$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa File: 38E9176402D311EFB9E2A81DC4F9AE02.roa (raw, json) Hash identifier: JSJnJunUi3/sV1zruVq7DPv3vPvu3ZTt4tszV94odow= Subject key identifier: 1E:10:49:BD:71:48:D0:E7:B2:C9:AA:6E:BF:CA:AD:71:99:42:20:1E Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 124A Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa Signing time: Fri 24 May 2024 22:32:19 +0000 ROA not before: Fri 24 May 2024 22:32:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 131275 IP address blocks: 223.29.232.0/24 maxlen: 24 223.29.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: May 24 22:32:19 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66511573-ed87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:ff:66:e4:2d:1c:44:69:91:45:91:80:55: 8b:d2:18:a5:c7:d8:73:82:c6:cc:85:88:6c:9b:cf: 22:44:5a:37:f8:bb:ae:4f:ab:cf:12:b1:a0:a6:27: 0b:1d:68:dd:a1:79:4a:ba:7f:d6:09:93:c1:c6:2e: 64:44:03:5e:75:f4:36:8d:59:76:fc:1c:3a:fa:2a: 10:46:4c:91:3e:58:9c:ea:03:4c:91:4a:58:4e:71: 32:26:d0:16:b1:09:1c:a8:22:52:b3:f7:2e:b3:e3: c5:27:16:d1:82:8d:fc:99:0b:c1:29:e6:61:9f:76: a4:a3:2a:fc:6d:be:e9:b3:9d:64:05:97:5a:6c:24: fc:b8:eb:81:42:da:54:99:7a:7e:e6:7b:38:80:74: ad:ef:1c:9c:6f:9f:2d:65:b4:b8:66:ff:18:66:9f: 23:47:9c:01:99:61:e4:67:e0:ff:86:70:5b:49:4a: 1f:8d:1a:73:5d:66:85:93:7a:69:de:cb:b8:a3:fc: 60:ff:db:4d:34:43:9f:a2:18:f2:57:a9:7b:09:38: f9:04:9e:c8:56:72:25:f5:8b:02:02:7b:e9:3b:13: b1:24:e9:53:e8:94:03:eb:a4:00:09:4f:31:55:d2: a3:f8:85:06:c2:2b:d8:90:aa:a5:e2:69:44:7e:ce: d9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:10:49:BD:71:48:D0:E7:B2:C9:AA:6E:BF:CA:AD:71:99:42:20:1E X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/38E9176402D311EFB9E2A81DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.29.232.0/24 223.29.234.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:37:25:d6:c9:63:8b:c7:aa:4b:52:7b:21:be:65:63:9f:cf: 4b:c8:54:49:54:aa:e7:35:2d:8f:af:8b:a6:5e:b9:f5:69:4c: dd:08:19:07:f3:30:27:95:9b:34:04:35:16:6c:96:8a:b2:dc: a5:e1:9d:63:38:72:35:df:fc:55:eb:94:fb:29:d9:ec:bf:dd: 53:48:d3:e4:0b:4f:66:d8:0f:30:f8:7c:29:40:19:d9:9e:90: 4b:f4:0e:12:4f:a0:ff:df:29:5a:7f:ee:bf:c5:55:46:2e:63: 64:88:49:39:0d:3a:59:3d:75:6b:7e:85:0a:14:5d:76:69:14: a6:4b:f9:f5:5e:b7:5c:74:41:0f:85:dc:68:3d:5a:d4:95:aa: 85:85:09:c0:66:04:78:60:cb:e0:7c:f4:1e:5b:99:8b:04:4c: c3:96:e0:73:b8:b7:8c:fc:0a:4b:46:86:5c:75:39:4e:99:93: 1a:14:ef:07:59:00:ca:bb:9b:71:8c:d9:69:9f:b6:15:49:08: 87:6f:b6:e2:50:e3:80:8d:73:6c:ae:3d:1a:33:d2:db:de:c3: 39:c0:56:4f:17:eb:fb:f7:89:4e:a8:bc:c5:14:1f:5c:0b:77: 01:85:d5:27:0d:16:1b:ca:9e:0a:d7:f4:54:56:9d:31:78:db: 32:fc:da:53 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICEkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjQwNTI0MjIzMjE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUxMTU3My1lZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYf/ZuQtHERpkUWRgFWL0hilx9hzgsbMhYhsm88iRFo3+LuuT6vPErGgpicL HWjdoXlKun/WCZPBxi5kRANedfQ2jVl2/Bw6+ioQRkyRPlic6gNMkUpYTnEyJtAW sQkcqCJSs/cus+PFJxbRgo38mQvBKeZhn3akoyr8bb7ps51kBZdabCT8uOuBQtpU mXp+5ns4gHSt7xycb58tZbS4Zv8YZp8jR5wBmWHkZ+D/hnBbSUofjRpzXWaFk3pp 3su4o/xg/9tNNEOfohjyV6l7CTj5BJ7IVnIl9YsCAnvpOxOxJOlT6JQD66QACU8x VdKj+IUGwivYkKql4mlEfs7ZwwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFB4QSb1x SNDnssmqbr/KrXGZQiAeMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMzhFOTE3NjQw MkQzMTFFRkI5RTJBODFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADfHegDBADfHeowDQYJKoZIhvcNAQELBQADggEBAD83JdbJ Y4vHqktSeyG+ZWOfz0vIVElUquc1LY+vi6ZeufVpTN0IGQfzMCeVmzQENRZsloqy 3KXhnWM4cjXf/FXrlPsp2ey/3VNI0+QLT2bYDzD4fClAGdmekEv0DhJPoP/fKVp/ 7r/FVUYuY2SISTkNOlk9dWt+hQoUXXZpFKZL+fVet1x0QQ+F3Gg9WtSVqoWFCcBm BHhgy+B89B5bmYsETMOW4HO4t4z8CktGhlx1OU6ZkxoU7wdZAMq7m3GM2WmfthVJ CIdvtuJQ44CNc2yuPRoz0tvewznAVk8X6/v3iU6ovMUUH1wLdwGF1ScNFhvKngrX 9FRWnTF42zL82lM= -----END CERTIFICATE-----Generated at Fri May 31 23:53:09 2024 by rpki-client on console-fra.rpki-client.org