$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/38BE1074FC0F11EA8DEF4D28C4F9AE02.roa File: 38BE1074FC0F11EA8DEF4D28C4F9AE02.roa (raw, json) Hash identifier: CsBmjpW+8oGI2m5YbOFqukot5JJX3fg6ehvukUaOQps= Subject key identifier: E9:32:B4:2D:AA:14:52:E2:69:CE:AF:DC:71:AF:4F:E6:DD:BA:EF:42 Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 06FA Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/38BE1074FC0F11EA8DEF4D28C4F9AE02.roa Signing time: Mon 18 Mar 2024 23:11:53 +0000 ROA not before: Mon 18 Mar 2024 23:11:53 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 134196 IP address blocks: 45.124.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1786 (0x6fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 18 23:11:53 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f8ca38-6540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:89:3f:b7:92:11:57:4b:e7:c2:99:37:62:b3: 8c:ac:c4:65:d0:a1:40:ad:6a:2b:74:7a:33:81:a7: f2:82:a8:79:90:43:02:31:69:cc:14:55:a2:d8:84: f3:8c:aa:3d:ab:23:a7:ec:b8:4a:f8:f5:34:81:91: b7:75:09:40:88:40:52:b1:bd:96:7d:2f:dc:fd:31: ec:1e:1a:93:9d:c7:d3:c0:19:ab:28:e6:72:e3:3c: 5e:1d:bd:08:ec:14:96:c3:40:1b:2a:a4:c9:b2:38: a1:65:22:a9:13:ce:fc:50:cd:ee:87:73:59:1f:3f: 14:09:65:d7:1a:3f:67:72:c3:20:00:ee:57:b9:50: b8:71:c4:04:4c:86:dd:c4:d7:b8:5d:40:a1:d0:00: d0:52:75:0a:27:6f:bc:6e:46:96:38:b1:f7:d2:f6: f1:f3:66:73:5a:3d:70:bc:84:88:22:92:1c:d1:c6: 69:df:d4:77:25:c6:52:62:e4:e9:89:d0:88:f1:1b: a9:d0:d5:dd:39:6f:1c:37:41:a8:ed:b3:06:12:40: f0:0a:93:2c:f7:65:03:df:23:b9:cf:3a:d4:79:98: a0:e8:20:89:63:9a:6b:ec:2d:39:2e:55:d6:10:4c: 4a:9c:7f:d6:bc:d7:b9:1d:5d:c7:93:37:ba:08:bb: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:32:B4:2D:AA:14:52:E2:69:CE:AF:DC:71:AF:4F:E6:DD:BA:EF:42 X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/38BE1074FC0F11EA8DEF4D28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.124.24.0/22 Signature Algorithm: sha256WithRSAEncryption 91:44:67:8f:0b:0b:b9:b1:0f:7b:46:d3:86:77:db:c5:91:64: 14:81:f0:85:8a:b4:a1:fa:8f:20:f7:4d:13:98:de:7b:9c:df: 96:7f:7c:13:8a:a1:78:97:90:f0:3e:ac:1d:c1:ce:2f:84:60: 54:6a:e8:c1:8b:a2:79:5c:79:4a:d2:b0:e0:a2:f4:11:4a:ba: e6:41:89:90:62:5b:6b:53:82:c1:96:1b:39:c2:63:86:06:ba: e7:f6:a9:cd:8d:bc:1e:aa:10:bd:94:0a:e7:23:c4:be:ff:ca: 19:0b:22:15:de:bc:ed:8a:e1:c5:f0:fa:03:db:c5:7c:0c:5f: c3:01:c5:9a:d9:16:08:bb:b6:2c:82:0f:6b:47:97:6a:76:ae: 1e:23:a9:2c:5d:d5:12:44:0d:16:6c:98:8c:e1:23:71:0b:7a: 17:85:0d:30:aa:04:f9:b9:e0:5c:f9:05:37:99:85:e9:55:a6: cf:02:b1:60:6f:ed:37:30:ab:a7:0e:1a:b2:5a:79:b8:a5:02: 63:d0:95:1c:fb:83:d7:40:e8:45:1d:03:76:6d:46:64:24:97: 74:96:e2:53:cc:70:ec:62:a0:e9:34:02:f4:f9:89:c7:d9:e9: 0a:c9:4d:76:7f:09:3b:9a:4b:2c:75:ac:60:5b:a3:a7:ce:ba: 42:c3:05:d0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjQwMzE4MjMxMTUzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4Y2EzOC02NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Yk/t5IRV0vnwpk3YrOMrMRl0KFArWordHozgafygqh5kEMCMWnMFFWi2ITz jKo9qyOn7LhK+PU0gZG3dQlAiEBSsb2WfS/c/THsHhqTncfTwBmrKOZy4zxeHb0I 7BSWw0AbKqTJsjihZSKpE878UM3uh3NZHz8UCWXXGj9ncsMgAO5XuVC4ccQETIbd xNe4XUCh0ADQUnUKJ2+8bkaWOLH30vbx82ZzWj1wvISIIpIc0cZp39R3JcZSYuTp idCI8Rup0NXdOW8cN0Go7bMGEkDwCpMs92UD3yO5zzrUeZig6CCJY5pr7C05LlXW EExKnH/WvNe5HV3Hkze6CLv9vQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOkytC2q FFLiac6v3HGvT+bduu9CMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvMzhCRTEwNzRG QzBGMTFFQThERUY0RDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAItfBgwDQYJKoZIhvcNAQELBQADggEBAJFEZ48LC7mxD3tG 04Z328WRZBSB8IWKtKH6jyD3TROY3nuc35Z/fBOKoXiXkPA+rB3Bzi+EYFRq6MGL onlceUrSsOCi9BFKuuZBiZBiW2tTgsGWGznCY4YGuuf2qc2NvB6qEL2UCucjxL7/ yhkLIhXevO2K4cXw+gPbxXwMX8MBxZrZFgi7tiyCD2tHl2p2rh4jqSxd1RJEDRZs mIzhI3ELeheFDTCqBPm54Fz5BTeZhelVps8CsWBv7Tcwq6cOGrJaebilAmPQlRz7 g9dA6EUdA3ZtRmQkl3SW4lPMcOxioOk0AvT5icfZ6QrJTXZ/CTuaSyx1rGBbo6fO ukLDBdA= -----END CERTIFICATE-----Generated at Sun May 19 00:30:14 2024 by rpki-client on console-ams.rpki-client.org