$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/0DE9C0F2691E11EF86B94667C4F9AE02.roa File: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (raw, json) Hash identifier: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys= Subject key identifier: 57:C4:AB:34:D0:F7:9E:37:7C:EE:62:93:62:7A:6C:4F:07:F0:11:9A Certificate issuer: /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Certificate serial: 02 Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/0DE9C0F2691E11EF86B94667C4F9AE02.roa Signing time: Mon 02 Sep 2024 11:25:27 +0000 ROA not before: Mon 02 Sep 2024 11:25:27 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 140244 IP address blocks: 160.30.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92 Validity Not Before: Sep 2 11:25:27 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d5a0a7-9596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dc:6a:5e:49:87:19:83:8d:64:91:4b:52:92: eb:a7:f1:82:0b:d3:e1:92:c7:b6:0c:51:a1:14:74: 05:fc:de:45:06:25:8c:96:80:5e:78:d3:b3:35:35: 7f:7d:83:63:4c:42:1d:85:e3:f2:3b:d1:e6:72:70: 04:07:53:fa:62:1b:cf:a3:8f:a6:41:27:cf:c5:79: 2c:a0:67:06:65:10:2d:41:1c:30:46:57:27:c8:4e: f0:44:53:97:df:fc:b3:b7:7e:ed:d5:41:5e:06:4f: db:f5:2c:1c:5e:35:9f:aa:e4:8d:f3:e4:9d:f7:d7: 83:d6:28:25:59:29:4b:5e:c9:93:92:d1:44:3e:f5: f1:c4:98:d7:d8:88:54:1c:84:95:ba:01:03:60:f8: 37:62:a1:7e:ec:ab:56:4a:fe:52:af:2c:8e:dd:b6: 0e:8e:e2:31:83:fd:7f:39:8f:e6:20:0e:01:fd:5c: 2f:45:3c:be:d0:ce:24:58:e3:d3:cf:ca:dd:25:22: 45:cf:0e:fd:7e:1c:d9:2b:3a:ee:1d:bd:d8:71:9a: 50:e9:34:f1:f0:8d:bb:0e:03:c8:81:b3:9f:22:91: 90:04:c2:df:61:a3:71:92:f8:b5:56:56:91:b3:99: 29:60:15:97:d9:c8:79:8e:14:0b:78:a6:16:a7:4e: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:AB:34:D0:F7:9E:37:7C:EE:62:93:62:7A:6C:4F:07:F0:11:9A X509v3 Authority Key Identifier: keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/0DE9C0F2691E11EF86B94667C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.188.0/23 Signature Algorithm: sha256WithRSAEncryption 80:80:c5:52:a4:3d:75:74:b7:d0:1f:47:02:6e:50:aa:d8:37: 78:42:e6:14:28:c5:3f:11:39:a1:97:39:c7:19:4b:0b:f3:7e: 7d:a7:bc:85:21:12:09:e3:83:53:9f:f7:ef:84:19:6e:21:d8: 7f:45:f1:da:2d:37:43:ee:ad:62:5f:ec:73:e1:e9:b0:38:27: a5:22:cb:4c:00:4d:2d:69:99:56:f9:f9:23:ba:95:da:a2:42: 80:54:ec:9c:6b:b6:65:5c:c8:b5:28:99:59:6e:7c:44:c4:5f: a8:79:52:76:b9:5f:44:86:3d:19:28:55:58:a2:0c:9a:97:12: 9a:9d:c5:92:f9:73:94:ef:a2:d3:2b:be:d3:cb:fc:c4:52:0a: 12:36:59:5d:4a:00:ba:18:6f:78:0d:90:e4:d8:b2:c5:2e:19: dc:50:fc:f4:00:1a:01:f2:10:d7:4f:e9:6c:48:1c:92:39:2d: c8:83:2b:5f:ab:b2:bd:12:48:02:1c:3c:f2:2b:09:54:c8:ec: 8c:56:64:c6:e9:f1:b7:50:2b:84:e8:54:1a:27:83:b3:98:64: f0:d1:51:e6:b7:38:33:6c:76:72:80:36:14:20:98:1a:c9:85: 3e:c2:94:66:7b:02:81:45:21:07:dc:a5:c9:e8:a4:cc:77:4f: 23:c2:86:ac -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTY5NTExMC8GA1UEBRMoRTNBRTdEMDc0RDY5NjdFMkY0OUZGOUUzQjhENzlCQkZB MjgwOUE5MjAeFw0yNDA5MDIxMTI1MjdaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDVhMGE3LTk1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW3GpeSYcZg41kkUtSkuun8YIL0+GSx7YMUaEUdAX83kUGJYyWgF5407M1NX99 g2NMQh2F4/I70eZycAQHU/piG8+jj6ZBJ8/FeSygZwZlEC1BHDBGVyfITvBEU5ff /LO3fu3VQV4GT9v1LBxeNZ+q5I3z5J3314PWKCVZKUteyZOS0UQ+9fHEmNfYiFQc hJW6AQNg+DdioX7sq1ZK/lKvLI7dtg6O4jGD/X85j+YgDgH9XC9FPL7QziRY49PP yt0lIkXPDv1+HNkrOu4dvdhxmlDpNPHwjbsOA8iBs58ikZAEwt9ho3GS+LVWVpGz mSlgFZfZyHmOFAt4phanTtETAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUV8SrNND3 njd87mKTYnpsTwfwEZowHwYDVR0jBBgwFoAU4659B01pZ+L0n/njuNebv6KAmpIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBNjk1LzhERUZFODBFNjkx RDExRUZCOEZEMUU2NEM0RjlBRTAyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1w SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNDY1OUIwMXBaLUwwbl9uanVOZWJ2NktBbXBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTY5NS84REVGRTgwRTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi8wREU5QzBGMjY5 MUUxMUVGODZCOTQ2NjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAevDANBgkqhkiG9w0BAQsFAAOCAQEAgIDFUqQ9dXS30B9H Am5Qqtg3eELmFCjFPxE5oZc5xxlLC/N+fae8hSESCeODU5/374QZbiHYf0Xx2i03 Q+6tYl/sc+HpsDgnpSLLTABNLWmZVvn5I7qV2qJCgFTsnGu2ZVzItSiZWW58RMRf qHlSdrlfRIY9GShVWKIMmpcSmp3FkvlzlO+i0yu+08v8xFIKEjZZXUoAuhhveA2Q 5NiyxS4Z3FD89AAaAfIQ10/pbEgckjktyIMrX6uyvRJIAhw88isJVMjsjFZkxunx t1ArhOhUGieDs5hk8NFR5rc4M2x2coA2FCCYGsmFPsKUZnsCgUUhB9ylyeikzHdP I8KGrA== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:22 2024 by rpki-client on console-fra.rpki-client.org