$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa File: AEA7C9C0818911EA81577016C4F9AE02.roa (raw, json) Hash identifier: aDnY8RtLKoVa9izIbxJd49k0PDh93caH+Q1DtM3oWPQ= Subject key identifier: 21:11:09:6B:E8:9B:E5:1B:DC:37:9C:C9:F1:16:4A:5E:0A:DA:6F:9D Certificate issuer: /CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Certificate serial: 1734 Authority key identifier: DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa Signing time: Wed 02 Aug 2023 16:12:43 +0000 ROA not before: Wed 02 Aug 2023 16:12:43 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 45352 IP address blocks: 212.8.230.0/24 maxlen: 24 212.8.231.0/24 maxlen: 24 212.8.254.0/24 maxlen: 24 212.8.255.0/24 maxlen: 24 212.92.102.0/24 maxlen: 24 212.92.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5940 (0x1734) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1691/serialNumber=DC04AF198C97F2582F15ADDEEE7C682611CADA51 Validity Not Before: Aug 2 16:12:43 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ca807b-1fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:a1:44:eb:d8:87:3d:d4:60:f5:48:6f:0a: 2f:69:84:0d:79:67:e5:51:15:ce:8c:c5:a5:18:56: ec:67:5c:51:83:08:0d:72:8e:79:7f:66:28:4c:c2: 60:f8:7d:aa:ec:35:cd:16:68:b1:c3:32:67:1f:ba: 77:06:0b:04:f0:f3:94:09:71:bd:9b:ed:38:87:28: 0c:f5:c3:ec:5d:9b:55:61:a0:7a:1a:ca:0e:67:9d: d0:54:0e:70:ba:62:63:8c:86:db:7a:f6:8a:ac:f3: 68:09:80:cb:0f:b1:93:dd:72:8a:9c:62:2e:50:6c: c2:45:b3:1a:07:eb:c3:92:33:a3:54:cc:d4:87:f9: 11:f2:59:7a:4d:c8:6e:75:20:a1:b8:fd:14:11:bf: 41:06:fb:3d:63:e2:63:74:d4:8f:67:79:22:b0:0d: 02:68:23:8b:e6:fc:a5:47:ce:da:52:e0:19:4f:52: 7f:97:c8:1b:28:75:11:a5:bf:8a:bd:07:dc:7d:c2: 51:60:b0:b6:5e:0a:0b:c5:34:6e:b1:b4:02:13:e1: cf:45:98:31:22:9d:ef:fc:11:d1:22:3b:fe:5e:66: f3:01:be:c5:14:97:28:d1:a4:a7:3c:b7:7f:17:75: 16:f6:99:43:95:84:6d:03:a1:10:17:0f:42:5f:f0: f8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:11:09:6B:E8:9B:E5:1B:DC:37:9C:C9:F1:16:4A:5E:0A:DA:6F:9D X509v3 Authority Key Identifier: keyid:DC:04:AF:19:8C:97:F2:58:2F:15:AD:DE:EE:7C:68:26:11:CA:DA:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/3ASvGYyX8lgvFa3e7nxoJhHK2lE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/3ASvGYyX8lgvFa3e7nxoJhHK2lE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/50C692929D2411E7861A226BC4F9AE02/AEA7C9C0818911EA81577016C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 212.8.230.0/23 212.8.254.0/23 212.92.102.0/23 Signature Algorithm: sha256WithRSAEncryption 48:d6:75:b5:a3:0f:cd:47:a8:f3:f7:52:d1:be:18:7c:59:89: 39:65:19:98:6c:04:d9:51:d4:c1:d3:75:1a:9b:5d:fb:a4:39: 7e:3a:c2:d4:e0:07:08:43:66:39:e5:23:93:d0:d9:a9:e1:c8: eb:ef:33:09:64:4d:7c:ee:59:7f:fd:b7:02:69:0a:7c:a0:a8: 82:0b:df:55:3a:e1:55:c7:2d:25:61:34:18:0d:c3:f0:da:1b: 06:69:7d:51:42:62:6e:fc:39:75:ee:56:fd:38:79:8a:d3:60: 9b:e3:5a:21:92:20:c8:10:a7:9a:5e:e4:fe:62:a1:91:80:09: fb:cf:30:77:d8:e4:9e:d7:09:dd:a9:6a:df:9a:92:48:8a:6d: 38:ca:b5:38:94:b1:b8:d6:59:3e:d0:18:10:9d:73:22:9f:65: 93:93:25:7c:cd:54:83:f4:42:8b:a1:c6:e2:50:8f:0f:82:f2: 81:af:e2:3d:8a:eb:77:e8:05:7c:c8:9f:34:e1:d2:bd:1f:25: ff:de:4f:76:99:5f:16:84:2f:f4:29:ba:0a:9c:7c:c1:ee:81: 39:00:33:22:07:cb:3c:a3:2d:aa:cd:6f:70:89:a9:fe:30:b8: 83:0f:77:b4:b4:dd:d4:99:60:f0:08:76:92:fd:ec:2e:b5:24: 7c:a1:32:93 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICFzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE2OTExMTAvBgNVBAUTKERDMDRBRjE5OEM5N0YyNTgyRjE1QURERUVFN0M2ODI2 MTFDQURBNTEwHhcNMjMwODAyMTYxMjQzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhODA3Yi0xZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzE2hROvYhz3UYPVIbwovaYQNeWflURXOjMWlGFbsZ1xRgwgNco55f2YoTMJg +H2q7DXNFmixwzJnH7p3BgsE8POUCXG9m+04hygM9cPsXZtVYaB6GsoOZ53QVA5w umJjjIbbevaKrPNoCYDLD7GT3XKKnGIuUGzCRbMaB+vDkjOjVMzUh/kR8ll6Tchu dSChuP0UEb9BBvs9Y+JjdNSPZ3kisA0CaCOL5vylR87aUuAZT1J/l8gbKHURpb+K vQfcfcJRYLC2XgoLxTRusbQCE+HPRZgxIp3v/BHRIjv+XmbzAb7FFJco0aSnPLd/ F3UW9plDlYRtA6EQFw9CX/D4bQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFCERCWvo m+Ub3DecyfEWSl4K2m+dMB8GA1UdIwQYMBaAFNwErxmMl/JYLxWt3u58aCYRytpR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS81MEM2OTI5MjlE MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8zQVN2R1l5WDhsZ3ZGYTNlN254b0poSEsy bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzNBU3ZHWXlYOGxndkZhM2U3bnhvSmhISzJsRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE2OTEvNTBDNjkyOTI5RDI0MTFFNzg2MUEyMjZCQzRGOUFFMDIvQUVBN0M5QzA4 MTg5MTFFQTgxNTc3MDE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAHUCOYDBAHUCP4DBAHUXGYwDQYJKoZIhvcNAQELBQADggEB AEjWdbWjD81HqPP3UtG+GHxZiTllGZhsBNlR1MHTdRqbXfukOX46wtTgBwhDZjnl I5PQ2anhyOvvMwlkTXzuWX/9twJpCnygqIIL31U64VXHLSVhNBgNw/DaGwZpfVFC Ym78OXXuVv04eYrTYJvjWiGSIMgQp5pe5P5ioZGACfvPMHfY5J7XCd2pat+akkiK bTjKtTiUsbjWWT7QGBCdcyKfZZOTJXzNVIP0QouhxuJQjw+C8oGv4j2K63foBXzI nzTh0r0fJf/eT3aZXxaEL/QpugqcfMHugTkAMyIHyzyjLarNb3CJqf4wuIMPd7S0 3dSZYPAIdpL97C61JHyhMpM= -----END CERTIFICATE-----Generated at Fri May 31 20:34:16 2024 by rpki-client on console-ams.rpki-client.org