$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B8F80AE47A7111EFB66E5A5EC4F9AE02.roa File: B8F80AE47A7111EFB66E5A5EC4F9AE02.roa (raw, json) Hash identifier: VDpN4DoUtPnfTef8R2ODQ/G7pXeEBHoqxiWlvGucgwk= Subject key identifier: 5D:2A:4F:AC:24:00:6F:14:89:88:0B:D3:FD:01:A7:FE:1D:6D:F7:02 Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Certificate serial: 36FA Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B8F80AE47A7111EFB66E5A5EC4F9AE02.roa Signing time: Tue 24 Sep 2024 12:39:53 +0000 ROA not before: Tue 24 Sep 2024 12:39:53 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 149419 IP address blocks: 111.88.168.0/24 maxlen: 24 111.88.169.0/24 maxlen: 24 111.88.170.0/24 maxlen: 24 111.88.171.0/24 maxlen: 24 111.88.239.0/24 maxlen: 24 115.186.62.0/24 maxlen: 24 115.186.117.0/24 maxlen: 24 115.186.118.0/24 maxlen: 24 115.186.119.0/24 maxlen: 24 115.186.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14074 (0x36fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206 Validity Not Before: Sep 24 12:39:53 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66f2b319-c244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:b4:fd:d4:50:7a:09:1a:8e:92:9f:53:16: 6b:f4:03:9f:4d:2a:27:f9:b8:c2:92:79:f9:a2:d0: 71:3c:43:44:94:ec:f1:56:3a:12:da:fe:4b:85:1b: a2:b3:bb:3b:4b:d4:eb:96:a0:f0:63:6f:7b:c8:54: df:bf:17:2d:32:6c:4d:8d:5c:51:23:8c:9c:e9:5a: af:db:91:8e:9b:3d:48:b3:97:4e:51:3c:db:b8:1c: 4b:78:3a:71:0e:5a:e5:ae:52:5a:3b:34:ce:d6:db: f0:9c:74:95:fb:e7:2b:b6:3c:12:0d:30:32:20:a8: 4a:45:c7:0d:d2:49:85:32:48:53:8f:9b:ac:13:1e: 4c:61:ab:28:41:63:46:3c:70:2d:61:99:14:cf:b7: 2d:c7:43:f6:7b:ef:71:7b:fb:c1:c5:c3:d9:f5:c8: fd:15:db:d0:1c:21:d1:1c:1a:93:4d:14:05:0f:62: bf:b2:ac:7f:89:92:f2:ae:7d:e9:45:a9:3e:6a:85: 0c:24:61:75:2a:da:9e:68:ac:03:5b:b2:2a:4b:c1: bc:0f:0f:f9:72:38:6b:ff:70:82:ea:88:b3:ea:e2: f6:3b:8e:f1:20:5e:bd:26:4d:fb:e4:6d:1d:10:e7: c3:4b:f8:e4:f2:32:f7:20:94:5f:d2:c2:41:48:e3: b3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2A:4F:AC:24:00:6F:14:89:88:0B:D3:FD:01:A7:FE:1D:6D:F7:02 X509v3 Authority Key Identifier: keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B8F80AE47A7111EFB66E5A5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.88.168.0/22 111.88.239.0/24 115.186.62.0/24 115.186.117.0-115.186.120.255 Signature Algorithm: sha256WithRSAEncryption 9a:55:70:c1:2b:04:65:d2:38:43:8b:3f:17:6e:94:9c:e5:a9: 32:9a:6c:c4:4e:85:8e:a3:a2:64:f7:7c:7a:06:8d:4e:4d:5c: 31:4a:94:4a:3e:47:7e:5f:9c:90:e7:92:2b:69:4e:ea:dc:8b: 52:0e:70:5e:94:65:fe:fb:46:23:3e:2f:02:cd:c6:e5:90:f3: a4:39:c4:39:7f:66:9d:21:6f:e0:7e:1e:9c:e1:ef:39:ef:f9: 95:bc:28:e2:98:8c:d6:05:3a:6e:af:c5:d5:7d:05:e1:2d:01: a5:d0:33:c5:ca:78:00:c8:3b:57:ce:8c:f5:4d:bd:0b:53:0a: 5c:eb:b7:81:07:d9:e7:00:e8:bc:bc:f3:f6:52:b2:88:b4:b1: d3:29:88:63:b7:ad:10:ea:58:31:27:a9:af:62:db:d0:90:97: 73:41:2a:20:51:0f:5c:0d:c6:fa:39:94:e0:f5:b1:66:eb:e7: 11:36:cc:33:37:51:94:01:84:02:b3:78:17:5a:39:9c:60:01: bc:02:68:18:8b:af:79:03:47:4d:e4:70:cf:9e:96:21:40:44: ef:3f:55:61:42:cd:36:61:62:3e:c9:7c:aa:60:ea:12:62:86: fc:ad:31:f2:38:2d:ec:d0:65:4b:06:b2:ab:c6:77:9e:67:ab: ef:dd:f9:70 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICNvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE RDIxRkUyMDYwHhcNMjQwOTI0MTIzOTUzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmYyYjMxOS1jMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMG0/dRQegkajpKfUxZr9AOfTSon+bjCknn5otBxPENElOzxVjoS2v5LhRui s7s7S9TrlqDwY297yFTfvxctMmxNjVxRI4yc6Vqv25GOmz1Is5dOUTzbuBxLeDpx DlrlrlJaOzTO1tvwnHSV++crtjwSDTAyIKhKRccN0kmFMkhTj5usEx5MYasoQWNG PHAtYZkUz7ctx0P2e+9xe/vBxcPZ9cj9FdvQHCHRHBqTTRQFD2K/sqx/iZLyrn3p Rak+aoUMJGF1KtqeaKwDW7IqS8G8Dw/5cjhr/3CC6oiz6uL2O47xIF69Jk375G0d EOfDS/jk8jL3IJRf0sJBSOOzNwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFF0qT6wk AG8UiYgL0/0Bp/4dbfcCMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvQjhGODBBRTQ3 QTcxMTFFRkI2NkU1QTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAJvWKgDBABvWO8DBABzuj4wDAMEAHO6dQMEAHO6eDANBgkq hkiG9w0BAQsFAAOCAQEAmlVwwSsEZdI4Q4s/F26UnOWpMppsxE6FjqOiZPd8egaN Tk1cMUqUSj5Hfl+ckOeSK2lO6tyLUg5wXpRl/vtGIz4vAs3G5ZDzpDnEOX9mnSFv 4H4enOHvOe/5lbwo4piM1gU6bq/F1X0F4S0BpdAzxcp4AMg7V86M9U29C1MKXOu3 gQfZ5wDovLzz9lKyiLSx0ymIY7etEOpYMSepr2Lb0JCXc0EqIFEPXA3G+jmU4PWx ZuvnETbMMzdRlAGEArN4F1o5nGABvAJoGIuveQNHTeRwz56WIUBE7z9VYULNNmFi Psl8qmDqEmKG/K0x8jgt7NBlSwayq8Z3nmer7935cA== -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:38 2024 by rpki-client on console-fra.rpki-client.org