$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa File: 38A5FCB48FC911E8902DFE16C4F9AE02.roa (raw, json) Hash identifier: 2fbDRTJBk5Ytg+eSm5CyRuKLRNTxFiA579mgfklTst4= Subject key identifier: 87:4B:6E:CF:78:5E:88:68:86:A7:BD:8B:1E:8A:D0:6C:75:7E:A5:C4 Certificate issuer: /CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Certificate serial: 159D Authority key identifier: 36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa Signing time: Thu 30 Nov 2023 17:24:50 +0000 ROA not before: Thu 30 Nov 2023 17:24:50 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 137226 IP address blocks: 204.145.4.0/24 maxlen: 24 208.71.224.0/24 maxlen: 24 208.71.225.0/24 maxlen: 24 208.71.226.0/24 maxlen: 24 208.71.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5533 (0x159d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B18B/serialNumber=368F3C938B601412521A3A819009978FCFE91E7E Validity Not Before: Nov 30 17:24:50 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6568c562-3915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:94:d8:e2:f0:27:51:f4:c6:b2:d0:8b:46: 0f:04:81:d3:d8:db:38:aa:7c:1b:bb:38:05:59:17: cd:37:4e:04:16:e3:97:51:c7:1d:30:55:e5:04:db: b9:2a:6d:4e:4e:19:7f:5f:08:eb:6f:b4:9d:ff:a6: 15:10:79:5d:63:c5:cf:bc:d8:dd:8d:1a:2e:04:60: 34:55:16:ca:d9:a2:b1:5d:31:44:80:38:de:2d:f7: 57:6f:87:63:97:6d:15:61:bc:da:5b:8e:24:f2:b4: 39:e2:36:bd:e8:7c:80:06:24:9a:f6:9d:6d:0b:d3: b9:6c:93:35:ef:30:ee:2e:4c:b6:45:0b:f1:7f:a3: 8b:fd:1d:fc:b9:69:f9:be:3d:9f:c9:17:c9:5e:d3: 87:92:3c:ec:9a:7c:c5:eb:5e:ec:57:43:54:00:f7: 65:0c:86:1d:2e:8c:dd:08:0d:38:ed:3c:6a:d3:69: 06:03:21:20:8a:22:40:f9:b8:34:67:75:24:35:84: c7:f0:17:22:c8:45:cd:0c:fe:95:b6:d8:66:6e:f1: b5:d1:00:9b:e4:f0:07:34:2f:cd:86:3a:66:8a:c2: b9:72:f3:6b:be:69:0f:d4:82:a6:bc:f1:8b:d3:ef: 33:20:55:2f:8e:35:e4:61:ec:b5:6b:39:25:32:01: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4B:6E:CF:78:5E:88:68:86:A7:BD:8B:1E:8A:D0:6C:75:7E:A5:C4 X509v3 Authority Key Identifier: keyid:36:8F:3C:93:8B:60:14:12:52:1A:3A:81:90:09:97:8F:CF:E9:1E:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/No88k4tgFBJSGjqBkAmXj8_pHn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/No88k4tgFBJSGjqBkAmXj8_pHn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/F98B5F0C21F911E896C1DD23C4F9AE02/38A5FCB48FC911E8902DFE16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 204.145.4.0/24 208.71.224.0/22 Signature Algorithm: sha256WithRSAEncryption 18:34:fd:41:8d:01:00:f7:0a:d0:c4:d6:84:b5:98:e4:9d:c0: 37:a9:61:19:fa:65:14:40:b1:10:76:1b:8e:37:44:96:38:e5: ac:c0:f0:4f:e6:37:a5:65:23:70:c1:08:b4:f7:e4:cc:f5:ec: fb:de:fa:ea:2e:88:a1:65:52:62:35:6e:f9:38:f0:19:2e:e1: a8:25:37:51:26:be:bc:b6:39:b5:2c:e8:25:d2:35:30:fd:dd: 9b:02:dd:b0:eb:94:9a:40:ab:0b:db:44:92:51:a3:21:1a:44: a3:51:eb:1d:a8:59:1d:d8:1b:1c:a6:a6:8f:00:14:5b:94:d2: 46:4e:07:ae:0a:9e:ef:8a:9e:5d:e6:95:9e:96:01:3a:a0:01: 0d:fd:59:32:10:d5:29:15:98:a0:12:89:40:1f:32:82:7e:be: ac:58:ee:5d:c6:27:da:63:8b:3b:39:a4:3b:45:cd:44:7a:f4: d9:a9:a7:9b:e6:df:d9:ce:0d:93:92:23:ee:35:e7:c9:5b:16: d9:0c:c6:07:9f:a4:e0:b7:db:26:87:1b:30:a0:37:a5:d5:b2: 83:ed:82:36:f9:06:17:90:70:e4:71:97:fb:77:fd:8b:49:2b: de:77:46:ce:dc:8f:67:84:14:ea:a6:49:02:f4:c6:77:8f:e9: 83:ca:51:4b -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxOEIxMTAvBgNVBAUTKDM2OEYzQzkzOEI2MDE0MTI1MjFBM0E4MTkwMDk5NzhG Q0ZFOTFFN0UwHhcNMjMxMTMwMTcyNDUwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4YzU2Mi0zOTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsOU2OLwJ1H0xrLQi0YPBIHT2Ns4qnwbuzgFWRfNN04EFuOXUccdMFXlBNu5 Km1OThl/Xwjrb7Sd/6YVEHldY8XPvNjdjRouBGA0VRbK2aKxXTFEgDjeLfdXb4dj l20VYbzaW44k8rQ54ja96HyABiSa9p1tC9O5bJM17zDuLky2RQvxf6OL/R38uWn5 vj2fyRfJXtOHkjzsmnzF617sV0NUAPdlDIYdLozdCA047Txq02kGAyEgiiJA+bg0 Z3UkNYTH8BciyEXNDP6VtthmbvG10QCb5PAHNC/NhjpmisK5cvNrvmkP1IKmvPGL 0+8zIFUvjjXkYey1azklMgGRkQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIdLbs94 Xohohqe9ix6K0Gx1fqXEMB8GA1UdIwQYMBaAFDaPPJOLYBQSUho6gZAJl4/P6R5+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjE4Qi9GOThCNUYwQzIx RjkxMUU4OTZDMUREMjNDNEY5QUUwMi9Obzg4azR0Z0ZCSlNHanFCa0FtWGo4X3BI bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05vODhrNHRnRkJKU0dqcUJrQW1YajhfcEhuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkIxOEIvRjk4QjVGMEMyMUY5MTFFODk2QzFERDIzQzRGOUFFMDIvMzhBNUZDQjQ4 RkM5MTFFODkwMkRGRTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADMkQQDBALQR+AwDQYJKoZIhvcNAQELBQADggEBABg0/UGN AQD3CtDE1oS1mOSdwDepYRn6ZRRAsRB2G443RJY45azA8E/mN6VlI3DBCLT35Mz1 7Pve+uouiKFlUmI1bvk48Bku4aglN1Emvry2ObUs6CXSNTD93ZsC3bDrlJpAqwvb RJJRoyEaRKNR6x2oWR3YGxympo8AFFuU0kZOB64Knu+Knl3mlZ6WATqgAQ39WTIQ 1SkVmKASiUAfMoJ+vqxY7l3GJ9pjizs5pDtFzUR69Nmpp5vm39nODZOSI+4158lb FtkMxgefpOC32yaHGzCgN6XVsoPtgjb5BheQcORxl/t3/YtJK953Rs7cj2eEFOqm SQL0xneP6YPKUUs= -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org