$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1424121EDC4811EEB580AA6AC4F9AE02.roa File: 1424121EDC4811EEB580AA6AC4F9AE02.roa (raw, json) Hash identifier: fqKadX+qTqTtTOr8K8qcYdkqwxj3Gs6WQT+4IgTMjkw= Subject key identifier: 6A:E5:98:68:7B:35:6D:C6:B5:F7:39:12:50:43:51:D0:D6:D5:3B:6D Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 8444 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1424121EDC4811EEB580AA6AC4F9AE02.roa Signing time: Thu 07 Mar 2024 06:01:03 +0000 ROA not before: Thu 07 Mar 2024 06:01:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 45487 IP address blocks: 113.11.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33860 (0x8444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Mar 7 06:01:03 2024 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=65e9581f-e1dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:f3:6a:c0:13:4f:eb:05:ba:21:4b:16:c6: 28:f9:4c:7f:b8:e2:bf:f0:8e:c2:af:13:bb:97:e4: c3:37:5e:2f:94:f7:cc:85:5c:c9:66:ea:0f:b1:0e: 9d:c2:79:43:a2:ac:01:cd:83:bc:0b:94:82:67:fd: 2e:0e:73:39:f8:a0:5d:ad:95:80:a8:2b:d8:86:a6: f5:ce:fc:99:67:96:cc:b8:85:f5:9c:9f:ab:97:28: 2b:9b:d1:08:39:5d:3d:94:88:3d:4e:cd:17:c0:bb: a9:9d:b4:a0:c4:d4:f9:be:b0:15:22:7d:ba:49:06: 56:9a:31:b3:34:2e:a1:55:0d:45:b8:07:96:ff:71: 54:31:fe:7d:e5:ec:25:20:56:72:58:14:da:ab:c6: 66:f1:24:4a:2b:06:38:39:2d:82:70:3a:a6:19:e2: f1:34:8f:60:06:6e:85:4e:68:da:c9:ef:db:05:65: e4:c7:2f:46:f4:b0:50:39:ca:b9:be:20:0a:43:1c: 0d:4f:30:04:aa:4b:23:23:b5:7e:d1:8b:74:e9:07: e1:38:1c:72:32:a1:8c:c6:37:a4:ee:90:2f:57:2c: fe:0a:9e:ee:93:3e:ff:eb:c5:78:ab:95:f0:0c:58: 72:90:58:46:40:9d:fb:68:46:50:ba:27:5e:a2:e2: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E5:98:68:7B:35:6D:C6:B5:F7:39:12:50:43:51:D0:D6:D5:3B:6D X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1424121EDC4811EEB580AA6AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.11.224.0/21 Signature Algorithm: sha256WithRSAEncryption 05:10:23:1a:6e:3d:98:4a:1d:46:97:52:7e:c3:19:5f:bc:a0: c3:b1:0c:c0:5f:61:06:0c:05:c0:62:6c:33:75:c9:bd:11:68: ba:cf:2c:67:39:8c:f1:b0:a3:dc:ea:7b:d1:f6:9e:bf:9b:37: f9:34:94:4f:63:ac:25:db:8b:77:df:34:51:e8:62:fb:7c:46: ad:67:18:6a:4e:00:d1:9e:33:eb:df:bc:1d:a2:54:ca:b0:72: ec:bc:de:b8:eb:a4:61:e3:5e:e4:6d:68:1b:a3:f4:3c:39:96: 32:d5:0c:3f:d1:00:53:06:e3:1e:1f:1c:f3:c1:1c:9b:e5:1c: d0:1c:15:52:3c:e7:14:09:14:c5:f4:a3:02:79:f7:7f:59:71: 4e:c8:80:d7:2d:95:f8:36:c6:7b:a9:9c:bd:1f:18:f3:ee:f7: 37:a1:28:03:fd:4d:c6:98:2a:9f:aa:70:d8:92:39:72:d1:10: a3:84:b4:f2:c6:9a:9a:e5:2a:9b:4b:49:80:e3:f0:11:7c:e4: 9a:c0:a3:70:5e:c8:a8:19:f4:73:5a:21:f5:15:70:d2:46:7d: 1b:b5:a1:4c:2a:15:9c:37:df:f1:35:48:a7:3c:66:fc:1b:45: 94:58:bd:9e:11:fc:7e:3e:ef:5b:50:48:5e:f9:08:57:59:20: b3:13:88:87 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDAIREMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDMwNzA2MDEwM1oXDTI0MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjVlOTU4MWYtZTFkZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDi82rAE0/rBbohSxbGKPlMf7jiv/COwq8Tu5fkwzdeL5T3zIVcyWbqD7EO ncJ5Q6KsAc2DvAuUgmf9Lg5zOfigXa2VgKgr2Iam9c78mWeWzLiF9Zyfq5coK5vR CDldPZSIPU7NF8C7qZ20oMTU+b6wFSJ9ukkGVpoxszQuoVUNRbgHlv9xVDH+feXs JSBWclgU2qvGZvEkSisGODktgnA6phni8TSPYAZuhU5o2snv2wVl5McvRvSwUDnK ub4gCkMcDU8wBKpLIyO1ftGLdOkH4TgccjKhjMY3pO6QL1cs/gqe7pM+/+vFeKuV 8AxYcpBYRkCd+2hGULonXqLiS0cCAwEAAaOCApUwggKRMB0GA1UdDgQWBBRq5Zho ezVtxrX3ORJQQ1HQ1tU7bTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE0MjQxMjFF REM0ODExRUVCNTgwQUE2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQDcQvgMA0GCSqGSIb3DQEBCwUAA4IBAQAFECMabj2YSh1G l1J+wxlfvKDDsQzAX2EGDAXAYmwzdcm9EWi6zyxnOYzxsKPc6nvR9p6/mzf5NJRP Y6wl24t33zRR6GL7fEatZxhqTgDRnjPr37wdolTKsHLsvN6466Rh417kbWgbo/Q8 OZYy1Qw/0QBTBuMeHxzzwRyb5RzQHBVSPOcUCRTF9KMCefd/WXFOyIDXLZX4NsZ7 qZy9Hxjz7vc3oSgD/U3GmCqfqnDYkjly0RCjhLTyxpqa5SqbS0mA4/ARfOSawKNw XsioGfRzWiH1FXDSRn0btaFMKhWcN9/xNUinPGb8G0WUWL2eEfx+Pu9bUEhe+QhX WSCzE4iH -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:27 2024 by rpki-client on console-ams.rpki-client.org