$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa File: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (raw, json) Hash identifier: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y= Subject key identifier: 9D:FE:0C:41:07:70:E2:8B:FD:C4:26:D7:66:31:42:B6:8D:A1:35:61 Certificate issuer: /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Certificate serial: 02 Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa Signing time: Tue 26 Nov 2024 10:07:26 +0000 ROA not before: Tue 26 Nov 2024 10:07:26 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 133894 IP address blocks: 160.191.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jan 2025 05:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF Validity Not Before: Nov 26 10:07:26 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=67459dde-04af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0d:bb:88:f6:5f:f2:97:55:53:77:f7:5d:e2: 9e:d7:ce:4e:19:a4:55:f3:b3:21:e8:48:5a:e0:ee: cc:c9:f7:d7:f9:91:18:a0:1f:34:58:5f:66:06:aa: 3f:c6:21:00:2e:f3:e9:f0:10:c8:4c:7f:dd:2c:2e: f3:2e:08:50:e7:1e:09:31:13:e2:99:50:1d:4a:aa: e0:83:a6:a8:5c:8a:d7:18:65:02:bf:cb:94:63:b4: 81:c4:a5:b4:7b:9c:64:df:e6:c3:62:2f:08:fd:c4: bd:42:ab:fe:45:cd:0a:c8:c5:98:ce:f2:62:97:b3: 47:c2:b4:12:d3:7d:6a:5d:ca:f9:54:8d:d8:00:04: 80:89:a6:20:0e:54:f1:34:61:1e:d8:95:31:3a:4e: 7d:24:d0:31:d3:d3:46:70:1e:d2:fe:d6:e7:6e:f7: 4c:d1:b3:cc:77:99:a9:18:b6:7b:b1:4b:04:65:be: e3:67:4d:db:fe:2e:42:c2:e2:6b:15:80:77:7d:4f: 57:04:ad:a5:99:72:0c:64:06:9e:b0:1d:3a:0f:da: bc:59:5a:d1:b8:15:32:bf:f5:68:52:6f:e6:cd:8f: 8d:66:c2:15:09:5a:6c:28:10:68:dc:19:fb:16:84: fc:a2:fb:29:fb:9b:4c:d8:cf:ef:b7:6f:21:99:8c: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FE:0C:41:07:70:E2:8B:FD:C4:26:D7:66:31:42:B6:8D:A1:35:61 X509v3 Authority Key Identifier: keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.140.0/24 Signature Algorithm: sha256WithRSAEncryption a1:0a:a7:2e:85:e0:77:dc:44:66:bd:84:f2:52:9c:39:68:4e: 32:12:a9:45:59:fc:46:16:9e:e7:bd:db:26:64:de:e8:e7:8b: 6c:ba:8d:1f:ee:ef:ef:a1:60:75:98:15:10:13:0e:7e:c5:3a: f7:f4:f5:16:da:ca:da:56:f9:d6:53:bd:81:3f:e9:50:34:73: 89:ce:65:6d:45:3c:52:1a:58:9a:28:95:9c:ed:5b:5f:f2:7b: b7:67:35:c1:b2:fd:48:72:56:40:95:b8:f9:75:03:26:27:d5: 6e:f1:d3:64:91:78:79:95:65:a4:c5:6b:c2:9d:a3:52:92:41: 28:cd:57:ac:90:45:a6:e0:7f:25:22:02:b7:dc:29:71:e9:28: cb:2b:bf:a0:0c:9d:8d:f7:c9:8e:ba:3d:9f:e0:ab:bc:ef:3b: f9:5f:c5:7f:49:9d:50:f0:9d:4e:a6:00:2b:fe:3f:b1:cd:67: 6a:de:be:f6:2c:53:4b:5e:76:88:cb:1c:bc:d5:f3:d8:e6:06: 04:b2:80:b9:11:03:97:cd:33:81:39:7f:67:4a:7e:20:24:1d: 46:f9:42:2b:11:76:bc:c7:8a:88:19:2e:77:b7:21:7a:20:64: b7:8d:5b:59:a4:45:76:cb:a6:92:4e:46:3d:f0:9e:51:23:a4: 15:5c:8c:9e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1NkZCMERDMUIw RDU1NTdFRjAeFw0yNDExMjYxMDA3MjZaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDU5ZGRlLTA0YWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYDbuI9l/yl1VTd/dd4p7Xzk4ZpFXzsyHoSFrg7szJ99f5kRigHzRYX2YGqj/G IQAu8+nwEMhMf90sLvMuCFDnHgkxE+KZUB1KquCDpqhcitcYZQK/y5RjtIHEpbR7 nGTf5sNiLwj9xL1Cq/5FzQrIxZjO8mKXs0fCtBLTfWpdyvlUjdgABICJpiAOVPE0 YR7YlTE6Tn0k0DHT00ZwHtL+1udu90zRs8x3makYtnuxSwRlvuNnTdv+LkLC4msV gHd9T1cEraWZcgxkBp6wHToP2rxZWtG4FTK/9WhSb+bNj41mwhUJWmwoEGjcGfsW hPyi+yn7m0zYz++3byGZjD8LAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUnf4MQQdw 4ov9xCbXZjFCto2hNWEwHwYDVR0jBBgwFoAURwHPLSggCdbG6vRVb7DcGw1VV+8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0MzOTU4MkMwQUJE QTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYt OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUndIUExTZ2dDZGJHNnZSVmI3RGNHdzFWVi04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REFDNS9DMzk1ODJDMEFCREExMUVGQTFDMTRFNzZDNEY5QUUwMi8zQzdDNUZGOEFC REUxMUVGOERCQzhFMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC/jDANBgkqhkiG9w0BAQsFAAOCAQEAoQqnLoXgd9xEZr2E 8lKcOWhOMhKpRVn8Rhae573bJmTe6OeLbLqNH+7v76FgdZgVEBMOfsU69/T1FtrK 2lb51lO9gT/pUDRzic5lbUU8UhpYmiiVnO1bX/J7t2c1wbL9SHJWQJW4+XUDJifV bvHTZJF4eZVlpMVrwp2jUpJBKM1XrJBFpuB/JSICt9wpcekoyyu/oAydjffJjro9 n+CrvO87+V/Ff0mdUPCdTqYAK/4/sc1nat6+9ixTS152iMscvNXz2OYGBLKAuRED l80zgTl/Z0p+ICQdRvlCKxF2vMeKiBkud7cheiBkt41bWaRFdsumkk5GPfCeUSOk FVyMng== -----END CERTIFICATE-----Generated at Fri Dec 27 07:43:26 2024 by rpki-client on console-ams.rpki-client.org