$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa File: AAB43BD6247F11EE9CEA495CC4F9AE02.roa (raw, json) Hash identifier: 9yUs2nKXPHCpJS0mrHo2Ggq8ympf47XQx/Xh9xer3UE= Subject key identifier: D9:07:8B:9E:A6:2E:A0:68:86:3C:09:4C:72:E5:75:5C:4D:16:77:D5 Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Certificate serial: 09F6 Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa Signing time: Sat 24 Aug 2024 20:38:57 +0000 ROA not before: Sat 24 Aug 2024 20:38:57 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151466 IP address blocks: 39.109.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:46:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2550 (0x9f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A Validity Not Before: Aug 24 20:38:57 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66ca44e0-a2dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:73:5b:50:22:63:8a:60:51:db:bb:e9:6a: 05:41:69:11:9f:68:12:36:8c:4c:02:f4:bd:b4:0b: 14:81:df:51:90:7c:ef:7a:1b:62:e1:7d:12:d5:cf: f4:3e:5b:1c:2e:86:ca:5b:15:d1:fe:be:d8:5a:9e: 0e:2a:b5:3a:34:2a:95:49:0a:50:0f:f5:08:b9:95: f9:df:e4:23:74:a3:8e:44:af:2a:02:3b:d2:d5:ba: 7b:9a:60:23:03:41:37:b9:87:f1:53:8a:8a:e4:59: 49:d6:dc:13:5e:9e:6a:99:86:82:83:49:f0:5c:0c: 1e:b6:f7:a6:0a:58:34:cf:bd:57:8f:28:9f:56:47: 94:fa:e7:a2:39:ae:23:65:c7:aa:4c:77:02:6c:1f: 96:f6:0f:df:b8:63:c5:80:2c:7b:af:36:b4:92:1c: 8d:87:e8:36:cf:cf:30:71:1e:ea:81:58:31:fa:15: 75:40:74:84:08:e6:a0:86:2a:9f:bd:0c:4b:43:17: 89:b5:71:85:ba:3c:02:a8:b7:be:af:6d:45:92:a3: b5:65:06:66:b1:23:ef:0c:7e:f7:92:97:da:86:3e: 1f:95:86:33:50:61:66:10:ca:02:01:0a:79:36:80: 4b:c2:0b:05:74:f3:84:12:47:81:1c:4b:42:7d:5c: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:07:8B:9E:A6:2E:A0:68:86:3C:09:4C:72:E5:75:5C:4D:16:77:D5 X509v3 Authority Key Identifier: keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/AAB43BD6247F11EE9CEA495CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 39.109.66.0/24 Signature Algorithm: sha256WithRSAEncryption 66:75:8f:a2:f1:ed:cf:fc:e3:13:6b:b8:b5:e6:f2:dc:f3:c2: 5c:42:38:b2:8c:b8:80:78:28:3e:92:5f:22:d7:4f:41:2c:96: 07:3c:bc:81:36:87:ab:0e:0c:2d:88:dd:9a:d7:03:4d:0f:fe: fe:bb:fb:f0:dd:89:86:51:1f:1a:f0:79:ac:c0:d0:b5:1a:f8: 9d:c7:af:35:fc:80:73:79:ef:66:c6:90:27:37:af:7d:14:f3: 25:79:45:8a:f0:16:da:8a:62:e7:80:b5:15:b3:d0:8f:19:fe: c8:f9:dc:51:14:05:e3:f8:1d:91:fc:0e:22:b0:e2:2c:7c:fb: 87:19:3f:28:ff:7f:ae:64:7f:b4:93:ea:99:bd:ac:9f:ae:2a: d8:ed:21:37:14:42:de:b9:71:d7:bf:84:dc:b6:79:cb:f0:37: cc:06:f5:b1:19:ca:e9:0f:c1:a6:11:a5:f7:0e:e6:43:08:07: d5:df:72:5b:4b:71:20:d4:30:f6:1b:5a:34:1d:9e:7f:22:43: 74:ee:73:ea:08:e4:52:56:49:1e:84:d4:5b:e8:26:44:44:7b: bb:91:b0:30:10:60:8b:f4:b9:4c:62:26:ae:36:bd:76:53:5e: 9d:cc:c1:bf:5f:e8:37:10:85:7b:75:f1:e5:ec:04:f8:67:e1: c7:6a:48:ce -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI1MDIxMTAvBgNVBAUTKDhDM0NDQjRGRkI4OTE4OUM2RUY1QjM0REZEQUFCRTE4 MDZBNTIxOEEwHhcNMjQwODI0MjAzODU3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmNhNDRlMC1hMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7NzW1AiY4pgUdu76WoFQWkRn2gSNoxMAvS9tAsUgd9RkHzvehti4X0S1c/0 PlscLobKWxXR/r7YWp4OKrU6NCqVSQpQD/UIuZX53+QjdKOORK8qAjvS1bp7mmAj A0E3uYfxU4qK5FlJ1twTXp5qmYaCg0nwXAwetvemClg0z71XjyifVkeU+ueiOa4j ZceqTHcCbB+W9g/fuGPFgCx7rza0khyNh+g2z88wcR7qgVgx+hV1QHSECOaghiqf vQxLQxeJtXGFujwCqLe+r21FkqO1ZQZmsSPvDH73kpfahj4flYYzUGFmEMoCAQp5 NoBLwgsFdPOEEkeBHEtCfVwLKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNkHi56m LqBohjwJTHLldVxNFnfVMB8GA1UdIwQYMBaAFIw8y0/7iRicbvWzTf2qvhgGpSGK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjUwMi9EQTE2QzYzQTcz Q0MxMUVBQTM5OTUzMjZDNEY5QUUwMi9qRHpMVF91SkdKeHU5Yk5OX2FxLUdBYWxJ WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pEekxUX3VKR0p4dTliTk5fYXEtR0FhbElZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI1MDIvREExNkM2M0E3M0NDMTFFQUEzOTk1MzI2QzRGOUFFMDIvQUFCNDNCRDYy NDdGMTFFRTlDRUE0OTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAnbUIwDQYJKoZIhvcNAQELBQADggEBAGZ1j6Lx7c/84xNr uLXm8tzzwlxCOLKMuIB4KD6SXyLXT0Eslgc8vIE2h6sODC2I3ZrXA00P/v67+/Dd iYZRHxrweazA0LUa+J3HrzX8gHN572bGkCc3r30U8yV5RYrwFtqKYueAtRWz0I8Z /sj53FEUBeP4HZH8DiKw4ix8+4cZPyj/f65kf7ST6pm9rJ+uKtjtITcUQt65cde/ hNy2ecvwN8wG9bEZyukPwaYRpfcO5kMIB9XfcltLcSDUMPYbWjQdnn8iQ3Tuc+oI 5FJWSR6E1FvoJkREe7uRsDAQYIv0uUxiJq42vXZTXp3Mwb9f6DcQhXt18eXsBPhn 4cdqSM4= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:33 2024 by rpki-client on console-ams.rpki-client.org