$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa File: 3BC0C42E814E11EFBDAC5230C4F9AE02.roa (raw, json) Hash identifier: gYL7VPhOsLGGrYswhuzSahAt9R7fYWl21JHWSv9AfmY= Subject key identifier: BA:C4:68:51:0B:1A:E4:ED:B2:A6:42:76:FE:74:4B:B4:89:64:02:E9 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1B7A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa Signing time: Thu 03 Oct 2024 06:10:48 +0000 ROA not before: Thu 03 Oct 2024 06:10:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 150577 IP address blocks: 160.25.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7034 (0x1b7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Oct 3 06:10:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66fe3568-0cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:04:40:a6:92:bb:3e:d9:68:c3:92:d6:cb:16: 8e:2c:8b:f4:3d:dc:ab:83:ed:97:2f:c2:53:00:85: 86:d0:1c:cd:49:6b:bb:f5:ad:5f:a3:a2:b1:00:75: 5b:71:a6:06:b4:e3:9a:2c:d3:0d:a8:f3:f2:10:6e: cb:2b:98:a6:66:d1:13:76:6e:74:71:73:d1:9e:90: f2:cf:4d:89:55:85:b1:04:69:45:80:b7:c8:9c:3a: e4:00:06:62:24:75:59:8b:21:95:34:e9:24:5c:eb: ee:7a:5d:c7:70:4a:c1:a4:6c:4b:a6:71:81:1e:73: c0:97:13:49:f5:ad:38:c1:97:08:43:88:bf:47:69: aa:c9:1e:58:46:4a:00:71:ac:55:7d:58:c5:21:fd: 06:a2:00:2e:f0:b8:22:26:3d:a1:3c:f8:ca:11:b5: a0:b0:3e:41:65:31:01:b5:5b:d9:e3:07:49:a8:54: 7c:da:9c:e7:84:7f:44:98:c8:af:30:19:4f:03:22: e8:67:f2:1e:d4:40:01:71:0e:cb:b6:12:ee:ee:f8: f2:1a:54:89:52:a3:7c:d5:c7:eb:01:d1:24:23:5a: c7:e2:d8:17:7f:e5:98:ee:db:06:63:89:a1:c4:2d: 0c:da:6d:32:c6:3e:82:86:1e:89:4e:f4:47:9c:54: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C4:68:51:0B:1A:E4:ED:B2:A6:42:76:FE:74:4B:B4:89:64:02:E9 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3BC0C42E814E11EFBDAC5230C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.172.0/24 Signature Algorithm: sha256WithRSAEncryption cd:cc:b5:67:e7:e3:3b:c5:3b:15:4a:15:ca:82:17:a3:ca:4f: 06:13:32:29:14:6c:70:1d:83:97:25:5e:37:05:b7:cf:0f:42: e7:fa:67:66:d0:67:b1:96:64:db:ac:37:58:e4:50:29:5e:e3: 36:1c:fd:04:20:25:66:49:92:0c:ac:af:6e:ad:b2:22:90:10: 87:20:f4:ec:e3:43:5c:9e:1c:25:17:a5:e3:1d:d0:3c:3e:51: 16:31:9c:46:ec:f5:b0:e2:f9:a6:ad:32:f3:05:58:d4:c7:a6: a8:75:89:08:e6:da:9e:96:a5:c0:6d:b0:ec:95:3c:f1:d1:c9: f3:f0:11:fa:5f:5e:86:d5:67:49:27:a7:26:5a:10:40:50:23: 19:04:75:77:24:a5:d8:99:f4:08:a5:8b:11:b4:68:be:f7:f6: 75:44:a3:88:10:be:33:57:bd:19:49:25:94:fe:17:d5:3a:37: 74:5c:47:19:32:b0:94:77:8c:8e:68:91:5d:aa:69:e9:1b:5d: 66:25:78:2f:a5:cd:27:c7:bd:2b:8c:82:7e:6b:0c:29:5f:5b: ba:35:1b:05:82:be:91:be:a7:80:f6:ea:ec:49:29:51:2b:fa: 3f:f5:ae:cc:05:18:de:7c:27:23:c5:4a:ca:51:a7:56:8a:d0: dc:a9:89:8f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMDAzMDYxMDQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZlMzU2OC0wY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wRAppK7Ptlow5LWyxaOLIv0Pdyrg+2XL8JTAIWG0BzNSWu79a1fo6KxAHVb caYGtOOaLNMNqPPyEG7LK5imZtETdm50cXPRnpDyz02JVYWxBGlFgLfInDrkAAZi JHVZiyGVNOkkXOvuel3HcErBpGxLpnGBHnPAlxNJ9a04wZcIQ4i/R2mqyR5YRkoA caxVfVjFIf0GogAu8LgiJj2hPPjKEbWgsD5BZTEBtVvZ4wdJqFR82pznhH9EmMiv MBlPAyLoZ/Ie1EABcQ7LthLu7vjyGlSJUqN81cfrAdEkI1rH4tgXf+WY7tsGY4mh xC0M2m0yxj6Chh6JTvRHnFQd+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLrEaFEL GuTtsqZCdv50S7SJZALpMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0JDMEM0MkU4 MTRFMTFFRkJEQUM1MjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgGawwDQYJKoZIhvcNAQELBQADggEBAM3MtWfn4zvFOxVK FcqCF6PKTwYTMikUbHAdg5clXjcFt88PQuf6Z2bQZ7GWZNusN1jkUCle4zYc/QQg JWZJkgysr26tsiKQEIcg9OzjQ1yeHCUXpeMd0Dw+URYxnEbs9bDi+aatMvMFWNTH pqh1iQjm2p6WpcBtsOyVPPHRyfPwEfpfXobVZ0knpyZaEEBQIxkEdXckpdiZ9Ail ixG0aL739nVEo4gQvjNXvRlJJZT+F9U6N3RcRxkysJR3jI5okV2qaekbXWYleC+l zSfHvSuMgn5rDClfW7o1GwWCvpG+p4D26uxJKVEr+j/1rswFGN58JyPFSspRp1aK 0NypiY8= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:52 2024 by rpki-client on console-fra.rpki-client.org