$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa File: 4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa (raw, json) Hash identifier: 98w4yl1iX/DBuRnZm4wgf0B6PYVS6iqXA6ulWZHNh70= Subject key identifier: 43:9E:7F:47:E4:B3:69:0C:73:A6:74:DE:EB:D7:0F:DF:ED:D9:78:7A Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 09 Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa Signing time: Thu 26 Sep 2024 20:52:53 +0000 ROA not before: Thu 26 Sep 2024 20:52:53 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153343 IP address blocks: 160.187.116.0/23 maxlen: 23 160.187.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Sep 26 20:52:53 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f5c9a4-6a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f5:c2:04:9d:15:59:4f:67:08:52:c3:da:22: 2b:a9:da:e8:f8:8b:78:00:21:3e:9c:e6:13:6b:3e: d7:c8:85:88:e5:01:24:cc:a0:b3:30:ef:99:9d:5f: 94:f3:7f:3f:e7:3b:02:01:3b:60:17:14:cc:a4:bf: 33:d0:40:de:66:f8:1a:b1:47:f6:13:7f:b5:44:31: 0f:56:88:e6:6f:ab:98:21:d6:77:68:4c:7e:b6:92: c2:06:48:f7:ab:ed:3f:0a:6a:fc:4f:89:2c:fb:b0: d1:70:da:44:37:69:5f:51:7a:d9:0b:26:9a:6d:bc: c8:5f:48:d4:ab:cb:0b:d4:26:90:9d:7a:3e:97:1c: b1:3b:ab:c2:14:a2:8b:42:a4:7d:74:f6:1c:26:b8: 6c:19:30:ba:36:8a:a3:db:1a:6b:2d:ee:da:10:d5: 18:ed:4b:6e:38:79:ee:d6:22:77:eb:ff:fd:6f:e2: a1:03:3a:8d:94:f1:46:de:15:82:52:1b:b5:7d:42: f5:27:61:73:db:f4:23:43:d5:dc:b4:2b:38:0d:cd: 8c:09:01:d2:be:a8:3b:ca:af:6e:e0:23:21:ae:15: ed:c5:83:39:ee:29:a3:62:04:0e:4c:d1:57:16:e9: 84:f3:0f:98:6e:a5:dd:76:12:77:7a:fc:d1:e1:94: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:7F:47:E4:B3:69:0C:73:A6:74:DE:EB:D7:0F:DF:ED:D9:78:7A X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/4C575EBA7C4911EF8E4FFA2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.116.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:8d:26:78:77:11:06:b3:7e:8b:33:3b:a2:f4:1c:26:66:cb: f8:ad:81:58:58:f8:35:9f:bd:a8:e6:17:c5:8b:54:8b:68:a3: 3d:de:31:5f:48:80:fc:9a:d4:11:f9:38:7f:b3:ee:12:de:38: 13:31:1e:95:40:98:39:84:fc:66:df:a9:92:37:79:5d:b8:76: 34:7d:16:f6:b1:af:a5:ab:af:25:d5:2e:00:f8:ee:93:81:82: 9b:1e:37:3d:1d:23:15:89:3e:ad:24:4e:2a:85:d2:9d:92:ec: 22:b3:13:6b:21:df:83:60:23:ba:f2:66:e5:18:ea:72:20:b9: 48:59:66:e6:d8:da:9a:df:1d:07:8e:6f:a3:ae:d6:c7:9a:72: 73:ea:3d:9f:e2:e5:a3:77:82:f9:23:0c:ef:80:d7:c9:49:fe: 3c:a5:77:8f:39:46:c6:dd:fc:1f:de:ef:35:bf:b8:e1:9c:26: c7:a3:0d:bf:22:ee:ca:2d:67:a2:c4:55:a9:2e:a2:cf:f0:11: 2a:a9:ab:c6:75:1c:fe:36:db:30:42:ad:b8:e9:6a:87:66:6d: 9b:f5:fa:62:94:a3:72:75:cc:80:1e:06:7c:c9:4e:bc:b9:b2: cb:c9:b3:9f:bc:7c:c4:fe:57:4d:03:dc:a4:7b:5e:da:ef:9e: c6:56:0a:dd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDMyNDExMC8GA1UEBRMoQTg1NjhGNTI3OTNDQzM0ODU3ODUwQzRGMkVEMzhBRTBC MTg5NzBGODAeFw0yNDA5MjYyMDUyNTNaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjVjOWE0LTZhOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu9cIEnRVZT2cIUsPaIiup2uj4i3gAIT6c5hNrPtfIhYjlASTMoLMw75mdX5Tz fz/nOwIBO2AXFMykvzPQQN5m+BqxR/YTf7VEMQ9WiOZvq5gh1ndoTH62ksIGSPer 7T8KavxPiSz7sNFw2kQ3aV9RetkLJpptvMhfSNSrywvUJpCdej6XHLE7q8IUootC pH109hwmuGwZMLo2iqPbGmst7toQ1RjtS244ee7WInfr//1v4qEDOo2U8UbeFYJS G7V9QvUnYXPb9CND1dy0KzgNzYwJAdK+qDvKr27gIyGuFe3FgznuKaNiBA5M0VcW 6YTzD5hupd12End6/NHhlClnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQ55/R+Sz aQxzpnTe69cP3+3ZeHowHwYDVR0jBBgwFoAUqFaPUnk8w0hXhQxPLtOK4LGJcPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0MzI0L0VBQTlDQ0Q0N0Ix QzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUZhUFVuazh3MGhYaFF4UEx0T0s0TEdKY1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi80QzU3NUVCQTdD NDkxMUVGOEU0RkZBMkNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC7dDANBgkqhkiG9w0BAQsFAAOCAQEAio0meHcRBrN+izM7 ovQcJmbL+K2BWFj4NZ+9qOYXxYtUi2ijPd4xX0iA/JrUEfk4f7PuEt44EzEelUCY OYT8Zt+pkjd5Xbh2NH0W9rGvpauvJdUuAPjuk4GCmx43PR0jFYk+rSROKoXSnZLs IrMTayHfg2AjuvJm5RjqciC5SFlm5tjamt8dB45vo67Wx5pyc+o9n+Llo3eC+SMM 74DXyUn+PKV3jzlGxt38H97vNb+44Zwmx6MNvyLuyi1nosRVqS6iz/ARKqmrxnUc /jbbMEKtuOlqh2Ztm/X6YpSjcnXMgB4GfMlOvLmyy8mzn7x8xP5XTQPcpHte2u+e xlYK3Q== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org