$ rpki-client -vvf rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa File: 21A970BC737211EEB3112437C4F9AE02.roa (raw, json) Hash identifier: t4KWE6nOao0jySz++9neoQOUBn9gNyPYtoMj0+W/YSc= Subject key identifier: 0D:6F:B2:94:80:BF:8E:F7:5D:A9:3D:1F:CF:F8:1F:1C:B1:82:DA:88 Certificate issuer: /CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Certificate serial: 01 Authority key identifier: 7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa Signing time: Wed 25 Oct 2023 20:07:32 +0000 ROA not before: Wed 25 Oct 2023 20:07:32 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38910 IP address blocks: 161.121.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D36A/serialNumber=7B9CEDC8328028A7456E9C414BB77DAFEBCE765F Validity Not Before: Oct 25 20:07:32 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65397584-8f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:8a:67:63:37:2f:47:9a:bf:33:03:32:b0: b9:ae:ef:27:32:27:dd:97:6f:77:27:a0:6b:21:05: df:d7:59:a9:98:d6:c2:04:01:be:75:5b:b8:c6:68: 00:46:91:52:76:08:1a:6d:db:3b:2a:ed:00:ca:9f: ee:fa:fb:04:3e:93:52:6f:77:12:ef:07:50:2d:35: 09:3e:66:80:34:2f:63:e4:6e:c6:9d:73:ce:63:45: ac:01:96:18:7c:b3:36:c7:31:31:4b:22:db:58:b2: bb:20:26:a6:8e:20:c1:94:af:a4:b1:1a:1e:ee:67: f9:b6:01:08:23:2a:18:74:eb:9f:a8:65:9d:99:5e: d6:50:eb:4b:9a:75:04:30:c3:7c:b2:17:e3:29:96: e3:a7:c6:c4:0f:cf:26:6a:00:64:6d:6b:1a:67:a7: dc:32:c9:45:a3:74:a9:47:f3:0f:ee:0b:9d:53:07: 66:ff:c3:12:73:88:01:c5:7f:5c:98:b3:d0:fe:13: 6e:a7:c9:de:6a:34:01:02:ed:37:41:54:81:86:5b: 94:7f:ee:93:58:ed:ff:57:90:14:8a:55:df:93:42: 5f:fe:27:97:de:d5:04:45:f4:0b:fe:cf:d1:fa:8b: 7b:8f:eb:e8:44:43:54:b5:c0:20:64:c7:83:9c:35: 20:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6F:B2:94:80:BF:8E:F7:5D:A9:3D:1F:CF:F8:1F:1C:B1:82:DA:88 X509v3 Authority Key Identifier: keyid:7B:9C:ED:C8:32:80:28:A7:45:6E:9C:41:4B:B7:7D:AF:EB:CE:76:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/e5ztyDKAKKdFbpxBS7d9r-vOdl8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/e5ztyDKAKKdFbpxBS7d9r-vOdl8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D36A/C6DD51B4736F11EE917D0334C4F9AE02/21A970BC737211EEB3112437C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.121.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4b:af:06:10:04:92:7b:49:60:fc:dc:01:e7:41:6f:80:be:12: 09:71:6f:b0:6f:8f:56:6d:a7:db:3b:89:b4:06:92:ce:c0:d6: a9:c3:4d:8f:7e:29:0e:8f:d8:76:8c:38:46:43:e3:49:87:4c: a9:65:3a:3d:96:d7:5e:17:b3:be:97:d3:d8:70:5c:04:b0:1a: 2e:a7:1a:c7:93:68:d2:86:63:9b:a4:50:b3:65:5e:50:08:b7: a1:47:cd:6b:b8:23:70:07:39:b7:b1:ca:a6:25:45:a5:25:0d: 80:aa:7a:14:91:58:ad:cf:2b:84:9b:bd:f5:a8:98:26:1d:6d: 4a:31:51:4e:51:44:f6:f6:31:89:1b:5b:ad:c0:eb:2e:bf:b9: 4d:7f:b9:4d:51:90:f1:5b:8c:14:f7:09:f6:9b:14:39:90:90: 4e:56:98:fd:bc:18:26:48:d1:6d:71:c7:42:61:52:4c:d4:c4: e7:5a:7d:0e:4f:ab:36:87:2c:d9:8e:47:1c:72:0a:ea:8b:37: b0:dc:a3:77:ca:02:ae:17:6b:36:0c:b1:1c:94:05:6a:c5:9e: 83:04:55:7a:03:d9:41:4c:f6:8d:ec:3b:df:14:f5:b1:31:01: 03:a9:4b:25:d1:87:69:dd:dd:88:d4:94:c6:c7:ab:15:07:4f: d4:91:9b:30 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBATANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RDM2QTExMC8GA1UEBRMoN0I5Q0VEQzgzMjgwMjhBNzQ1NkU5QzQxNEJCNzdEQUZF QkNFNzY1RjAeFw0yMzEwMjUyMDA3MzJaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Mzk3NTg0LThmN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlAopnYzcvR5q/MwMysLmu7ycyJ92Xb3cnoGshBd/XWamY1sIEAb51W7jGaABG kVJ2CBpt2zsq7QDKn+76+wQ+k1JvdxLvB1AtNQk+ZoA0L2Pkbsadc85jRawBlhh8 szbHMTFLIttYsrsgJqaOIMGUr6SxGh7uZ/m2AQgjKhh065+oZZ2ZXtZQ60uadQQw w3yyF+MpluOnxsQPzyZqAGRtaxpnp9wyyUWjdKlH8w/uC51TB2b/wxJziAHFf1yY s9D+E26nyd5qNAEC7TdBVIGGW5R/7pNY7f9XkBSKVd+TQl/+J5fe1QRF9Av+z9H6 i3uP6+hEQ1S1wCBkx4OcNSALAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUDW+ylIC/ jvddqT0fz/gfHLGC2ogwHwYDVR0jBBgwFoAUe5ztyDKAKKdFbpxBS7d9r+vOdl8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZEMzZBL0M2REQ1MUI0NzM2 RjExRUU5MTdEMDMzNEM0RjlBRTAyL2U1enR5REtBS0tkRmJweEJTN2Q5ci12T2Rs OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZTV6dHlES0FLS2RGYnB4QlM3ZDlyLXZPZGw4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDM2QS9DNkRENTFCNDczNkYxMUVFOTE3RDAzMzRDNEY5QUUwMi8yMUE5NzBCQzcz NzIxMUVFQjMxMTI0MzdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBaF5gDANBgkqhkiG9w0BAQsFAAOCAQEAS68GEASSe0lg/NwB 50FvgL4SCXFvsG+PVm2n2zuJtAaSzsDWqcNNj34pDo/Ydow4RkPjSYdMqWU6PZbX XhezvpfT2HBcBLAaLqcax5No0oZjm6RQs2VeUAi3oUfNa7gjcAc5t7HKpiVFpSUN gKp6FJFYrc8rhJu99aiYJh1tSjFRTlFE9vYxiRtbrcDrLr+5TX+5TVGQ8VuMFPcJ 9psUOZCQTlaY/bwYJkjRbXHHQmFSTNTE51p9Dk+rNocs2Y5HHHIK6os3sNyjd8oC rhdrNgyxHJQFasWegwRVegPZQUz2jew73xT1sTEBA6lLJdGHad3diNSUxserFQdP 1JGbMA== -----END CERTIFICATE-----Generated at Fri May 31 20:34:05 2024 by rpki-client on console-ams.rpki-client.org