$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa File: 2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa (raw, json) Hash identifier: h9tFx8Htu/ZVPPbnRxQ9oK5FTvx0iapWbfo7s/yq9F4= Subject key identifier: 36:6E:9C:4E:A2:AC:76:B1:3F:15:D0:A5:19:4F:CE:4B:44:1C:1F:B4 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: 02 Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa Signing time: Fri 27 Sep 2024 04:44:31 +0000 ROA not before: Fri 27 Sep 2024 04:44:31 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150142 IP address blocks: 160.187.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Sep 27 04:44:31 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f6382f-b6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:9b:1f:98:7c:8f:9f:0e:cb:05:42:0d:1e: 2b:97:d4:87:32:7b:0c:56:ad:7d:21:7a:06:6b:65: a7:2d:e1:79:6a:fc:26:2e:dc:c9:fc:e8:1a:37:62: 31:b0:ab:dd:11:93:b3:26:33:f8:9d:7d:4a:eb:25: c9:ac:3a:bf:47:87:4a:1e:82:9c:25:0b:92:21:30: 05:f8:02:41:e4:02:a2:05:99:ce:47:93:dc:89:53: 89:c2:f3:30:1b:db:4c:8e:b1:9b:d6:78:00:b1:22: a1:1a:33:69:ce:58:e2:f0:8d:aa:e4:0f:e8:81:22: 6b:36:df:56:83:a2:d5:79:87:56:0f:72:b4:4e:6c: e3:8d:38:00:d3:b7:b9:9a:2d:31:ec:c6:92:a4:1a: 71:8d:70:1d:8f:41:4f:28:c5:4a:fb:d4:50:b1:11: 43:10:ec:af:16:42:9c:56:16:46:e1:93:34:5a:6b: ee:82:aa:61:65:9e:56:57:6b:ad:84:26:7e:99:bb: 7d:4c:5c:13:15:39:3d:cc:a8:b6:74:40:35:29:7b: d9:43:a4:c0:67:c4:1b:98:8b:8e:28:96:16:c3:6d: 44:9c:bb:75:f0:1a:1f:ca:57:aa:63:bf:3e:ec:ae: d4:71:6b:03:1a:73:ea:f8:b9:c5:06:a3:e3:3b:eb: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6E:9C:4E:A2:AC:76:B1:3F:15:D0:A5:19:4F:CE:4B:44:1C:1F:B4 X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/2F7418BE7C8B11EFAD8D8E0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.130.0/24 Signature Algorithm: sha256WithRSAEncryption 90:40:23:7f:01:a7:8b:5e:a1:71:d0:c4:fd:bc:f7:6b:e1:48: 50:04:f0:6e:c6:6c:a5:0b:39:9a:c6:15:88:5d:c8:71:00:09: 3d:c3:90:f9:90:f3:6c:ae:89:1c:89:12:3f:29:68:4a:0e:e8: 8b:80:b2:01:4e:d7:c5:e6:31:7f:51:66:61:a1:1b:6e:d4:0d: 1c:35:6d:8f:d1:98:90:64:b8:08:ae:3a:01:e5:2f:22:37:68: fb:d6:59:43:21:cc:3e:a2:1e:8f:dd:8a:e1:f0:88:9f:37:89: 8c:9e:29:64:41:70:fe:e0:7f:b7:54:35:38:c7:44:57:b2:24: 63:19:b1:58:18:c5:aa:38:19:f3:87:e9:31:58:50:c5:1d:da: 27:8e:f9:01:c3:5b:1b:4f:73:1b:55:a8:7e:61:e8:45:00:e8: 65:80:9f:87:07:93:5e:c5:b4:27:3a:32:9d:2b:29:52:c2:c2: d0:93:68:d9:2c:8e:2c:8b:fa:40:4a:7b:f7:d8:55:ad:5c:ac: 33:1f:ad:96:84:93:3d:f0:ea:7a:76:61:35:94:0d:08:2c:d8: 28:3d:7e:96:db:e3:33:a9:15:09:cf:85:cf:ae:e6:34:d4:3b: af:73:82:98:3d:9e:6e:8b:a3:6d:fa:0d:38:be:58:4b:aa:d5: ba:c2:90:67 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEEwNTExMC8GA1UEBRMoMTRERDg2ODQyOTRGMUIzM0EzMTNBRkI4RjBFQkExQzhB MDAzNzgwOTAeFw0yNDA5MjcwNDQ0MzFaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjYzODJmLWI2YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC645sfmHyPnw7LBUINHiuX1IcyewxWrX0hegZrZact4Xlq/CYu3Mn86Bo3YjGw q90Rk7MmM/idfUrrJcmsOr9Hh0oegpwlC5IhMAX4AkHkAqIFmc5Hk9yJU4nC8zAb 20yOsZvWeACxIqEaM2nOWOLwjarkD+iBIms231aDotV5h1YPcrRObOONOADTt7ma LTHsxpKkGnGNcB2PQU8oxUr71FCxEUMQ7K8WQpxWFkbhkzRaa+6CqmFlnlZXa62E Jn6Zu31MXBMVOT3MqLZ0QDUpe9lDpMBnxBuYi44olhbDbUScu3XwGh/KV6pjvz7s rtRxawMac+r4ucUGo+M76w6fAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNm6cTqKs drE/FdClGU/OS0QcH7QwHwYDVR0jBBgwFoAUFN2GhClPGzOjE6+48OuhyKADeAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQTA1L0QxN0M4ODY4N0M4 QTExRUY4RkFCNjkwOUM0RjlBRTAyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRk4yR2hDbFBHek9qRTYtNDhPdWh5S0FEZUFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi8yRjc0MThCRTdD OEIxMUVGQUQ4RDhFMEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7gjANBgkqhkiG9w0BAQsFAAOCAQEAkEAjfwGni16hcdDE /bz3a+FIUATwbsZspQs5msYViF3IcQAJPcOQ+ZDzbK6JHIkSPyloSg7oi4CyAU7X xeYxf1FmYaEbbtQNHDVtj9GYkGS4CK46AeUvIjdo+9ZZQyHMPqIej92K4fCInzeJ jJ4pZEFw/uB/t1Q1OMdEV7IkYxmxWBjFqjgZ84fpMVhQxR3aJ475AcNbG09zG1Wo fmHoRQDoZYCfhweTXsW0JzoynSspUsLC0JNo2SyOLIv6QEp799hVrVysMx+tloST PfDqenZhNZQNCCzYKD1+ltvjM6kVCc+Fz67mNNQ7r3OCmD2eboujbfoNOL5YS6rV usKQZw== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:20 2024 by rpki-client on console-fra.rpki-client.org