$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa File: F0E06498748B11EE92D55F6AC4F9AE02.roa (raw, json) Hash identifier: G4RtexKo9ny4TbYwCN/1w5r6cBVLkFOvhnsprKO6E3E= Subject key identifier: 12:FD:0E:0A:A6:7F:C0:29:CB:67:B4:1E:0B:CF:17:4D:D6:F6:96:5F Certificate issuer: /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Certificate serial: 06 Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa Signing time: Fri 27 Oct 2023 05:44:49 +0000 ROA not before: Fri 27 Oct 2023 05:44:49 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 38220 IP address blocks: 117.18.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jul 2024 06:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D Validity Not Before: Oct 27 05:44:49 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=653b4e50-283b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:5a:83:b4:40:1d:b2:29:bb:b7:07:2c:b7: d7:66:50:96:10:48:d4:2d:e9:80:45:d5:a1:2c:f9: bf:c6:84:58:6b:02:86:6c:1d:91:e2:b4:4d:8d:b9: e5:7f:e6:cc:3f:00:b4:57:5d:d7:1c:f3:5b:ba:b4: 3d:e1:5d:19:ee:28:74:d6:61:07:3e:51:0f:58:2a: 6f:1b:d3:a5:46:e2:04:50:f2:ab:68:f9:b3:57:6a: 81:a1:be:87:a0:e7:d5:e4:9f:19:cd:7f:a4:9d:ec: 93:d1:b3:d3:94:38:c9:56:6d:5b:40:9e:cd:07:59: 7d:22:76:22:31:e7:e4:ca:1e:93:4e:49:32:8b:61: e0:fe:84:5e:23:47:91:e6:72:bb:87:69:15:a5:18: b3:b2:03:65:8c:42:1f:a9:76:83:22:bb:ca:3b:48: 93:30:06:a9:50:ae:5b:3e:ea:a1:1c:63:26:98:03: ab:ec:05:f0:ff:15:68:a5:7f:e9:e0:70:0a:16:86: 22:d8:0f:23:60:e7:41:94:a5:d3:9d:09:a6:45:41: dc:df:c2:c1:95:97:08:76:24:f3:3f:72:87:dc:ba: 7a:f0:a2:73:ed:52:ef:d8:ac:cb:62:42:74:e8:e2: d6:1c:4f:5a:9a:84:f7:08:87:82:ae:99:5a:f0:b9: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FD:0E:0A:A6:7F:C0:29:CB:67:B4:1E:0B:CF:17:4D:D6:F6:96:5F X509v3 Authority Key Identifier: keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/F0E06498748B11EE92D55F6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.18.117.0/24 Signature Algorithm: sha256WithRSAEncryption 34:7d:fe:59:04:cb:a7:56:8a:65:d8:ff:d0:0e:99:4d:bf:99: 8a:1a:85:1f:8b:85:44:36:cd:d3:c8:70:3c:e4:b4:00:7e:a7: 93:c4:25:b5:ff:b5:df:1a:5e:be:3f:9e:21:e5:2e:34:f0:a3: 91:b0:78:5b:47:15:80:14:91:93:13:6c:9c:a4:97:cd:4e:06: f2:39:fe:fe:6b:05:ba:5e:f9:9c:87:b3:64:35:ff:1f:84:f6: 64:01:36:7c:0e:3e:6c:32:4e:3b:27:05:d2:7f:04:4d:ff:8e: 8d:a6:6b:b8:fe:01:0f:19:b0:a0:f8:94:61:74:7d:f0:5f:cd: 96:af:58:5e:6e:4f:31:a8:ff:4f:ca:01:4e:6b:97:54:64:b4: 11:d9:11:b8:df:3f:40:fc:2f:d4:bb:ed:db:82:2a:79:b8:64: 0f:08:9a:fb:24:54:99:76:77:db:bb:4b:7c:ae:d8:13:3e:ac: f2:5d:a4:fc:15:00:23:19:b1:84:e7:03:86:a7:fd:8a:b4:1f: 6e:73:0e:50:6a:42:97:8a:5e:4d:86:e6:19:bf:46:eb:65:d8: 30:08:39:58:72:a2:ab:aa:4c:dc:ff:fa:49:6c:cb:f5:05:84: df:41:ed:37:d0:8b:09:85:44:b9:65:af:44:56:a8:f2:88:e5: 41:b0:69:b4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MERFQjExMC8GA1UEBRMoMTI5NkU3RUJCRTMwMTEzRkUxRDNGMjk3MzAzM0E0Q0Iz MTE0NDgxRDAeFw0yMzEwMjcwNTQ0NDlaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1M2I0ZTUwLTI4M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAEVqDtEAdsim7twcst9dmUJYQSNQt6YBF1aEs+b/GhFhrAoZsHZHitE2NueV/ 5sw/ALRXXdcc81u6tD3hXRnuKHTWYQc+UQ9YKm8b06VG4gRQ8qto+bNXaoGhvoeg 59XknxnNf6Sd7JPRs9OUOMlWbVtAns0HWX0idiIx5+TKHpNOSTKLYeD+hF4jR5Hm cruHaRWlGLOyA2WMQh+pdoMiu8o7SJMwBqlQrls+6qEcYyaYA6vsBfD/FWilf+ng cAoWhiLYDyNg50GUpdOdCaZFQdzfwsGVlwh2JPM/cofcunrwonPtUu/YrMtiQnTo 4tYcT1qahPcIh4KumVrwudbLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEv0OCqZ/ wCnLZ7QeC88XTdb2ll8wHwYDVR0jBBgwFoAUEpbn674wET/h0/KXMDOkyzEUSB0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwREVCL0EzMzFGNDc0NzI2 OTExRUVBM0Y4RTc1N0M0RjlBRTAyL0VwYm42NzR3RVRfaDBfS1hNRE9reXpFVVNC MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXBibjY3NHdFVF9oMF9LWE1ET2t5ekVVU0IwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERFQi9BMzMxRjQ3NDcyNjkxMUVFQTNGOEU3NTdDNEY5QUUwMi9GMEUwNjQ5ODc0 OEIxMUVFOTJENTVGNkFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHUSdTANBgkqhkiG9w0BAQsFAAOCAQEANH3+WQTLp1aKZdj/ 0A6ZTb+ZihqFH4uFRDbN08hwPOS0AH6nk8Qltf+13xpevj+eIeUuNPCjkbB4W0cV gBSRkxNsnKSXzU4G8jn+/msFul75nIezZDX/H4T2ZAE2fA4+bDJOOycF0n8ETf+O jaZruP4BDxmwoPiUYXR98F/Nlq9YXm5PMaj/T8oBTmuXVGS0EdkRuN8/QPwv1Lvt 24IqebhkDwia+yRUmXZ327tLfK7YEz6s8l2k/BUAIxmxhOcDhqf9irQfbnMOUGpC l4peTYbmGb9G62XYMAg5WHKiq6pM3P/6SWzL9QWE30HtN9CLCYVEuWWvRFao8ojl QbBptA== -----END CERTIFICATE-----Generated at Tue Jun 25 07:05:46 2024 by rpki-client on console-fra.rpki-client.org