$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa File: 4A68B404EF5A11EEB09CEA53C4F9AE02.roa (raw, json) Hash identifier: oIJ5W3QVIa4YGr8FBNUGRHva+x5HF8Vbb7EeJPMTI4k= Subject key identifier: BF:6C:12:39:DF:D4:69:6A:CE:1E:A4:4B:11:CA:97:83:28:C6:C5:05 Certificate issuer: /CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Certificate serial: 0999 Authority key identifier: 8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa Signing time: Wed 06 Nov 2024 20:09:47 +0000 ROA not before: Wed 06 Nov 2024 20:09:47 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152194 IP address blocks: 134.122.128.0/17 maxlen: 24 137.220.128.0/17 maxlen: 24 143.92.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2457 (0x999) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661/serialNumber=8BF7E2930CFC6EEB916E7390F893E0100BA93B32 Validity Not Before: Nov 6 20:09:47 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bcd0b-e39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:cc:c4:7b:58:76:4e:ec:63:8d:c1:5a:aa: 91:df:c2:50:a5:30:86:be:e7:23:fe:9a:5c:22:be: be:c3:81:86:91:a4:e6:da:b0:14:41:51:b5:9e:21: db:a5:18:8d:86:ab:8b:53:af:0a:52:06:f9:5e:2a: 28:20:98:b6:8b:84:c7:a3:07:cd:09:30:f4:36:ce: b5:19:b9:e9:62:24:fc:26:d2:8c:cf:22:2e:7d:c3: 3d:98:ab:19:85:37:2a:b8:8a:f1:97:16:7b:0a:3c: b4:3c:f5:b5:aa:13:86:e5:c0:5a:fe:e3:ab:e6:e2: fc:ed:04:59:48:bb:7b:19:bc:cf:a0:6f:37:c9:ad: f3:6c:da:83:03:fa:81:7d:38:c1:38:a6:a8:e1:67: 56:4d:08:b8:83:8c:37:e9:bf:02:9e:39:0c:c4:10: fa:f7:46:0e:02:ab:e5:f2:2f:82:cf:9f:9c:92:5a: 14:7b:a3:8e:3d:cc:b5:9d:a0:ab:74:30:d2:22:3d: c0:14:6c:d4:98:ef:6e:5e:cc:13:f0:b0:6a:68:09: de:1e:08:bb:0d:24:b3:86:9f:00:22:64:6e:b6:53: 1f:c8:10:58:19:3b:a1:75:60:49:54:53:a9:22:91: 11:f0:9a:38:09:ea:09:40:39:13:71:d5:2b:a0:95: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6C:12:39:DF:D4:69:6A:CE:1E:A4:4B:11:CA:97:83:28:C6:C5:05 X509v3 Authority Key Identifier: keyid:8B:F7:E2:93:0C:FC:6E:EB:91:6E:73:90:F8:93:E0:10:0B:A9:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/i_fikwz8buuRbnOQ-JPgEAupOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i_fikwz8buuRbnOQ-JPgEAupOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/04AAB29E836D11EAB4A2D76DC4F9AE02/4A68B404EF5A11EEB09CEA53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.122.128.0/17 137.220.128.0/17 143.92.32.0/19 Signature Algorithm: sha256WithRSAEncryption 63:3c:3a:ab:cb:aa:d8:7e:75:e9:7e:c1:03:44:99:f5:ff:da: 94:2e:9e:1e:f6:a8:c4:73:89:51:1d:14:ab:ec:7c:9a:55:00: 36:22:1d:d8:37:09:ea:4d:70:59:66:56:1f:16:71:67:f8:05: e4:ec:57:e8:a6:17:24:59:e4:0a:c1:8f:c2:ef:04:75:58:fb: cb:eb:78:8b:8a:65:f2:46:5e:72:2c:07:a3:35:e9:c2:d3:f6: a4:91:86:71:08:3a:8b:97:2a:9b:04:d9:30:95:84:29:79:84: d1:57:24:77:98:ea:58:38:c7:d2:9a:56:5d:1d:ff:a9:ed:68: 0e:17:76:ff:38:ef:68:68:7e:37:cd:09:19:04:e0:b2:d0:ef: 0b:86:3d:49:d6:09:72:53:77:57:48:73:ed:80:cb:32:d9:5f: 11:d9:40:6a:68:e7:74:df:1a:30:7b:0b:54:04:8e:6c:4e:c1: 40:7b:1c:cf:3e:1c:32:7d:18:99:23:c0:8d:a4:a3:ad:70:22: cd:d5:13:28:6b:41:68:a8:74:2a:81:02:d4:c8:c1:b4:54:90: 82:c0:85:4a:d1:0a:4c:bb:74:f2:a4:10:8b:9e:2b:06:9e:cd: 3f:75:43:7b:5a:33:ab:f4:51:a2:85:e8:bd:4e:6f:6a:37:e6: 5c:7a:ab:75 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDhCRjdFMjkzMENGQzZFRUI5MTZFNzM5MEY4OTNFMDEw MEJBOTNCMzIwHhcNMjQxMTA2MjAwOTQ3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiY2QwYi1lMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbHMxHtYdk7sY43BWqqR38JQpTCGvucj/ppcIr6+w4GGkaTm2rAUQVG1niHb pRiNhquLU68KUgb5XiooIJi2i4THowfNCTD0Ns61GbnpYiT8JtKMzyIufcM9mKsZ hTcquIrxlxZ7Cjy0PPW1qhOG5cBa/uOr5uL87QRZSLt7GbzPoG83ya3zbNqDA/qB fTjBOKao4WdWTQi4g4w36b8CnjkMxBD690YOAqvl8i+Cz5+ckloUe6OOPcy1naCr dDDSIj3AFGzUmO9uXswT8LBqaAneHgi7DSSzhp8AImRutlMfyBBYGTuhdWBJVFOp IpER8Jo4CeoJQDkTcdUroJWCkwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFL9sEjnf 1Glqzh6kSxHKl4MoxsUFMB8GA1UdIwQYMBaAFIv34pMM/G7rkW5zkPiT4BALqTsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wNEFBQjI5RTgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9pX2Zpa3d6OGJ1dVJibk9RLUpQZ0VBdXBP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lfZmlrd3o4YnV1UmJuT1EtSlBnRUF1cE96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEM2NjEvMDRBQUIyOUU4MzZEMTFFQUI0QTJENzZEQzRGOUFFMDIvNEE2OEI0MDRF RjVBMTFFRUIwOUNFQTUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAeGeoADBAeJ3IADBAWPXCAwDQYJKoZIhvcNAQELBQADggEB AGM8OqvLqth+del+wQNEmfX/2pQunh72qMRziVEdFKvsfJpVADYiHdg3CepNcFlm Vh8WcWf4BeTsV+imFyRZ5ArBj8LvBHVY+8vreIuKZfJGXnIsB6M16cLT9qSRhnEI OouXKpsE2TCVhCl5hNFXJHeY6lg4x9KaVl0d/6ntaA4Xdv8472hofjfNCRkE4LLQ 7wuGPUnWCXJTd1dIc+2AyzLZXxHZQGpo53TfGjB7C1QEjmxOwUB7HM8+HDJ9GJkj wI2ko61wIs3VEyhrQWiodCqBAtTIwbRUkILAhUrRCky7dPKkEIueKwaezT91Q3ta M6v0UaKF6L1Ob2o35lx6q3U= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:14 2024 by rpki-client on console-fra.rpki-client.org