$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa File: 12FAF07EA47B11E9867CBF58C4F9AE02.roa (raw, json) Hash identifier: WjrEbNUJ4DVarxA0iyhxVHDDaIrwbJkyI1tAP4DGJzI= Subject key identifier: A5:84:9C:BE:7D:3C:D4:B3:A6:15:DE:61:4D:A2:9D:1B:A3:F8:4F:1E Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 3494 Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa Signing time: Fri 13 Sep 2024 08:08:46 +0000 ROA not before: Fri 13 Sep 2024 08:08:46 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 9255 IP address blocks: 128.106.8.0/24 maxlen: 24 128.106.9.0/24 maxlen: 24 128.106.84.0/22 maxlen: 22 128.106.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Sep 13 08:08:46 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e3f30e-eb13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:c0:2b:70:ea:26:c9:0d:70:f7:ce:a2:8d: ba:9c:da:2e:c7:2e:a5:6c:d6:05:27:dc:f6:b7:73: 8b:ce:fb:48:1e:00:80:9d:2b:e8:77:c5:43:96:46: a6:9b:7a:68:0f:27:f9:26:93:e1:e6:60:5c:02:d8: 7b:03:32:b3:52:6b:d5:d3:05:2c:60:ac:f0:5b:de: 60:c1:7a:47:90:cb:19:6e:9b:f7:da:28:f4:45:9b: e0:ae:81:fd:8d:87:09:a8:c7:38:13:7c:31:ac:11: 99:a1:4e:d6:2e:5e:5f:ce:c0:c7:2f:9c:9b:d2:62: 66:d6:4c:65:0d:67:04:20:84:ab:d4:b1:47:73:ee: f1:df:a4:7f:4e:ca:71:01:92:6c:d6:79:89:fd:45: 39:6c:0a:ac:f4:10:66:96:e0:c5:2c:fd:3a:28:17: 87:e4:61:4b:40:90:d5:ef:6b:0f:f4:15:16:97:84: d1:0b:86:0d:7a:50:cc:79:72:4b:75:02:3b:93:eb: c1:67:b6:3e:d0:77:e8:97:95:08:2c:9d:17:c4:9d: 29:94:53:56:2b:1e:e6:4e:9d:3c:e9:d5:79:35:91: d6:f8:95:c7:24:98:a0:ce:e0:d0:0c:e7:f7:53:de: df:7c:1b:74:09:10:14:be:73:50:19:c0:be:9f:66: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:9C:BE:7D:3C:D4:B3:A6:15:DE:61:4D:A2:9D:1B:A3:F8:4F:1E X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/12FAF07EA47B11E9867CBF58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.106.8.0/23 128.106.84.0/22 128.106.156.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:c6:86:e5:b8:60:a3:c6:fe:1b:fd:ce:0b:60:60:5d:cf:c2: 6a:ad:43:c1:78:91:35:8f:f2:81:fa:c2:c1:5f:a0:08:86:12: 97:55:70:d1:93:a8:85:b6:dc:07:1b:5d:5d:2d:92:c6:72:aa: f4:8a:1c:57:b1:df:dd:f0:1c:24:1b:79:0d:f2:fc:b2:94:e0: 62:0d:1a:b8:20:f1:b9:2c:ad:be:fd:ec:42:27:ba:68:62:f5: 1c:9a:84:74:a2:e5:3e:ec:c6:ee:ab:2c:21:c4:c9:d9:b0:7e: e2:f7:57:10:66:6f:b1:b7:9a:18:44:e8:01:65:38:6f:54:88: c1:66:39:c0:29:b9:35:45:1f:03:8a:bc:ae:17:10:4b:94:3f: 6e:18:0a:cb:8e:3e:3e:5b:8d:1d:55:08:bb:1c:80:42:a9:1c: d6:39:ce:72:30:79:18:38:9e:11:c1:7e:16:d6:05:a3:56:fa: b0:8a:04:81:f9:da:42:4f:8d:c7:72:0b:ce:29:b8:c9:99:22: 62:f1:9e:b9:0b:67:bf:99:a7:ed:e6:9d:4a:74:1b:57:ca:5a: 35:49:69:13:ad:62:40:c6:25:73:55:63:3c:41:72:b5:c0:f8: 93:e6:2e:6d:83:20:c0:11:1f:56:a9:b4:e2:ba:27:de:d4:8d: 45:dc:6d:b6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjQwOTEzMDgwODQ2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUzZjMwZS1lYjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/nAK3DqJskNcPfOoo26nNouxy6lbNYFJ9z2t3OLzvtIHgCAnSvod8VDlkam m3poDyf5JpPh5mBcAth7AzKzUmvV0wUsYKzwW95gwXpHkMsZbpv32ij0RZvgroH9 jYcJqMc4E3wxrBGZoU7WLl5fzsDHL5yb0mJm1kxlDWcEIISr1LFHc+7x36R/Tspx AZJs1nmJ/UU5bAqs9BBmluDFLP06KBeH5GFLQJDV72sP9BUWl4TRC4YNelDMeXJL dQI7k+vBZ7Y+0Hfol5UILJ0XxJ0plFNWKx7mTp086dV5NZHW+JXHJJigzuDQDOf3 U97ffBt0CRAUvnNQGcC+n2bp6QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKWEnL59 PNSzphXeYU2inRuj+E8eMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMTJGQUYwN0VB NDdCMTFFOTg2N0NCRjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGAaggDBAKAalQDBAGAapwwDQYJKoZIhvcNAQELBQADggEB AFvGhuW4YKPG/hv9zgtgYF3PwmqtQ8F4kTWP8oH6wsFfoAiGEpdVcNGTqIW23Acb XV0tksZyqvSKHFex393wHCQbeQ3y/LKU4GINGrgg8bksrb797EInumhi9RyahHSi 5T7sxu6rLCHEydmwfuL3VxBmb7G3mhhE6AFlOG9UiMFmOcApuTVFHwOKvK4XEEuU P24YCsuOPj5bjR1VCLscgEKpHNY5znIweRg4nhHBfhbWBaNW+rCKBIH52kJPjcdy C84puMmZImLxnrkLZ7+Zp+3mnUp0G1fKWjVJaROtYkDGJXNVYzxBcrXA+JPmLm2D IMARH1aptOK6J97UjUXcbbY= -----END CERTIFICATE-----Generated at Fri Nov 22 16:49:20 2024 by rpki-client on console-ams.rpki-client.org