$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa File: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (raw, json) Hash identifier: NdXrfA7Ct56tyNobjCoPc9qWdQ3yfuVXDMkA+F+kNHM= Subject key identifier: 13:3D:C2:33:D3:BF:E0:42:DC:62:E4:44:8F:78:B8:48:0F:3C:C6:F3 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 16AB Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa Signing time: Thu 20 Jun 2024 17:26:33 +0000 ROA not before: Thu 20 Jun 2024 17:26:33 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135146 IP address blocks: 168.70.150.0/24 maxlen: 24 168.70.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5803 (0x16ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Jun 20 17:26:33 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66746648-5a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:84:ba:84:20:fc:56:21:8f:e2:d4:cb:22: ca:91:30:a1:44:40:47:85:66:ee:d9:d0:5d:4c:2c: 9e:00:95:66:9a:81:bb:e9:40:e2:2a:70:5a:31:be: bc:b7:d9:6f:72:ec:d4:90:86:33:7a:89:2b:7c:fe: 9b:9d:d1:8c:dc:a8:03:8b:20:85:05:41:73:ab:b7: 46:df:0d:2b:13:93:32:7e:9a:3c:92:2c:57:b7:25: 02:fe:44:15:cd:84:81:a8:0c:33:e3:9c:ba:74:dd: f3:4b:2b:26:f0:4d:2e:9d:b3:61:47:ff:98:24:1c: 8f:ac:8c:f7:fc:3b:45:f8:4f:f2:8a:05:b4:ac:89: 76:2f:45:81:0a:fc:ec:7b:08:d0:f8:19:3e:e8:8f: a9:91:bc:86:1e:02:4a:54:23:2e:81:2a:14:43:98: 15:60:2b:2d:01:39:e4:72:fc:30:73:a0:7c:cd:0c: fb:c6:ce:c2:c0:69:7c:5d:83:48:21:61:4a:d0:99: 42:ac:c3:a6:af:79:7b:5e:a3:d5:8e:72:fb:e7:2b: 05:23:7a:19:fa:34:f3:1b:0f:43:a2:73:cf:66:c2: 72:e8:74:33:d7:1c:c8:59:4b:bf:fa:ed:7d:a6:2d: 56:79:67:a0:fd:dc:17:46:eb:91:cf:9c:18:7f:0a: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3D:C2:33:D3:BF:E0:42:DC:62:E4:44:8F:78:B8:48:0F:3C:C6:F3 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.70.150.0/24 168.70.171.0/24 Signature Algorithm: sha256WithRSAEncryption 82:51:1d:0c:9e:f2:96:1a:29:48:a6:58:5e:7c:96:bc:23:78: 2a:89:62:89:e0:a6:1d:ae:19:6f:f1:c7:82:e7:b8:48:5f:3d: 2d:41:8d:f8:b0:5f:eb:21:eb:b4:98:e0:42:a6:eb:86:7e:6e: b5:c0:7e:8c:02:86:77:93:45:c5:75:ed:43:d0:bc:b2:3c:aa: d3:e5:c8:34:1b:bc:58:29:94:fc:5c:7e:99:22:fe:97:aa:34: 23:33:a4:bb:c7:a5:33:15:a8:e9:cb:85:12:09:0f:0c:07:ee: 98:56:6b:3a:c1:47:b9:3b:fa:42:ba:76:58:f9:43:da:6a:ca: 2b:87:be:f5:74:e3:17:2a:0b:6e:72:cc:38:47:3e:6f:77:75: 9d:93:69:45:5a:cd:42:da:3a:2b:02:fb:b0:eb:90:ae:33:70: c3:d0:2c:be:65:a4:58:fd:b3:30:bc:fe:c0:f1:2d:53:29:7b: d6:98:71:f2:06:8e:d4:97:86:c3:2c:e1:66:45:20:b7:ef:29: ae:3d:b0:74:1a:22:46:d5:7c:ec:ea:45:ee:3e:5d:9b:fc:64: d4:dd:f1:b6:b2:f3:17:54:c7:67:96:3e:f6:96:7d:b0:a7:07: 51:90:cc:e6:5b:65:58:f2:ca:53:28:20:2b:97:16:cc:97:4a: 8e:c5:a2:5a -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICFqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjQwNjIwMTcyNjMzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc0NjY0OC01YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsN2EuoQg/FYhj+LUyyLKkTChREBHhWbu2dBdTCyeAJVmmoG76UDiKnBaMb68 t9lvcuzUkIYzeokrfP6bndGM3KgDiyCFBUFzq7dG3w0rE5Myfpo8kixXtyUC/kQV zYSBqAwz45y6dN3zSysm8E0unbNhR/+YJByPrIz3/DtF+E/yigW0rIl2L0WBCvzs ewjQ+Bk+6I+pkbyGHgJKVCMugSoUQ5gVYCstATnkcvwwc6B8zQz7xs7CwGl8XYNI IWFK0JlCrMOmr3l7XqPVjnL75ysFI3oZ+jTzGw9DonPPZsJy6HQz1xzIWUu/+u19 pi1WeWeg/dwXRuuRz5wYfwqxXwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBM9wjPT v+BC3GLkRI94uEgPPMbzMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ5NUYvNzhENUQ4OTZERkVDMTFFN0EyN0EyMjEzQzRGOUFFMDIvMDRBQjI5RDhE RkVFMTFFN0IwRTcxRDFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACoRpYDBACoRqswDQYJKoZIhvcNAQELBQADggEBAIJRHQye 8pYaKUimWF58lrwjeCqJYongph2uGW/xx4LnuEhfPS1BjfiwX+sh67SY4EKm64Z+ brXAfowChneTRcV17UPQvLI8qtPlyDQbvFgplPxcfpki/peqNCMzpLvHpTMVqOnL hRIJDwwH7phWazrBR7k7+kK6dlj5Q9pqyiuHvvV04xcqC25yzDhHPm93dZ2TaUVa zULaOisC+7DrkK4zcMPQLL5lpFj9szC8/sDxLVMpe9aYcfIGjtSXhsMs4WZFILfv Ka49sHQaIkbVfOzqRe4+XZv8ZNTd8bay8xdUx2eWPvaWfbCnB1GQzOZbZVjyylMo ICuXFsyXSo7Folo= -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:01 2024 by rpki-client on console-fra.rpki-client.org