$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/BD5940CE8BCB11EFAE8ADA5BC4F9AE02.roa File: BD5940CE8BCB11EFAE8ADA5BC4F9AE02.roa (raw, json) Hash identifier: 7M7tnskcAr6syWX8xx3lbIELsXSwEQW4ePT2HDbCQH0= Subject key identifier: 97:9F:41:5E:70:59:68:7E:42:F5:60:49:0C:12:36:FC:3E:C1:C8:1E Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 02 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/BD5940CE8BCB11EFAE8ADA5BC4F9AE02.roa Signing time: Wed 16 Oct 2024 14:34:24 +0000 ROA not before: Wed 16 Oct 2024 14:34:24 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153365 IP address blocks: 160.191.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Oct 16 14:34:24 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670fcef0-382f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e5:5f:44:43:66:2c:29:53:c7:5c:49:95:f2: 90:66:fe:88:b1:21:29:4c:8c:c2:c4:75:27:a3:cb: 12:73:0a:05:eb:fe:93:7a:59:0c:85:6f:53:de:81: 01:07:5f:6b:31:92:39:8d:90:33:0a:ca:41:6c:58: 49:4c:4f:15:db:92:5c:ee:27:4c:9d:e4:31:3d:bf: f0:68:f3:a2:bc:a3:34:d9:2c:41:7d:e0:ce:60:f3: 9d:78:92:ab:4e:31:c6:3d:0c:ff:1f:eb:44:8d:39: f7:8f:e8:9c:2c:11:a2:7b:38:92:4d:5d:98:57:cb: d2:9b:54:59:a0:76:27:b8:45:60:dc:7c:26:a1:f5: 39:ac:2d:6b:c6:28:ca:09:a0:73:cf:97:6c:28:cc: e3:86:54:a0:c0:f3:7c:0e:f8:4c:44:b2:c9:87:70: 7e:4c:ec:5b:49:35:50:06:f0:c2:99:87:be:70:6e: 5f:0c:a8:73:eb:08:be:9d:e7:79:f3:89:ef:9a:22: 3a:5b:14:f8:e6:ca:98:6b:86:e5:c6:34:37:b7:2a: 4f:40:73:e6:13:2e:9e:c2:0e:0c:a3:99:cf:25:85: b1:97:d9:9e:9b:e3:95:c7:18:eb:d3:04:42:b0:f4: 2c:82:fd:51:bd:82:e8:79:a7:b7:f9:fe:52:d5:11: b5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9F:41:5E:70:59:68:7E:42:F5:60:49:0C:12:36:FC:3E:C1:C8:1E X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/BD5940CE8BCB11EFAE8ADA5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.20.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:f1:c4:3a:53:33:c8:5f:37:82:0d:df:95:95:f0:db:38:54: a2:be:27:c2:03:67:b0:bc:d2:43:7c:15:bc:84:a0:7f:be:07: 8d:5a:58:db:13:5c:c8:92:a1:12:0c:1b:91:74:22:f4:4c:f9: b3:73:c8:42:c0:4f:54:37:92:7d:64:c0:02:9e:44:aa:ae:76: 68:4a:ae:dd:64:7e:a3:11:3b:e3:fd:93:cf:2f:84:93:ed:d2: 25:5a:75:05:ba:d1:da:10:d6:fb:97:8a:f8:c0:04:7a:1d:eb: f8:58:c5:34:c7:8b:0f:91:6a:e7:16:d7:72:81:d7:ee:86:b6: 08:30:60:6f:2b:80:e5:bf:6e:1a:9b:45:e7:3a:2c:2a:9f:c3: 43:37:aa:81:99:67:ee:5c:38:92:a1:49:d4:75:61:42:5e:b9: 5a:ee:af:53:e6:af:04:15:fb:06:40:93:a2:a3:1c:fc:38:89: b3:48:4a:a6:ad:4d:7e:17:75:40:3f:42:69:c0:85:94:05:80: fd:bb:50:ec:a1:9f:be:37:50:f2:2a:53:da:59:5a:f2:ed:a0: 36:0a:8c:95:c7:ed:24:01:eb:47:fa:3f:29:cf:03:2f:72:b5: a6:43:26:c6:48:9c:89:f4:47:98:e5:30:75:ed:0a:92:7a:61: 6b:97:86:b2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEM5RTExMC8GA1UEBRMoRkQ5RDdGNjYwRjNBMTMwQ0E0OEJFQkJBNjZFMTYyQkQz MDM0RTM4RDAeFw0yNDEwMTYxNDM0MjRaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MGZjZWYwLTM4MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ5V9EQ2YsKVPHXEmV8pBm/oixISlMjMLEdSejyxJzCgXr/pN6WQyFb1PegQEH X2sxkjmNkDMKykFsWElMTxXbklzuJ0yd5DE9v/Bo86K8ozTZLEF94M5g8514kqtO McY9DP8f60SNOfeP6JwsEaJ7OJJNXZhXy9KbVFmgdie4RWDcfCah9TmsLWvGKMoJ oHPPl2wozOOGVKDA83wO+ExEssmHcH5M7FtJNVAG8MKZh75wbl8MqHPrCL6d53nz ie+aIjpbFPjmyphrhuXGNDe3Kk9Ac+YTLp7CDgyjmc8lhbGX2Z6b45XHGOvTBEKw 9CyC/VG9guh5p7f5/lLVEbVnAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUl59BXnBZ aH5C9WBJDBI2/D7ByB4wHwYDVR0jBBgwFoAU/Z1/Zg86Ewyki+u6ZuFivTA0440w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQzlFLzRFRkQxNUI2OEJD QTExRUZBQkZDMUEzOUM0RjlBRTAyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1oxX1pnODZFd3lraS11Nlp1Rml2VEEwNDQwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9CRDU5NDBDRThC Q0IxMUVGQUU4QURBNUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/FDANBgkqhkiG9w0BAQsFAAOCAQEAGvHEOlMzyF83gg3f lZXw2zhUor4nwgNnsLzSQ3wVvISgf74HjVpY2xNcyJKhEgwbkXQi9Ez5s3PIQsBP VDeSfWTAAp5Eqq52aEqu3WR+oxE74/2Tzy+Ek+3SJVp1BbrR2hDW+5eK+MAEeh3r +FjFNMeLD5Fq5xbXcoHX7oa2CDBgbyuA5b9uGptF5zosKp/DQzeqgZln7lw4kqFJ 1HVhQl65Wu6vU+avBBX7BkCToqMc/DiJs0hKpq1Nfhd1QD9CacCFlAWA/btQ7KGf vjdQ8ipT2lla8u2gNgqMlcftJAHrR/o/Kc8DL3K1pkMmxkicifRHmOUwde0Kknph a5eGsg== -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:54 2024 by rpki-client on console-ams.rpki-client.org