$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63578C70FC11EF9745785BC4F9AE02.roa File: BE63578C70FC11EF9745785BC4F9AE02.roa (raw, json) Hash identifier: PnLQ38DQzjvUY3afFgbjtEWr1q+tixMLL5NKyYNSlFU= Subject key identifier: DF:37:64:95:E9:6E:0A:1D:9F:D7:15:38:3F:32:83:26:EE:3A:91:BF Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1B41 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63578C70FC11EF9745785BC4F9AE02.roa Signing time: Thu 12 Sep 2024 11:47:10 +0000 ROA not before: Thu 12 Sep 2024 11:47:10 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141308 IP address blocks: 160.30.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6977 (0x1b41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 12 11:47:10 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66e2d4be-34e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f3:bb:c2:12:ac:71:cf:c8:cc:15:d2:94:62: 65:a4:4f:93:97:4a:cb:44:81:90:3f:ac:f2:79:0a: a4:92:07:47:d1:6d:c2:d1:96:ec:87:32:a0:f5:10: 33:51:52:e1:39:54:f3:c3:d9:0d:80:6d:68:9b:a4: 24:e6:18:01:2b:33:d2:8a:6e:13:88:7e:0b:63:bd: 84:66:8b:43:10:d6:64:de:f9:6d:a2:2d:fb:27:a6: d8:bc:af:49:fe:d7:b4:67:5d:2d:2f:e1:f5:4a:66: 41:bf:20:9c:2d:e6:c6:ba:a4:07:84:2d:e2:da:10: 8e:8d:38:cd:b3:1a:b0:04:42:ce:97:c6:a7:24:fc: 35:cb:5c:5a:1b:b7:f6:dc:58:60:52:05:56:ef:5c: 2b:07:e6:98:dc:7b:9f:32:97:cf:a0:77:74:b0:26: 65:a6:97:29:8b:3d:c3:67:b7:c4:a6:fd:6c:3b:2c: 63:9e:b1:95:d5:82:96:a6:17:dd:0c:85:d0:86:ec: 1b:7f:d1:0f:f1:81:49:2f:0e:57:f9:5a:36:4e:50: 28:27:92:25:60:d7:8a:5a:a4:c9:6c:b3:7f:66:43: 86:a2:13:9b:92:73:7c:90:78:08:8a:dd:55:03:0c: 76:15:a1:4d:9d:9c:9f:3c:9d:20:ba:89:53:bd:93: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:64:95:E9:6E:0A:1D:9F:D7:15:38:3F:32:83:26:EE:3A:91:BF X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BE63578C70FC11EF9745785BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.144.0/24 Signature Algorithm: sha256WithRSAEncryption 45:87:ed:ff:20:ec:ae:48:28:21:d3:19:7b:2f:01:d9:28:5a: b2:81:c9:1e:8b:e9:33:8c:41:15:98:b2:31:8e:f3:6b:ae:cb: 5f:63:51:b5:c9:8d:5c:d7:cf:a9:47:09:90:db:00:1d:a3:3f: f3:db:9f:bf:80:05:e2:df:9c:86:c1:71:ec:00:27:26:ab:a0: e8:19:b9:60:68:bf:e6:66:e5:45:d3:1a:c4:ab:d6:a0:84:74: 81:01:e2:bb:70:10:20:9f:b5:87:b5:88:19:01:47:de:87:c4: 00:cd:88:60:15:7f:5f:a2:85:db:73:d9:4a:4b:ad:09:7e:2b: 1e:ed:4b:58:1c:3a:d0:ba:95:71:55:fb:bd:2d:6b:96:33:c4: 43:b1:3c:70:11:f8:d8:64:ba:25:35:31:c5:d5:28:86:9a:9b: 01:d7:a3:5a:02:93:2b:1d:76:48:50:07:0c:f8:cb:69:e7:23: 1b:35:75:e6:3b:f4:ac:64:ce:99:a2:a3:4f:7c:23:46:a7:79: 71:40:78:b8:0c:bb:80:af:f2:3a:1d:23:53:f6:19:f6:99:df: 46:65:d6:9c:c6:eb:ad:88:74:3d:9f:53:73:a3:e4:28:5d:45: 69:3e:7f:53:06:70:8e:e5:31:7e:d3:9a:d1:ff:b6:20:e1:c9: ae:e3:05:43 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQwOTEyMTE0NzEwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmUyZDRiZS0zNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovO7whKscc/IzBXSlGJlpE+Tl0rLRIGQP6zyeQqkkgdH0W3C0ZbshzKg9RAz UVLhOVTzw9kNgG1om6Qk5hgBKzPSim4TiH4LY72EZotDENZk3vltoi37J6bYvK9J /te0Z10tL+H1SmZBvyCcLebGuqQHhC3i2hCOjTjNsxqwBELOl8anJPw1y1xaG7f2 3FhgUgVW71wrB+aY3HufMpfPoHd0sCZlppcpiz3DZ7fEpv1sOyxjnrGV1YKWphfd DIXQhuwbf9EP8YFJLw5X+Vo2TlAoJ5IlYNeKWqTJbLN/ZkOGohObknN8kHgIit1V Awx2FaFNnZyfPJ0guolTvZOjTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN83ZJXp bgodn9cVOD8ygybuOpG/MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkU2MzU3OEM3 MEZDMTFFRjk3NDU3ODVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgHpAwDQYJKoZIhvcNAQELBQADggEBAEWH7f8g7K5IKCHT GXsvAdkoWrKByR6L6TOMQRWYsjGO82uuy19jUbXJjVzXz6lHCZDbAB2jP/Pbn7+A BeLfnIbBcewAJyaroOgZuWBov+Zm5UXTGsSr1qCEdIEB4rtwECCftYe1iBkBR96H xADNiGAVf1+ihdtz2UpLrQl+Kx7tS1gcOtC6lXFV+70ta5YzxEOxPHAR+NhkuiU1 McXVKIaamwHXo1oCkysddkhQBwz4y2nnIxs1deY79Kxkzpmio098I0aneXFAeLgM u4Cv8jodI1P2GfaZ30Zl1pzG662IdD2fU3Oj5ChdRWk+f1MGcI7lMX7TmtH/tiDh ya7jBUM= -----END CERTIFICATE-----Generated at Fri Nov 22 06:57:53 2024 by rpki-client on console-fra.rpki-client.org