$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa File: E12607CE6F0411EEA5298939C4F9AE02.roa (raw, json) Hash identifier: nCTIr/V5xZEh3ugXoBfi7Q8QPkS4NVpO4v5sjD/rMzo= Subject key identifier: 18:41:68:80:FC:CF:B4:0B:F2:9B:2A:93:15:16:4D:FF:EF:FD:49:E7 Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Certificate serial: 34 Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa Signing time: Mon 08 Jan 2024 20:29:11 +0000 ROA not before: Mon 08 Jan 2024 20:29:11 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 7575 IP address blocks: 132.234.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Validity Not Before: Jan 8 20:29:11 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=659c5b17-8e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b0:3b:54:50:52:66:18:c1:93:3d:66:a9:70: a3:80:b4:c7:be:2b:77:00:05:1d:ed:e3:1a:f9:25: e3:b9:3a:a1:15:7f:2a:52:a4:f3:cc:1b:0f:6a:d1: c1:db:8b:60:dc:0a:41:f5:28:72:35:11:08:14:c8: 79:ef:0c:da:b5:ae:06:0e:37:ab:00:05:51:2b:37: c2:2f:01:59:f8:14:4b:90:99:f5:c2:12:93:d8:c2: 94:8b:56:3b:32:cf:a0:ea:84:25:d7:fc:65:cb:d8: d6:23:45:8d:4a:91:d1:e6:38:67:a5:89:ea:42:6a: 1a:1c:33:9c:63:ed:8f:91:c5:f7:1f:98:e8:4b:4c: da:c2:e1:c4:17:45:97:da:f9:28:a1:51:f2:68:b3: d6:58:cd:35:f3:4a:01:e7:9c:53:2f:cf:8b:f7:8c: 2f:67:88:99:10:33:df:68:c7:c6:de:03:59:df:b9: fe:8d:bf:8b:2e:bc:3c:66:ce:7d:7a:fc:f1:e7:4d: ad:e7:f6:9e:f7:3e:db:e2:85:38:0c:66:21:b3:33: 73:4b:2d:53:f7:a6:72:7b:dc:4d:a7:20:c7:c5:3f: 65:b3:8f:d3:0d:82:6c:04:26:6b:9a:60:ec:0e:a9: 8a:62:cc:17:e6:83:ee:b3:48:52:f0:cb:50:3e:72: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:41:68:80:FC:CF:B4:0B:F2:9B:2A:93:15:16:4D:FF:EF:FD:49:E7 X509v3 Authority Key Identifier: keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/E12607CE6F0411EEA5298939C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 132.234.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:0d:20:90:b1:66:6c:70:36:bb:8c:be:04:3f:d3:f0:c0:51: 30:92:9b:16:38:6a:d4:49:dc:29:62:f2:1b:00:64:4d:e1:9d: 29:0f:3d:b0:61:99:c7:4e:60:be:9d:b6:1c:f7:88:c8:d2:f3: 52:4b:e6:68:a2:c9:e3:a3:72:7d:b6:c3:54:b8:33:39:b0:34: e1:b1:a0:8d:db:c8:12:22:f6:43:4c:21:b4:fa:f9:36:4a:ba: d1:c6:d6:23:3c:84:9a:cd:0e:6d:a0:e2:99:a3:a9:13:14:29: b7:5c:e1:10:e7:57:16:3c:c5:9a:5d:4d:8a:f0:d5:08:99:b7: 99:3a:01:98:24:59:f3:43:82:54:35:aa:03:03:ce:f8:8f:38: 6d:2b:c1:7c:0d:87:51:0b:d8:32:a9:d4:cf:6d:8d:1d:91:8a: 22:ae:94:60:1e:42:cb:16:1d:5f:c4:2a:5d:1b:00:2e:17:40: 05:90:ac:b8:f5:c6:49:5a:54:58:b0:dd:02:37:40:d1:ce:78: 82:25:f5:f2:d0:d7:c2:d1:0c:5f:e7:fa:f8:b3:61:1b:82:9c: bf:4f:09:b5:ce:57:4c:55:ce:3e:15:0c:80:3c:cd:62:ff:0c: 76:6c:e0:13:76:6d:b5:bb:67:12:22:cd:16:fa:df:dd:23:53: 07:34:0f:3a -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Q0FCRjExMC8GA1UEBRMoQTRERUVEOTU5M0U1OTEzMDNBOUIwMzk4MDYxRkU4RUY1 MTg2NjVDQTAeFw0yNDAxMDgyMDI5MTFaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OWM1YjE3LThlMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNsDtUUFJmGMGTPWapcKOAtMe+K3cABR3t4xr5JeO5OqEVfypSpPPMGw9q0cHb i2DcCkH1KHI1EQgUyHnvDNq1rgYON6sABVErN8IvAVn4FEuQmfXCEpPYwpSLVjsy z6DqhCXX/GXL2NYjRY1KkdHmOGeliepCahocM5xj7Y+RxfcfmOhLTNrC4cQXRZfa +SihUfJos9ZYzTXzSgHnnFMvz4v3jC9niJkQM99ox8beA1nfuf6Nv4suvDxmzn16 /PHnTa3n9p73PtvihTgMZiGzM3NLLVP3pnJ73E2nIMfFP2Wzj9MNgmwEJmuaYOwO qYpizBfmg+6zSFLwy1A+cg6tAgMBAAGjggKUMIICkDAdBgNVHQ4EFgQUGEFogPzP tAvymyqTFRZN/+/9SecwHwYDVR0jBBgwFoAUpN7tlZPlkTA6mwOYBh/o71GGZcow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDQUJGLzE4OTE5NUFDNjgy QTExRUU4QTlFQjgyRkM0RjlBRTAyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pj by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcE43dGxaUGxrVEE2bXdPWUJoX283MUdHWmNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi8xODkxOTVBQzY4MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9FMTI2MDdDRTZG MDQxMUVFQTUyOTg5MzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQP MA0wCwQCAAEwBQMDAITqMA0GCSqGSIb3DQEBCwUAA4IBAQBLDSCQsWZscDa7jL4E P9PwwFEwkpsWOGrUSdwpYvIbAGRN4Z0pDz2wYZnHTmC+nbYc94jI0vNSS+Zoosnj o3J9tsNUuDM5sDThsaCN28gSIvZDTCG0+vk2SrrRxtYjPISazQ5toOKZo6kTFCm3 XOEQ51cWPMWaXU2K8NUImbeZOgGYJFnzQ4JUNaoDA874jzhtK8F8DYdRC9gyqdTP bY0dkYoirpRgHkLLFh1fxCpdGwAuF0AFkKy49cZJWlRYsN0CN0DRzniCJfXy0NfC 0Qxf5/r4s2Ebgpy/Twm1zldMVc4+FQyAPM1i/wx2bOATdm21u2cSIs0W+t/dI1MH NA86 -----END CERTIFICATE-----Generated at Sun Nov 24 19:46:57 2024 by rpki-client on console-fra.rpki-client.org