$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/0AEF32C6FC3611EC95130A10C4F9AE02.roa File: 0AEF32C6FC3611EC95130A10C4F9AE02.roa (raw, json) Hash identifier: OgnXLORFGXXu2SwRr4cx/2WbeNsSuSP3wMn0legKHGQ= Subject key identifier: B2:1B:38:61:44:9B:9B:EF:47:54:3D:42:10:23:0E:BD:D1:0E:19:F3 Certificate issuer: /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Certificate serial: 2314 Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/0AEF32C6FC3611EC95130A10C4F9AE02.roa Signing time: Fri 26 May 2023 16:53:45 +0000 ROA not before: Fri 26 May 2023 16:53:45 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 131178 IP address blocks: 150.107.4.0/22 maxlen: 22 150.107.4.0/24 maxlen: 24 150.107.5.0/24 maxlen: 24 150.107.6.0/24 maxlen: 24 150.107.7.0/24 maxlen: 24 160.202.32.0/22 maxlen: 22 160.202.32.0/23 maxlen: 23 160.202.34.0/24 maxlen: 24 160.202.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:10:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8980 (0x2314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5 Validity Not Before: May 26 16:53:45 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6470e418-4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:82:89:2d:4b:4c:3b:8d:5e:9a:06:9d:12: 74:d9:48:df:27:f0:e8:b9:ba:61:77:78:79:b6:69: e3:7a:5e:78:42:f2:bd:b3:aa:ca:ad:2c:0e:42:d9: 20:e6:ba:7e:30:6d:84:01:49:58:91:c8:fe:13:04: 74:15:25:a2:de:5c:03:6d:3d:02:b1:89:73:9c:d1: 1b:8a:d7:ae:96:4a:88:fd:49:2b:11:70:20:3b:e9: 3d:7f:fa:0f:15:79:56:c3:8a:2b:1a:f6:ca:c7:8b: cc:ba:6f:bf:e2:cc:d6:b9:6a:19:7c:e9:48:56:7f: 73:4d:90:f6:cb:68:58:cd:52:54:e4:58:b8:41:68: fe:45:e7:9b:ba:cc:72:06:04:f4:db:27:88:31:80: 90:05:71:c3:c6:dc:c6:11:45:f9:cc:4d:82:0b:6c: 68:3b:6e:32:3f:c7:d1:9a:3a:df:d5:9c:ed:94:b1: b9:d3:be:e0:e9:2c:f9:30:a7:5e:13:02:89:f1:f3: 7c:30:b9:3d:5b:3d:7e:65:c1:10:c7:4d:d3:38:4c: 15:07:6c:31:33:04:de:23:c9:b8:09:f3:e2:6c:0b: de:6f:85:44:ae:e0:ea:8f:27:9f:2a:ac:a0:e9:10: 81:6d:4f:13:d0:b3:77:21:30:89:f0:f3:41:38:8c: 24:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1B:38:61:44:9B:9B:EF:47:54:3D:42:10:23:0E:BD:D1:0E:19:F3 X509v3 Authority Key Identifier: keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/0AEF32C6FC3611EC95130A10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.107.4.0/22 160.202.32.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:97:6b:d9:4d:4e:63:89:26:b1:bd:54:2f:a8:e0:13:6d:f9: ba:9a:12:04:72:fe:24:1f:2b:3e:2e:b6:40:c0:ec:2e:b7:2a: 3c:fd:4c:20:ca:25:d9:4e:e5:9e:21:1b:2c:cd:e4:aa:15:f8: cf:72:d7:d8:2a:5a:21:d8:ca:e8:21:ff:3e:7f:c6:c3:fc:6e: de:9c:3f:33:37:ca:c3:ff:ff:a4:c5:5d:ee:2e:94:18:a5:7f: ad:12:dd:05:4a:07:98:a7:54:79:0a:40:3d:cd:30:10:81:bc: fb:07:fc:60:70:95:51:0e:5b:b8:2e:84:aa:f9:95:d8:68:e0: 74:d1:6d:a2:5b:bb:d6:76:a1:ca:e7:7b:a2:07:b3:fb:fc:8f: a0:10:81:54:19:bf:d1:58:15:b4:87:1c:f8:7f:87:fa:3e:b4: 4c:d9:30:ad:c9:94:58:29:40:52:52:e2:d6:3f:4e:07:c6:95: db:71:9e:72:9d:6c:55:fc:76:2f:e0:5d:eb:81:a3:4d:66:e6: dd:f0:62:30:7b:8b:25:34:ec:ba:03:22:b9:0e:23:2b:07:34: 97:46:da:6d:cc:f7:7b:9b:ff:14:ce:b2:21:5a:a2:09:37:28: 1a:b6:3d:ea:35:c6:21:8d:0c:93:da:b7:7b:22:0a:f5:2f:a1: a2:c8:94:17 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICIxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND OEYyRDkxQjUwHhcNMjMwNTI2MTY1MzQ1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDcwZTQxOC00MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyGCiS1LTDuNXpoGnRJ02UjfJ/Doubphd3h5tmnjel54QvK9s6rKrSwOQtkg 5rp+MG2EAUlYkcj+EwR0FSWi3lwDbT0CsYlznNEbiteulkqI/UkrEXAgO+k9f/oP FXlWw4orGvbKx4vMum+/4szWuWoZfOlIVn9zTZD2y2hYzVJU5Fi4QWj+Reebusxy BgT02yeIMYCQBXHDxtzGEUX5zE2CC2xoO24yP8fRmjrf1ZztlLG5077g6Sz5MKde EwKJ8fN8MLk9Wz1+ZcEQx03TOEwVB2wxMwTeI8m4CfPibAveb4VEruDqjyefKqyg 6RCBbU8T0LN3ITCJ8PNBOIwkOQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLIbOGFE m5vvR1Q9QhAjDr3RDhnzMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3 MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjlDRDMvODEyMjg2RDI0NzExMTFFNUE0NDk2MzM1QzRGOUFFMDIvMEFFRjMyQzZG QzM2MTFFQzk1MTMwQTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAKWawQDBAKgyiAwDQYJKoZIhvcNAQELBQADggEBAGyXa9lN TmOJJrG9VC+o4BNt+bqaEgRy/iQfKz4utkDA7C63Kjz9TCDKJdlO5Z4hGyzN5KoV +M9y19gqWiHYyugh/z5/xsP8bt6cPzM3ysP//6TFXe4ulBilf60S3QVKB5inVHkK QD3NMBCBvPsH/GBwlVEOW7guhKr5ldho4HTRbaJbu9Z2ocrne6IHs/v8j6AQgVQZ v9FYFbSHHPh/h/o+tEzZMK3JlFgpQFJS4tY/TgfGldtxnnKdbFX8di/gXeuBo01m 5t3wYjB7iyU07LoDIrkOIysHNJdG2m3M93ub/xTOsiFaogk3KBq2Peo1xiGNDJPa t3siCvUvoaLIlBc= -----END CERTIFICATE-----Generated at Thu May 2 17:43:09 2024 by rpki-client on console-fra.rpki-client.org