$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/4EA76BD26BBF11EFA2832A74C4F9AE02.roa File: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (raw, json) Hash identifier: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY= Subject key identifier: 41:7C:70:8E:21:33:05:BF:8B:F5:8D:F1:25:8B:00:CA:C0:B7:6F:BF Certificate issuer: /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Certificate serial: 07B0 Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/4EA76BD26BBF11EFA2832A74C4F9AE02.roa Signing time: Thu 05 Sep 2024 19:44:47 +0000 ROA not before: Thu 05 Sep 2024 19:44:47 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45700 IP address blocks: 14.1.94.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF Validity Not Before: Sep 5 19:44:47 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66da0a2f-f34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:ed:c0:7c:1d:27:d7:d1:e8:27:6e:80:1c: c7:70:1e:68:1e:84:eb:af:21:89:73:8e:10:47:25: ac:02:8e:27:70:52:4c:8d:7e:78:fa:2a:10:0a:b1: dc:6c:55:cc:a2:56:fc:b8:0e:b6:71:6e:b2:4d:de: c9:6e:41:dc:62:6f:65:fa:20:f8:95:94:36:e3:5d: 36:a2:8b:a8:70:38:37:06:30:14:97:5f:b2:f4:0e: b1:0f:c7:99:d0:40:77:41:ce:2c:aa:d8:48:c3:34: 6c:d1:89:18:89:d8:4d:f0:2a:b5:21:9c:b7:c3:40: da:90:45:4b:29:82:9f:ff:d5:50:6f:da:6d:9f:d2: 45:94:75:ed:e6:da:1f:5c:7e:8f:67:fa:61:e9:ba: aa:d3:27:89:6c:b8:35:96:11:89:33:75:25:eb:5c: 68:84:f2:12:cb:e8:dd:c1:6c:e3:e8:3b:31:ae:35: 85:e4:cc:6b:54:99:4e:d8:d1:07:f8:39:3e:b4:6d: cf:f0:61:92:6c:1c:d0:07:38:e7:77:29:6d:4d:07: ff:6a:a5:c1:92:f4:f9:b9:70:c5:a3:35:11:3c:34: cf:12:2a:ca:00:f7:fc:0b:2f:6e:ff:8b:71:9d:9e: 49:00:51:51:61:63:8b:7a:e5:41:a9:35:8e:2f:29: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7C:70:8E:21:33:05:BF:8B:F5:8D:F1:25:8B:00:CA:C0:B7:6F:BF X509v3 Authority Key Identifier: keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/4EA76BD26BBF11EFA2832A74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.1.94.0/23 Signature Algorithm: sha256WithRSAEncryption 95:96:70:f8:80:78:e0:42:77:cf:cc:78:cf:0c:97:33:9a:2b: 03:4f:20:1a:6c:39:cb:50:99:a9:1e:4c:4c:84:2b:e9:65:88: 94:72:05:bc:d3:12:6e:6c:0b:72:6a:1e:91:43:35:ea:62:e1: 75:55:09:9d:8c:30:0e:b3:7f:d9:fe:8f:a9:2f:a4:b6:3e:3f: 4d:4d:02:26:ac:60:aa:57:9c:70:ed:c7:b3:97:06:ae:14:62: 36:77:73:87:14:47:99:6a:7d:f3:9f:7c:8c:8f:37:13:b9:01: c7:b4:d7:83:9c:d9:db:09:6d:9b:c2:bf:f1:6f:55:6a:97:be: 5a:8b:6b:b0:4e:1b:f3:fd:c2:86:0a:11:f5:60:3c:aa:cf:c8: fa:e0:da:cf:94:81:38:8e:c0:3d:f3:32:82:37:9a:38:1d:ab: 03:96:a1:51:d0:d8:fd:57:10:3d:2e:7d:e5:99:69:93:b8:14: 68:3b:f1:2e:df:42:80:9b:d7:bd:01:40:2a:d4:70:7a:f4:43: ee:b1:2f:de:2c:a0:59:dd:6e:77:ac:c1:4d:8e:09:c7:be:59: c6:bd:71:1c:71:e2:25:c5:25:35:6e:34:26:60:5b:39:c1:38: 4a:92:6d:ed:74:dd:13:00:7d:a6:bb:cf:07:f9:3e:d6:89:46: 55:5b:26:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw RkM0NTQ2Q0YwHhcNMjQwOTA1MTk0NDQ3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmRhMGEyZi1mMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrrtwHwdJ9fR6CdugBzHcB5oHoTrryGJc44QRyWsAo4ncFJMjX54+ioQCrHc bFXMolb8uA62cW6yTd7JbkHcYm9l+iD4lZQ24102oouocDg3BjAUl1+y9A6xD8eZ 0EB3Qc4sqthIwzRs0YkYidhN8Cq1IZy3w0DakEVLKYKf/9VQb9ptn9JFlHXt5tof XH6PZ/ph6bqq0yeJbLg1lhGJM3Ul61xohPISy+jdwWzj6DsxrjWF5MxrVJlO2NEH +Dk+tG3P8GGSbBzQBzjndyltTQf/aqXBkvT5uXDFozURPDTPEirKAPf8Cy9u/4tx nZ5JAFFRYWOLeuVBqTWOLymRgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEF8cI4h MwW/i/WN8SWLAMrAt2+/MB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU4REYvNTMxOTEwNDZEQzI0MTFFQUJEMDU3RjE2QzRGOUFFMDIvNEVBNzZCRDI2 QkJGMTFFRkEyODMyQTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEOAV4wDQYJKoZIhvcNAQELBQADggEBAJWWcPiAeOBCd8/M eM8MlzOaKwNPIBpsOctQmakeTEyEK+lliJRyBbzTEm5sC3JqHpFDNepi4XVVCZ2M MA6zf9n+j6kvpLY+P01NAiasYKpXnHDtx7OXBq4UYjZ3c4cUR5lqffOffIyPNxO5 Ace014Oc2dsJbZvCv/FvVWqXvlqLa7BOG/P9woYKEfVgPKrPyPrg2s+UgTiOwD3z MoI3mjgdqwOWoVHQ2P1XED0ufeWZaZO4FGg78S7fQoCb170BQCrUcHr0Q+6xL94s oFndbneswU2OCce+Wca9cRxx4iXFJTVuNCZgWznBOEqSbe103RMAfaa7zwf5PtaJ RlVbJr0= -----END CERTIFICATE-----Generated at Sun Nov 24 21:45:04 2024 by rpki-client on console-ams.rpki-client.org