$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa File: A97B2098C70811ECBAECCC78C4F9AE02.roa (raw, json) Hash identifier: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE= Subject key identifier: D3:FE:03:CC:9C:44:9A:EF:6A:DE:85:A9:08:6A:C8:66:82:D4:F9:1F Certificate issuer: /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Certificate serial: 0384 Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa Signing time: Thu 14 Nov 2024 10:28:42 +0000 ROA not before: Thu 14 Nov 2024 10:28:42 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 14618 IP address blocks: 141.163.128.0/20 maxlen: 24 141.163.144.0/20 maxlen: 24 141.163.160.0/20 maxlen: 24 141.163.176.0/20 maxlen: 24 141.163.192.0/20 maxlen: 24 141.163.208.0/20 maxlen: 24 141.163.224.0/20 maxlen: 24 141.163.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 900 (0x384) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE Validity Not Before: Nov 14 10:28:42 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6735d0da-245d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:fa:33:f1:c1:af:87:f7:73:51:79:63:5a: 21:8c:61:d2:b3:29:60:3f:49:9b:bb:f5:7d:19:85: b8:45:b6:81:42:bc:b1:99:30:d5:02:a1:35:d5:be: 1a:4c:d2:6d:c6:de:a1:d2:ec:e4:dd:66:cd:ee:d1: 48:e9:58:be:67:49:25:66:a3:f8:08:2a:cc:41:74: 1f:71:ac:5d:63:4a:e5:14:0c:5d:94:5c:9d:a4:fe: 5b:06:71:58:5b:fa:05:03:4c:84:d3:39:29:76:4f: a7:9b:da:23:01:a9:01:ba:e4:b3:1a:ca:f8:9f:6c: dc:a5:c5:98:e3:54:ca:1b:a2:31:f7:64:59:57:07: 1d:0c:5f:88:42:85:a7:ec:84:08:50:80:cc:66:df: 70:0f:bd:35:e9:98:d6:27:a0:fc:e3:51:a4:ed:c2: dc:0a:ad:20:92:54:3d:f2:5d:2f:ac:ba:60:c1:1d: 16:dd:41:c3:e9:36:1a:0f:26:0e:04:34:81:e3:02: e3:a5:24:be:19:bc:a9:d6:64:6a:5c:1c:15:99:b4: 34:68:e6:89:c4:8b:88:ff:cb:0b:e4:b9:19:a0:3b: 09:b4:20:9b:e3:d5:9b:ac:58:16:10:f3:f4:12:a7: f7:11:75:68:87:63:b4:4a:6c:0b:41:32:eb:b1:8b: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:03:CC:9C:44:9A:EF:6A:DE:85:A9:08:6A:C8:66:82:D4:F9:1F X509v3 Authority Key Identifier: keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/A97B2098C70811ECBAECCC78C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 141.163.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0c:af:8b:ec:4c:1c:43:ce:09:d9:f8:19:da:fe:1f:5c:18:d9: c2:ad:14:c7:00:ab:48:5b:ba:c8:8c:21:75:a5:ff:c8:ca:27: 71:86:c7:e4:63:1c:e2:99:70:14:6c:e7:e4:bd:ac:97:7d:92: e7:a7:fb:6c:25:55:f8:cc:f2:79:26:5b:a0:2e:62:51:f2:e6: 30:1c:52:8f:dd:de:8c:01:70:cc:c2:ac:27:30:12:8d:0a:7a: b3:02:d4:89:5f:02:cc:e7:6f:30:c7:7b:cd:23:7d:37:45:98: a0:93:30:46:96:cd:49:3c:bb:1c:24:a2:ad:d0:87:76:ef:78: ab:d6:cc:b0:8c:1c:1a:fc:05:43:b8:b0:cb:ec:d2:a6:51:ed: 04:bf:7e:8f:7d:af:26:4e:df:6d:bc:7f:80:5b:17:69:8b:9c: 00:c0:99:a4:0d:de:b0:26:d3:a4:6b:f7:8d:39:0b:56:13:10: 1c:b0:fa:cc:0e:70:01:24:22:18:a8:0a:75:96:aa:ba:04:dc: 68:42:46:45:f5:a7:a4:78:f0:ac:e8:b3:ed:af:60:fb:65:5f: a7:8d:2b:16:be:a6:81:db:99:11:a1:1c:31:ac:96:ae:d1:23: 7c:de:cf:db:20:dc:a2:3a:40:2a:fb:33:d3:32:bd:d4:77:98: 9e:d3:af:ad -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0 MEJBRDNBREUwHhcNMjQxMTE0MTAyODQyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM1ZDBkYS0yNDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ln6M/HBr4f3c1F5Y1ohjGHSsylgP0mbu/V9GYW4RbaBQryxmTDVAqE11b4a TNJtxt6h0uzk3WbN7tFI6Vi+Z0klZqP4CCrMQXQfcaxdY0rlFAxdlFydpP5bBnFY W/oFA0yE0zkpdk+nm9ojAakBuuSzGsr4n2zcpcWY41TKG6Ix92RZVwcdDF+IQoWn 7IQIUIDMZt9wD7016ZjWJ6D841Gk7cLcCq0gklQ98l0vrLpgwR0W3UHD6TYaDyYO BDSB4wLjpSS+Gbyp1mRqXBwVmbQ0aOaJxIuI/8sL5LkZoDsJtCCb49WbrFgWEPP0 Eqf3EXVoh2O0SmwLQTLrsYvSzQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNP+A8yc RJrvat6FqQhqyGaC1PkfMB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4 ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODVENkUvQTQ2QkU1ODg4ODg4MTFFQzkxMjMzQTcwQzRGOUFFMDIvQTk3QjIwOThD NzA4MTFFQ0JBRUNDQzc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAeNo4AwDQYJKoZIhvcNAQELBQADggEBAAyvi+xMHEPOCdn4 Gdr+H1wY2cKtFMcAq0hbusiMIXWl/8jKJ3GGx+RjHOKZcBRs5+S9rJd9kuen+2wl VfjM8nkmW6AuYlHy5jAcUo/d3owBcMzCrCcwEo0KerMC1IlfAsznbzDHe80jfTdF mKCTMEaWzUk8uxwkoq3Qh3bveKvWzLCMHBr8BUO4sMvs0qZR7QS/fo99ryZO3228 f4BbF2mLnADAmaQN3rAm06Rr9405C1YTEByw+swOcAEkIhioCnWWqroE3GhCRkX1 p6R48Kzos+2vYPtlX6eNKxa+poHbmRGhHDGslq7RI3zez9sg3KI6QCr7M9MyvdR3 mJ7Tr60= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:22 2024 by rpki-client on console-fra.rpki-client.org