$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/8D6B6D86A98C11EFAAC0F364C4F9AE02.roa File: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (raw, json) Hash identifier: P1YxJ4+gjHWBzmSpF7hBMmYmiKS5/7YJlO0/1zxJNmc= Subject key identifier: FA:7C:DE:E9:D7:03:D5:BA:5A:BD:35:FB:41:65:52:91:82:58:DA:A8 Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 02 Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/8D6B6D86A98C11EFAAC0F364C4F9AE02.roa Signing time: Sat 23 Nov 2024 11:17:40 +0000 ROA not before: Sat 23 Nov 2024 11:17:40 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137037 IP address blocks: 160.191.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 11:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Nov 23 11:17:40 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6741b9d4-5de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:17:73:59:05:bf:05:52:ed:22:b5:9c:d7:8f: bb:b5:0d:04:5b:5a:78:e9:34:76:1f:ee:00:45:2a: 45:69:6c:8b:76:25:fa:3b:24:fb:a8:a7:75:ab:39: a6:b3:94:77:77:f0:84:26:5a:2f:c2:14:35:49:a4: 69:91:82:02:cb:6a:01:92:a3:0c:c7:d5:57:f7:12: e3:0a:85:24:ae:17:b1:28:3f:4d:4f:50:30:e8:06: b9:e5:ae:ab:8f:59:ad:3d:3a:31:4f:73:eb:ba:12: bb:b7:cb:f8:60:6d:13:04:08:31:20:07:41:ff:8e: 01:83:4f:fd:62:22:74:69:a0:0a:c0:bf:fb:f6:a2: 61:e8:74:89:35:7e:6c:2c:43:fa:f9:25:37:a0:66: aa:f3:35:a5:4c:e9:a9:6f:20:04:18:27:05:15:cf: 6f:4d:dd:a6:52:3b:e2:9d:b1:02:eb:b1:2c:8d:a4: 63:fb:b0:bd:4b:6c:02:b8:7d:59:22:aa:a9:63:73: e8:c7:44:30:9f:01:52:ba:6c:51:64:16:95:ab:01: a6:a9:4c:3c:3e:f7:8d:72:68:d6:13:e0:63:f6:9f: f4:c4:b4:49:0d:16:c1:ab:59:68:43:79:91:27:79: 3a:64:13:88:2d:e3:02:58:41:02:33:02:2d:e5:ac: 48:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7C:DE:E9:D7:03:D5:BA:5A:BD:35:FB:41:65:52:91:82:58:DA:A8 X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/8D6B6D86A98C11EFAAC0F364C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.224.0/23 Signature Algorithm: sha256WithRSAEncryption 06:06:3b:7d:d3:99:d1:b7:52:64:a7:6d:73:57:1a:db:19:3b: 5a:ed:18:c8:b0:a9:f4:d3:05:e7:4d:38:d5:80:39:2f:ce:c5: d9:df:c5:08:4c:83:f9:3c:28:2c:d2:ae:09:50:81:ce:24:ea: 85:6e:31:85:09:a9:4e:3d:22:51:70:57:3a:07:a3:b3:d9:d4: ad:9d:af:e5:a2:51:1b:21:c1:5f:0c:73:34:61:90:3e:f5:de: fc:08:d8:55:d4:21:99:8d:9c:84:bc:99:59:d4:be:33:1e:8a: c0:91:b9:0c:d5:89:64:b4:20:6f:c9:7f:87:cb:0b:85:d1:55: 3c:eb:b8:1d:b6:21:0a:15:3b:15:7b:02:8c:cc:52:ba:dc:21: 1d:0d:27:7c:1f:94:bd:91:2c:2c:88:a7:2a:d2:d7:fc:73:7d: 6a:51:04:f7:8d:e3:c6:83:b3:9c:e1:d9:88:39:54:87:d1:d4: 8d:de:cb:53:37:09:31:39:63:80:f2:8e:be:6e:34:88:f7:d2: 23:19:13:2d:5c:b3:95:79:74:60:28:20:95:01:4d:7b:7f:2d: 7d:27:60:c4:20:4a:6a:c3:6c:06:44:41:03:b4:a9:17:d4:a7: 3c:38:9b:7d:4c:7d:56:f8:c4:d5:c9:0a:66:b7:e1:ab:06:7a: 0d:c4:9d:c8 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkMzODExMC8GA1UEBRMoQUEzNUUyRjk3N0I1NUU3MkY5MTYzNUJGN0Q1M0JDRUI1 MzQ3OTgzQjAeFw0yNDExMjMxMTE3NDBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3NDFiOWQ0LTVkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuF3NZBb8FUu0itZzXj7u1DQRbWnjpNHYf7gBFKkVpbIt2Jfo7JPuop3WrOaaz lHd38IQmWi/CFDVJpGmRggLLagGSowzH1Vf3EuMKhSSuF7EoP01PUDDoBrnlrquP Wa09OjFPc+u6Eru3y/hgbRMECDEgB0H/jgGDT/1iInRpoArAv/v2omHodIk1fmws Q/r5JTegZqrzNaVM6alvIAQYJwUVz29N3aZSO+KdsQLrsSyNpGP7sL1LbAK4fVki qqljc+jHRDCfAVK6bFFkFpWrAaapTDw+941yaNYT4GP2n/TEtEkNFsGrWWhDeZEn eTpkE4gt4wJYQQIzAi3lrEjxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU+nze6dcD 1bpavTX7QWVSkYJY2qgwHwYDVR0jBBgwFoAUqjXi+Xe1XnL5FjW/fVO861NHmDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyQzM4LzA0QkFBNjE0QTk4 QzExRUY5MzUwRkI2M0M0RjlBRTAyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1E cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWpYaS1YZTFYbkw1RmpXX2ZWTzg2MU5IbURzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi84RDZCNkQ4NkE5 OEMxMUVGQUFDMEYzNjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/4DANBgkqhkiG9w0BAQsFAAOCAQEABgY7fdOZ0bdSZKdt c1ca2xk7Wu0YyLCp9NMF50041YA5L87F2d/FCEyD+TwoLNKuCVCBziTqhW4xhQmp Tj0iUXBXOgejs9nUrZ2v5aJRGyHBXwxzNGGQPvXe/AjYVdQhmY2chLyZWdS+Mx6K wJG5DNWJZLQgb8l/h8sLhdFVPOu4HbYhChU7FXsCjMxSutwhHQ0nfB+UvZEsLIin KtLX/HN9alEE943jxoOznOHZiDlUh9HUjd7LUzcJMTljgPKOvm40iPfSIxkTLVyz lXl0YCgglQFNe38tfSdgxCBKasNsBkRBA7SpF9SnPDibfUx9VvjE1ckKZrfhqwZ6 DcSdyA== -----END CERTIFICATE-----Generated at Sat Nov 23 12:37:05 2024 by rpki-client on console-ams.rpki-client.org