$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa File: 3130A9B4681011EEB552C65BC4F9AE02.roa (raw, json) Hash identifier: 4eiQgdaP8VR0bxVWT8fba+rtaJkXzbs2i92ICGj3H7A= Subject key identifier: 79:8B:0D:2B:76:D5:F1:44:E6:CD:C1:F4:96:49:A9:E6:DE:A5:4E:D4 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 08B4 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa Signing time: Wed 08 Nov 2023 21:08:58 +0000 ROA not before: Wed 08 Nov 2023 21:08:58 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 64050 IP address blocks: 134.122.128.0/17 maxlen: 24 137.220.128.0/17 maxlen: 24 143.92.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2228 (0x8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 8 21:08:58 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654bf8e9-6b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:7e:ff:22:d0:cf:52:3b:8e:e7:d9:7c:71: 65:d5:9d:9b:b6:27:e4:d4:42:87:ab:df:1b:cc:44: ed:98:fd:d0:fa:9d:20:c2:03:a0:b1:12:73:6b:fb: 59:c6:a6:7f:6f:73:4f:52:fa:23:7f:f0:61:9c:75: 14:8d:3b:1b:da:b4:ec:67:6e:82:a4:5b:c4:ef:25: 76:3c:8b:57:28:fa:05:61:a7:09:c0:87:71:ea:5e: 65:7e:62:1f:8e:fe:3f:57:a6:f5:81:00:cc:0c:7c: a7:1c:18:fb:76:2e:dd:22:69:44:cb:4f:40:03:72: 5e:80:04:a0:64:8b:55:25:96:7f:a6:0b:2e:cd:a8: 66:32:ac:ac:58:95:a3:c8:31:ee:e4:2d:23:56:e5: c5:d5:72:c7:5f:2a:c6:8e:0f:2d:eb:e3:1a:c8:9f: 9f:93:1b:e9:e2:16:30:d8:a6:1f:53:f0:f1:04:d1: 56:fe:cb:12:e8:9e:28:73:de:25:61:c0:3d:46:c3: de:27:55:fe:3a:ab:da:89:74:b3:dc:17:99:57:3b: 60:6e:97:18:60:bb:87:83:02:5f:5b:52:ad:46:a2: 69:cd:67:71:f5:9d:ec:1e:21:c8:4a:36:4b:57:a3: 75:c2:d8:ee:62:24:13:d6:8a:03:4a:49:db:e6:cf: eb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8B:0D:2B:76:D5:F1:44:E6:CD:C1:F4:96:49:A9:E6:DE:A5:4E:D4 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/3130A9B4681011EEB552C65BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.122.128.0/17 137.220.128.0/17 143.92.32.0/19 Signature Algorithm: sha256WithRSAEncryption 0b:a8:06:fb:b3:1b:4d:7c:b5:76:30:7e:a2:4a:11:94:b2:d3: ea:40:c0:33:c0:97:3a:87:56:e6:a4:75:83:30:02:33:4b:0d: 75:1a:be:04:0a:37:51:5c:3f:86:48:0d:d9:38:4b:91:31:74: f8:32:38:bd:c7:81:9b:59:cf:d8:bb:c4:52:e8:2e:b2:a2:fa: 72:8e:51:20:06:78:d4:b5:89:81:91:06:63:67:07:c2:03:8f: 53:44:d1:64:bc:5f:2d:4b:47:f0:4a:f8:c1:d4:3e:e8:12:ee: 47:c1:c3:6a:8f:46:13:8f:db:bd:42:dd:91:ae:65:9b:33:92: 78:f8:ef:07:d2:bf:63:e3:ea:20:ba:a1:b6:26:38:ea:89:7f: 54:2a:75:08:3f:19:9a:a0:54:9a:24:00:85:0e:d8:c3:0c:10: 42:15:4f:84:e7:ab:43:a5:23:32:61:ee:68:a0:b9:22:f8:b2: f3:89:64:c2:25:ad:99:c0:e2:92:19:ce:df:37:48:83:fb:2d: 1e:66:1a:31:a7:00:c2:41:9e:d0:2f:47:88:26:57:44:c0:dd: c1:2f:a4:a2:06:eb:f4:eb:c6:5a:86:6b:3a:4a:a2:81:9e:8b: 09:9a:69:0e:e2:e7:bf:5a:29:bb:5c:ee:08:8a:b8:28:71:6c: 26:7e:5c:53 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjMxMTA4MjEwODU4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRiZjhlOS02YjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YV+/yLQz1I7jufZfHFl1Z2btifk1EKHq98bzETtmP3Q+p0gwgOgsRJza/tZ xqZ/b3NPUvojf/BhnHUUjTsb2rTsZ26CpFvE7yV2PItXKPoFYacJwIdx6l5lfmIf jv4/V6b1gQDMDHynHBj7di7dImlEy09AA3JegASgZItVJZZ/pgsuzahmMqysWJWj yDHu5C0jVuXF1XLHXyrGjg8t6+MayJ+fkxvp4hYw2KYfU/DxBNFW/ssS6J4oc94l YcA9RsPeJ1X+OqvaiXSz3BeZVztgbpcYYLuHgwJfW1KtRqJpzWdx9Z3sHiHISjZL V6N1wtjuYiQT1ooDSknb5s/r9QIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHmLDSt2 1fFE5s3B9JZJqebepU7UMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvMzEzMEE5QjQ2 ODEwMTFFRUI1NTJDNjVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAeGeoADBAeJ3IADBAWPXCAwDQYJKoZIhvcNAQELBQADggEB AAuoBvuzG018tXYwfqJKEZSy0+pAwDPAlzqHVuakdYMwAjNLDXUavgQKN1FcP4ZI Ddk4S5ExdPgyOL3HgZtZz9i7xFLoLrKi+nKOUSAGeNS1iYGRBmNnB8IDj1NE0WS8 Xy1LR/BK+MHUPugS7kfBw2qPRhOP271C3ZGuZZszknj47wfSv2Pj6iC6obYmOOqJ f1QqdQg/GZqgVJokAIUO2MMMEEIVT4Tnq0OlIzJh7miguSL4svOJZMIlrZnA4pIZ zt83SIP7LR5mGjGnAMJBntAvR4gmV0TA3cEvpKIG6/TrxlqGazpKooGeiwmaaQ7i 579aKbtc7giKuChxbCZ+XFM= -----END CERTIFICATE-----Generated at Thu May 16 22:23:37 2024 by rpki-client on console-fra.rpki-client.org