$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/DF4EFA76CA7811EE838E0A73C4F9AE02.roa File: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (raw, json) Hash identifier: dQpzIPU1toOL1+I04lKiS8o199rYtPdmkoj1eJoYJB0= Subject key identifier: E1:E8:42:57:31:14:45:35:CC:8D:B9:E4:48:20:F2:BD:5B:EB:DB:23 Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: 12 Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/DF4EFA76CA7811EE838E0A73C4F9AE02.roa Signing time: Tue 05 Mar 2024 02:47:43 +0000 ROA not before: Tue 05 Mar 2024 02:47:43 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 139750 IP address blocks: 138.99.216.0/24 maxlen: 24 138.99.217.0/24 maxlen: 24 138.99.218.0/24 maxlen: 24 138.99.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 19:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Mar 5 02:47:43 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65e687cf-502b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:9a:65:5c:93:6b:16:45:1b:49:3b:f5:87: 81:0b:67:c9:89:b9:12:37:ad:e5:14:93:3c:bf:67: 01:3f:84:b1:c9:10:f3:88:8d:c6:b7:a2:f8:10:84: 75:44:b8:a9:30:7b:bb:4a:f1:9c:32:2a:5b:9c:6c: 67:a1:13:32:3a:14:a1:c1:ad:07:5b:89:64:44:c6: 50:f1:75:6b:9f:a7:57:90:56:af:5e:71:57:c7:84: 0d:f9:55:97:d9:c9:5a:45:dd:a0:75:e2:fa:b6:ce: 1c:b7:9c:fc:65:77:8c:40:9f:ac:1f:bd:24:f4:31: 11:0f:43:c7:3b:ca:d8:42:f9:9f:25:9b:d6:96:c5: 79:29:d3:6e:54:7e:b1:65:b7:77:32:ad:6a:d4:e1: 03:0c:48:dd:c6:59:86:d7:42:ed:10:ee:a8:f2:a5: c6:07:a4:17:be:07:ee:53:c2:31:f0:69:df:0a:ac: 51:49:60:e5:f5:14:17:b1:ef:e4:df:20:d2:e3:0c: a8:65:f4:08:c3:2e:83:b2:41:a5:89:7b:65:d8:07: aa:af:34:f2:3d:0d:a5:35:8c:72:a0:27:2c:13:37: 6e:fc:7b:3c:63:9d:33:71:c8:6c:a3:90:bf:fe:0a: 41:95:fb:b8:74:9c:da:e9:89:2e:ca:5e:f3:f5:9d: ce:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E8:42:57:31:14:45:35:CC:8D:B9:E4:48:20:F2:BD:5B:EB:DB:23 X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/DF4EFA76CA7811EE838E0A73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.99.216.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:86:ab:96:39:07:d3:d6:1b:79:06:23:20:24:e5:c7:bd:c8: 10:b2:1e:22:48:1e:86:2c:b5:f5:cd:bd:ed:03:6f:0d:d5:9e: 12:97:51:96:c1:63:99:7e:ed:38:d8:0d:a4:c4:85:f8:17:9a: 4c:25:ab:40:fd:09:57:53:0c:60:13:ed:87:56:e8:da:43:41: 84:0c:9c:fd:ee:2d:62:99:46:7c:c7:ed:f3:b9:6d:8d:be:35: ce:b3:c3:11:d5:6f:b5:47:16:71:d5:8d:a9:52:6d:c6:0a:8a: bc:3c:cb:06:64:07:77:fc:ed:9b:06:f3:33:4a:3d:d2:d2:fd: f4:b9:9d:66:cc:fd:c8:2a:51:a9:79:eb:b6:ad:55:b9:14:d3: 21:8d:15:64:2e:48:62:8e:78:44:ea:0a:fa:46:f4:61:bd:f0: a1:90:fa:33:fa:b0:ff:7e:25:5b:c3:07:c5:f5:d1:e3:74:18: 01:9d:fa:c9:08:ea:74:70:d0:06:55:d4:91:ab:ed:2d:99:a7: 75:70:8f:7b:91:5e:21:c5:07:80:60:5f:4d:3e:84:03:d0:5c: bb:8a:2f:d3:15:15:43:a8:a6:b6:e8:a1:d8:c6:b2:c5:79:30: b7:84:b8:3c:bd:b3:32:7c:2b:40:91:b9:af:ab:9a:9d:d2:62: c7:f2:7e:52 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDBENjExMC8GA1UEBRMoNzZFRjE5Mzk1N0E4NkQ2NEQzQzNDREVCOUUwNzQ2NzQ2 RUY0MjkwQTAeFw0yNDAzMDUwMjQ3NDNaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZTY4N2NmLTUwMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuFJplXJNrFkUbSTv1h4ELZ8mJuRI3reUUkzy/ZwE/hLHJEPOIjca3ovgQhHVE uKkwe7tK8ZwyKlucbGehEzI6FKHBrQdbiWRExlDxdWufp1eQVq9ecVfHhA35VZfZ yVpF3aB14vq2zhy3nPxld4xAn6wfvST0MREPQ8c7ythC+Z8lm9aWxXkp025UfrFl t3cyrWrU4QMMSN3GWYbXQu0Q7qjypcYHpBe+B+5TwjHwad8KrFFJYOX1FBex7+Tf INLjDKhl9AjDLoOyQaWJe2XYB6qvNPI9DaU1jHKgJywTN278ezxjnTNxyGyjkL/+ CkGV+7h0nNrpiS7KXvP1nc5pAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4ehCVzEU RTXMjbnkSCDyvVvr2yMwHwYDVR0jBBgwFoAUdu8ZOVeobWTTw83rngdGdG70KQow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MEQ2LzA1Rjg2MDE0QzUz NzExRUVCNjdBRUI3OUM0RjlBRTAyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtR by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZHU4Wk9WZW9iV1RUdzgzcm5nZEdkRzcwS1FvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDBENi8wNUY4NjAxNEM1MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9ERjRFRkE3NkNB NzgxMUVFODM4RTBBNzNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAopj2DANBgkqhkiG9w0BAQsFAAOCAQEAO4arljkH09YbeQYj ICTlx73IELIeIkgehiy19c297QNvDdWeEpdRlsFjmX7tONgNpMSF+BeaTCWrQP0J V1MMYBPth1bo2kNBhAyc/e4tYplGfMft87ltjb41zrPDEdVvtUcWcdWNqVJtxgqK vDzLBmQHd/ztmwbzM0o90tL99LmdZsz9yCpRqXnrtq1VuRTTIY0VZC5IYo54ROoK +kb0Yb3woZD6M/qw/34lW8MHxfXR43QYAZ36yQjqdHDQBlXUkavtLZmndXCPe5Fe IcUHgGBfTT6EA9Bcu4ov0xUVQ6imtuih2MayxXkwt4S4PL2zMnwrQJG5r6uandJi x/J+Ug== -----END CERTIFICATE-----Generated at Fri Jun 14 22:57:53 2024 by rpki-client on console-ams.rpki-client.org