$ rpki-client -vvf rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa File: DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa (raw, json) Hash identifier: nbV8I8B5L9VlcB43xVEy++6DcoJ46d11D4vQWQU9XwQ= Subject key identifier: A5:6A:3B:D7:8D:BA:CD:F4:F4:5C:DE:ED:E8:BA:B1:36:FA:93:46:FF Certificate issuer: /CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Certificate serial: 19 Authority key identifier: 40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa Signing time: Fri 20 Dec 2024 23:33:48 +0000 ROA not before: Fri 20 Dec 2024 23:33:48 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137562 IP address blocks: 203.19.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Jan 2025 05:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E8DB/serialNumber=4061863DDF43E7B3B189E3C9C3217BC12BB35F21 Validity Not Before: Dec 20 23:33:48 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6765fedc-6e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6a:ef:23:be:b3:cb:73:6d:07:ea:13:9e:01: 80:7a:fd:33:72:c4:55:33:1f:6e:ba:2f:fe:6b:f4: 51:f6:2b:60:2e:82:3f:14:e5:cd:eb:32:39:da:e4: b2:67:43:84:8c:37:e1:6e:eb:f5:9f:5b:5d:e1:80: a0:92:f1:e8:9b:03:71:66:d0:9c:0b:51:13:1e:ce: 66:fe:95:9c:bb:80:97:8e:d3:4c:d9:ad:d6:34:30: eb:c1:04:59:53:9e:cb:17:ea:d2:29:ef:ea:46:83: 3f:1d:eb:f8:ac:21:78:c6:40:d8:37:fc:e2:be:c3: 5b:9c:c0:a3:34:dd:d7:27:82:d3:72:37:ca:b8:a1: 0d:7c:c1:96:8d:c3:cb:b2:82:5a:d2:3c:5c:66:36: 78:c4:36:6c:9f:6c:2d:15:dd:5b:c0:f7:20:9c:6a: 8b:1f:35:d8:a5:e3:df:2f:a0:02:11:93:49:c6:f2: 05:a2:8d:7e:60:49:82:e4:29:11:b9:1b:d1:ff:de: 84:3f:4c:76:f0:57:ee:f7:41:cc:75:a4:14:63:f9: 51:ad:e6:ed:e4:92:fc:06:70:88:0b:14:15:e2:0b: 01:d6:47:0d:d3:10:30:63:32:73:8d:2c:bb:fa:c8: 05:b9:d6:30:28:11:bd:47:d0:a5:01:3d:f4:8b:83: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6A:3B:D7:8D:BA:CD:F4:F4:5C:DE:ED:E8:BA:B1:36:FA:93:46:FF X509v3 Authority Key Identifier: keyid:40:61:86:3D:DF:43:E7:B3:B1:89:E3:C9:C3:21:7B:C1:2B:B3:5F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/QGGGPd9D57OxiePJwyF7wSuzXyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QGGGPd9D57OxiePJwyF7wSuzXyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E8DB/B48E25F4B76311EF82DD8F33C4F9AE02/DCAA44D6BF2A11EFBAAF1F16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.19.2.0/24 Signature Algorithm: sha256WithRSAEncryption 44:f8:ff:b4:06:72:10:0e:10:ee:99:05:7a:43:e9:c1:26:55: 7e:9e:fd:a6:70:f8:42:c8:3e:af:9f:f6:33:ff:cf:74:1f:40: 53:ec:58:73:c6:3d:51:4e:4b:53:90:af:e1:4b:68:66:0d:74: ab:a0:af:d6:c4:a1:ad:f4:a0:3b:3d:4c:e2:4f:9b:80:ef:06: b4:4b:18:e1:47:26:e0:36:a0:1f:47:d0:01:28:32:93:52:9e: a3:15:91:36:34:56:1f:e9:80:a2:8d:c3:0d:4c:00:c6:76:10: b2:2e:2a:9e:46:f8:da:0f:31:41:52:95:5f:10:05:d7:f4:16: a0:72:bd:b0:31:47:45:b1:2d:1b:63:d6:5b:50:57:7c:5e:77: 6b:16:d1:ae:9c:77:ac:13:76:3f:39:e0:ef:89:1b:c8:35:be: 93:68:49:bc:41:56:00:d2:2c:6e:97:6d:ae:8f:53:bd:9c:ef: 39:03:7c:87:7a:a2:8a:09:1b:ea:91:3a:e6:7f:a2:5c:02:09: 66:5b:05:3b:e7:af:c9:38:9a:8f:83:0f:89:ba:ee:40:4c:68: 92:78:d1:74:2d:03:bf:33:41:92:eb:b6:a7:d5:32:03:cf:c9: 0a:46:03:6c:b6:3d:e0:3b:20:b8:cb:6a:07:b2:6e:17:03:13: 32:35:ce:a9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RThEQjExMC8GA1UEBRMoNDA2MTg2M0RERjQzRTdCM0IxODlFM0M5QzMyMTdCQzEy QkIzNUYyMTAeFw0yNDEyMjAyMzMzNDhaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NjVmZWRjLTZlMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvau8jvrPLc20H6hOeAYB6/TNyxFUzH266L/5r9FH2K2Augj8U5c3rMjna5LJn Q4SMN+Fu6/WfW13hgKCS8eibA3Fm0JwLURMezmb+lZy7gJeO00zZrdY0MOvBBFlT nssX6tIp7+pGgz8d6/isIXjGQNg3/OK+w1ucwKM03dcngtNyN8q4oQ18wZaNw8uy glrSPFxmNnjENmyfbC0V3VvA9yCcaosfNdil498voAIRk0nG8gWijX5gSYLkKRG5 G9H/3oQ/THbwV+73Qcx1pBRj+VGt5u3kkvwGcIgLFBXiCwHWRw3TEDBjMnONLLv6 yAW51jAoEb1H0KUBPfSLg8LTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUpWo71426 zfT0XN7t6LqxNvqTRv8wHwYDVR0jBBgwFoAUQGGGPd9D57OxiePJwyF7wSuzXyEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFOERCL0I0OEUyNUY0Qjc2 MzExRUY4MkREOEYzM0M0RjlBRTAyL1FHR0dQZDlENTdPeGllUEp3eUY3d1N1elh5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUdHR1BkOUQ1N094aWVQSnd5Rjd3U3V6WHlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RThEQi9CNDhFMjVGNEI3NjMxMUVGODJERDhGMzNDNEY5QUUwMi9EQ0FBNDRENkJG MkExMUVGQkFBRjFGMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsTAjANBgkqhkiG9w0BAQsFAAOCAQEARPj/tAZyEA4Q7pkF ekPpwSZVfp79pnD4Qsg+r5/2M//PdB9AU+xYc8Y9UU5LU5Cv4UtoZg10q6Cv1sSh rfSgOz1M4k+bgO8GtEsY4Ucm4DagH0fQASgyk1KeoxWRNjRWH+mAoo3DDUwAxnYQ si4qnkb42g8xQVKVXxAF1/QWoHK9sDFHRbEtG2PWW1BXfF53axbRrpx3rBN2Pzng 74kbyDW+k2hJvEFWANIsbpdtro9TvZzvOQN8h3qiigkb6pE65n+iXAIJZlsFO+ev yTiaj4MPibruQExoknjRdC0DvzNBkuu2p9UyA8/JCkYDbLY94DsguMtqB7JuFwMT MjXOqQ== -----END CERTIFICATE-----Generated at Fri Dec 27 08:43:49 2024 by rpki-client on console-fra.rpki-client.org