$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/E01390DA9B4B11EFB0C10385C4F9AE02.roa File: E01390DA9B4B11EFB0C10385C4F9AE02.roa (raw, json) Hash identifier: 0x5TkGiSHnyFFskMts4EHmJ6yY3ZwtNmM36DRNUAT7Q= Subject key identifier: 3B:89:2A:11:8B:F1:81:61:4C:FB:7C:3F:CF:19:2F:A4:02:EB:1E:C9 Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Certificate serial: 05 Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/E01390DA9B4B11EFB0C10385C4F9AE02.roa Signing time: Tue 05 Nov 2024 07:59:25 +0000 ROA not before: Tue 05 Nov 2024 07:59:25 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153383 IP address blocks: 160.191.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Validity Not Before: Nov 5 07:59:25 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6729d05d-08b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:b0:14:13:d3:60:2e:21:0a:d0:e7:d2:28: 45:64:02:48:30:1c:f9:84:dd:df:e8:36:08:96:fc: de:b4:29:1d:fc:83:34:f3:9a:f5:af:ce:90:55:78: 91:2e:e9:97:f6:bf:2f:2a:2d:50:06:a8:ff:d2:50: d9:1a:24:3a:4e:0b:36:29:c3:34:61:6c:71:cd:13: 9a:cb:60:1b:a5:90:df:d4:24:00:1c:e8:fa:f0:d8: 9b:c5:24:28:08:8a:36:66:51:c3:56:9c:70:a1:fb: c8:0c:20:97:4a:2f:32:ff:34:81:10:56:25:95:4c: 6f:98:0d:95:57:34:e4:82:22:32:31:36:da:69:56: 18:1a:39:80:d5:cf:e6:50:6c:90:fd:31:c1:f9:40: d8:89:c2:a6:ab:2c:b9:5e:20:42:92:72:94:64:4a: bb:bd:ab:86:2c:ea:3f:b9:32:9a:f9:c4:68:78:c3: a9:a2:b0:da:fe:7a:6e:78:1f:8c:9e:54:e2:5b:99: ea:74:8e:7f:a0:e3:67:e2:cc:53:9d:87:9e:cd:31: 82:be:0b:6a:4c:b4:31:41:16:b1:da:53:dd:1b:e4: c5:30:33:8c:a8:c0:e5:03:07:35:50:82:82:c9:40: 17:64:d1:e0:57:b4:12:a6:05:5c:4e:19:38:fc:34: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:89:2A:11:8B:F1:81:61:4C:FB:7C:3F:CF:19:2F:A4:02:EB:1E:C9 X509v3 Authority Key Identifier: keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/E01390DA9B4B11EFB0C10385C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.148.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:df:45:ca:93:14:57:67:e1:b6:59:5d:d3:c9:88:c5:d8:0e: 42:c0:20:1e:b3:9d:b1:6d:ae:5b:d6:b9:19:79:32:52:b0:f0: 18:e8:86:34:27:96:53:dc:05:59:ff:91:0f:a9:a5:ea:91:e8: b8:1f:30:58:c1:60:9a:79:6d:26:4e:80:a9:2e:a5:23:8e:ac: 0f:bf:21:f4:00:32:da:45:8f:2c:55:de:c4:75:92:7d:5c:26: e3:3e:99:00:99:2e:27:c8:cb:94:bd:5c:e3:82:1c:e3:2f:96: 36:02:a4:a7:1f:62:97:73:13:d5:d7:70:79:cf:d7:86:88:4f: 8f:2f:f0:79:65:12:ca:6e:b4:f9:d5:ef:76:83:a6:97:91:13: ae:ce:c5:d5:25:9d:66:a0:b7:f1:9b:48:56:64:e3:d9:2a:31: 22:71:36:99:0d:ef:a3:01:15:93:35:4a:31:0f:dc:ca:80:b2: 1e:e6:9d:08:75:8c:82:41:8b:c1:4d:7f:95:10:2c:9e:df:e4: 6e:0e:8d:44:98:56:a5:a7:81:76:38:fa:ea:0e:63:12:1b:71: 56:bd:26:82:84:38:49:8a:ed:9f:f7:e0:b5:89:41:06:37:c2: 9c:be:5d:bb:79:a4:f3:c8:5b:75:b0:f4:94:27:a0:90:24:5f: 19:96:b8:db -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEYxMTExMC8GA1UEBRMoMjExQTAyMUU4QUJERjREQkYyMDcwODIyNkNDODMyOEZE MjQxMzFERjAeFw0yNDExMDUwNzU5MjVaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MjlkMDVkLTA4YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa2rAUE9NgLiEK0OfSKEVkAkgwHPmE3d/oNgiW/N60KR38gzTzmvWvzpBVeJEu 6Zf2vy8qLVAGqP/SUNkaJDpOCzYpwzRhbHHNE5rLYBulkN/UJAAc6Prw2JvFJCgI ijZmUcNWnHCh+8gMIJdKLzL/NIEQViWVTG+YDZVXNOSCIjIxNtppVhgaOYDVz+ZQ bJD9McH5QNiJwqarLLleIEKScpRkSru9q4Ys6j+5Mpr5xGh4w6misNr+em54H4ye VOJbmep0jn+g42fizFOdh57NMYK+C2pMtDFBFrHaU90b5MUwM4yowOUDBzVQgoLJ QBdk0eBXtBKmBVxOGTj8NHBrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUO4kqEYvx gWFM+3w/zxkvpALrHskwHwYDVR0jBBgwFoAUIRoCHoq99NvyBwgibMgyj9JBMd8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRjExL0UxNjM4OTEwOUE3 QzExRUY4NDk1MEQzM0M0RjlBRTAyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1k OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVJvQ0hvcTk5TnZ5QndnaWJNZ3lqOUpCTWQ4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEYxMS9FMTYzODkxMDlBN0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9FMDEzOTBEQTlC NEIxMUVGQjBDMTAzODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/lDANBgkqhkiG9w0BAQsFAAOCAQEAb99FypMUV2fhtlld 08mIxdgOQsAgHrOdsW2uW9a5GXkyUrDwGOiGNCeWU9wFWf+RD6ml6pHouB8wWMFg mnltJk6AqS6lI46sD78h9AAy2kWPLFXexHWSfVwm4z6ZAJkuJ8jLlL1c44Ic4y+W NgKkpx9il3MT1ddwec/XhohPjy/weWUSym60+dXvdoOml5ETrs7F1SWdZqC38ZtI VmTj2SoxInE2mQ3vowEVkzVKMQ/cyoCyHuadCHWMgkGLwU1/lRAsnt/kbg6NRJhW paeBdjj66g5jEhtxVr0mgoQ4SYrtn/fgtYlBBjfCnL5du3mk88hbdbD0lCegkCRf GZa42w== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:06 2024 by rpki-client on console-ams.rpki-client.org