$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA9BC95A548711EF89E24A18C4F9AE02.roa File: FA9BC95A548711EF89E24A18C4F9AE02.roa (raw, json) Hash identifier: TzqKssNJoGfL9wI2PFMHpXN5yW7cil9sz1WNr4GCrKI= Subject key identifier: 92:1A:A0:0D:40:4A:30:32:1D:FC:3D:7D:D3:E9:D2:AF:D3:E8:D5:3E Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0AFA Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA9BC95A548711EF89E24A18C4F9AE02.roa Signing time: Wed 07 Aug 2024 06:40:47 +0000 ROA not before: Wed 07 Aug 2024 06:40:47 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55453 IP address blocks: 139.190.236.0/24 maxlen: 24 139.190.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2810 (0xafa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Aug 7 06:40:47 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66b316ef-acfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:56:ac:42:b9:16:73:c3:60:02:52:96:ac: 16:4d:0b:5a:f0:45:1c:02:1c:14:14:bf:84:d3:0e: 06:a2:f3:80:eb:c7:97:a8:4d:d4:3f:22:6b:b1:3c: d2:7c:f8:45:20:69:ce:a5:29:9b:b2:e9:ba:bf:f7: 3e:7e:e0:bf:07:5b:00:6f:22:d4:f6:dc:10:b9:62: 87:79:00:02:04:5d:5a:69:c1:55:f7:20:48:d1:8f: ee:4b:da:85:f9:ea:bd:6e:89:1f:68:d3:33:7f:5c: ce:63:23:01:d0:82:32:12:51:51:e7:0f:dc:7e:4e: a2:8f:c5:2b:46:f4:87:1e:06:58:bf:48:c1:54:9b: 8e:cb:f7:ec:11:97:a4:14:d3:a4:4d:cd:2a:81:93: c0:11:4e:8a:47:6c:f3:57:05:02:b7:2a:0c:40:a2: 1b:15:81:77:2f:77:bd:47:72:6f:b0:93:0e:e5:b8: 90:c6:56:be:22:48:d6:cc:e6:da:18:91:4f:9b:62: 6f:5a:7b:3f:ba:4e:09:37:da:2b:b4:79:cb:bb:a7: 37:c9:0b:c1:2f:32:de:2b:86:4f:50:f0:f7:37:fb: 92:85:b3:f8:a6:ec:c0:85:21:b7:37:d6:65:cd:5d: 45:c6:4c:42:52:64:a9:c7:11:19:67:65:f3:75:66: 54:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1A:A0:0D:40:4A:30:32:1D:FC:3D:7D:D3:E9:D2:AF:D3:E8:D5:3E X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/FA9BC95A548711EF89E24A18C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.236.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:0f:68:84:45:c7:16:05:ee:a4:21:45:5f:33:8c:34:38:6f: 59:ad:49:b7:8e:73:56:78:3a:48:2c:11:c2:e1:04:39:7e:60: ec:9a:bb:e3:cf:53:24:26:76:31:56:21:54:88:19:9c:99:af: e8:5c:96:41:4b:20:c9:c0:d6:da:20:07:52:18:72:fb:0f:27: 1f:be:26:aa:99:5f:3c:75:5a:b9:40:e0:07:8a:f6:ca:a2:f8: cf:48:f1:00:ef:87:59:0c:fb:af:75:9c:80:e2:5d:5d:21:32: 93:77:b0:07:ff:ca:3a:24:79:88:cd:99:3e:94:da:db:64:5f: 16:91:02:20:03:84:44:d0:de:19:6e:af:f1:b6:eb:e9:25:4f: 3d:f6:30:24:58:c5:61:3b:b5:90:22:d5:73:e4:d9:16:da:6d: e1:fc:1a:50:66:b3:6e:90:3b:1d:49:54:b3:4e:bb:da:92:28: 34:cd:6d:8d:a9:6b:35:1a:69:75:b2:b5:6e:e6:95:b3:65:ea: 1c:d9:5b:2b:4d:85:da:23:3b:79:47:af:13:93:ac:a6:6b:4a: 56:a5:bb:2b:fc:40:2d:44:26:db:ee:73:8e:20:68:ad:3c:49: 9a:9a:a3:ba:87:e2:af:b6:11:8b:a2:9b:49:fd:16:20:4e:ec: f0:e2:cd:10 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjQwODA3MDY0MDQ3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmIzMTZlZi1hY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArahWrEK5FnPDYAJSlqwWTQta8EUcAhwUFL+E0w4GovOA68eXqE3UPyJrsTzS fPhFIGnOpSmbsum6v/c+fuC/B1sAbyLU9twQuWKHeQACBF1aacFV9yBI0Y/uS9qF +eq9bokfaNMzf1zOYyMB0IIyElFR5w/cfk6ij8UrRvSHHgZYv0jBVJuOy/fsEZek FNOkTc0qgZPAEU6KR2zzVwUCtyoMQKIbFYF3L3e9R3JvsJMO5biQxla+IkjWzOba GJFPm2JvWns/uk4JN9ortHnLu6c3yQvBLzLeK4ZPUPD3N/uShbP4puzAhSG3N9Zl zV1FxkxCUmSpxxEZZ2XzdWZUEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJIaoA1A SjAyHfw9fdPp0q/T6NU+MB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRkE5QkM5NUE1 NDg3MTFFRjg5RTI0QTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGLvuwwDQYJKoZIhvcNAQELBQADggEBAFsPaIRFxxYF7qQh RV8zjDQ4b1mtSbeOc1Z4OkgsEcLhBDl+YOyau+PPUyQmdjFWIVSIGZyZr+hclkFL IMnA1togB1IYcvsPJx++JqqZXzx1WrlA4AeK9sqi+M9I8QDvh1kM+691nIDiXV0h MpN3sAf/yjokeYjNmT6U2ttkXxaRAiADhETQ3hlur/G26+klTz32MCRYxWE7tZAi 1XPk2RbabeH8GlBms26QOx1JVLNOu9qSKDTNbY2pazUaaXWytW7mlbNl6hzZWytN hdojO3lHrxOTrKZrSlaluyv8QC1EJtvuc44gaK08SZqao7qH4q+2EYuim0n9FiBO 7PDizRA= -----END CERTIFICATE-----Generated at Sun Nov 24 20:58:17 2024 by rpki-client on console-fra.rpki-client.org