$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa File: 91CA6CBC740111EFB5E97021C4F9AE02.roa (raw, json) Hash identifier: 7OpoMhu5yrBYJukUqf3gKs+QCXSGnK6psVOlWcESVPA= Subject key identifier: F8:39:B8:78:E7:A6:A6:71:5C:98:9D:1E:42:70:4A:7F:40:AA:CB:13 Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Certificate serial: 0D13 Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa Signing time: Mon 16 Sep 2024 07:59:16 +0000 ROA not before: Mon 16 Sep 2024 07:59:16 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 9255 IP address blocks: 151.192.0.0/21 maxlen: 21 151.192.8.0/21 maxlen: 21 151.192.16.0/21 maxlen: 21 151.192.24.0/21 maxlen: 21 151.192.32.0/21 maxlen: 21 151.192.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3347 (0xd13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Validity Not Before: Sep 16 07:59:16 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66e7e554-ad85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:d5:50:49:13:70:52:70:0a:23:09:88:91: a5:fa:e7:e5:45:4b:eb:ad:63:be:ba:83:bb:0b:d1: aa:0c:a5:39:5f:f6:d4:81:82:d0:2b:41:f6:5d:eb: 88:f4:33:d3:3d:e4:8f:a4:fb:4b:3d:b8:90:4f:7e: b8:04:8a:e3:af:4a:16:90:a0:a6:86:09:59:43:3d: ae:ed:1c:ee:de:c5:db:62:80:d0:16:55:32:2a:54: 40:39:eb:ec:7e:93:2e:14:9e:01:64:8c:7d:40:d5: 01:5c:3c:92:9e:7e:4d:15:21:08:39:d5:ff:2b:d9: 9f:56:29:14:4f:17:c6:48:6a:6a:8d:6d:a9:e9:fd: d1:ef:be:68:ea:7c:40:5a:bc:3f:7b:12:41:3a:d8: 3f:0d:6f:9e:b1:33:96:c4:67:4d:9d:fc:b2:a2:b5: 22:07:0c:fe:25:a8:8b:4f:92:ce:80:1e:b4:76:99: ab:35:af:46:ce:7a:c9:a2:b0:b1:4d:ea:8a:6c:d0: 72:47:23:af:c6:45:0d:12:c2:49:c4:02:4b:ff:56: 2b:0d:ce:38:53:c2:f5:51:58:85:79:ba:b7:f1:f2: 9f:0e:53:58:c5:6c:18:94:6d:18:78:df:aa:f2:5c: a9:16:25:1f:3e:18:4b:4f:b6:dc:58:7d:32:a1:41: a2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:39:B8:78:E7:A6:A6:71:5C:98:9D:1E:42:70:4A:7F:40:AA:CB:13 X509v3 Authority Key Identifier: keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.192.0.0-151.192.39.255 151.192.48.0/24 Signature Algorithm: sha256WithRSAEncryption 98:ce:61:76:b3:5f:b7:c3:50:3e:45:04:22:27:71:71:3d:ec: 93:71:dd:d7:c3:ad:8e:1a:1c:26:3b:ac:de:56:dd:f9:12:ba: e3:09:2a:c9:b4:eb:5b:07:45:8c:28:14:61:2d:53:2b:de:41: 51:22:81:49:fd:97:ab:9b:6f:0b:40:1c:e0:21:30:16:e7:36: 01:d1:86:c7:ac:bc:70:b7:83:b4:5b:04:d0:0f:9a:e5:5f:59: 4c:71:ed:7c:5c:20:9a:f9:26:94:b6:f9:12:ee:6b:55:2b:aa: 68:d7:a6:0e:b2:7f:37:ab:55:3a:7b:d6:ed:f4:74:a8:44:1f: 51:16:6b:a6:2e:67:43:9c:69:24:b8:56:e8:ad:d5:c2:bd:f6: 2e:b5:c8:2e:50:a2:e9:7c:7a:d4:77:62:94:e9:0d:76:9a:6f: f1:94:a6:dd:1e:11:fe:e0:c3:5d:52:61:9e:ea:68:23:d0:02: 9e:e3:8f:0d:2d:ab:b7:09:02:54:a5:78:f5:f1:77:8a:70:c2: b0:29:cf:ad:26:bb:85:0b:58:7d:16:17:a0:78:51:d0:c1:70: f8:df:bd:b7:fc:69:77:c6:b0:ac:bc:89:57:6f:99:df:db:a7: da:ab:4e:83:58:91:a0:0b:ce:d3:6f:ae:94:9e:19:e1:78:f8: 2f:d9:47:8c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICDRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1 MTk1QjNCQTkwHhcNMjQwOTE2MDc1OTE2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmU3ZTU1NC1hZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BfVUEkTcFJwCiMJiJGl+uflRUvrrWO+uoO7C9GqDKU5X/bUgYLQK0H2XeuI 9DPTPeSPpPtLPbiQT364BIrjr0oWkKCmhglZQz2u7Rzu3sXbYoDQFlUyKlRAOevs fpMuFJ4BZIx9QNUBXDySnn5NFSEIOdX/K9mfVikUTxfGSGpqjW2p6f3R775o6nxA Wrw/exJBOtg/DW+esTOWxGdNnfyyorUiBwz+JaiLT5LOgB60dpmrNa9GznrJorCx TeqKbNByRyOvxkUNEsJJxAJL/1YrDc44U8L1UViFebq38fKfDlNYxWwYlG0YeN+q 8lypFiUfPhhLT7bcWH0yoUGinwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPg5uHjn pqZxXJidHkJwSn9AqssTMB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvMDFCMDY5RjZDRUJCMTFFOTlCMUY3RDNFQzRGOUFFMDIvOTFDQTZDQkM3 NDAxMTFFRkI1RTk3MDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQcBAf8E HTAbMBkEAgABMBMwCwMDBpfAAwQDl8AgAwQAl8AwMA0GCSqGSIb3DQEBCwUAA4IB AQCYzmF2s1+3w1A+RQQiJ3FxPeyTcd3Xw62OGhwmO6zeVt35ErrjCSrJtOtbB0WM KBRhLVMr3kFRIoFJ/Zerm28LQBzgITAW5zYB0YbHrLxwt4O0WwTQD5rlX1lMce18 XCCa+SaUtvkS7mtVK6po16YOsn83q1U6e9bt9HSoRB9RFmumLmdDnGkkuFbordXC vfYutcguUKLpfHrUd2KU6Q12mm/xlKbdHhH+4MNdUmGe6mgj0AKe448NLau3CQJU pXj18XeKcMKwKc+tJruFC1h9FhegeFHQwXD43723/Gl3xrCsvIlXb5nf26faq06D WJGgC87Tb66UnhnhePgv2UeM -----END CERTIFICATE-----Generated at Fri Nov 22 15:25:37 2024 by rpki-client on console-fra.rpki-client.org