$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa File: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (raw, json) Hash identifier: IEUhE1XTf0f2XRHyPAZWnUUC63KDDhK05272/YbWP6U= Subject key identifier: 4F:59:18:6D:6E:87:BA:2A:6D:C9:11:C4:C1:E4:0E:DF:10:74:64:9E Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Certificate serial: 0342 Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa Signing time: Mon 06 Nov 2023 22:30:03 +0000 ROA not before: Mon 06 Nov 2023 22:30:03 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9744 IP address blocks: 52.128.224.0/19 maxlen: 24 148.66.0.0/19 maxlen: 24 216.118.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 22:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 834 (0x342) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51 Validity Not Before: Nov 6 22:30:03 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654968eb-943c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4f:73:eb:29:74:43:44:f9:43:26:4c:e0:04: d6:87:9f:15:be:aa:cb:90:37:ce:de:45:1b:8a:81: 3e:6b:4b:ca:7f:11:da:4f:60:f7:30:1f:6f:82:ef: 08:59:54:da:23:9a:73:21:2a:2b:7f:e6:c1:0f:d8: ea:3d:24:fb:94:4d:3f:f2:9d:f5:4d:6e:cb:66:f6: 65:cc:59:ef:b4:6a:5d:a9:a7:dd:ab:a1:a5:03:3e: 10:16:4a:a7:f0:27:e3:00:11:49:de:83:ca:f7:45: 3d:2a:09:b9:c6:bb:37:51:65:e4:c4:cd:ba:4b:dd: 96:07:82:2a:8b:00:c2:3f:a1:a7:dc:8b:5a:00:99: f2:75:78:07:f6:c5:9b:3c:d8:a6:04:26:f0:af:4e: 7d:3c:8d:38:b9:09:70:14:32:c1:20:67:da:97:28: 3a:87:1a:87:4d:87:72:85:c5:85:58:90:81:07:87: cd:aa:c1:28:76:10:9e:65:f2:e4:aa:25:cc:95:b3: 56:75:24:8a:bf:32:f8:76:fd:e8:5f:55:da:35:f9: 37:b5:65:13:24:d6:b9:27:6f:f5:59:bb:20:06:d4: f3:2f:68:57:42:b8:37:51:65:ad:ff:6e:c1:a8:33: dd:49:4d:c9:d4:a2:6a:7a:df:c2:9b:28:7b:06:ea: f7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:59:18:6D:6E:87:BA:2A:6D:C9:11:C4:C1:E4:0E:DF:10:74:64:9E X509v3 Authority Key Identifier: keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4B1D585250EA11EC8FF55B24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 52.128.224.0/19 148.66.0.0/19 216.118.224.0/19 Signature Algorithm: sha256WithRSAEncryption 57:ee:36:f2:66:93:96:c7:b6:64:d4:af:49:f2:5a:ee:dc:a8: f7:1a:f3:05:20:51:d6:01:e6:9c:29:b8:39:72:a2:d6:1f:51: 70:59:e0:19:6c:29:d0:fe:35:e8:d8:58:94:9e:e9:73:f9:69: e7:2d:70:b4:93:dd:1f:37:26:69:81:98:a0:89:c7:5e:54:94: bc:f1:b4:01:63:da:35:4b:6a:ae:84:e2:de:c3:01:ae:38:ad: 85:c2:f3:06:b3:42:38:5c:85:49:63:0c:2d:f0:c3:7f:e5:53: 32:d4:a3:2f:fd:5d:ea:df:9d:aa:2b:f6:5d:e9:28:a6:86:1a: 66:22:b1:95:04:42:eb:d7:00:8c:54:2a:1f:ca:7e:bf:bb:10: 09:4c:39:6c:70:e5:00:a3:01:43:17:7e:81:d8:76:4f:5c:05: 87:b0:89:93:16:0b:65:b7:46:71:8f:27:c4:a5:72:04:c6:9e: a9:bf:29:1c:68:c1:b3:0e:96:ee:42:0f:6b:da:21:45:90:9d: b8:5d:29:71:58:d1:fb:45:07:a8:62:74:c2:fa:f9:bb:ea:31: c4:32:9e:28:c4:c0:13:0c:ad:ea:21:4c:cc:83:50:d5:5b:93: 28:7c:8f:f3:e9:24:ff:4c:77:1c:80:50:ee:a8:4a:e7:55:48: 32:94:70:37 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICA0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhFQjAxMTAvBgNVBAUTKEUxQjkxMEI5QzczMTBDOUY2NTU5NEZDNkU4OTg5RkM5 NTNCMzZFNTEwHhcNMjMxMTA2MjIzMDAzWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ5NjhlYi05NDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvE9z6yl0Q0T5QyZM4ATWh58VvqrLkDfO3kUbioE+a0vKfxHaT2D3MB9vgu8I WVTaI5pzISorf+bBD9jqPST7lE0/8p31TW7LZvZlzFnvtGpdqafdq6GlAz4QFkqn 8CfjABFJ3oPK90U9Kgm5xrs3UWXkxM26S92WB4IqiwDCP6Gn3ItaAJnydXgH9sWb PNimBCbwr059PI04uQlwFDLBIGfalyg6hxqHTYdyhcWFWJCBB4fNqsEodhCeZfLk qiXMlbNWdSSKvzL4dv3oX1XaNfk3tWUTJNa5J2/1WbsgBtTzL2hXQrg3UWWt/27B qDPdSU3J1KJqet/Cmyh7Bur3/wIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFE9ZGG1u h7oqbckRxMHkDt8QdGSeMB8GA1UdIwQYMBaAFOG5ELnHMQyfZVlPxuiYn8lTs25R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEVCMC9FMzJDODdDQzUw RDUxMUVDQjNGOEQ1MjlDNEY5QUUwMi80YmtRdWNjeERKOWxXVV9HNkppZnlWT3pi bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRia1F1Y2N4REo5bFdVX0c2SmlmeVZPemJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzhFQjAvRTMyQzg3Q0M1MEQ1MTFFQ0IzRjhENTI5QzRGOUFFMDIvNEIxRDU4NTI1 MEVBMTFFQzhGRjU1QjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAU0gOADBAWUQgADBAXYduAwDQYJKoZIhvcNAQELBQADggEB AFfuNvJmk5bHtmTUr0nyWu7cqPca8wUgUdYB5pwpuDlyotYfUXBZ4BlsKdD+NejY WJSe6XP5aectcLST3R83JmmBmKCJx15UlLzxtAFj2jVLaq6E4t7DAa44rYXC8waz QjhchUljDC3ww3/lUzLUoy/9Xerfnaor9l3pKKaGGmYisZUEQuvXAIxUKh/Kfr+7 EAlMOWxw5QCjAUMXfoHYdk9cBYewiZMWC2W3RnGPJ8SlcgTGnqm/KRxowbMOlu5C D2vaIUWQnbhdKXFY0ftFB6hidML6+bvqMcQynijEwBMMreohTMyDUNVbkyh8j/Pp JP9MdxyAUO6oSudVSDKUcDc= -----END CERTIFICATE-----Generated at Mon Jun 3 01:55:16 2024 by rpki-client on console-ams.rpki-client.org