$ rpki-client -vvf rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa File: 3BC4C576426D11EFAD9E7D10C4F9AE02.roa (raw, json) Hash identifier: 9VMgA4YRxMIjWK/lK97cgRReFAG7X/1dXoRMnmEvJtU= Subject key identifier: 3B:82:D9:EB:57:AB:6A:18:C2:43:C5:83:B5:1E:63:DF:63:B1:9E:A0 Certificate issuer: /CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Certificate serial: 0C74 Authority key identifier: 5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa Signing time: Fri 04 Oct 2024 18:27:01 +0000 ROA not before: Fri 04 Oct 2024 18:27:01 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 137531 IP address blocks: 59.152.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 18:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3188 (0xc74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A998/serialNumber=5EA1A7B802E7E7EFC77CA1A38E52F72ACD463930 Validity Not Before: Oct 4 18:27:01 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67003374-5820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:1b:32:85:7f:24:b7:dd:20:ae:25:ef:a0: 2e:60:35:89:99:b5:01:8c:60:8f:e4:10:f2:7e:bc: aa:2c:21:34:95:5f:4a:2b:fe:ae:84:18:8c:bf:b5: 9c:a4:f0:ba:7c:24:8f:73:3e:75:92:a5:12:c2:d2: 5d:82:d7:d1:8b:6a:a6:74:ea:ec:c2:88:25:2f:e5: 73:3f:75:81:5c:1e:ba:86:5a:1e:10:51:e4:8f:37: 33:87:db:ac:c0:b0:d3:e6:31:bf:69:cc:4e:70:70: 70:0e:54:2d:4d:17:16:f9:1c:5c:8c:40:11:4a:06: c4:bd:61:36:77:6e:d5:bc:50:96:26:ac:5d:48:20: 92:1a:96:f4:f3:f3:78:14:15:22:e2:69:90:5f:73: c8:87:d9:2b:1a:d8:6b:ea:aa:56:7f:23:ac:48:ad: 61:da:69:04:40:2e:15:31:19:79:b9:d2:78:b3:25: bf:6e:67:4d:74:83:e4:66:86:e6:3d:ba:c5:c5:e5: 60:80:e8:8a:83:81:de:6b:ea:64:a5:81:97:2a:86: b0:ac:29:75:ea:68:26:4a:7c:55:13:53:b2:a2:d1: fd:bb:e3:bd:89:81:86:81:db:a1:93:83:19:bc:ec: 3d:12:2b:be:bd:8a:f5:a8:fe:96:04:fc:53:99:a1: a6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:82:D9:EB:57:AB:6A:18:C2:43:C5:83:B5:1E:63:DF:63:B1:9E:A0 X509v3 Authority Key Identifier: keyid:5E:A1:A7:B8:02:E7:E7:EF:C7:7C:A1:A3:8E:52:F7:2A:CD:46:39:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/XqGnuALn5-_HfKGjjlL3Ks1GOTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqGnuALn5-_HfKGjjlL3Ks1GOTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A998/AB34FBD4F25811E9B75E3C70C4F9AE02/3BC4C576426D11EFAD9E7D10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.108.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:e0:0b:35:f5:74:a5:3a:85:4b:04:50:e7:3c:d3:6e:ec:8c: fe:8f:71:d1:ce:0b:9a:a4:b9:d4:da:c7:f5:36:6f:9a:2a:dd: 94:af:4d:bb:2d:ec:8d:4b:be:c1:05:38:7e:12:49:05:58:8e: 4e:17:39:99:0a:c0:6f:94:42:c1:ea:5d:73:83:45:2b:a9:3f: c0:88:78:66:6b:98:e4:ff:3d:7c:4b:5e:0d:35:02:7f:16:7a: c6:4f:a2:90:35:1b:f0:50:53:82:ee:75:ac:4c:94:85:35:2f: 62:e7:73:ce:32:19:22:3c:78:74:16:60:24:ab:c1:cc:57:6e: 87:a9:4f:18:da:47:54:97:19:ae:4d:15:77:5c:85:d1:8d:09: c5:01:72:b4:ab:e6:f7:20:cb:df:54:1f:35:3e:c0:9d:fe:51: c0:a6:9c:4f:18:d1:da:3a:89:78:37:ac:dc:25:1b:31:49:59: dd:13:1c:fd:d7:2c:45:fb:6f:e2:4f:0e:0f:b7:5a:58:cd:50: c4:af:9d:cb:3d:de:ef:3e:32:de:dd:b3:31:a1:42:74:c9:b5: 76:a1:47:02:16:a1:8d:52:2e:0c:e6:d0:82:8e:ec:ff:b1:35: 21:a5:79:5b:01:4b:ef:93:34:46:1b:5a:97:30:2d:9c:8d:47: eb:8c:10:0d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5OTgxMTAvBgNVBAUTKDVFQTFBN0I4MDJFN0U3RUZDNzdDQTFBMzhFNTJGNzJB Q0Q0NjM5MzAwHhcNMjQxMDA0MTgyNzAxWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzAwMzM3NC01ODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvM4bMoV/JLfdIK4l76AuYDWJmbUBjGCP5BDyfryqLCE0lV9KK/6uhBiMv7Wc pPC6fCSPcz51kqUSwtJdgtfRi2qmdOrswoglL+VzP3WBXB66hloeEFHkjzczh9us wLDT5jG/acxOcHBwDlQtTRcW+RxcjEARSgbEvWE2d27VvFCWJqxdSCCSGpb08/N4 FBUi4mmQX3PIh9krGthr6qpWfyOsSK1h2mkEQC4VMRl5udJ4syW/bmdNdIPkZobm PbrFxeVggOiKg4Hea+pkpYGXKoawrCl16mgmSnxVE1OyotH9u+O9iYGGgduhk4MZ vOw9Eiu+vYr1qP6WBPxTmaGmmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDuC2etX q2oYwkPFg7UeY99jsZ6gMB8GA1UdIwQYMBaAFF6hp7gC5+fvx3yho45S9yrNRjkw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTk5OC9BQjM0RkJENEYy NTgxMUU5Qjc1RTNDNzBDNEY5QUUwMi9YcUdudUFMbjUtX0hmS0dqamxMM0tzMUdP VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hxR251QUxuNS1fSGZLR2pqbEwzS3MxR09UQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5OTgvQUIzNEZCRDRGMjU4MTFFOUI3NUUzQzcwQzRGOUFFMDIvM0JDNEM1NzY0 MjZEMTFFRkFEOUU3RDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA7mGwwDQYJKoZIhvcNAQELBQADggEBAA/gCzX1dKU6hUsE UOc8027sjP6PcdHOC5qkudTax/U2b5oq3ZSvTbst7I1LvsEFOH4SSQVYjk4XOZkK wG+UQsHqXXODRSupP8CIeGZrmOT/PXxLXg01An8WesZPopA1G/BQU4LudaxMlIU1 L2Lnc84yGSI8eHQWYCSrwcxXboepTxjaR1SXGa5NFXdchdGNCcUBcrSr5vcgy99U HzU+wJ3+UcCmnE8Y0do6iXg3rNwlGzFJWd0THP3XLEX7b+JPDg+3WljNUMSvncs9 3u8+Mt7dszGhQnTJtXahRwIWoY1SLgzm0IKO7P+xNSGleVsBS++TNEYbWpcwLZyN R+uMEA0= -----END CERTIFICATE-----Generated at Fri Nov 22 19:45:01 2024 by rpki-client on console-fra.rpki-client.org