$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa File: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json) Hash identifier: +idkc0Y+TplJvB7T7xrVzyMgw/UlYDqH1h1gbH9ycfU= Subject key identifier: 7C:51:4E:CA:6D:E4:99:60:E0:B8:11:A6:0A:CD:AA:5E:56:20:CC:B8 Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: B0 Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa Signing time: Wed 18 Sep 2024 10:57:34 +0000 ROA not before: Wed 18 Sep 2024 10:57:34 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 36007 IP address blocks: 45.130.164.0/24 maxlen: 24 45.130.165.0/24 maxlen: 24 45.130.166.0/24 maxlen: 24 45.130.167.0/24 maxlen: 24 45.151.152.0/24 maxlen: 24 45.151.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Sep 18 10:57:34 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66eab21d-8ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:33:8c:ff:69:4d:11:38:1a:9c:cb:a4:b1:89: 26:c2:58:bc:a5:9f:8d:8e:9d:44:ce:c9:e4:8f:77: 17:e6:e5:41:6b:7c:6d:1f:04:49:04:ef:91:f2:ae: 67:17:97:06:a1:9a:bb:4b:13:bf:a2:b4:f1:c5:a9: 19:3d:0f:18:d4:cd:6f:7b:0f:b1:da:e5:5c:a6:6a: de:b3:bc:c8:d2:73:61:1d:3e:7d:38:cd:a2:c0:80: 4f:ae:86:fb:57:6a:4e:94:6d:41:c9:b4:14:15:91: 6c:32:02:93:b0:2b:5f:ed:3c:c0:0a:ad:56:57:c6: 72:58:8f:bd:39:f1:c4:6e:b1:e9:54:50:94:57:47: 50:37:aa:22:8d:b3:3a:06:54:19:37:cc:ee:15:d8: 03:bb:11:e6:1c:ea:1c:1b:c2:a5:61:bd:8b:53:01: 5d:9e:76:12:6c:3a:28:17:56:cf:1a:e4:96:ee:62: 7f:45:00:26:2e:71:94:23:aa:0a:43:6c:26:47:d8: 9c:e3:5b:8e:5f:bc:4f:79:f4:38:aa:d0:db:34:43: 44:42:9d:28:af:10:85:b0:61:25:57:e1:f7:ef:78: d2:b3:a7:37:50:a2:ab:18:1b:4c:37:c1:d4:ed:95: 8e:69:39:66:2c:27:79:ed:c7:9b:25:73:4c:45:29: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:4E:CA:6D:E4:99:60:E0:B8:11:A6:0A:CD:AA:5E:56:20:CC:B8 X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.130.164.0/22 45.151.152.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:48:6c:de:64:85:96:cb:67:bb:45:1c:42:9c:10:eb:57:a1: 2b:47:33:60:e5:cc:ab:cf:be:51:f2:9b:fc:d2:e3:31:ec:61: e4:80:5f:ae:88:9d:39:e9:96:15:13:34:72:bc:90:4f:ec:8f: 2c:f5:88:73:04:64:a6:40:6c:dd:19:da:f3:17:fb:db:fe:94: fb:9c:a6:52:51:61:06:fa:cb:2e:9d:2d:65:18:74:89:e8:a6: b3:c2:71:04:4f:95:c1:9d:5e:10:bf:d4:a1:75:96:9d:07:2f: e1:ac:9a:43:38:75:5b:ab:f1:7a:0a:b2:55:75:39:39:58:74: e4:b0:2e:af:37:05:78:9a:18:c8:6d:28:b5:e9:04:ae:cf:cf: 97:bc:aa:2a:1e:94:12:43:48:6f:82:48:e2:bb:16:69:f7:d7: ac:b1:0f:27:b7:ba:78:f5:46:34:b6:1e:f3:3d:3a:38:f1:11: 2e:1c:ab:1a:fc:bd:9b:bf:8a:fb:77:7d:5d:54:01:94:80:25: de:76:e5:19:f7:40:81:94:d1:51:28:2f:4f:a1:ab:90:17:32: 89:ec:60:4d:78:d7:2f:da:71:79:1f:44:67:9b:fc:ba:13:13: 93:e0:bb:7c:ed:b5:aa:c6:88:a7:58:4a:b8:58:79:b3:3b:eb: 06:5b:a6:48 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjQwOTE4MTA1NzM0WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVhYjIxZC04YWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DOM/2lNETganMuksYkmwli8pZ+Njp1Ezsnkj3cX5uVBa3xtHwRJBO+R8q5n F5cGoZq7SxO/orTxxakZPQ8Y1M1vew+x2uVcpmres7zI0nNhHT59OM2iwIBProb7 V2pOlG1BybQUFZFsMgKTsCtf7TzACq1WV8ZyWI+9OfHEbrHpVFCUV0dQN6oijbM6 BlQZN8zuFdgDuxHmHOocG8KlYb2LUwFdnnYSbDooF1bPGuSW7mJ/RQAmLnGUI6oK Q2wmR9ic41uOX7xPefQ4qtDbNENEQp0orxCFsGElV+H373jSs6c3UKKrGBtMN8HU 7ZWOaTlmLCd57cebJXNMRSmHwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHxRTspt 5Jlg4LgRpgrNql5WIMy4MB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEU0QjcvOTZFNjY3NUE3ODRFMTFFRUIxOUFEMzREQzRGOUFFMDIvMUU0QUJDOEM1 MEMxMTFFRkE2NEMyNDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAItgqQDBAEtl5gwDQYJKoZIhvcNAQELBQADggEBAFpIbN5k hZbLZ7tFHEKcEOtXoStHM2DlzKvPvlHym/zS4zHsYeSAX66InTnplhUTNHK8kE/s jyz1iHMEZKZAbN0Z2vMX+9v+lPucplJRYQb6yy6dLWUYdInoprPCcQRPlcGdXhC/ 1KF1lp0HL+GsmkM4dVur8XoKslV1OTlYdOSwLq83BXiaGMhtKLXpBK7Pz5e8qioe lBJDSG+CSOK7Fmn316yxDye3unj1RjS2HvM9OjjxES4cqxr8vZu/ivt3fV1UAZSA Jd525Rn3QIGU0VEoL0+hq5AXMonsYE141y/acXkfRGeb/LoTE5Pgu3zttarGiKdY SrhYebM76wZbpkg= -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:22 2024 by rpki-client on console-fra.rpki-client.org