$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa File: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (raw, json) Hash identifier: W65Bof4UuRWkpC1J6y/jnu+98zllARlm3OPaWe3smHI= Subject key identifier: 96:FB:36:14:18:41:26:0E:43:70:67:1B:1D:56:87:08:2E:E0:46:E2 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 172D Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa Signing time: Mon 10 Jun 2024 17:48:15 +0000 ROA not before: Mon 10 Jun 2024 17:48:15 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 131310 IP address blocks: 143.192.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5933 (0x172d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Jun 10 17:48:15 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66673c5f-9366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:02:f4:87:12:62:86:1b:68:cf:84:c2:a0: d6:93:e5:91:87:37:68:bb:90:99:00:6d:ac:54:e7: 7d:f4:35:30:a8:51:be:a4:33:35:e3:5f:90:8a:8c: 06:52:85:9c:ac:25:13:42:3d:94:dc:77:58:89:11: d0:8c:5b:71:f4:c4:a5:ba:65:a9:1d:61:e7:6f:6e: 62:e7:33:17:b0:55:cb:59:46:39:fc:31:ea:53:67: f0:09:7a:63:3b:dc:56:fe:96:80:42:99:a3:f3:46: 25:12:bb:61:fe:f1:68:86:00:21:27:d5:9b:ce:ff: c0:a2:64:2b:5a:f3:c5:36:88:e9:0b:97:ee:d8:85: 40:2f:dc:f9:f9:d9:f3:48:33:65:16:75:92:a6:35: c5:f0:e8:33:3c:20:4e:a3:65:c8:1d:03:49:86:0b: d2:fc:ea:4c:5c:3d:46:79:67:0f:ef:79:d6:0c:c2: 85:07:96:0a:c4:6d:50:b4:0e:19:ab:57:53:7b:d2: 91:5b:01:72:49:27:33:08:84:e3:57:d3:c9:59:db: e2:da:37:ce:35:b6:99:6b:05:19:17:d6:c2:cd:0c: 96:64:ec:7a:8f:3b:14:d0:39:58:89:47:1b:56:ac: 47:2b:87:15:5d:1f:24:51:e5:fd:bd:64:5a:31:34: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:36:14:18:41:26:0E:43:70:67:1B:1D:56:87:08:2E:E0:46:E2 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 143.192.96.0/20 Signature Algorithm: sha256WithRSAEncryption be:0a:d2:2e:ea:bc:03:b0:96:94:2b:fe:37:14:62:d2:25:39: 7d:e9:6f:76:6c:48:1a:c0:cc:69:79:b7:78:e8:b4:57:f8:19: 0a:a6:39:a5:4d:7f:c0:b3:9e:ca:f1:e8:0c:ed:2b:e6:99:bf: 53:e8:6d:ba:ff:a5:ee:6d:87:4c:f6:62:bc:b7:8c:8f:23:f6: eb:2b:5c:37:9f:b6:49:9a:91:75:1e:bf:23:bb:fe:16:21:77: bf:8b:32:1a:e2:6e:3c:c8:c1:e2:26:ce:7a:81:05:3e:68:18: 9e:37:d0:2c:53:0b:f9:22:81:f5:04:86:37:63:08:3e:16:41: 17:9c:4e:0e:fb:bd:0e:62:58:d5:df:99:3d:82:be:b2:a0:b3: f7:33:96:83:0a:1d:b4:c9:14:6e:28:19:3b:e8:05:89:1b:09: 9b:fd:05:8d:48:f9:e9:36:eb:8c:01:a8:8b:09:7b:18:92:e7: 7d:46:08:95:49:d0:fe:6e:21:db:5f:ea:15:44:64:f6:99:e0: 57:b1:9d:1d:03:d2:f3:b2:58:7e:ec:3a:95:b1:f7:fc:ef:07: 59:e9:dc:9f:22:72:84:0c:c0:04:d8:41:3f:3e:06:a4:8f:dd: f1:65:5e:a4:6c:a1:81:68:b6:c9:94:b8:cc:e6:7c:b4:7f:7f: b3:8e:ad:27 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICFy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjQwNjEwMTc0ODE1WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY3M2M1Zi05MzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5IC9IcSYoYbaM+EwqDWk+WRhzdou5CZAG2sVOd99DUwqFG+pDM141+QiowG UoWcrCUTQj2U3HdYiRHQjFtx9MSlumWpHWHnb25i5zMXsFXLWUY5/DHqU2fwCXpj O9xW/paAQpmj80YlErth/vFohgAhJ9Wbzv/AomQrWvPFNojpC5fu2IVAL9z5+dnz SDNlFnWSpjXF8OgzPCBOo2XIHQNJhgvS/OpMXD1GeWcP73nWDMKFB5YKxG1QtA4Z q1dTe9KRWwFySSczCITjV9PJWdvi2jfONbaZawUZF9bCzQyWZOx6jzsU0DlYiUcb VqxHK4cVXR8kUeX9vWRaMTTBYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJb7NhQY QSYOQ3BnGx1Whwgu4EbiMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg5RTcvRUZBNDc2NzBCREZCMTFFN0I4NzNGRTI3QzRGOUFFMDIvQ0E0RUM1RDZD MjlGMTFFQkJFMEIxOTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBASPwGAwDQYJKoZIhvcNAQELBQADggEBAL4K0i7qvAOwlpQr /jcUYtIlOX3pb3ZsSBrAzGl5t3jotFf4GQqmOaVNf8Cznsrx6AztK+aZv1Pobbr/ pe5th0z2Yry3jI8j9usrXDeftkmakXUevyO7/hYhd7+LMhribjzIweImznqBBT5o GJ430CxTC/kigfUEhjdjCD4WQRecTg77vQ5iWNXfmT2CvrKgs/czloMKHbTJFG4o GTvoBYkbCZv9BY1I+ek264wBqIsJexiS531GCJVJ0P5uIdtf6hVEZPaZ4FexnR0D 0vOyWH7sOpWx9/zvB1np3J8icoQMwATYQT8+BqSP3fFlXqRsoYFotsmUuMzmfLR/ f7OOrSc= -----END CERTIFICATE-----Generated at Wed Nov 20 18:44:55 2024 by rpki-client on console-fra.rpki-client.org