$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa File: 32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa (raw, json) Hash identifier: ahyXQ4Lm+79APPoe5vKdDvkPQen1I/FoTAFBCvMh1/Y= Subject key identifier: DF:97:14:C5:8B:94:90:13:94:2D:FA:15:D6:DC:81:2A:39:FC:F2:2A Certificate issuer: /CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Certificate serial: 0C Authority key identifier: BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa Signing time: Wed 10 Jan 2024 08:21:05 +0000 ROA not before: Wed 10 Jan 2024 08:21:05 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 152322 IP address blocks: 157.10.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B39/serialNumber=BEFFBEF8EFC5027C34DFF704C79FB2812A71331E Validity Not Before: Jan 10 08:21:05 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=659e5371-f8aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:58:15:02:4a:81:d3:4c:8b:bc:02:17:f2: 86:79:77:07:02:ce:c1:16:3f:8e:bc:dd:fe:74:36: c3:ae:4b:10:a2:2c:38:f4:51:cd:9b:d4:ed:43:4b: 0c:19:5e:28:21:5d:33:a4:88:5b:50:f3:f4:5e:9c: bc:4d:02:c0:ef:f7:da:66:c7:cb:e9:c8:ed:0d:35: 53:04:d9:34:20:0e:7c:85:83:8d:d4:a7:c0:f0:b7: c2:89:cc:cc:d5:16:95:79:e2:0b:e0:2f:be:27:94: 83:e5:0a:f0:9f:55:54:2f:45:52:76:9b:e8:d6:14: 6d:2c:e6:94:b6:6b:bf:38:31:0b:39:4c:1a:82:4c: fa:0c:a4:a4:35:8c:cf:36:d2:04:31:4d:84:d0:ca: 9f:57:cf:4d:89:0e:48:58:d6:95:ea:e6:a2:13:a3: 64:98:f0:41:d9:75:9a:7a:59:05:fb:34:d8:c9:d9: 87:8b:fc:01:d0:13:75:80:35:f1:8b:f6:5f:0e:b4: 1c:23:8a:f4:3f:36:a5:14:2e:81:5b:2c:a1:5a:96: 0c:e8:b6:8b:30:f3:b2:1a:8f:fb:2d:cb:47:f5:5d: 2a:37:d6:51:2d:2a:d4:ec:12:e6:a7:96:45:36:b4: 8a:b7:36:1b:a5:99:44:74:9e:1c:05:00:a0:3c:ca: 00:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:97:14:C5:8B:94:90:13:94:2D:FA:15:D6:DC:81:2A:39:FC:F2:2A X509v3 Authority Key Identifier: keyid:BE:FF:BE:F8:EF:C5:02:7C:34:DF:F7:04:C7:9F:B2:81:2A:71:33:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/vv---O_FAnw03_cEx5-ygSpxMx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vv---O_FAnw03_cEx5-ygSpxMx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B39/95074A0AAF5611EEA655B581C4F9AE02/32E7A4B0AF9111EEA3B14C2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.10.134.0/23 Signature Algorithm: sha256WithRSAEncryption 68:89:e8:1a:1f:44:e3:13:77:75:8d:b5:1a:43:99:5e:d7:15: bd:d2:6c:98:6e:24:87:aa:2a:0b:22:10:88:23:d4:5e:df:3c: 6b:e7:2d:5d:3e:90:ae:b1:17:29:fe:9f:cf:5e:fd:0e:f4:c5: 13:9a:22:8e:e5:5e:f4:a5:44:c4:57:64:fe:6a:a3:52:ee:6c: 99:95:c6:79:72:f9:4a:f8:36:9c:7e:11:cb:4d:6a:fe:ab:7c: c4:e8:e1:72:f7:54:4b:b2:a4:58:a5:8f:23:24:df:cd:5b:1f: 2e:31:e0:97:ae:49:ed:1e:a5:33:56:61:22:70:7b:e5:bb:3c: f6:fc:94:b8:0b:83:fe:27:a4:49:e3:33:68:e4:77:13:5e:e6: 77:14:ea:82:98:1b:36:32:7f:9c:96:7d:fe:a1:bb:d3:60:a7: 76:b1:e8:70:60:47:1a:ee:55:49:76:e1:fd:59:11:8f:46:d7: 74:cd:76:3c:f2:79:41:f2:b2:cf:6f:bb:31:18:db:51:6e:29: 40:fa:eb:3b:08:7f:f5:f6:1b:1d:2f:fb:9d:91:d4:fb:5c:ad: b0:98:2e:3d:b9:e8:9c:91:e9:84:e5:5f:a8:3b:dd:7a:57:a3: 4a:cb:bb:41:2a:9b:5e:df:33:94:c8:b7:5c:e6:df:0c:42:d8: 17:b5:2d:46 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NEIzOTExMC8GA1UEBRMoQkVGRkJFRjhFRkM1MDI3QzM0REZGNzA0Qzc5RkIyODEy QTcxMzMxRTAeFw0yNDAxMTAwODIxMDVaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1OWU1MzcxLWY4YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8A1gVAkqB00yLvAIX8oZ5dwcCzsEWP4683f50NsOuSxCiLDj0Uc2b1O1DSwwZ XighXTOkiFtQ8/RenLxNAsDv99pmx8vpyO0NNVME2TQgDnyFg43Up8Dwt8KJzMzV FpV54gvgL74nlIPlCvCfVVQvRVJ2m+jWFG0s5pS2a784MQs5TBqCTPoMpKQ1jM82 0gQxTYTQyp9Xz02JDkhY1pXq5qITo2SY8EHZdZp6WQX7NNjJ2YeL/AHQE3WANfGL 9l8OtBwjivQ/NqUULoFbLKFalgzotosw87Iaj/sty0f1XSo31lEtKtTsEuanlkU2 tIq3NhulmUR0nhwFAKA8ygBnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU35cUxYuU kBOULfoV1tyBKjn88iowHwYDVR0jBBgwFoAUvv+++O/FAnw03/cEx5+ygSpxMx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE0QjM5Lzk1MDc0QTBBQUY1 NjExRUVBNjU1QjU4MUM0RjlBRTAyL3Z2LS0tT19GQW53MDNfY0V4NS15Z1NweE14 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnYtLS1PX0ZBbncwM19jRXg1LXlnU3B4TXg0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIzOS85NTA3NEEwQUFGNTYxMUVFQTY1NUI1ODFDNEY5QUUwMi8zMkU3QTRCMEFG OTExMUVFQTNCMTRDMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAZ0KhjANBgkqhkiG9w0BAQsFAAOCAQEAaInoGh9E4xN3dY21 GkOZXtcVvdJsmG4kh6oqCyIQiCPUXt88a+ctXT6QrrEXKf6fz179DvTFE5oijuVe 9KVExFdk/mqjUu5smZXGeXL5Svg2nH4Ry01q/qt8xOjhcvdUS7KkWKWPIyTfzVsf LjHgl65J7R6lM1ZhInB75bs89vyUuAuD/iekSeMzaOR3E17mdxTqgpgbNjJ/nJZ9 /qG702CndrHocGBHGu5VSXbh/VkRj0bXdM12PPJ5QfKyz2+7MRjbUW4pQPrrOwh/ 9fYbHS/7nZHU+1ytsJguPbnonJHphOVfqDvdelejSsu7QSqbXt8zlMi3XObfDELY F7UtRg== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:29 2024 by rpki-client on console-ams.rpki-client.org