$ rpki-client -vvf rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/F2A90F6A86AE11EF999DAD2FC4F9AE02.roa File: F2A90F6A86AE11EF999DAD2FC4F9AE02.roa (raw, json) Hash identifier: ophTAyTavYYvv+S2dKtdeyoYjEN6drMlrbOrhmzxr1Y= Subject key identifier: 10:E1:F4:97:61:7C:F3:C9:CD:FD:52:4B:70:12:B0:76:49:E6:FC:4C Certificate issuer: /CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Certificate serial: 48 Authority key identifier: 4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/F2A90F6A86AE11EF999DAD2FC4F9AE02.roa Signing time: Thu 10 Oct 2024 02:25:42 +0000 ROA not before: Thu 10 Oct 2024 02:25:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 140065 IP address blocks: 160.22.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91698EC/serialNumber=4DB3B2E3599B646E9F30AF74A58C6678FAF1D2B7 Validity Not Before: Oct 10 02:25:42 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67073b26-2dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0b:a1:aa:86:f7:1c:cc:bb:de:e4:88:bb:37: 70:d0:bb:40:09:0f:54:6b:dd:b6:ea:14:19:92:a0: d0:28:bc:4c:a6:4a:03:5b:3c:68:34:d1:6f:28:3c: 87:77:8d:ff:81:57:a2:68:dc:bc:2e:96:d5:f1:89: a0:3c:24:fc:e2:25:b6:42:89:9e:c1:5c:d6:33:8f: 1d:23:6a:b6:d5:80:e2:83:dd:e7:97:fd:94:82:2a: 1d:29:f8:36:b8:bb:b7:19:56:f7:d3:63:cd:42:0f: 0b:8d:9b:28:24:3e:6a:27:ac:71:b1:3b:1b:3d:29: f1:be:5e:c8:60:04:02:03:06:52:64:bb:aa:0b:6e: 31:1c:c2:81:c3:d7:49:dc:9d:47:b4:d3:9b:d2:e7: 0a:ce:6d:2a:23:43:29:b3:3d:04:86:86:67:ea:26: 6b:dc:06:67:24:0f:50:4d:0b:c4:b1:90:87:df:b4: 6f:65:a5:7d:67:84:5c:60:0b:10:c3:81:21:a8:3a: 9f:bf:82:8a:50:b4:b6:53:5e:50:f2:b5:8a:b7:15: 85:73:a2:be:1a:80:42:dc:74:3e:14:0f:73:d3:86: cc:18:9a:41:68:fe:0e:0c:42:0c:fa:c1:3a:56:f6: b6:0c:67:99:27:76:be:5b:60:eb:a3:37:47:8f:64: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E1:F4:97:61:7C:F3:C9:CD:FD:52:4B:70:12:B0:76:49:E6:FC:4C X509v3 Authority Key Identifier: keyid:4D:B3:B2:E3:59:9B:64:6E:9F:30:AF:74:A5:8C:66:78:FA:F1:D2:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/TbOy41mbZG6fMK90pYxmePrx0rc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TbOy41mbZG6fMK90pYxmePrx0rc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91698EC/3A8F8410214911EFBE88CF29C4F9AE02/F2A90F6A86AE11EF999DAD2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.43.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ac:30:99:0f:9d:8d:71:39:d3:33:71:b8:bb:2b:f1:32:0b: cc:8c:76:4c:96:2c:17:bc:e8:11:a7:be:fa:77:f4:74:c3:45: af:45:8f:27:f4:29:a7:31:cb:1f:e8:df:f5:a6:ef:0a:fc:fc: 01:d8:ac:ce:7d:18:42:00:09:cc:e6:04:71:dd:a8:fb:99:32: d9:22:8f:41:67:83:97:c6:81:d2:e3:20:ef:3c:54:35:91:d3: 02:1e:05:d0:b4:40:2d:71:93:30:79:26:69:a4:59:f1:07:b0: 61:8a:3f:67:ba:75:67:03:18:44:6e:a5:97:ee:e0:42:d2:be: f0:63:5a:a0:27:40:31:70:79:cb:9a:22:01:6a:58:54:cf:77: 0f:ad:41:9d:4e:14:c3:82:e0:6e:0d:58:22:f2:00:be:5d:f6: 30:ba:4f:74:d8:b1:97:f9:f0:40:a4:c4:d6:32:52:bb:cb:90: 26:6d:97:6d:3c:d5:09:35:f5:1c:9c:59:80:de:04:f6:4f:6c: 27:4d:1e:0c:2c:74:3b:d9:13:30:f3:9f:e7:7d:49:22:c4:6d: ac:c5:23:f6:6d:21:0a:ba:26:81:ca:af:3c:48:a4:84:2e:c9: 28:96:f8:cb:34:67:39:9c:3c:d9:13:11:ae:ed:3f:80:1e:a8: 01:db:f8:81 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OThFQzExMC8GA1UEBRMoNERCM0IyRTM1OTlCNjQ2RTlGMzBBRjc0QTU4QzY2NzhG QUYxRDJCNzAeFw0yNDEwMTAwMjI1NDJaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MDczYjI2LTJkYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSC6GqhvcczLve5Ii7N3DQu0AJD1Rr3bbqFBmSoNAovEymSgNbPGg00W8oPId3 jf+BV6Jo3LwultXxiaA8JPziJbZCiZ7BXNYzjx0jarbVgOKD3eeX/ZSCKh0p+Da4 u7cZVvfTY81CDwuNmygkPmonrHGxOxs9KfG+XshgBAIDBlJku6oLbjEcwoHD10nc nUe005vS5wrObSojQymzPQSGhmfqJmvcBmckD1BNC8SxkIfftG9lpX1nhFxgCxDD gSGoOp+/gopQtLZTXlDytYq3FYVzor4agELcdD4UD3PThswYmkFo/g4MQgz6wTpW 9rYMZ5kndr5bYOujN0ePZPx3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEOH0l2F8 88nN/VJLcBKwdknm/EwwHwYDVR0jBBgwFoAUTbOy41mbZG6fMK90pYxmePrx0rcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5OEVDLzNBOEY4NDEwMjE0 OTExRUZCRTg4Q0YyOUM0RjlBRTAyL1RiT3k0MW1iWkc2Zk1LOTBwWXhtZVByeDBy Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVGJPeTQxbWJaRzZmTUs5MHBZeG1lUHJ4MHJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OThFQy8zQThGODQxMDIxNDkxMUVGQkU4OENGMjlDNEY5QUUwMi9GMkE5MEY2QTg2 QUUxMUVGOTk5REFEMkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAWKzANBgkqhkiG9w0BAQsFAAOCAQEAqawwmQ+djXE50zNx uLsr8TILzIx2TJYsF7zoEae++nf0dMNFr0WPJ/QppzHLH+jf9abvCvz8Adiszn0Y QgAJzOYEcd2o+5ky2SKPQWeDl8aB0uMg7zxUNZHTAh4F0LRALXGTMHkmaaRZ8Qew YYo/Z7p1ZwMYRG6ll+7gQtK+8GNaoCdAMXB5y5oiAWpYVM93D61BnU4Uw4Lgbg1Y IvIAvl32MLpPdNixl/nwQKTE1jJSu8uQJm2XbTzVCTX1HJxZgN4E9k9sJ00eDCx0 O9kTMPOf531JIsRtrMUj9m0hCromgcqvPEikhC7JKJb4yzRnOZw82RMRru0/gB6o Adv4gQ== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:05 2024 by rpki-client on console-ams.rpki-client.org