$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa File: 99D4FC3212DC11EFB2470B7FC4F9AE02.roa (raw, json) Hash identifier: VWAke7VHpns9xFQDA7gYHfWXd2qEDLHOvc5MVgox5e0= Subject key identifier: 3E:63:7F:F7:6D:54:A4:D5:FD:51:7F:4B:CF:23:36:74:B3:6E:73:7A Certificate issuer: /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Certificate serial: 0120 Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa Signing time: Wed 15 May 2024 17:00:16 +0000 ROA not before: Wed 15 May 2024 17:00:16 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 139070 IP address blocks: 152.65.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 05:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Validity Not Before: May 15 17:00:16 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6644ea1f-d202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:16:59:ad:79:c0:7e:d6:c8:6e:13:6f:fe:bc: a7:5b:ba:54:6a:ca:7d:f6:8e:f1:14:1c:10:a4:f8: 79:81:37:bb:7c:8b:be:4d:fa:4d:f9:d6:6f:bc:62: 92:22:82:3e:2d:b4:77:48:6e:ab:75:cf:89:08:a0: bc:57:a4:c2:bf:c2:48:c0:3c:53:e8:1d:0a:1e:47: a0:59:6e:96:a5:7a:2c:1c:f3:1f:5e:33:ae:c8:79: 79:96:5a:dd:60:9d:66:62:88:b2:45:cb:0c:25:5e: 38:a7:5d:1b:9a:95:3b:0f:b8:e0:01:20:3a:d6:b9: 34:fd:00:ad:b9:8e:42:a7:48:8d:c2:67:86:b0:6d: 4e:ef:44:61:50:03:28:5c:0c:13:99:15:0f:f8:81: 87:5a:3d:31:0d:2e:d9:fb:85:a6:dc:ca:8c:f9:90: e7:fb:c3:cf:8e:6b:df:ba:57:e6:98:05:e7:f2:94: ff:d7:fb:16:48:ab:da:6c:ff:03:6c:96:e8:5c:5d: 9f:b7:13:b4:8a:52:82:ba:a6:bb:36:3a:b2:8a:21: 93:52:85:0c:c3:dd:a3:3b:3d:b2:d1:61:ec:f2:b4: 9a:c8:a5:ac:a4:0c:3a:86:22:b1:2c:f6:8f:82:d0: bc:d5:cb:dd:ea:03:73:5a:e0:aa:24:e3:c3:dd:02: be:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:63:7F:F7:6D:54:A4:D5:FD:51:7F:4B:CF:23:36:74:B3:6E:73:7A X509v3 Authority Key Identifier: keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/99D4FC3212DC11EFB2470B7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.65.246.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:88:69:17:d1:26:60:75:d7:60:39:c2:91:14:d6:cd:74:61: 78:0c:d9:62:5e:8d:f8:2c:a3:e7:62:e9:f8:3b:00:47:38:a9: 99:a6:8a:22:34:4e:c9:76:e2:a0:43:65:51:74:ce:c3:8a:8b: db:f5:b3:54:0c:34:93:ad:db:02:0d:ee:ba:89:53:b1:e5:c3: d4:8c:cb:4f:64:3e:1c:e5:7e:37:a6:b1:d1:73:04:83:af:54: 7a:42:5a:9b:3d:a7:de:92:e8:9a:17:ef:51:fe:ee:4b:3c:4f: 59:02:a4:8e:70:0d:fb:be:57:76:f0:22:6b:c9:3c:a2:4b:f8: cb:a0:4d:54:45:29:ba:89:cc:e4:3a:dd:f4:60:a5:7e:24:cc: fa:65:c0:03:c1:93:ef:92:5e:47:d5:4b:ed:f4:79:fe:2f:59: fd:40:54:8a:9c:0d:24:09:aa:fe:35:c0:c4:54:8f:e5:a2:a7: f6:f4:5d:0d:21:df:c2:b4:aa:63:1c:e3:c1:88:9f:d3:da:32: 0b:7e:54:dd:a4:0c:85:c7:ac:dc:6c:e5:7d:15:8a:58:df:eb: d4:3a:3e:aa:1f:15:ed:cd:5e:f5:b4:a8:e3:5b:fc:f0:09:2d: ce:f4:ff:a2:1e:bf:e6:b2:25:03:d9:ff:7c:a9:8b:88:9d:2e: a8:ad:e0:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDA1RDM2NTUwMERBNEIyQzAwMTg5RjNDNkNBNTk1MEUw MDc0QzdDNEEwHhcNMjQwNTE1MTcwMDE2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ0ZWExZi1kMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BZZrXnAftbIbhNv/rynW7pUasp99o7xFBwQpPh5gTe7fIu+TfpN+dZvvGKS IoI+LbR3SG6rdc+JCKC8V6TCv8JIwDxT6B0KHkegWW6WpXosHPMfXjOuyHl5llrd YJ1mYoiyRcsMJV44p10bmpU7D7jgASA61rk0/QCtuY5Cp0iNwmeGsG1O70RhUAMo XAwTmRUP+IGHWj0xDS7Z+4Wm3MqM+ZDn+8PPjmvfulfmmAXn8pT/1/sWSKvabP8D bJboXF2ftxO0ilKCuqa7NjqyiiGTUoUMw92jOz2y0WHs8rSayKWspAw6hiKxLPaP gtC81cvd6gNzWuCqJOPD3QK+QQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD5jf/dt VKTV/VF/S88jNnSzbnN6MB8GA1UdIwQYMBaAFAXTZVANpLLAAYnzxspZUOAHTHxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9FQTY3QTk4QzdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3NzQUJpZlBHeWxsUTRBZE1m RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JkTmxVQTJrc3NBQmlmUEd5bGxRNEFkTWZFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzhFREYvRUE2N0E5OEM3QzU3MTFFREJGMjEzNzY3QzRGOUFFMDIvOTlENEZDMzIx MkRDMTFFRkIyNDcwQjdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACYQfYwDQYJKoZIhvcNAQELBQADggEBAC+IaRfRJmB112A5 wpEU1s10YXgM2WJejfgso+di6fg7AEc4qZmmiiI0Tsl24qBDZVF0zsOKi9v1s1QM NJOt2wIN7rqJU7Hlw9SMy09kPhzlfjemsdFzBIOvVHpCWps9p96S6JoX71H+7ks8 T1kCpI5wDfu+V3bwImvJPKJL+MugTVRFKbqJzOQ63fRgpX4kzPplwAPBk++SXkfV S+30ef4vWf1AVIqcDSQJqv41wMRUj+Wip/b0XQ0h38K0qmMc48GIn9PaMgt+VN2k DIXHrNxs5X0Viljf69Q6PqofFe3NXvW0qONb/PAJLc70/6Iev+ayJQPZ/3ypi4id Lqit4Pw= -----END CERTIFICATE-----Generated at Sat Jun 1 07:09:21 2024 by rpki-client on console-fra.rpki-client.org