhBakAQb1gX78ROm1KJkXSF2Pfcoh0H7QBPn2pOFg1/74aaKzCYb8c9 0FjHCTJ0HWOXK7DxBuWr1iqwcwsYldnhaZ7Na/d79XyrbOJ+Sda3+o7cJUfg43Lg NQS8xLhgBaI5EDNOSN1kmY6UwQHdUYouMxR0qbWMfv4YZ5+2OwcVqTKJnDIWTnOg qq44iyiZTy5QdtYBxrCTaKxQnQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFN/kQwZk w463m6RPHz510mH5QijOMB8GA1UdIwQYMBaAFIIQ1DdWZUsQcF1as/N78Bp4t4xH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzNi9FNEM4ODk3MkVC NzQxMUVBQkEwQTlFNDhDNEY5QUUwMi9naERVTjFabFN4QndYVnF6ODN2d0duaTNq RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2doRFVOMVpsU3hCd1hWcXo4M3Z3R25pM2pFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUI1MzYvRTRDODg5NzJFQjc0MTFFQUJBMEE5RTQ4QzRGOUFFMDIvRDhCMjVDNTRF QzIyMTFFQTg0QzE3RTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLdxIwDwQCAAIwCQMHACABDdgAGzANBgkqhkiG9w0BAQsF AAOCAQEArN4X9age5/Np71VVDnsyZcGPrRoqBMQzQxryRhMx5u10xJ2yPkG55caF t24oF/fP746jZ5WhwH1s+0EcWYlups3t5hkR8LZ3/NVIfEN1SdWiy221ELuKV9fz 8rzi3Sj4z810U6ZLQCyaYN2CZZeQj+owyiGC6ZbcEeZNgq2NcpC/NppKeNxPUA26 A90BWxVq8wBXYMTcxJ55BjMBHi/GYYiqNFAkYi2wuPtRcIV5E6Q0HagCgQS3OP8e 4PSOm8L0C+6cwQk1GghnpXp+HhdTtzkswuTb8cMtwxVlTETi42GzrhSE7bBBx/dS Hjon9g0vVhG3bD3GnT06bqcuRQBgNw== -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:08 2024 by rpki-client on console-fra.rpki-client.org