$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/4AFF817484EF11EFBDCD721DC4F9AE02.roa File: 4AFF817484EF11EFBDCD721DC4F9AE02.roa (raw, json) Hash identifier: yCZMfZ6NfluzN2Ky52xSRjoZCp2FkkrWLhsmfBj/nsg= Subject key identifier: 4E:BD:D0:8D:D4:E8:50:45:92:11:0A:6F:11:C7:7A:8E:8E:07:24:C7 Certificate issuer: /CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Certificate serial: 07 Authority key identifier: 2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/4AFF817484EF11EFBDCD721DC4F9AE02.roa Signing time: Mon 07 Oct 2024 21:10:35 +0000 ROA not before: Mon 07 Oct 2024 21:10:35 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 17542 IP address blocks: 192.111.102.0/24 maxlen: 24 192.150.218.0/24 maxlen: 24 192.150.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F525/serialNumber=2B3DB85EF952238D192DCF170EE6BEB1C8DB03A9 Validity Not Before: Oct 7 21:10:35 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67044e4b-37c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:eb:30:10:1c:6a:b6:12:f8:70:c9:96:14: 8a:f9:48:db:a7:cc:7a:8a:bf:b1:61:0b:78:97:a6: 65:e4:d7:a6:ad:f7:1d:b0:9a:a3:72:20:69:d0:22: b1:6a:05:5b:f6:e5:66:53:f8:6f:36:49:1f:98:09: b0:b5:d7:ef:16:c9:e5:b7:88:20:91:43:20:0b:bc: 76:ef:b6:d1:04:95:04:0c:de:e0:a6:f7:32:e7:a7: db:c1:7e:63:83:01:6a:22:42:f2:cf:87:2b:9c:d2: 25:23:b2:75:da:3e:9e:dd:1b:ae:af:c4:d9:02:81: fc:db:3e:40:9c:02:e1:2f:7c:a8:46:aa:a3:af:2e: 48:a2:18:b7:86:a2:54:68:ec:44:76:f2:46:b1:3f: bf:c0:77:98:7d:4b:fe:2e:46:9b:b5:d5:4d:d4:bc: 2c:37:e8:0d:5d:f6:a7:97:e8:ff:2b:af:33:7f:e8: 3c:f0:cc:aa:e8:21:48:2d:f1:92:12:75:d1:0b:c5: e7:bc:7e:46:93:8f:30:c4:af:8c:51:4f:53:bb:ff: 26:af:a2:63:6e:10:cb:44:19:b9:3d:4a:93:bf:e6: 87:3a:98:cb:41:a0:c4:97:b0:40:8f:cd:5e:89:5d: c9:8b:5a:a6:3d:18:72:14:62:9b:17:58:60:47:5f: b8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BD:D0:8D:D4:E8:50:45:92:11:0A:6F:11:C7:7A:8E:8E:07:24:C7 X509v3 Authority Key Identifier: keyid:2B:3D:B8:5E:F9:52:23:8D:19:2D:CF:17:0E:E6:BE:B1:C8:DB:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/Kz24XvlSI40ZLc8XDua-scjbA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kz24XvlSI40ZLc8XDua-scjbA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/E187177684ED11EFB9FF2D5AC4F9AE02/4AFF817484EF11EFBDCD721DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.111.102.0/24 192.150.218.0/23 Signature Algorithm: sha256WithRSAEncryption 84:67:19:fe:6d:a8:83:62:b7:f9:2e:23:b9:a0:28:0c:03:c0: f3:06:02:a2:73:78:7d:b5:2b:11:23:a2:d8:f2:eb:27:92:0a: 8c:73:30:a6:df:54:af:5d:7d:61:78:b4:61:2b:f8:aa:f9:58: 85:fd:70:74:c1:bc:85:d6:56:b4:11:47:c0:e7:ad:ff:d2:4c: 19:ef:ef:79:ef:5c:94:d3:1d:c1:31:62:29:86:28:83:b0:74: 79:d6:43:0e:10:cd:7b:cf:04:20:53:4a:b1:8c:67:d1:bb:7f: 55:02:02:f6:4b:fb:e8:c9:f7:b9:20:f3:3a:30:64:f5:1e:7c: 36:dc:6f:70:d5:9b:9c:dd:87:dd:73:f0:b3:3a:8c:25:20:8a: d1:f1:9c:56:ad:23:f0:74:3a:1a:3b:83:9b:10:44:67:40:9e: 07:33:2f:aa:20:8c:b2:1b:0f:91:19:fd:57:15:17:96:29:0d: 57:b2:47:4f:e3:e2:83:be:db:d6:e6:9d:33:00:30:79:87:32: 2c:04:4e:89:bd:2a:88:53:e1:69:c0:c9:18:7b:0c:48:3d:d0: 6a:44:85:f9:ab:bf:da:87:9e:df:a9:8a:f5:a7:9b:c6:0e:5c: 6d:56:0d:92:38:4d:76:82:c2:4b:84:59:bc:0c:46:9f:35:9a: 6d:7f:d7:e0 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjUyNTExMC8GA1UEBRMoMkIzREI4NUVGOTUyMjM4RDE5MkRDRjE3MEVFNkJFQjFD OERCMDNBOTAeFw0yNDEwMDcyMTEwMzVaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MDQ0ZTRiLTM3YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQXOswEBxqthL4cMmWFIr5SNunzHqKv7FhC3iXpmXk16at9x2wmqNyIGnQIrFq BVv25WZT+G82SR+YCbC11+8WyeW3iCCRQyALvHbvttEElQQM3uCm9zLnp9vBfmOD AWoiQvLPhyuc0iUjsnXaPp7dG66vxNkCgfzbPkCcAuEvfKhGqqOvLkiiGLeGolRo 7ER28kaxP7/Ad5h9S/4uRpu11U3UvCw36A1d9qeX6P8rrzN/6DzwzKroIUgt8ZIS ddELxee8fkaTjzDEr4xRT1O7/yavomNuEMtEGbk9SpO/5oc6mMtBoMSXsECPzV6J XcmLWqY9GHIUYpsXWGBHX7gPAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUTr3QjdTo UEWSEQpvEcd6jo4HJMcwHwYDVR0jBBgwFoAUKz24XvlSI40ZLc8XDua+scjbA6kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTI1L0UxODcxNzc2ODRF RDExRUZCOUZGMkQ1QUM0RjlBRTAyL0t6MjRYdmxTSTQwWkxjOFhEdWEtc2NqYkE2 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvS3oyNFh2bFNJNDBaTGM4WER1YS1zY2piQTZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjUyNS9FMTg3MTc3Njg0RUQxMUVGQjlGRjJENUFDNEY5QUUwMi80QUZGODE3NDg0 RUYxMUVGQkRDRDcyMURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAMBvZgMEAcCW2jANBgkqhkiG9w0BAQsFAAOCAQEAhGcZ/m2o g2K3+S4juaAoDAPA8wYConN4fbUrESOi2PLrJ5IKjHMwpt9Ur119YXi0YSv4qvlY hf1wdMG8hdZWtBFHwOet/9JMGe/vee9clNMdwTFiKYYog7B0edZDDhDNe88EIFNK sYxn0bt/VQIC9kv76Mn3uSDzOjBk9R58NtxvcNWbnN2H3XPwszqMJSCK0fGcVq0j 8HQ6GjuDmxBEZ0CeBzMvqiCMshsPkRn9VxUXlikNV7JHT+Pig77b1uadMwAweYcy LAROib0qiFPhacDJGHsMSD3QakSF+au/2oee36mK9aebxg5cbVYNkjhNdoLCS4RZ vAxGnzWabX/X4A== -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:58 2024 by rpki-client on console-ams.rpki-client.org