$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa File: 2117AE6E37AF11EF844EC638C4F9AE02.roa (raw, json) Hash identifier: rxylyIaFWofGp8fi7f1ysoxvtfFGdtzKVIc05XTsdvY= Subject key identifier: 33:FF:14:C2:CC:84:E3:35:17:4F:D1:F1:14:8E:1F:C1:11:79:78:9E Certificate issuer: /CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Certificate serial: 03 Authority key identifier: F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa Signing time: Mon 01 Jul 2024 13:37:59 +0000 ROA not before: Mon 01 Jul 2024 13:37:59 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 153047 IP address blocks: 160.25.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95A/serialNumber=F24C443210F741CBE59D014EBA6EE972B5CDDAE7 Validity Not Before: Jul 1 13:37:59 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6682b136-1832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:aa:74:7b:e2:61:9b:04:6a:f5:cc:5a:ca: f7:a5:ec:eb:7c:38:89:83:13:15:63:b6:ab:aa:4e: 94:e6:5c:c6:14:ed:38:bf:a3:23:83:43:98:77:da: 72:32:00:0c:bb:96:5f:7c:4c:9e:bf:e1:35:f5:23: 0e:37:03:10:3e:32:ea:74:6a:8b:c1:15:0b:8a:ad: 81:48:2e:70:33:ac:1c:0c:84:8f:a7:85:08:f3:b3: d1:11:ae:3a:47:33:e7:2d:bf:a0:71:fd:8c:5b:97: 80:7f:fd:1f:20:2b:ca:2f:b0:0f:a5:57:a7:e8:40: 2b:c0:03:8b:69:50:21:31:43:dc:92:8e:15:5c:a8: 1f:90:7b:dc:cd:42:38:eb:b6:ff:d6:ad:a5:7a:21: 93:2a:62:b7:5c:ee:39:3d:54:ca:3a:18:02:fa:01: 0c:e5:27:43:7e:3d:f8:c5:45:2a:4e:1a:f6:8e:5a: d5:2e:90:82:1a:f4:d4:84:82:1c:1c:55:f4:e0:1f: 9d:ef:e0:b2:06:23:41:f9:b6:46:7f:ce:52:dd:54: 4a:6b:4d:7d:73:fe:83:1f:07:ed:33:60:e5:8e:4a: 1e:5b:b3:d7:30:50:d3:8b:60:c1:9a:9b:ae:11:67: 53:1e:cd:7f:19:5f:59:6b:4f:11:73:a4:61:96:2a: fb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:14:C2:CC:84:E3:35:17:4F:D1:F1:14:8E:1F:C1:11:79:78:9E X509v3 Authority Key Identifier: keyid:F2:4C:44:32:10:F7:41:CB:E5:9D:01:4E:BA:6E:E9:72:B5:CD:DA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/8kxEMhD3QcvlnQFOum7pcrXN2uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8kxEMhD3QcvlnQFOum7pcrXN2uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/512C705E37AE11EF8A458E37C4F9AE02/2117AE6E37AF11EF844EC638C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.43.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:6d:70:51:00:ad:1c:15:41:99:41:7b:a5:0f:bf:45:cf:da: e2:78:1b:43:6b:38:71:82:ee:1f:8a:47:fd:f4:0b:0e:a2:ba: 4c:0b:77:b0:e9:04:4b:51:7b:71:7f:93:c3:a4:bd:c9:de:da: 04:2b:17:9e:bb:d4:9e:85:77:4f:d9:06:0c:55:c9:92:6b:15: 9d:05:9d:15:9d:9a:75:b3:f0:a1:4e:2f:db:57:d7:f6:a2:9e: 1e:49:02:40:e4:d2:cb:55:f8:c1:aa:6c:1f:2b:65:e7:e7:df: d5:ca:67:a0:9f:db:bd:3d:c1:a5:19:32:e2:0d:32:f2:8a:c7: ca:3b:bb:8f:ca:2c:19:b8:da:79:57:47:92:8b:8a:a4:0e:51: 61:be:03:f6:85:89:8c:38:c5:a9:47:81:b7:0a:dc:12:da:d3: f8:0f:45:e5:01:a8:7a:f7:15:f4:88:c5:41:79:22:a4:da:4c: c1:5d:99:8e:88:87:40:c1:c1:13:1c:25:61:23:64:28:92:4c: 1c:ac:db:35:e0:2b:5c:20:95:8a:a5:12:95:49:79:3d:58:23: 90:06:fa:0f:b7:d8:b5:ae:24:26:fb:75:4c:1e:c0:2c:e0:3e: 9d:2f:49:bb:b5:7b:67:d0:04:3b:94:e0:8b:52:ab:c8:35:95: e1:13:54:26 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Qjk1QTExMC8GA1UEBRMoRjI0QzQ0MzIxMEY3NDFDQkU1OUQwMTRFQkE2RUU5NzJC NUNEREFFNzAeFw0yNDA3MDExMzM3NTlaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ODJiMTM2LTE4MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu0ap0e+JhmwRq9cxayvel7Ot8OImDExVjtquqTpTmXMYU7Ti/oyODQ5h32nIy AAy7ll98TJ6/4TX1Iw43AxA+Mup0aovBFQuKrYFILnAzrBwMhI+nhQjzs9ERrjpH M+ctv6Bx/Yxbl4B//R8gK8ovsA+lV6foQCvAA4tpUCExQ9ySjhVcqB+Qe9zNQjjr tv/WraV6IZMqYrdc7jk9VMo6GAL6AQzlJ0N+PfjFRSpOGvaOWtUukIIa9NSEghwc VfTgH53v4LIGI0H5tkZ/zlLdVEprTX1z/oMfB+0zYOWOSh5bs9cwUNOLYMGam64R Z1MezX8ZX1lrTxFzpGGWKvsbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUM/8UwsyE 4zUXT9HxFI4fwRF5eJ4wHwYDVR0jBBgwFoAU8kxEMhD3QcvlnQFOum7pcrXN2ucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZCOTVBLzUxMkM3MDVFMzdB RTExRUY4QTQ1OEUzN0M0RjlBRTAyLzhreEVNaEQzUWN2bG5RRk91bTdwY3JYTjJ1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGt4RU1oRDNRY3ZsblFGT3VtN3BjclhOMnVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qjk1QS81MTJDNzA1RTM3QUUxMUVGOEE0NThFMzdDNEY5QUUwMi8yMTE3QUU2RTM3 QUYxMUVGODQ0RUM2MzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAZKzANBgkqhkiG9w0BAQsFAAOCAQEAfm1wUQCtHBVBmUF7 pQ+/Rc/a4ngbQ2s4cYLuH4pH/fQLDqK6TAt3sOkES1F7cX+Tw6S9yd7aBCsXnrvU noV3T9kGDFXJkmsVnQWdFZ2adbPwoU4v21fX9qKeHkkCQOTSy1X4wapsHytl5+ff 1cpnoJ/bvT3BpRky4g0y8orHyju7j8osGbjaeVdHkouKpA5RYb4D9oWJjDjFqUeB twrcEtrT+A9F5QGoevcV9IjFQXkipNpMwV2ZjoiHQMHBExwlYSNkKJJMHKzbNeAr XCCViqUSlUl5PVgjkAb6D7fYta4kJvt1TB7ALOA+nS9Ju7V7Z9AEO5Tgi1KryDWV 4RNUJg== -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:54 2024 by rpki-client on console-ams.rpki-client.org