$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/01935FDC35F911EFBF29CF70C4F9AE02.roa File: 01935FDC35F911EFBF29CF70C4F9AE02.roa (raw, json) Hash identifier: OIK0wz8AgNykEH5wxa89kT57n1qLZMAZrtTx9EHsCj0= Subject key identifier: A7:C7:0E:A5:E2:43:0A:EC:DB:BC:78:32:C3:32:5A:DD:B8:AA:31:1F Certificate issuer: /CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Certificate serial: 23 Authority key identifier: AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/01935FDC35F911EFBF29CF70C4F9AE02.roa Signing time: Sat 29 Jun 2024 09:21:46 +0000 ROA not before: Sat 29 Jun 2024 09:21:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 133112 IP address blocks: 160.20.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7/serialNumber=AA4405B1BFA96C9C69B029033EF481D8F58A77E5 Validity Not Before: Jun 29 09:21:46 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=667fd22a-b005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:40:7e:30:b7:ff:d4:55:37:b5:8a:36:f8:2d: 6f:a8:c7:ff:90:20:a0:55:8e:ad:6f:c3:b0:82:63: 63:14:54:9d:87:fe:39:36:b2:2b:b2:a5:cc:43:4f: 09:81:10:c1:42:bf:a8:2c:86:22:93:db:65:d3:7b: 48:21:f0:7b:5b:21:ab:5d:0a:47:f6:d2:18:69:c9: 60:69:24:ee:59:2d:e6:a8:90:7b:2a:ef:6d:dd:31: 96:06:d8:1b:78:ba:52:f0:ef:3d:20:74:fa:b9:23: 55:a4:d3:2d:c1:52:de:77:e4:98:d0:b6:60:ef:92: d2:93:c5:1d:c2:72:ff:af:20:60:0e:15:69:34:88: e0:d3:64:0e:65:73:52:79:b7:9c:dc:ac:f3:2b:2c: 7e:99:7b:95:2d:83:f4:f8:e2:79:3c:b1:53:47:a1: 32:e8:f5:20:6e:6b:f0:37:2b:15:49:f8:4b:79:0b: b3:6e:c9:5f:3b:d1:65:95:b0:b0:bb:79:66:55:89: b6:30:66:80:23:a5:04:20:94:64:3a:b5:54:ef:95: db:47:f4:d9:b5:7a:cf:8b:98:fc:87:7c:08:d8:72: e0:80:2c:46:5b:b1:28:97:c4:ac:33:87:bf:9e:f8: 3c:d0:68:d0:b8:52:8f:b9:9a:6e:95:be:4d:55:de: 83:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:0E:A5:E2:43:0A:EC:DB:BC:78:32:C3:32:5A:DD:B8:AA:31:1F X509v3 Authority Key Identifier: keyid:AA:44:05:B1:BF:A9:6C:9C:69:B0:29:03:3E:F4:81:D8:F5:8A:77:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/qkQFsb-pbJxpsCkDPvSB2PWKd-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qkQFsb-pbJxpsCkDPvSB2PWKd-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/96A36AA816D811EFBF901E5FC4F9AE02/01935FDC35F911EFBF29CF70C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.117.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e8:7c:f6:eb:b3:fc:7b:5e:9a:5b:a4:72:9f:8b:35:ab:84: c4:1a:39:34:4e:d1:83:b4:8c:00:70:0a:e2:87:d2:82:be:f5: 32:db:99:a6:7a:54:25:47:c8:92:56:84:2f:6f:28:3d:a5:c6: 9e:76:ae:d5:4a:28:a1:01:aa:17:2d:8f:80:14:6c:20:c3:d3: 2a:9d:42:53:49:32:4d:cd:02:a4:44:9b:95:8b:75:1d:6f:ca: 32:79:77:82:26:a0:2c:c7:16:0d:7a:93:c6:88:4b:c7:22:2a: f5:87:f8:33:71:3c:76:69:e2:4e:52:a1:02:56:1c:dd:68:a6: 55:88:6a:c9:37:5d:70:cf:c1:66:a7:e5:eb:03:f1:34:60:5c: 07:da:93:5a:2e:48:09:dd:74:6a:56:c0:1d:dc:d9:06:6f:8b: 04:74:16:64:39:9d:1c:6c:86:27:44:93:dd:eb:ed:39:3a:96: 91:39:f9:b0:38:85:1a:fa:87:40:cb:e2:1b:05:04:d1:f8:97: 36:12:cd:2c:9a:48:17:63:00:e8:a0:ea:dd:aa:5c:2a:05:c1: b0:02:28:3c:fa:56:69:14:cb:bf:40:14:f3:66:c1:2a:d9:a0: 71:be:6c:50:bc:8e:d9:89:02:37:cf:af:f9:dd:23:34:51:71: 5c:72:b8:5d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDVENzExMC8GA1UEBRMoQUE0NDA1QjFCRkE5NkM5QzY5QjAyOTAzM0VGNDgxRDhG NThBNzdFNTAeFw0yNDA2MjkwOTIxNDZaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2N2ZkMjJhLWIwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaQH4wt//UVTe1ijb4LW+ox/+QIKBVjq1vw7CCY2MUVJ2H/jk2siuypcxDTwmB EMFCv6gshiKT22XTe0gh8HtbIatdCkf20hhpyWBpJO5ZLeaokHsq723dMZYG2Bt4 ulLw7z0gdPq5I1Wk0y3BUt535JjQtmDvktKTxR3Ccv+vIGAOFWk0iODTZA5lc1J5 t5zcrPMrLH6Ze5Utg/T44nk8sVNHoTLo9SBua/A3KxVJ+Et5C7NuyV870WWVsLC7 eWZVibYwZoAjpQQglGQ6tVTvldtH9Nm1es+LmPyHfAjYcuCALEZbsSiXxKwzh7+e +DzQaNC4Uo+5mm6Vvk1V3oOjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp8cOpeJD CuzbvHgywzJa3biqMR8wHwYDVR0jBBgwFoAUqkQFsb+pbJxpsCkDPvSB2PWKd+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNUQ3Lzk2QTM2QUE4MTZE ODExRUZCRjkwMUU1RkM0RjlBRTAyL3FrUUZzYi1wYkp4cHNDa0RQdlNCMlBXS2Qt VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcWtRRnNiLXBiSnhwc0NrRFB2U0IyUFdLZC1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy85NkEzNkFBODE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi8wMTkzNUZEQzM1 RjkxMUVGQkYyOUNGNzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAUdTANBgkqhkiG9w0BAQsFAAOCAQEAleh89uuz/Htemluk cp+LNauExBo5NE7Rg7SMAHAK4ofSgr71MtuZpnpUJUfIklaEL28oPaXGnnau1Uoo oQGqFy2PgBRsIMPTKp1CU0kyTc0CpESblYt1HW/KMnl3giagLMcWDXqTxohLxyIq 9Yf4M3E8dmniTlKhAlYc3WimVYhqyTddcM/BZqfl6wPxNGBcB9qTWi5ICd10albA HdzZBm+LBHQWZDmdHGyGJ0ST3evtOTqWkTn5sDiFGvqHQMviGwUE0fiXNhLNLJpI F2MA6KDq3apcKgXBsAIoPPpWaRTLv0AU82bBKtmgcb5sULyO2YkCN8+v+d0jNFFx XHK4XQ== -----END CERTIFICATE-----Generated at Thu Sep 19 07:13:51 2024 by rpki-client on console-fra.rpki-client.org