$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F8C02F3CDA4E11EC9C09A446C4F9AE02.roa File: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (raw, json) Hash identifier: ek3DgpwlstOVnuguW/pHkiP1RxK/zlxH+dHxarNuX94= Subject key identifier: 9F:16:D0:17:0D:09:83:C7:6B:ED:FD:E6:68:B7:D7:0E:0B:2A:C1:2E Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 07F0 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F8C02F3CDA4E11EC9C09A446C4F9AE02.roa Signing time: Tue 28 May 2024 23:03:14 +0000 ROA not before: Tue 28 May 2024 23:03:14 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 36131 IP address blocks: 164.90.99.0/24 maxlen: 24 164.90.100.0/24 maxlen: 24 164.90.101.0/24 maxlen: 24 164.90.118.0/24 maxlen: 24 164.90.119.0/24 maxlen: 24 164.90.120.0/24 maxlen: 24 202.63.47.0/24 maxlen: 24 202.63.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: May 28 23:03:14 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665662b2-13aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:68:f1:ef:06:35:90:01:73:7d:ec:f3:83: 16:5c:fe:f6:61:6c:13:30:0c:ca:49:20:68:bf:c3: c0:d3:79:82:8e:62:a2:91:12:cb:23:0b:06:08:77: 21:6c:73:5c:d7:c3:a1:80:0c:3f:a7:42:1e:03:42: 7e:26:82:fa:06:8a:51:6c:c4:3f:3b:79:2b:d9:39: ca:71:1c:b3:56:20:d5:cb:27:96:db:21:47:33:ac: a4:3e:0d:81:29:ee:21:88:94:a6:19:ce:43:dc:b2: a0:6c:9a:ef:b1:b3:db:76:83:78:19:7d:c1:ea:c6: 76:c5:33:0e:28:b8:38:33:0b:c7:3a:96:d9:f2:2b: ba:1b:e7:2f:da:2a:a3:9f:9b:44:8c:3a:09:39:b2: 19:ec:88:99:78:bb:c9:bb:df:a2:52:8d:53:9a:49: d3:93:5a:26:9a:81:84:55:b1:d3:90:9e:e0:c0:28: a7:49:40:ee:cd:ec:cf:18:83:dc:45:01:97:46:5d: d7:8b:f6:25:f9:90:d9:6d:04:55:17:42:f5:b6:e9: 2c:44:b4:f2:57:a7:b9:19:79:35:5a:21:17:f9:2e: f0:75:04:66:e2:bf:71:60:74:f5:b5:4f:ad:8f:7b: 27:58:10:6e:65:5a:26:f3:ee:b0:c9:1e:28:d8:86: 35:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:16:D0:17:0D:09:83:C7:6B:ED:FD:E6:68:B7:D7:0E:0B:2A:C1:2E X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/F8C02F3CDA4E11EC9C09A446C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.90.99.0-164.90.101.255 164.90.118.0-164.90.120.255 202.63.47.0-202.63.48.255 Signature Algorithm: sha256WithRSAEncryption 10:2a:f1:db:c7:12:da:12:cb:74:72:f3:6b:2b:b2:25:63:1c: 25:f0:f5:d8:5d:8f:80:76:36:d6:fd:5a:a5:3c:d9:6f:17:c3: 6b:28:b4:a7:57:32:3c:d3:3c:4a:d6:f8:2d:f7:bb:7f:3b:98: f8:f2:3c:ff:e6:3d:03:81:a3:ec:8a:f0:da:37:f2:54:84:e1: d8:a7:8c:e8:17:1b:78:71:72:a2:c4:fd:e4:3b:0d:21:a7:ed: 7f:a8:52:19:c4:0a:5c:00:92:6e:d5:f3:7e:bf:7e:8e:57:ae: 76:b4:b6:a1:ae:02:7a:0c:ca:10:33:67:97:86:ee:57:ba:51: 54:bf:98:c4:81:11:47:a5:f7:6b:35:02:cb:b1:b7:34:72:dd: 88:dc:5a:e3:b9:1f:e0:6c:ff:33:ae:95:c0:1f:63:a5:12:69: 0a:ee:a7:78:77:7d:32:90:87:96:ed:78:2e:10:bc:3e:4c:da: b3:94:31:1d:2f:37:68:76:7a:e7:80:91:44:3c:75:ef:16:29: 8e:27:fd:0f:dc:ff:dd:13:b4:80:0f:e4:26:a1:9e:4a:95:1f: 7a:97:31:38:4b:3e:5f:eb:ce:f9:0e:3f:52:9f:24:5f:e3:b6: 4c:38:c8:e1:5b:76:53:f8:16:53:ca:d8:fe:ac:4d:b3:ec:cb: 6f:ce:23:d7 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjQwNTI4MjMwMzE0WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2NjJiMi0xM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7lo8e8GNZABc33s84MWXP72YWwTMAzKSSBov8PA03mCjmKikRLLIwsGCHch bHNc18OhgAw/p0IeA0J+JoL6BopRbMQ/O3kr2TnKcRyzViDVyyeW2yFHM6ykPg2B Ke4hiJSmGc5D3LKgbJrvsbPbdoN4GX3B6sZ2xTMOKLg4MwvHOpbZ8iu6G+cv2iqj n5tEjDoJObIZ7IiZeLvJu9+iUo1TmknTk1ommoGEVbHTkJ7gwCinSUDuzezPGIPc RQGXRl3Xi/Yl+ZDZbQRVF0L1tuksRLTyV6e5GXk1WiEX+S7wdQRm4r9xYHT1tU+t j3snWBBuZVom8+6wyR4o2IY1PwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFJ8W0BcN CYPHa+395mi31w4LKsEuMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvRjhDMDJGM0NE QTRFMTFFQzlDMDlBNDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCowDAMEAKRaYwMEAaRaZDAMAwQBpFp2AwQApFp4MAwDBADKPy8D BADKPzAwDQYJKoZIhvcNAQELBQADggEBABAq8dvHEtoSy3Ry82srsiVjHCXw9dhd j4B2Ntb9WqU82W8Xw2sotKdXMjzTPErW+C33u387mPjyPP/mPQOBo+yK8No38lSE 4dinjOgXG3hxcqLE/eQ7DSGn7X+oUhnEClwAkm7V836/fo5Xrna0tqGuAnoMyhAz Z5eG7le6UVS/mMSBEUel92s1AsuxtzRy3YjcWuO5H+Bs/zOulcAfY6USaQrup3h3 fTKQh5bteC4QvD5M2rOUMR0vN2h2eueAkUQ8de8WKY4n/Q/c/90TtIAP5CahnkqV H3qXMThLPl/rzvkOP1KfJF/jtkw4yOFbdlP4FlPK2P6sTbPsy2/OI9c= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:30 2024 by rpki-client on console-ams.rpki-client.org