$ rpki-client -vvf rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/5C8F63FE7C4911EF81434A2DC4F9AE02.roa File: 5C8F63FE7C4911EF81434A2DC4F9AE02.roa (raw, json) Hash identifier: xISmEUj+M4vxMbA55xtFZk8Qasu4uZXOcEk4pXZEXDI= Subject key identifier: 31:9B:F8:49:11:D5:04:6F:A1:A3:17:9A:7F:10:EA:5E:E2:6D:EC:73 Certificate issuer: /CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Certificate serial: 0B Authority key identifier: A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/5C8F63FE7C4911EF81434A2DC4F9AE02.roa Signing time: Thu 26 Sep 2024 20:53:20 +0000 ROA not before: Thu 26 Sep 2024 20:53:20 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139009 IP address blocks: 160.187.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184324/serialNumber=A8568F52793CC34857850C4F2ED38AE0B18970F8 Validity Not Before: Sep 26 20:53:20 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f5c9c0-a9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:72:ad:a4:1a:c2:cb:bb:d3:1c:a3:9e:93:34: b0:f6:da:28:a4:41:cb:b9:75:e4:5d:32:4e:92:f6: 05:34:15:2e:51:1c:b6:d9:d9:22:33:f6:e6:a1:a8: 31:20:13:66:6b:50:60:45:2a:e1:70:d5:a5:13:8f: 22:e4:b0:c7:0f:0c:3b:df:03:7a:e9:8f:d3:98:8f: 49:69:d8:46:e6:c6:51:8d:d9:e3:1b:f4:ce:71:52: 05:71:9a:ee:0e:61:f3:a2:9f:1f:59:0b:0b:bc:ac: 1f:1c:48:e0:08:09:4d:b5:c6:cc:70:3c:8a:b0:7d: ff:e8:28:a0:4d:2c:9f:59:5b:e6:13:de:df:29:21: 68:c5:0a:7f:3b:a7:dc:67:a4:66:54:50:91:fb:0c: 87:d2:5d:07:1c:cb:5b:d8:83:ad:5e:26:d2:78:41: da:96:b0:69:82:b8:c0:d3:f3:5f:21:e2:b8:4a:86: 39:46:3e:88:ef:55:c4:ae:6d:cf:13:3e:03:4e:aa: 7f:48:c3:eb:c1:fe:74:73:39:8a:3f:5c:b5:a3:76: ce:4e:a0:cf:c5:af:8b:39:5e:cf:0f:29:dc:a7:ff: 66:e1:78:ca:73:9d:35:75:9d:7e:c5:a4:3d:24:e0: f1:a9:03:b2:a6:3e:88:f0:b6:55:08:a4:15:21:62: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9B:F8:49:11:D5:04:6F:A1:A3:17:9A:7F:10:EA:5E:E2:6D:EC:73 X509v3 Authority Key Identifier: keyid:A8:56:8F:52:79:3C:C3:48:57:85:0C:4F:2E:D3:8A:E0:B1:89:70:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/qFaPUnk8w0hXhQxPLtOK4LGJcPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qFaPUnk8w0hXhQxPLtOK4LGJcPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184324/EAA9CCD47B1C11EFAC109416C4F9AE02/5C8F63FE7C4911EF81434A2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.117.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:fd:24:9a:96:be:6a:49:03:24:79:d8:34:07:2a:74:11:f4: 7b:bd:57:e8:28:f5:eb:dc:38:0f:44:a6:a4:8a:41:34:db:80: 6d:f9:b4:87:54:b4:bb:17:d6:42:78:a3:62:13:de:22:53:e2: f5:4c:1b:1b:44:35:16:ad:04:a4:90:c3:00:c9:f8:59:1d:f9: 11:d3:8c:2b:8d:7d:28:34:68:91:1e:c4:db:31:5b:54:41:0a: ee:28:6d:ac:3a:c8:61:15:5d:55:87:86:3d:10:4d:a0:49:c9: f5:82:ac:75:f2:be:e4:9e:95:61:99:a9:fe:5e:17:d8:a6:b5: 58:70:35:4d:41:ac:6e:82:a0:36:1d:02:36:22:dc:b1:90:39: 07:9f:f1:08:75:7c:6f:bb:1a:8f:d8:87:55:6b:e2:83:d4:db: 68:97:6c:c4:ed:9b:2d:eb:ae:64:bd:2d:35:37:2d:b0:fa:aa: 32:9a:61:3f:fe:7b:1d:d5:e7:79:44:b5:48:93:8e:74:e3:1a: d7:3c:c2:8c:73:bf:21:28:c1:d3:fa:88:30:d4:2e:ef:28:94: c2:fb:5e:ca:c9:9c:99:3f:b7:9b:1e:40:6b:b2:6f:bd:26:8a: db:98:bb:28:61:27:f0:18:99:ff:2b:58:6c:c4:fb:12:b8:08: e7:b7:2f:94 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDMyNDExMC8GA1UEBRMoQTg1NjhGNTI3OTNDQzM0ODU3ODUwQzRGMkVEMzhBRTBC MTg5NzBGODAeFw0yNDA5MjYyMDUzMjBaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjVjOWMwLWE5ZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxcq2kGsLLu9Mco56TNLD22iikQcu5deRdMk6S9gU0FS5RHLbZ2SIz9uahqDEg E2ZrUGBFKuFw1aUTjyLksMcPDDvfA3rpj9OYj0lp2EbmxlGN2eMb9M5xUgVxmu4O YfOinx9ZCwu8rB8cSOAICU21xsxwPIqwff/oKKBNLJ9ZW+YT3t8pIWjFCn87p9xn pGZUUJH7DIfSXQccy1vYg61eJtJ4QdqWsGmCuMDT818h4rhKhjlGPojvVcSubc8T PgNOqn9Iw+vB/nRzOYo/XLWjds5OoM/Fr4s5Xs8PKdyn/2bheMpznTV1nX7FpD0k 4PGpA7KmPojwtlUIpBUhYv3TAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMZv4SRHV BG+hoxeafxDqXuJt7HMwHwYDVR0jBBgwFoAUqFaPUnk8w0hXhQxPLtOK4LGJcPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0MzI0L0VBQTlDQ0Q0N0Ix QzExRUZBQzEwOTQxNkM0RjlBRTAyL3FGYVBVbms4dzBoWGhReFBMdE9LNExHSmNQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUZhUFVuazh3MGhYaFF4UEx0T0s0TEdKY1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDMyNC9FQUE5Q0NENDdCMUMxMUVGQUMxMDk0MTZDNEY5QUUwMi81QzhGNjNGRTdD NDkxMUVGODE0MzRBMkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7dTANBgkqhkiG9w0BAQsFAAOCAQEAXf0kmpa+akkDJHnY NAcqdBH0e71X6Cj169w4D0SmpIpBNNuAbfm0h1S0uxfWQnijYhPeIlPi9UwbG0Q1 Fq0EpJDDAMn4WR35EdOMK419KDRokR7E2zFbVEEK7ihtrDrIYRVdVYeGPRBNoEnJ 9YKsdfK+5J6VYZmp/l4X2Ka1WHA1TUGsboKgNh0CNiLcsZA5B5/xCHV8b7saj9iH VWvig9TbaJdsxO2bLeuuZL0tNTctsPqqMpphP/57HdXneUS1SJOOdOMa1zzCjHO/ ISjB0/qIMNQu7yiUwvteysmcmT+3mx5Aa7JvvSaK25i7KGEn8BiZ/ytYbMT7ErgI 57cvlA== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org