$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3E3DC8C06EA511EF821CAA1CC4F9AE02.roa File: 3E3DC8C06EA511EF821CAA1CC4F9AE02.roa (raw, json) Hash identifier: 6CmTIkV+9VemnHNavKc0LUaZUwLGEmGBDr1XOPG7+VA= Subject key identifier: A6:20:5A:D2:E0:51:DB:7C:57:DE:1C:7E:A2:FB:21:8D:0B:84:C4:8B Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1B3A Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3E3DC8C06EA511EF821CAA1CC4F9AE02.roa Signing time: Mon 09 Sep 2024 12:15:47 +0000 ROA not before: Mon 09 Sep 2024 12:15:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135778 IP address blocks: 160.30.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6970 (0x1b3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 9 12:15:47 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66dee6f2-90dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:30:2f:17:36:c2:7d:04:83:4a:35:cd:70: ea:5d:12:fc:d4:0a:39:bb:9b:a2:b4:ce:2c:9f:f4: c4:f4:2d:a4:61:c5:e9:7d:ab:2c:c2:0e:a4:06:e4: 8a:3a:9a:f0:29:44:16:06:07:87:96:ed:db:2f:a3: de:89:2e:b3:85:bb:74:8a:80:0a:1c:42:05:2d:97: bf:68:42:50:33:7b:e4:89:5f:88:a1:0f:4f:19:a4: 63:46:5f:b5:27:47:01:de:67:1c:57:5b:fd:62:0d: 85:e9:f5:11:38:6b:9e:b8:6a:72:a9:ba:d2:33:e6: 64:dd:b9:7f:20:83:fe:9f:ae:02:e0:4c:8c:69:a1: 90:4a:4b:07:8f:b2:cb:26:93:b3:bc:f5:28:45:d7: 93:af:fb:2b:34:e2:86:f8:f7:91:d8:67:da:46:87: 75:27:60:b7:9c:be:b6:58:65:c5:09:d2:a2:b9:d9: 00:42:33:aa:e5:ef:90:a5:b8:59:d7:fa:34:e6:4e: c5:22:2e:4a:67:89:bd:52:a9:65:75:b1:dd:ed:ed: ae:ef:0d:df:49:cc:7f:20:49:0f:62:8e:4c:38:11: 91:06:c2:9b:a6:06:64:f6:93:bb:0f:fd:99:bf:59: e1:96:08:ef:3a:63:7f:6f:12:b6:c4:0c:c0:69:42: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:20:5A:D2:E0:51:DB:7C:57:DE:1C:7E:A2:FB:21:8D:0B:84:C4:8B X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3E3DC8C06EA511EF821CAA1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.28.0/23 Signature Algorithm: sha256WithRSAEncryption a2:98:f9:09:e3:09:63:e4:da:a2:c3:ce:96:98:fe:4e:84:67: 41:ba:2a:c2:39:88:d9:9f:aa:81:03:c9:d4:75:ec:44:37:d7: 78:3c:33:12:d7:d2:1b:6c:76:a0:76:30:02:8d:4f:0a:27:ef: e1:f1:53:15:0e:39:b5:64:2e:91:ed:c2:b7:d4:c6:70:b9:16: 06:71:02:b4:1f:6b:c3:98:cd:91:dc:45:da:f2:eb:36:2e:2b: 02:cd:dc:f5:d7:a7:8e:a6:63:0a:de:6c:28:09:fe:53:46:3e: 31:fb:d0:61:78:95:15:41:e3:6c:af:56:3e:9c:d4:fc:f6:5b: ca:53:67:80:56:8d:c1:69:df:19:f8:c2:47:0b:4f:2f:b3:1b: 96:db:27:40:f6:ac:c3:57:a5:bc:0f:a7:87:c0:da:77:b3:22: b8:16:b3:19:d7:37:64:3f:b3:60:ef:e6:fd:e4:d1:d9:6e:b0: 60:5a:1d:f4:35:f1:aa:06:ed:5d:9a:e4:20:57:53:c1:10:96: 07:b1:04:3a:1b:7f:7f:4e:e7:f9:db:cc:c8:81:a7:3a:1c:b4: c7:04:f2:c7:a3:78:1f:a1:a5:35:09:70:8f:61:d4:87:4e:98: 8c:85:a1:2a:45:0b:21:08:18:b3:f0:c6:d4:47:62:2f:fd:9c: 33:7e:39:e6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwOTA5MTIxNTQ3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRlZTZmMi05MGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznswLxc2wn0Eg0o1zXDqXRL81Ao5u5uitM4sn/TE9C2kYcXpfasswg6kBuSK OprwKUQWBgeHlu3bL6PeiS6zhbt0ioAKHEIFLZe/aEJQM3vkiV+IoQ9PGaRjRl+1 J0cB3mccV1v9Yg2F6fUROGueuGpyqbrSM+Zk3bl/IIP+n64C4EyMaaGQSksHj7LL JpOzvPUoRdeTr/srNOKG+PeR2GfaRod1J2C3nL62WGXFCdKiudkAQjOq5e+QpbhZ 1/o05k7FIi5KZ4m9UqlldbHd7e2u7w3fScx/IEkPYo5MOBGRBsKbpgZk9pO7D/2Z v1nhlgjvOmN/bxK2xAzAaUKZEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKYgWtLg Udt8V94cfqL7IY0LhMSLMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0UzREM4QzA2 RUE1MTFFRjgyMUNBQTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHhwwDQYJKoZIhvcNAQELBQADggEBAKKY+QnjCWPk2qLD zpaY/k6EZ0G6KsI5iNmfqoEDydR17EQ313g8MxLX0htsdqB2MAKNTwon7+HxUxUO ObVkLpHtwrfUxnC5FgZxArQfa8OYzZHcRdry6zYuKwLN3PXXp46mYwrebCgJ/lNG PjH70GF4lRVB42yvVj6c1Pz2W8pTZ4BWjcFp3xn4wkcLTy+zG5bbJ0D2rMNXpbwP p4fA2nezIrgWsxnXN2Q/s2Dv5v3k0dlusGBaHfQ18aoG7V2a5CBXU8EQlgexBDob f39O5/nbzMiBpzoctMcE8sejeB+hpTUJcI9h1IdOmIyFoSpFCyEIGLPwxtRHYi/9 nDN+OeY= -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org