$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/2958A208394011EF8BFF2329C4F9AE02.roa File: 2958A208394011EF8BFF2329C4F9AE02.roa (raw, json) Hash identifier: Rgcy8bLfZuMZaK0O0JgH1tVB2CHU0nZokr3ybevC1XM= Subject key identifier: EC:90:51:BE:16:A5:30:74:EE:86:A2:DD:5D:1A:DF:32:98:99:3D:F1 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 18F4 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/2958A208394011EF8BFF2329C4F9AE02.roa Signing time: Sat 10 Aug 2024 03:21:14 +0000 ROA not before: Sat 10 Aug 2024 03:21:14 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4620 IP address blocks: 43.255.56.0/24 maxlen: 24 203.78.149.0/24 maxlen: 24 203.78.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 16:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6388 (0x18f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Aug 10 03:21:14 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b6dcaa-acb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c1:03:c2:38:bb:e3:d6:a5:36:b4:5c:7a:79: a1:18:54:8c:f1:a4:ef:bd:85:3b:91:9d:49:2b:60: 49:74:14:cc:d5:02:fc:87:ff:1a:32:74:92:f1:7a: 0b:0a:9b:d8:f6:80:c3:73:60:3f:d8:58:03:c6:6b: 7c:20:74:37:60:70:a2:bd:35:9a:07:24:e5:15:b7: 9a:87:75:57:2c:ec:68:0f:a2:df:88:69:97:b9:21: f2:96:8e:6c:53:ca:28:dc:a9:35:0c:0a:6b:a8:0a: 73:cc:32:28:a9:ab:7c:77:52:67:95:4e:bb:53:39: 52:ee:d9:22:1c:ef:e4:1a:6f:e4:33:6e:3a:19:47: 41:d9:6f:f2:94:df:1c:3f:48:15:39:cc:07:4e:a1: 31:fb:2b:25:7d:7c:df:a9:87:92:36:58:c4:57:73: f9:6f:79:e4:37:5a:47:0b:b5:ac:fe:69:65:d2:8a: 3f:f1:3f:80:0b:e3:08:22:76:fd:9c:56:a3:1c:b2: f9:9e:64:df:ca:fe:e0:b9:04:ea:52:f6:dd:fa:3b: 9d:1b:b2:3c:2f:86:bd:9a:54:5a:19:d2:90:c9:38: 63:f1:06:c0:90:09:aa:95:24:6d:56:4d:a3:bd:74: b6:bd:8c:ef:a7:59:e2:eb:71:a9:d2:37:bc:36:02: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:51:BE:16:A5:30:74:EE:86:A2:DD:5D:1A:DF:32:98:99:3D:F1 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/2958A208394011EF8BFF2329C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.56.0/24 203.78.149.0/24 203.78.151.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:35:b5:ee:46:0e:72:ee:81:9f:da:66:44:62:4a:75:65:e1: a2:b8:a8:50:72:c1:24:a3:78:75:63:64:ee:c7:2f:bf:a3:99: d1:3f:7a:fd:89:06:22:56:5d:63:4a:41:32:67:5c:36:05:79: 57:51:62:e9:c5:46:a4:26:db:5d:1d:b9:04:f1:39:2c:cc:72: 6f:56:cc:bc:eb:58:54:c8:72:bb:be:60:a2:f7:37:d1:a2:4f: 01:79:c7:39:85:5a:f1:f9:32:e1:c0:2a:8b:3f:58:2a:d9:dc: cd:7c:2d:73:ad:3a:13:97:97:08:22:f9:fe:4e:ec:ac:bb:4b: 6e:65:4f:1c:93:76:e7:36:97:39:32:ec:31:34:28:83:cc:a7: 31:9f:4a:e9:e1:f2:55:f2:4b:a3:e3:26:8e:94:1b:16:3a:45: c3:72:6b:0c:47:a9:47:2e:a2:8d:12:6f:8e:bd:0c:81:90:fe: 7d:b6:3d:f8:6d:a7:5d:6c:e4:af:db:6b:37:fc:9c:5e:49:2b: 54:19:f1:f3:be:9e:91:2f:6b:4d:b5:f8:76:54:b4:35:ed:ab: 3e:af:bf:3d:94:4e:30:7c:7c:3c:09:2e:fc:94:7a:3b:32:22: bb:91:81:97:bc:ce:87:25:22:98:c8:5d:cf:c7:2d:c7:50:34: 08:b0:a1:7b -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjQwODEwMDMyMTE0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmI2ZGNhYS1hY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MEDwji749alNrRcenmhGFSM8aTvvYU7kZ1JK2BJdBTM1QL8h/8aMnSS8XoL CpvY9oDDc2A/2FgDxmt8IHQ3YHCivTWaByTlFbeah3VXLOxoD6LfiGmXuSHylo5s U8oo3Kk1DAprqApzzDIoqat8d1JnlU67UzlS7tkiHO/kGm/kM246GUdB2W/ylN8c P0gVOcwHTqEx+yslfXzfqYeSNljEV3P5b3nkN1pHC7Ws/mll0oo/8T+AC+MIInb9 nFajHLL5nmTfyv7guQTqUvbd+judG7I8L4a9mlRaGdKQyThj8QbAkAmqlSRtVk2j vXS2vYzvp1ni63Gp0je8NgJaLwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFOyQUb4W pTB07oai3V0a3zKYmT3xMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOUQyMDBEQkM2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvMjk1OEEyMDgz OTQwMTFFRjhCRkYyMzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAAr/zgDBADLTpUDBADLTpcwDQYJKoZIhvcNAQELBQADggEB AA41te5GDnLugZ/aZkRiSnVl4aK4qFBywSSjeHVjZO7HL7+jmdE/ev2JBiJWXWNK QTJnXDYFeVdRYunFRqQm210duQTxOSzMcm9WzLzrWFTIcru+YKL3N9GiTwF5xzmF WvH5MuHAKos/WCrZ3M18LXOtOhOXlwgi+f5O7Ky7S25lTxyTduc2lzky7DE0KIPM pzGfSunh8lXyS6PjJo6UGxY6RcNyawxHqUcuoo0Sb469DIGQ/n22Pfhtp11s5K/b azf8nF5JK1QZ8fO+npEva021+HZUtDXtqz6vvz2UTjB8fDwJLvyUejsyIruRgZe8 zoclIpjIXc/HLcdQNAiwoXs= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org