$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa File: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (raw, json) Hash identifier: 7ZftxeCsBvOw6J2/sGTBldkcAq0B9zzZMirRxBsj6nQ= Subject key identifier: 8A:21:34:25:9D:56:8B:A6:09:66:4A:9C:08:A4:94:AC:77:EF:A8:52 Certificate issuer: /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Certificate serial: 06 Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa Signing time: Mon 17 Jun 2024 05:44:25 +0000 ROA not before: Mon 17 Jun 2024 05:44:25 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138933 IP address blocks: 160.22.164.0/23 maxlen: 23 160.22.164.0/24 maxlen: 24 160.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Validity Not Before: Jun 17 05:44:25 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=666fcd39-1a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:e9:47:d7:1e:b5:8e:12:ac:72:92:77:c4: 75:b5:af:ab:7e:53:2c:0a:75:cc:e8:92:be:93:4a: 25:eb:33:27:e3:a5:9d:8d:60:3b:7c:91:19:0b:b9: e6:91:9a:72:ab:df:3b:d3:8c:00:73:f6:04:a1:92: 33:95:8d:94:4f:b8:ce:55:f8:e4:df:27:57:91:b9: b6:cc:94:24:03:67:74:0c:fe:2a:45:94:90:1e:2f: b9:ff:22:4e:bf:e0:7a:4f:d6:1e:8c:99:1b:62:61: a5:98:ff:51:93:0b:d8:c9:8e:5a:97:ac:fd:5c:3a: bf:63:d7:97:c7:5a:b4:1d:4d:96:e5:fa:e4:cf:a5: e0:f4:94:5c:1c:80:28:af:e8:63:10:f5:99:d4:ea: 8d:f2:a0:ad:02:95:65:d9:b7:4c:3b:bf:94:7e:61: 66:eb:b8:93:b9:f8:8a:d4:06:7c:7a:ca:d7:96:01: 48:d2:3d:9f:70:b9:61:5d:3b:60:f2:e6:d8:3b:ce: 52:37:b8:fc:f1:e3:9e:0a:36:01:7e:09:74:ac:8a: 5b:74:c8:37:4b:eb:bc:c0:6d:1b:77:fc:05:27:e1: f4:87:81:9a:45:53:39:e4:b4:67:03:c4:0d:d2:36: 87:ce:91:ae:f7:ce:4d:74:60:04:a5:85:e9:f9:bd: 4a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:21:34:25:9D:56:8B:A6:09:66:4A:9C:08:A4:94:AC:77:EF:A8:52 X509v3 Authority Key Identifier: keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.164.0/23 Signature Algorithm: sha256WithRSAEncryption a0:d3:2d:12:df:c8:47:1d:27:75:60:4f:e3:4a:3e:e7:1f:ef: f0:a2:f3:df:51:88:c3:cf:13:e6:15:63:4a:e1:10:7c:e0:89: c5:bc:57:02:b0:a6:85:5e:f8:c9:a0:9f:3b:c6:86:34:c9:de: a5:b6:04:91:6f:22:1a:55:f3:74:d1:fc:a9:3f:28:05:88:0a: da:f7:1e:32:9f:1c:b2:08:f3:11:21:ac:d3:32:de:14:90:85: a2:8f:b2:4d:ac:d5:c7:2d:f4:96:8e:27:dd:03:62:b6:eb:db: ca:23:86:74:5a:b9:db:5b:2d:f7:bf:9d:80:5b:fb:7a:83:b1: 27:ee:cd:49:76:fc:e4:b7:ac:4f:35:87:43:c3:2a:dc:f1:61: 6c:3f:84:9b:a9:26:58:ea:9d:89:d5:91:b6:a5:32:57:a4:82: 46:c7:d1:df:9d:2a:d9:94:4d:7c:11:ba:5b:d3:17:a0:3c:c2: 13:ae:07:37:21:68:b1:7b:94:48:b9:84:54:a3:82:ec:a3:07: ff:d2:e3:e1:40:bc:ae:d2:aa:2e:3e:5e:cd:1e:f8:3e:49:25: b3:b4:27:8e:da:5d:f2:2b:ec:c8:51:46:2c:af:c9:04:e8:b6: f0:79:ae:28:87:a3:f7:24:d8:62:05:21:44:d0:eb:24:eb:20: 38:d1:98:bd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QUUyMzExMC8GA1UEBRMoNDFFMUVDMTdERTdCQTcwRjhDMTI0MTc3Njk2Mzc3MDIz NzI1MTlERTAeFw0yNDA2MTcwNTQ0MjVaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NmZjZDM5LTFhMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu0+lH1x61jhKscpJ3xHW1r6t+UywKdczokr6TSiXrMyfjpZ2NYDt8kRkLueaR mnKr3zvTjABz9gShkjOVjZRPuM5V+OTfJ1eRubbMlCQDZ3QM/ipFlJAeL7n/Ik6/ 4HpP1h6MmRtiYaWY/1GTC9jJjlqXrP1cOr9j15fHWrQdTZbl+uTPpeD0lFwcgCiv 6GMQ9ZnU6o3yoK0ClWXZt0w7v5R+YWbruJO5+IrUBnx6yteWAUjSPZ9wuWFdO2Dy 5tg7zlI3uPzx454KNgF+CXSsilt0yDdL67zAbRt3/AUn4fSHgZpFUznktGcDxA3S NofOka73zk10YASlhen5vUqrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiiE0JZ1W i6YJZkqcCKSUrHfvqFIwHwYDVR0jBBgwFoAUQeHsF957pw+MEkF3aWN3AjclGd4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBRTIzLzMwMUExRTRBMkM2 QzExRUZBMzQ2OTQyREM0RjlBRTAyL1FlSHNGOTU3cHctTUVrRjNhV04zQWpjbEdk NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWVIc0Y5NTdwdy1NRWtGM2FXTjNBamNsR2Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUyMy8zMDFBMUU0QTJDNkMxMUVGQTM0Njk0MkRDNEY5QUUwMi84Q0Y4MzIzMjJD NkMxMUVGQjUwQUQyMkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAWpDANBgkqhkiG9w0BAQsFAAOCAQEAoNMtEt/IRx0ndWBP 40o+5x/v8KLz31GIw88T5hVjSuEQfOCJxbxXArCmhV74yaCfO8aGNMnepbYEkW8i GlXzdNH8qT8oBYgK2vceMp8csgjzESGs0zLeFJCFoo+yTazVxy30lo4n3QNituvb yiOGdFq521st97+dgFv7eoOxJ+7NSXb85LesTzWHQ8Mq3PFhbD+Em6kmWOqdidWR tqUyV6SCRsfR350q2ZRNfBG6W9MXoDzCE64HNyFosXuUSLmEVKOC7KMH/9Lj4UC8 rtKqLj5ezR74Pkkls7Qnjtpd8ivsyFFGLK/JBOi28HmuKIej9yTYYgUhRNDrJOsg ONGYvQ== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:05 2024 by rpki-client on console-ams.rpki-client.org