$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa File: 368F5308A27311EFA8731822C4F9AE02.roa (raw, json) Hash identifier: nF3bhaPZagyNLULkvS1a5+uROKF0zNPyL/4XlBSqH9Y= Subject key identifier: AA:8E:27:68:77:19:D0:C9:A2:2D:BA:4C:D3:46:66:EB:6B:09:D3:AD Certificate issuer: /CN=A9185D6E/serialNumber=9524EA9B823C20FA78923BE6667E14F6C4C3B47E Certificate serial: 0524 Authority key identifier: 95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa Signing time: Thu 14 Nov 2024 10:28:41 +0000 ROA not before: Thu 14 Nov 2024 10:28:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 14618 IP address blocks: 104.161.192.0/20 maxlen: 24 104.161.208.0/20 maxlen: 24 161.32.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1316 (0x524) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E Validity Not Before: Nov 14 10:28:41 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6735d0d7-c925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:c6:7e:c0:b0:67:b7:b3:78:91:42:a6:27: a4:89:11:87:6f:91:c8:f3:6f:f5:2a:c0:30:7d:b2: 87:11:84:e9:ae:91:73:03:c1:89:b5:7e:d7:e6:aa: 9a:89:c5:f8:0d:44:1a:c1:35:1d:d8:0c:b5:f3:10: e6:54:2c:7d:07:64:7b:a0:c0:47:f0:49:78:14:95: 67:16:19:63:74:f0:f1:7d:f2:a2:55:07:d4:f1:f4: 0c:09:6e:23:fc:34:a9:38:8f:d1:77:07:7f:61:6f: 5f:fe:95:f9:40:86:1a:7e:13:cd:f0:fe:31:e4:2c: 9c:bd:ab:6d:af:f0:c0:e9:84:98:8f:d0:35:0a:65: 50:ad:89:2f:ac:4f:78:5f:e9:bd:91:b8:07:bc:d3: 1e:02:28:d7:b8:9d:77:71:35:5c:b6:cb:dc:28:f6: bd:46:f6:9d:f2:8f:c9:22:2a:1c:ec:e3:e8:f4:99: c9:72:7a:fa:07:29:7a:c1:d6:a3:cd:6d:b3:f8:66: 2c:07:46:c1:df:2f:0c:05:52:7a:cb:07:2d:0c:20: 55:3a:70:a9:11:88:62:61:46:b9:26:99:72:5b:75: 5c:bd:31:72:3a:4a:98:12:74:4c:70:d8:65:e1:a0: 0c:0a:27:9a:bf:d1:a9:63:db:1e:a8:02:0b:fc:e3: 90:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8E:27:68:77:19:D0:C9:A2:2D:BA:4C:D3:46:66:EB:6B:09:D3:AD X509v3 Authority Key Identifier: keyid:95:24:EA:9B:82:3C:20:FA:78:92:3B:E6:66:7E:14:F6:C4:C3:B4:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/lSTqm4I8IPp4kjvmZn4U9sTDtH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lSTqm4I8IPp4kjvmZn4U9sTDtH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/4CBFF4AEDFF111EB894F3067C4F9AE02/368F5308A27311EFA8731822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 104.161.192.0/19 161.32.64.0/20 Signature Algorithm: sha256WithRSAEncryption 92:8b:7f:f1:e2:b2:15:91:70:1d:bd:ae:43:ec:77:00:63:a9: 66:4c:e8:4e:c9:ba:25:a1:c1:13:1d:94:39:c7:a1:95:8e:8c: f6:7f:8b:12:03:98:29:17:1c:35:9d:4a:36:17:30:43:f4:2f: b1:3c:51:a5:a7:e9:dd:45:1b:8c:8a:dc:25:2a:f5:20:91:3b: 6f:82:af:3d:f7:8e:77:41:d2:ff:c3:a5:b0:ac:11:6e:31:c0: d0:ba:1d:a9:d9:c5:fe:8a:cc:1c:be:71:06:9e:ad:94:45:70: c2:1e:3a:35:c6:fc:17:4a:83:2f:fd:13:52:b9:5c:4c:d0:39: ce:81:96:d3:20:e3:ef:52:f4:79:52:89:64:de:91:0c:6e:0e: 20:3d:98:a5:b9:c3:0a:4c:cd:be:6d:ab:0b:15:3d:d2:70:2f: 55:54:95:aa:f9:57:76:c4:cb:13:6c:6a:ff:4b:8e:37:f9:4e: d0:4c:40:cd:e1:22:77:8a:ae:fd:c2:16:38:f4:c5:1a:7e:3c: 81:1e:b6:41:78:d5:9e:bd:fb:ea:4b:e1:ed:ff:e3:53:c8:15: 76:d2:43:bf:5d:6c:21:2f:77:aa:78:59:7b:a9:61:fb:31:1d: 72:79:8f:87:b5:b7:ed:46:7a:e5:ae:9c:c6:1e:51:64:38:1f: ac:fd:a2:9f -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDk1MjRFQTlCODIzQzIwRkE3ODkyM0JFNjY2N0UxNEY2 QzRDM0I0N0UwHhcNMjQxMTE0MTAyODQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM1ZDBkNy1jOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpnGfsCwZ7ezeJFCpiekiRGHb5HI82/1KsAwfbKHEYTprpFzA8GJtX7X5qqa icX4DUQawTUd2Ay18xDmVCx9B2R7oMBH8El4FJVnFhljdPDxffKiVQfU8fQMCW4j /DSpOI/Rdwd/YW9f/pX5QIYafhPN8P4x5Cycvattr/DA6YSYj9A1CmVQrYkvrE94 X+m9kbgHvNMeAijXuJ13cTVctsvcKPa9Rvad8o/JIioc7OPo9JnJcnr6Byl6wdaj zW2z+GYsB0bB3y8MBVJ6ywctDCBVOnCpEYhiYUa5JplyW3VcvTFyOkqYEnRMcNhl 4aAMCieav9GpY9seqAIL/OOQXwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKqOJ2h3 GdDJoi26TNNGZutrCdOtMB8GA1UdIwQYMBaAFJUk6puCPCD6eJI75mZ+FPbEw7R+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS80Q0JGRjRBRURG RjExMUVCODk0RjMwNjdDNEY5QUUwMi9sU1RxbTRJOElQcDRranZtWm40VTlzVER0 SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xTVHFtNEk4SVBwNGtqdm1abjRVOXNURHRINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvNENCRkY0QUVERkYxMTFFQjg5NEYzMDY3QzRGOUFFMDIvMzY4RjUzMDhB MjczMTFFRkE4NzMxODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAVoocADBAShIEAwDQYJKoZIhvcNAQELBQADggEBAJKLf/Hi shWRcB29rkPsdwBjqWZM6E7JuiWhwRMdlDnHoZWOjPZ/ixIDmCkXHDWdSjYXMEP0 L7E8UaWn6d1FG4yK3CUq9SCRO2+Crz33jndB0v/DpbCsEW4xwNC6HanZxf6KzBy+ cQaerZRFcMIeOjXG/BdKgy/9E1K5XEzQOc6BltMg4+9S9HlSiWTekQxuDiA9mKW5 wwpMzb5tqwsVPdJwL1VUlar5V3bEyxNsav9Ljjf5TtBMQM3hIneKrv3CFjj0xRp+ PIEetkF41Z69++pL4e3/41PIFXbSQ79dbCEvd6p4WXupYfsxHXJ5j4e1t+1GeuWu nMYeUWQ4H6z9op8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:46:54 2025 by rpki-client