$ rpki-client -vvf rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E349FB7A6B8B11EBA041C843C4F9AE02.roa File: E349FB7A6B8B11EBA041C843C4F9AE02.roa (raw, json) Hash identifier: pH5N/Qx1YY5gq3cEOXWljF1Kkz3BHRfE8oyjPHPjT5Q= Subject key identifier: D4:4B:19:A7:EE:3F:CF:01:92:63:0E:71:7E:C6:32:D3:06:B8:F6:54 Certificate issuer: /CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13 Certificate serial: 063C Authority key identifier: AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E349FB7A6B8B11EBA041C843C4F9AE02.roa Signing time: Sat 28 Sep 2024 22:41:59 +0000 ROA not before: Sat 28 Sep 2024 22:41:59 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 6660 IP address blocks: 175.176.168.0/21 maxlen: 21 202.89.20.0/22 maxlen: 22 203.169.58.0/23 maxlen: 23 203.169.60.0/22 maxlen: 22 2407:cc00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1596 (0x63c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C07D/serialNumber=AADAA3C4411660DF5C3448A91C84AE5757A26E13 Validity Not Before: Sep 28 22:41:59 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66f88637-c21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7a:30:f8:6d:9d:8b:52:77:16:b5:a2:87:b5: 5c:f4:16:9f:1b:8d:96:ae:52:f4:42:80:ce:28:f9: 9f:3a:e6:8e:03:53:b9:d0:bd:ee:a5:4a:a6:cf:c5: 26:5e:cc:56:2d:d3:89:e4:d6:dd:7f:96:46:5b:7e: 38:1a:31:7a:92:5d:6e:2c:f7:5e:8a:54:12:b5:48: 35:bb:fa:c0:14:2f:ba:e3:b3:65:77:27:9b:91:70: e6:a1:99:1e:d6:db:1d:02:33:54:80:4b:e8:f5:eb: 5b:f4:ff:0b:b3:c4:76:07:2b:22:5f:3e:2b:9b:8a: fd:b0:97:35:29:11:ef:63:8d:6d:1f:4a:02:cc:52: 87:31:3c:6f:cd:df:00:5b:02:48:f3:e2:24:ff:72: d3:2a:62:b9:25:1f:85:42:36:52:84:07:3a:a3:db: 56:cb:fa:e8:25:ae:f1:30:73:61:99:7d:4f:55:ab: 73:e4:a2:ff:31:78:da:5c:48:a5:aa:1a:71:ad:1d: 68:32:88:4c:3f:dc:aa:e5:bc:3c:30:b1:ef:a0:1a: 41:e3:3f:de:61:da:4e:bf:42:14:bc:9c:95:78:6c: 3c:5d:f8:f9:56:9c:b6:aa:86:82:c4:ea:be:12:d5: e2:88:ce:46:a8:23:e2:09:cd:c4:e2:9f:41:c5:18: 88:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4B:19:A7:EE:3F:CF:01:92:63:0E:71:7E:C6:32:D3:06:B8:F6:54 X509v3 Authority Key Identifier: keyid:AA:DA:A3:C4:41:16:60:DF:5C:34:48:A9:1C:84:AE:57:57:A2:6E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/qtqjxEEWYN9cNEipHISuV1eibhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtqjxEEWYN9cNEipHISuV1eibhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C07D/AB089F366B8711EBBD82661CC4F9AE02/E349FB7A6B8B11EBA041C843C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.176.168.0/21 202.89.20.0/22 203.169.58.0-203.169.63.255 IPv6: 2407:cc00::/32 Signature Algorithm: sha256WithRSAEncryption 11:51:4f:64:5d:85:ec:88:18:fe:a1:77:89:42:3d:28:a9:7a: c9:c3:2c:2c:b1:3d:57:df:52:ee:49:88:bf:b3:b6:ff:09:fe: 08:c3:9b:c0:ab:01:e3:e4:8d:c7:dd:a9:6b:17:53:98:b2:48: 5d:12:1b:d5:fa:1d:36:49:38:ff:d8:51:35:5c:ad:54:1b:fd: a7:7a:59:38:bb:66:5b:2a:51:04:a6:7b:23:94:84:26:d0:07: 40:48:e2:1d:c1:f5:33:e8:e4:4f:da:3c:74:ea:10:c1:8e:34: 07:dc:35:d2:e7:a2:7e:a7:21:39:d4:94:09:63:66:bb:4e:0c: 15:ae:ad:07:99:a6:72:86:e3:53:33:7d:ec:8a:1d:d8:63:a2: 22:f8:bf:6a:1d:9b:8c:13:7d:ae:26:b6:7b:24:4f:1c:88:e7: 1e:2e:e3:c8:cd:ee:22:63:3f:c0:5a:6d:c9:c4:fc:da:4a:39: 72:8d:65:a0:10:53:e5:03:0c:12:e3:a1:17:e2:60:4f:4a:61: b4:7c:cc:55:ca:9b:49:60:3c:73:85:3a:dd:0b:0e:cd:2f:78: bd:f2:0a:bd:aa:ce:f6:7f:c3:9d:ff:d9:15:22:9e:5b:53:89: 6f:7e:41:02:7d:aa:88:dd:74:15:1d:2c:09:21:60:8d:e2:0c: 47:ad:80:bb -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICBjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUMwN0QxMTAvBgNVBAUTKEFBREFBM0M0NDExNjYwREY1QzM0NDhBOTFDODRBRTU3 NTdBMjZFMTMwHhcNMjQwOTI4MjI0MTU5WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmY4ODYzNy1jMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Xow+G2di1J3FrWih7Vc9BafG42WrlL0QoDOKPmfOuaOA1O50L3upUqmz8Um XsxWLdOJ5Nbdf5ZGW344GjF6kl1uLPdeilQStUg1u/rAFC+647NldyebkXDmoZke 1tsdAjNUgEvo9etb9P8Ls8R2BysiXz4rm4r9sJc1KRHvY41tH0oCzFKHMTxvzd8A WwJI8+Ik/3LTKmK5JR+FQjZShAc6o9tWy/roJa7xMHNhmX1PVatz5KL/MXjaXEil qhpxrR1oMohMP9yq5bw8MLHvoBpB4z/eYdpOv0IUvJyVeGw8Xfj5Vpy2qoaCxOq+ EtXiiM5GqCPiCc3E4p9BxRiI4QIDAQABo4ICuDCCArQwHQYDVR0OBBYEFNRLGafu P88BkmMOcX7GMtMGuPZUMB8GA1UdIwQYMBaAFKrao8RBFmDfXDRIqRyErldXom4T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzA3RC9BQjA4OUYzNjZC ODcxMUVCQkQ4MjY2MUNDNEY5QUUwMi9xdHFqeEVFV1lOOWNORWlwSElTdVYxZWli aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0cWp4RUVXWU45Y05FaXBISVN1VjFlaWJoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUMwN0QvQUIwODlGMzY2Qjg3MTFFQkJEODI2NjFDQzRGOUFFMDIvRTM0OUZCN0E2 QjhCMTFFQkEwNDFDODQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBAOvsKgDBALKWRQwDAMEAcupOgMEBsupADANBAIAAjAHAwUA JAfMADANBgkqhkiG9w0BAQsFAAOCAQEAEVFPZF2F7IgY/qF3iUI9KKl6ycMsLLE9 V99S7kmIv7O2/wn+CMObwKsB4+SNx92paxdTmLJIXRIb1fodNkk4/9hRNVytVBv9 p3pZOLtmWypRBKZ7I5SEJtAHQEjiHcH1M+jkT9o8dOoQwY40B9w10ueifqchOdSU CWNmu04MFa6tB5mmcobjUzN97Iod2GOiIvi/ah2bjBN9ria2eyRPHIjnHi7jyM3u ImM/wFptycT82ko5co1loBBT5QMMEuOhF+JgT0phtHzMVcqbSWA8c4U63QsOzS94 vfIKvarO9n/Dnf/ZFSKeW1OJb35BAn2qiN10FR0sCSFgjeIMR62Auw== -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:26 2024 by rpki-client on console-fra.rpki-client.org