$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/3C2408105CBF11ECACDFE47BC4F9AE02.roa File: 3C2408105CBF11ECACDFE47BC4F9AE02.roa (raw, json) Hash identifier: 5uGQKQHacdIz6+gIYb0KhNuQPFZrw2PyFjSKiH2Athc= Subject key identifier: 4B:D4:0C:55:A4:F0:E4:1A:81:03:5C:47:17:12:74:F2:67:5C:1F:D7 Certificate issuer: /CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Certificate serial: 050B Authority key identifier: B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/3C2408105CBF11ECACDFE47BC4F9AE02.roa Signing time: Wed 17 Apr 2024 01:33:52 +0000 ROA not before: Wed 17 Apr 2024 01:33:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 136523 IP address blocks: 150.107.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C95/serialNumber=B48E4073B810BCF9C794819C80FDE71D53F2DE2C Validity Not Before: Apr 17 01:33:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661f2700-1749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:63:32:fb:80:04:fc:0c:7c:06:28:96:36:3d: 24:c3:6b:e1:3d:7a:6e:95:ad:91:e7:24:a5:55:ba: cb:13:ca:2c:dc:9e:97:bf:6e:d9:10:9e:56:8a:6f: 3a:6c:5a:1c:60:0f:b8:48:af:04:0b:f0:75:d1:b7: cb:fc:14:84:e9:ff:d4:ed:0e:d0:d4:4f:2e:e1:b6: 48:f0:a2:2e:51:3c:2c:05:13:fb:aa:7a:1e:62:59: 3e:b1:17:52:01:c7:6f:83:68:9a:48:e7:9a:ad:c5: 22:ef:78:61:8f:6a:27:37:02:ce:2f:d7:16:47:8c: 3d:88:a1:82:3a:83:65:06:f6:10:7e:8a:b2:32:a8: b4:14:9c:4b:37:cf:0e:3d:c6:9e:f5:bf:23:e3:fa: fa:3d:8a:0c:e1:d9:9d:94:8a:20:7d:8d:76:c8:8e: 83:43:54:22:5f:77:a8:52:46:b8:d8:10:a0:c6:1e: c2:53:0c:06:24:4b:6d:0e:72:23:58:cc:c1:86:05: af:27:a9:45:30:fc:7b:c7:13:01:70:c9:05:33:66: ab:96:88:07:40:14:6b:58:cf:a7:eb:c8:4a:01:d8: 94:58:5e:3f:1a:70:48:41:c9:1b:20:cf:a0:dd:b4: 7b:7e:9e:36:60:2b:42:e1:15:36:49:88:f3:73:de: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D4:0C:55:A4:F0:E4:1A:81:03:5C:47:17:12:74:F2:67:5C:1F:D7 X509v3 Authority Key Identifier: keyid:B4:8E:40:73:B8:10:BC:F9:C7:94:81:9C:80:FD:E7:1D:53:F2:DE:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tI5Ac7gQvPnHlIGcgP3nHVPy3iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C95/DE2FF1F4BAC711EBAF2E6813C4F9AE02/3C2408105CBF11ECACDFE47BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.107.29.0/24 Signature Algorithm: sha256WithRSAEncryption 56:06:d3:99:e8:5d:dd:31:dc:b7:ab:c7:04:6b:06:d6:f5:51: 8c:60:f2:6c:2c:a0:cf:cd:f1:70:3a:15:89:77:74:9e:d9:88: db:ee:47:c8:09:30:3b:f4:4d:e3:b3:81:fe:8e:02:dc:ef:1a: 77:c4:fa:54:92:bc:34:a8:0b:62:3e:47:88:64:c3:6a:99:a3: 05:ac:60:e1:88:4c:7a:ac:43:1d:16:d8:5c:d5:58:04:e9:0c: b6:38:48:dd:ca:57:3f:76:a0:0d:04:4c:b7:05:71:ca:67:f6: 20:96:22:74:9a:7b:3c:3f:6f:66:4e:7d:8c:a3:e3:64:86:52: 58:55:4e:ed:f4:e7:75:2d:7c:d3:3e:ec:8c:e6:a4:a9:0c:8d: c5:45:bb:13:2a:ef:0f:59:45:e7:c3:35:06:56:54:e0:6c:91: b7:24:52:cd:80:33:8c:ee:01:65:bc:92:d0:d6:29:f1:35:21: 7c:96:fd:c0:ed:bf:05:ee:5d:69:04:0c:4a:88:5c:ab:95:8f: 80:e9:a1:ef:f2:02:cf:f0:90:69:e6:d8:0e:20:98:bd:47:f2: 09:15:6f:cd:cb:ad:e2:5c:6c:08:f0:8d:d2:bd:1f:4c:14:03: 9a:bf:b9:29:a6:c5:16:a3:24:f6:11:c7:43:0f:b4:5e:5a:f3: 5b:0a:00:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOTUxMTAvBgNVBAUTKEI0OEU0MDczQjgxMEJDRjlDNzk0ODE5QzgwRkRFNzFE NTNGMkRFMkMwHhcNMjQwNDE3MDEzMzUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFmMjcwMC0xNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2My+4AE/Ax8BiiWNj0kw2vhPXpula2R5ySlVbrLE8os3J6Xv27ZEJ5Wim86 bFocYA+4SK8EC/B10bfL/BSE6f/U7Q7Q1E8u4bZI8KIuUTwsBRP7qnoeYlk+sRdS Acdvg2iaSOearcUi73hhj2onNwLOL9cWR4w9iKGCOoNlBvYQfoqyMqi0FJxLN88O Pcae9b8j4/r6PYoM4dmdlIogfY12yI6DQ1QiX3eoUka42BCgxh7CUwwGJEttDnIj WMzBhgWvJ6lFMPx7xxMBcMkFM2arlogHQBRrWM+n68hKAdiUWF4/GnBIQckbIM+g 3bR7fp42YCtC4RU2SYjzc94OfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEvUDFWk 8OQagQNcRxcSdPJnXB/XMB8GA1UdIwQYMBaAFLSOQHO4ELz5x5SBnID95x1T8t4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5NS9ERTJGRjFGNEJB QzcxMUVCQUYyRTY4MTNDNEY5QUUwMi90STVBYzdnUXZQbkhsSUdjZ1AzbkhWUHkz aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RJNUFjN2dRdlBuSGxJR2NnUDNuSFZQeTNpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBDOTUvREUyRkYxRjRCQUM3MTFFQkFGMkU2ODEzQzRGOUFFMDIvM0MyNDA4MTA1 Q0JGMTFFQ0FDREZFNDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACWax0wDQYJKoZIhvcNAQELBQADggEBAFYG05noXd0x3Ler xwRrBtb1UYxg8mwsoM/N8XA6FYl3dJ7ZiNvuR8gJMDv0TeOzgf6OAtzvGnfE+lSS vDSoC2I+R4hkw2qZowWsYOGITHqsQx0W2FzVWATpDLY4SN3KVz92oA0ETLcFccpn 9iCWInSaezw/b2ZOfYyj42SGUlhVTu3053UtfNM+7IzmpKkMjcVFuxMq7w9ZRefD NQZWVOBskbckUs2AM4zuAWW8ktDWKfE1IXyW/cDtvwXuXWkEDEqIXKuVj4Dpoe/y As/wkGnm2A4gmL1H8gkVb83LreJcbAjwjdK9H0wUA5q/uSmmxRajJPYRx0MPtF5a 81sKANM= -----END CERTIFICATE-----Generated at Fri May 17 01:47:18 2024 by rpki-client on console-fra.rpki-client.org