$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa File: D5C188B88DBD11E9877F5B11C4F9AE02.roa (raw, json) Hash identifier: 6tW1p4KIiGaRaePQd+Ni/gW4xsAg3egSs1rK2j0NTYU= Subject key identifier: 74:94:71:CE:A4:B4:CF:87:6F:2C:BF:CB:4E:94:B7:07:19:7C:50:7D Certificate issuer: /CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Certificate serial: 33F8 Authority key identifier: 27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa Signing time: Mon 22 Jul 2024 14:40:16 +0000 ROA not before: Mon 22 Jul 2024 14:40:16 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 7693 IP address blocks: 140.149.0.0/16 maxlen: 16 140.149.0.0/17 maxlen: 17 140.149.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13304 (0x33f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=27580FE0AF7EF52C638B69632C22C976A1862D67 Validity Not Before: Jul 22 14:40:16 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=669e6f4f-a807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:2f:ef:7f:05:7e:05:ed:6b:ac:14:07:ac: e4:81:9b:ad:60:7c:cc:a0:a9:8f:75:96:5f:24:e6: 95:f2:41:94:67:c2:f6:88:60:df:50:4d:75:5c:0a: 6d:f2:6c:dc:5d:02:7b:1a:e9:b1:19:7a:a7:e1:3c: 06:3e:c0:ae:7b:50:cc:0b:06:06:7b:74:51:7a:1d: 20:8a:b1:21:30:40:17:9b:99:31:0a:27:7e:1b:06: 48:e4:32:ff:36:74:0b:d9:76:0d:b2:0e:36:ee:a2: be:b9:b4:bd:2a:a0:77:5a:8d:f1:50:3e:d0:1a:01: 89:fa:1f:df:7e:ab:73:56:37:ec:b2:5e:bd:0f:0e: 3f:27:f4:09:c4:4f:43:fa:45:27:0a:38:5b:44:8e: ba:28:f7:8d:5f:d7:43:53:80:7f:df:09:ad:52:b9: d1:bf:27:5c:c2:66:ca:b6:fd:67:01:36:66:79:92: 9d:31:38:4f:03:85:62:be:51:b5:95:cc:b0:ba:a6: b8:44:f3:2c:bc:c4:53:9f:d5:16:b9:8e:7b:2c:41: e2:b0:44:90:23:2d:d1:c8:6f:4c:fc:91:d4:e4:a5: 3f:04:a6:8c:04:f6:21:8a:6f:7d:ab:15:5f:7a:75: d1:f0:c4:c4:aa:9e:49:13:1f:38:66:2f:ab:2e:cb: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:94:71:CE:A4:B4:CF:87:6F:2C:BF:CB:4E:94:B7:07:19:7C:50:7D X509v3 Authority Key Identifier: keyid:27:58:0F:E0:AF:7E:F5:2C:63:8B:69:63:2C:22:C9:76:A1:86:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J1gP4K9-9Sxji2ljLCLJdqGGLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/1978044A1D8311E2932921D808B02CD2/D5C188B88DBD11E9877F5B11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.149.0.0/16 Signature Algorithm: sha256WithRSAEncryption 43:60:03:8a:e0:2f:7e:6b:41:94:f6:ae:95:4b:7d:5c:fb:8f: 81:97:b9:4a:bb:68:2b:f2:eb:09:62:56:b9:2a:76:cb:21:34: 9b:8b:95:62:b4:df:db:a8:9f:fc:f9:78:8d:50:e5:29:3b:87: f9:07:1e:c6:be:60:d2:96:93:a8:8a:a2:7b:f5:d1:eb:e0:2e: a3:5c:53:6c:ea:84:fc:af:68:2d:e8:7e:35:32:db:e6:0b:90: 58:cb:08:44:61:07:42:c8:d3:25:92:4e:13:16:2f:38:24:dd: 83:92:90:cc:cd:6a:52:d8:21:7c:9b:1f:d7:7e:56:59:ee:11: 33:60:75:b1:69:8c:ac:4c:e1:d7:de:c5:98:9f:12:2d:e6:a7: 23:1f:81:9d:04:66:90:88:8d:14:77:53:0a:d3:62:09:d7:ab: 68:6a:08:92:e3:c2:77:1a:cf:19:cc:05:ff:61:62:37:34:cb: 5b:7e:2f:52:a8:dd:0c:76:ad:f7:5d:4c:5f:5a:5a:9b:e6:29: d1:26:36:03:49:46:b0:09:a0:ac:da:e1:1c:04:83:c1:e7:74: 7e:73:1e:d3:c1:38:d4:14:74:9b:03:8d:ff:c1:c9:24:7a:07: 96:70:80:94:40:16:e9:42:c4:73:5c:ed:22:da:ff:0b:0d:1e: 2a:a3:15:28 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICM/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDI3NTgwRkUwQUY3RUY1MkM2MzhCNjk2MzJDMjJDOTc2 QTE4NjJENjcwHhcNMjQwNzIyMTQ0MDE2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNmY0Zi1hODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJYv738FfgXta6wUB6zkgZutYHzMoKmPdZZfJOaV8kGUZ8L2iGDfUE11XApt 8mzcXQJ7GumxGXqn4TwGPsCue1DMCwYGe3RReh0girEhMEAXm5kxCid+GwZI5DL/ NnQL2XYNsg427qK+ubS9KqB3Wo3xUD7QGgGJ+h/ffqtzVjfssl69Dw4/J/QJxE9D +kUnCjhbRI66KPeNX9dDU4B/3wmtUrnRvydcwmbKtv1nATZmeZKdMThPA4VivlG1 lcywuqa4RPMsvMRTn9UWuY57LEHisESQIy3RyG9M/JHU5KU/BKaMBPYhim99qxVf enXR8MTEqp5JEx84Zi+rLstnnwIDAQABo4IClDCCApAwHQYDVR0OBBYEFHSUcc6k tM+Hbyy/y06UtwcZfFB9MB8GA1UdIwQYMBaAFCdYD+CvfvUsY4tpYywiyXahhi1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8xOTc4MDQ0QTFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9KMWdQNEs5LTlTeGppMmxqTENMSmRxR0dM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oxZ1A0SzktOVN4amkybGpMQ0xKZHFHR0xXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMTk3ODA0NEExRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvRDVDMTg4Qjg4 REJEMTFFOTg3N0Y1QjExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCMlTANBgkqhkiG9w0BAQsFAAOCAQEAQ2ADiuAvfmtBlPau lUt9XPuPgZe5SrtoK/LrCWJWuSp2yyE0m4uVYrTf26if/Pl4jVDlKTuH+Qcexr5g 0paTqIqie/XR6+Auo1xTbOqE/K9oLeh+NTLb5guQWMsIRGEHQsjTJZJOExYvOCTd g5KQzM1qUtghfJsf135WWe4RM2B1sWmMrEzh197FmJ8SLeanIx+BnQRmkIiNFHdT CtNiCderaGoIkuPCdxrPGcwF/2FiNzTLW34vUqjdDHat911MX1pam+Yp0SY2A0lG sAmgrNrhHASDwed0fnMe08E41BR0mwON/8HJJHoHlnCAlEAW6ULEc1ztItr/Cw0e KqMVKA== -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:27 2024 by rpki-client on console-fra.rpki-client.org