$ rpki-client -vvf rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/DA0E6EFEE86411ECA54EC03BC4F9AE02.roa File: DA0E6EFEE86411ECA54EC03BC4F9AE02.roa (raw, json) Hash identifier: H4DVjhrQX80NkE2QeTyaoNeUxrpJLEpfDpSQExmSZjk= Subject key identifier: D9:7D:CD:EC:A7:B9:31:BA:81:D7:8E:1A:A2:75:EA:9D:50:D1:AB:7A Certificate issuer: /CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Certificate serial: 10F7 Authority key identifier: 0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/DA0E6EFEE86411ECA54EC03BC4F9AE02.roa Signing time: Fri 12 Apr 2024 17:55:51 +0000 ROA not before: Fri 12 Apr 2024 17:55:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9902 IP address blocks: 167.179.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4343 (0x10f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F646/serialNumber=0B9B2BFC1C6B2C096776AF757D3AF14547E43E72 Validity Not Before: Apr 12 17:55:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661975a7-aa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:94:41:1a:47:01:3f:05:9b:d1:80:1a:4d: 95:f6:3d:1f:e3:42:46:b7:79:a6:ae:9e:77:da:15: be:2c:3c:a6:01:4d:31:58:87:ae:b0:8c:ab:75:c1: 75:41:7a:fa:88:9f:ec:b3:6d:47:c4:f0:f3:4f:72: 72:e8:58:8d:c6:99:ed:83:8e:cd:82:f4:6f:ab:4a: d7:e5:52:0c:5a:6f:3d:bc:ec:6e:e2:90:9a:89:a0: b3:2b:d2:7d:ef:ad:26:28:2a:5d:83:2e:76:31:e2: 2c:d1:9d:0b:6f:fe:fa:04:3e:01:4c:0f:6e:44:91: d6:7e:96:b5:25:66:ea:86:77:41:5c:02:a4:41:fe: 3b:fc:91:a7:5b:9a:7a:64:73:ad:55:5e:97:f0:b7: 4d:51:4a:8f:7b:e0:ae:a0:5b:75:87:6b:fa:d3:9e: eb:86:b6:13:90:69:d0:14:3a:6b:fc:a5:1c:db:9e: 89:7a:39:d4:02:dd:fc:51:c6:cb:5f:db:38:23:6e: 0b:ac:11:d9:5b:e4:d3:a8:05:0c:1b:82:d9:1f:ea: 9f:08:a8:14:ba:d9:bf:60:96:05:41:4d:7d:7e:f2: ae:74:d9:53:08:6e:51:60:ec:6e:3d:82:91:90:a9: 35:ea:c0:77:b2:d1:1e:ed:78:fd:a0:b9:c2:75:06: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:CD:EC:A7:B9:31:BA:81:D7:8E:1A:A2:75:EA:9D:50:D1:AB:7A X509v3 Authority Key Identifier: keyid:0B:9B:2B:FC:1C:6B:2C:09:67:76:AF:75:7D:3A:F1:45:47:E4:3E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/C5sr_BxrLAlndq91fTrxRUfkPnI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C5sr_BxrLAlndq91fTrxRUfkPnI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F646/CECE8C9AF48E11E8B14A341EC4F9AE02/DA0E6EFEE86411ECA54EC03BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.48.0/20 Signature Algorithm: sha256WithRSAEncryption ab:00:0d:e6:48:ec:63:d8:f4:3e:12:25:4b:67:6b:d0:30:61: e9:c5:c3:5f:60:f0:57:da:8f:78:24:74:97:c0:ab:04:c3:bd: 0e:52:64:9e:16:57:dc:e1:45:c6:b1:60:e7:5a:d8:58:cf:e1: 0a:a5:5c:27:6e:c3:80:e4:2f:57:ae:a3:54:43:81:bb:91:5f: 5e:3e:78:15:bc:d5:d6:29:db:95:39:6e:9f:e9:87:4d:16:b7: 0a:b9:6a:4e:b2:90:f5:8f:19:62:84:37:b6:dc:07:2a:15:ac: fe:a5:0f:07:bf:58:12:4f:b4:a8:3b:15:5f:36:db:67:06:aa: c3:48:af:67:68:9a:14:41:80:97:28:e7:88:f1:9e:45:48:75: 36:ef:c1:25:9a:0a:87:af:2b:99:16:f4:50:91:a1:8f:69:f8: bc:29:b4:57:7c:3a:63:e9:8d:3d:e0:92:04:95:5a:ca:e7:6e: 3c:86:42:9f:4e:37:43:c5:0d:49:6c:94:4a:22:8e:6f:8e:f3: f0:c7:b7:12:66:0b:8c:27:06:69:92:63:bb:74:30:e9:07:d1: 6a:9a:79:0b:95:db:64:c2:53:2c:0b:42:47:ce:4e:c1:60:60: a5:37:96:08:ef:88:60:36:c8:84:62:fa:c0:9b:04:20:55:90: 17:7d:77:f8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY2NDYxMTAvBgNVBAUTKDBCOUIyQkZDMUM2QjJDMDk2Nzc2QUY3NTdEM0FGMTQ1 NDdFNDNFNzIwHhcNMjQwNDEyMTc1NTUxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE5NzVhNy1hYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6iUQRpHAT8Fm9GAGk2V9j0f40JGt3mmrp532hW+LDymAU0xWIeusIyrdcF1 QXr6iJ/ss21HxPDzT3Jy6FiNxpntg47NgvRvq0rX5VIMWm89vOxu4pCaiaCzK9J9 760mKCpdgy52MeIs0Z0Lb/76BD4BTA9uRJHWfpa1JWbqhndBXAKkQf47/JGnW5p6 ZHOtVV6X8LdNUUqPe+CuoFt1h2v6057rhrYTkGnQFDpr/KUc256JejnUAt38UcbL X9s4I24LrBHZW+TTqAUMG4LZH+qfCKgUutm/YJYFQU19fvKudNlTCG5RYOxuPYKR kKk16sB3stEe7Xj9oLnCdQY4lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNl9zeyn uTG6gdeOGqJ16p1Q0at6MB8GA1UdIwQYMBaAFAubK/wcaywJZ3avdX068UVH5D5y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjY0Ni9DRUNFOEM5QUY0 OEUxMUU4QjE0QTM0MUVDNEY5QUUwMi9DNXNyX0J4ckxBbG5kcTkxZlRyeFJVZmtQ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M1c3JfQnhyTEFsbmRxOTFmVHJ4UlVma1BuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEY2NDYvQ0VDRThDOUFGNDhFMTFFOEIxNEEzNDFFQzRGOUFFMDIvREEwRTZFRkVF ODY0MTFFQ0E1NEVDMDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBASnszAwDQYJKoZIhvcNAQELBQADggEBAKsADeZI7GPY9D4S JUtna9AwYenFw19g8Ffaj3gkdJfAqwTDvQ5SZJ4WV9zhRcaxYOda2FjP4QqlXCdu w4DkL1euo1RDgbuRX14+eBW81dYp25U5bp/ph00Wtwq5ak6ykPWPGWKEN7bcByoV rP6lDwe/WBJPtKg7FV8222cGqsNIr2domhRBgJco54jxnkVIdTbvwSWaCoevK5kW 9FCRoY9p+LwptFd8OmPpjT3gkgSVWsrnbjyGQp9ON0PFDUlslEoijm+O8/DHtxJm C4wnBmmSY7t0MOkH0WqaeQuV22TCUywLQkfOTsFgYKU3lgjviGA2yIRi+sCbBCBV kBd9d/g= -----END CERTIFICATE-----Generated at Wed Nov 20 18:45:02 2024 by rpki-client on console-fra.rpki-client.org