$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/13D46804A47B11E9867CBF58C4F9AE02.roa File: 13D46804A47B11E9867CBF58C4F9AE02.roa (raw, json) Hash identifier: dfzoXKpGZSWk6RNHscqU4qOUiyyKtbFuRpR7IJztr3s= Subject key identifier: 97:AB:A4:F9:4C:01:71:29:AE:74:A8:20:D6:73:A7:69:C5:C1:9C:21 Certificate issuer: /CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Certificate serial: 339F Authority key identifier: D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/13D46804A47B11E9867CBF58C4F9AE02.roa Signing time: Mon 14 Aug 2023 14:30:19 +0000 ROA not before: Mon 14 Aug 2023 14:30:19 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 9506 IP address blocks: 128.106.64.0/18 maxlen: 18 128.106.128.0/17 maxlen: 17 165.21.24.0/21 maxlen: 21 165.21.24.0/22 maxlen: 22 165.21.28.0/23 maxlen: 23 165.21.64.0/22 maxlen: 22 165.21.68.0/23 maxlen: 23 165.21.75.0/24 maxlen: 24 165.21.76.0/23 maxlen: 23 165.21.78.0/24 maxlen: 24 165.21.112.0/21 maxlen: 21 165.21.124.0/22 maxlen: 22 165.21.128.0/22 maxlen: 22 165.21.132.0/24 maxlen: 24 165.21.134.0/24 maxlen: 24 165.21.135.0/24 maxlen: 24 165.21.154.0/24 maxlen: 24 165.21.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13215 (0x339f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C/serialNumber=D697BB6F3F99E94480EE0BBAD3D26800AB416260 Validity Not Before: Aug 14 14:30:19 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64da3a7b-d0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:c3:2e:75:39:63:07:22:a4:b5:11:be:c2: 10:4f:3a:13:f6:39:7c:b2:8c:c2:2b:31:8e:86:3a: f3:ff:d9:4d:06:55:6e:fa:4a:b7:75:9c:b9:99:5b: b4:05:e3:d6:74:b6:be:01:e4:0d:4c:86:d7:88:77: e3:1d:1f:35:40:bc:fe:c4:20:24:df:0c:e2:03:1c: 73:ee:86:36:a1:34:fd:74:f5:15:e5:50:d1:e1:84: 2e:4a:7b:e0:ae:de:b6:ff:dd:83:a3:fa:3b:fb:54: a6:6e:85:d3:7b:29:66:42:b2:67:1c:f0:ce:45:88: 4b:96:4b:14:23:ec:e0:83:af:96:54:15:c5:98:42: 24:f7:49:3b:93:6c:e3:5c:a7:df:d0:58:7b:07:cb: 7f:b1:b2:e0:59:ff:32:8f:a2:d0:57:89:3e:8f:42: d5:a0:16:c1:66:4b:27:25:ed:5b:d1:0c:a5:16:1b: 78:81:d2:c6:8f:64:f9:ea:64:80:f1:67:60:ac:e7: c9:a9:09:58:2e:38:2d:4a:03:8b:39:d9:41:d1:2e: e6:b2:25:1c:bb:a0:8b:ad:5c:95:da:b7:e7:cd:2a: 10:a3:b1:c6:80:d1:7e:d2:8b:a0:38:e0:6e:bb:a8: e8:31:70:27:1b:04:0c:1d:cd:71:9f:41:aa:c4:9f: b8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:A4:F9:4C:01:71:29:AE:74:A8:20:D6:73:A7:69:C5:C1:9C:21 X509v3 Authority Key Identifier: keyid:D6:97:BB:6F:3F:99:E9:44:80:EE:0B:BA:D3:D2:68:00:AB:41:62:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/1pe7bz-Z6USA7gu609JoAKtBYmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1pe7bz-Z6USA7gu609JoAKtBYmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/5B07F3AC1D8311E29B35A5D808B02CD2/13D46804A47B11E9867CBF58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.106.64.0-128.106.255.255 165.21.24.0/21 165.21.64.0-165.21.69.255 165.21.75.0-165.21.78.255 165.21.112.0/21 165.21.124.0-165.21.132.255 165.21.134.0/23 165.21.154.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:bb:44:84:88:6b:dd:f4:e3:f4:35:cb:e7:36:d6:6c:f1:bc: ae:ff:f2:b8:63:61:33:71:c5:e0:27:7a:ae:15:2a:25:60:a2: 26:6f:dd:4a:40:06:bb:49:e0:f1:10:40:32:81:01:1e:33:51: ee:32:2b:20:84:9e:df:a5:94:3b:0a:7c:bd:b6:d2:5f:6e:41: 5c:4f:67:1d:5d:93:45:c8:b9:f6:8e:6e:89:ea:09:13:19:31: 25:82:cd:62:4b:6d:8d:07:29:44:c6:91:65:29:45:50:7a:cc: 1c:18:eb:90:ea:32:2f:7d:bf:50:ec:4c:6e:f0:5e:c0:0d:d2: 92:6f:fe:f9:6d:50:89:bb:f2:3f:d4:1f:5f:e7:69:16:a5:31: 11:20:d4:bd:83:aa:93:b5:77:42:46:c7:a3:d3:a3:ee:15:62: 8e:96:cb:28:88:52:3a:92:09:3b:4b:e6:bd:c3:59:d2:8c:13: 07:e8:fd:6f:b6:ea:d2:71:3d:e4:c6:2f:52:3c:bd:6c:f7:66: c6:30:95:c7:56:cd:69:7e:c0:e1:40:10:99:94:06:fa:0c:8a: 02:9f:f9:b4:b3:be:97:e0:10:a3:ca:20:76:ac:04:6e:41:8f: 3b:8a:e9:6c:32:d5:29:26:5a:28:19:7c:b8:84:6e:47:31:55: c2:62:da:91 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgICM58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKEQ2OTdCQjZGM0Y5OUU5NDQ4MEVFMEJCQUQzRDI2ODAw QUI0MTYyNjAwHhcNMjMwODE0MTQzMDE5WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGRhM2E3Yi1kMGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCHDLnU5YwcipLURvsIQTzoT9jl8sozCKzGOhjrz/9lNBlVu+kq3dZy5mVu0 BePWdLa+AeQNTIbXiHfjHR81QLz+xCAk3wziAxxz7oY2oTT9dPUV5VDR4YQuSnvg rt62/92Do/o7+1SmboXTeylmQrJnHPDORYhLlksUI+zgg6+WVBXFmEIk90k7k2zj XKff0Fh7B8t/sbLgWf8yj6LQV4k+j0LVoBbBZksnJe1b0QylFht4gdLGj2T56mSA 8WdgrOfJqQlYLjgtSgOLOdlB0S7msiUcu6CLrVyV2rfnzSoQo7HGgNF+0ougOOBu u6joMXAnGwQMHc1xn0GqxJ+47wIDAQABo4IC3jCCAtowHQYDVR0OBBYEFJerpPlM AXEprnSoINZzp2nFwZwhMB8GA1UdIwQYMBaAFNaXu28/melEgO4LutPSaACrQWJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy81QjA3RjNBQzFE ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi8xcGU3YnotWjZVU0E3Z3U2MDlKb0FLdEJZ bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFwZTdiei1aNlVTQTdndTYwOUpvQUt0QlltQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvNUIwN0YzQUMxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMTNENDY4MDRB NDdCMTFFOTg2N0NCRjU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaAYIKwYBBQUHAQcBAf8E WTBXMFUEAgABME8wCwMEBoBqQAMDAIBqAwQDpRUYMAwDBAalFUADBAGlFUQwDAME AKUVSwMEAKUVTgMEA6UVcDAMAwQCpRV8AwQApRWEAwQBpRWGAwQBpRWaMA0GCSqG SIb3DQEBCwUAA4IBAQA8u0SEiGvd9OP0NcvnNtZs8byu//K4Y2EzccXgJ3quFSol YKImb91KQAa7SeDxEEAygQEeM1HuMisghJ7fpZQ7Cny9ttJfbkFcT2cdXZNFyLn2 jm6J6gkTGTElgs1iS22NBylExpFlKUVQeswcGOuQ6jIvfb9Q7Exu8F7ADdKSb/75 bVCJu/I/1B9f52kWpTERINS9g6qTtXdCRsej06PuFWKOlssoiFI6kgk7S+a9w1nS jBMH6P1vturScT3kxi9SPL1s92bGMJXHVs1pfsDhQBCZlAb6DIoCn/m0s76X4BCj yiB2rARuQY87iulsMtUpJlooGXy4hG5HMVXCYtqR -----END CERTIFICATE-----Generated at Sat May 18 15:26:03 2024 by rpki-client on console-fra.rpki-client.org