$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/FF3D553675B711EF83FAAE42C4F9AE02.roa File: FF3D553675B711EF83FAAE42C4F9AE02.roa (raw, json) Hash identifier: /HTBqf5H3Uz657hsatlKZqGr2vioW9ZJotjtVpnDq5Y= Subject key identifier: 55:66:AD:05:D6:39:F1:53:00:7F:CE:AB:9F:51:98:20:C4:62:09:74 Certificate issuer: /CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Certificate serial: 05 Authority key identifier: 8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/FF3D553675B711EF83FAAE42C4F9AE02.roa Signing time: Wed 18 Sep 2024 12:20:12 +0000 ROA not before: Wed 18 Sep 2024 12:20:12 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153324 IP address blocks: 160.187.18.0/24 maxlen: 24 160.187.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9/serialNumber=8DD414485917CD4C80167BDA19D7249646B06725 Validity Not Before: Sep 18 12:20:12 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66eac57c-23f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:02:a9:d7:20:df:9f:37:9c:c2:01:df:41: 6e:71:8c:97:3e:14:20:5a:dd:5f:50:38:14:e1:f2: e0:ce:3a:93:76:85:98:1e:9c:03:e5:c7:ef:34:60: 11:d8:bf:ab:40:ea:71:a1:49:c3:00:c7:33:56:60: ac:c6:0d:9b:98:46:e2:a3:db:06:8b:4e:bc:99:65: 30:22:9a:e9:e5:cb:1c:b7:2e:fe:e9:62:e4:c7:60: 5c:6f:64:b1:3e:8c:65:3d:65:b2:9c:37:3f:8a:20: 78:75:28:26:28:db:12:c8:7e:31:e6:c2:a7:4b:7f: 4f:01:c7:c6:49:54:ba:2c:90:91:15:e1:0e:2c:c1: 82:e0:44:79:1c:b1:be:f4:4a:d1:d1:4e:ae:5b:ec: 11:c5:24:a4:6a:62:85:c8:10:d5:90:fa:cd:af:55: 43:03:95:d6:33:04:80:bf:20:c0:21:c7:ce:37:6b: 6e:b6:5c:5e:36:e4:bb:76:3a:8b:30:cd:5b:ab:50: e5:0b:80:da:35:4e:d4:67:b9:35:7d:c5:0d:87:02: f3:fb:04:a9:85:27:78:24:45:03:23:b4:b3:75:bb: 8c:f5:81:1e:25:3a:a7:4b:40:6d:16:66:d3:2f:13: 17:c4:d5:70:e2:06:fb:46:e5:ec:57:f3:33:b7:57: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:66:AD:05:D6:39:F1:53:00:7F:CE:AB:9F:51:98:20:C4:62:09:74 X509v3 Authority Key Identifier: keyid:8D:D4:14:48:59:17:CD:4C:80:16:7B:DA:19:D7:24:96:46:B0:67:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/jdQUSFkXzUyAFnvaGdcklkawZyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jdQUSFkXzUyAFnvaGdcklkawZyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/D27C915C75B611EFB8E21514C4F9AE02/FF3D553675B711EF83FAAE42C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.18.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:76:b1:ab:87:ef:2d:dd:8f:3a:41:b0:4f:8a:72:64:2f:dc: d5:40:16:b1:0e:4d:43:cb:93:67:a0:02:33:b6:2c:5d:68:28: db:4f:4b:6e:ba:03:f2:f1:20:4b:56:28:21:db:5c:88:ab:15: 41:16:81:8c:03:ef:62:62:d2:52:ad:b2:bf:72:cc:7e:ba:9e: c0:0d:4c:11:a0:ec:70:7b:44:4c:9c:4f:ee:a4:47:a2:97:5e: 53:d8:16:cd:df:6f:b2:9c:de:41:57:8f:59:34:43:d0:f3:0f: 51:12:3a:02:48:eb:9e:db:e3:38:fe:45:8c:3f:59:22:5b:c0: 92:42:cd:56:14:d9:4e:06:15:a6:fb:f8:6c:29:73:2a:91:85: f2:fa:48:cf:63:48:3b:68:a2:0b:ea:73:f6:0c:65:ed:5c:e6: fc:a1:13:14:b4:60:9c:0b:25:58:68:e6:a8:4c:da:1f:8c:a2: b1:94:c1:fb:10:74:38:5c:84:fa:9d:6d:cb:cc:f1:10:9b:7a: dd:eb:71:c6:82:68:8f:cf:b6:35:e8:ac:cb:8f:6c:1b:97:42: 5f:46:60:e9:58:58:cb:35:19:23:61:3a:0c:32:37:dd:1e:b8: 92:42:85:7b:5b:ee:19:59:ab:21:78:d1:fb:4f:c6:ff:97:a4: 9c:1b:45:ed -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NzdCOTExMC8GA1UEBRMoOERENDE0NDg1OTE3Q0Q0QzgwMTY3QkRBMTlENzI0OTY0 NkIwNjcyNTAeFw0yNDA5MTgxMjIwMTJaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZWFjNTdjLTIzZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC//wKp1yDfnzecwgHfQW5xjJc+FCBa3V9QOBTh8uDOOpN2hZgenAPlx+80YBHY v6tA6nGhScMAxzNWYKzGDZuYRuKj2waLTryZZTAimunlyxy3Lv7pYuTHYFxvZLE+ jGU9ZbKcNz+KIHh1KCYo2xLIfjHmwqdLf08Bx8ZJVLoskJEV4Q4swYLgRHkcsb70 StHRTq5b7BHFJKRqYoXIENWQ+s2vVUMDldYzBIC/IMAhx843a262XF425Lt2Oosw zVurUOULgNo1TtRnuTV9xQ2HAvP7BKmFJ3gkRQMjtLN1u4z1gR4lOqdLQG0WZtMv ExfE1XDiBvtG5exX8zO3V7XVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVWatBdY5 8VMAf86rn1GYIMRiCXQwHwYDVR0jBBgwFoAUjdQUSFkXzUyAFnvaGdcklkawZyUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3N0I5L0QyN0M5MTVDNzVC NjExRUZCOEUyMTUxNEM0RjlBRTAyL2pkUVVTRmtYelV5QUZudmFHZGNrbGthd1p5 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvamRRVVNGa1h6VXlBRm52YUdkY2tsa2F3WnlVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EMjdDOTE1Qzc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9GRjNENTUzNjc1 QjcxMUVGODNGQUFFNDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC7EjANBgkqhkiG9w0BAQsFAAOCAQEAW3axq4fvLd2POkGw T4pyZC/c1UAWsQ5NQ8uTZ6ACM7YsXWgo209LbroD8vEgS1YoIdtciKsVQRaBjAPv YmLSUq2yv3LMfrqewA1MEaDscHtETJxP7qRHopdeU9gWzd9vspzeQVePWTRD0PMP URI6AkjrntvjOP5FjD9ZIlvAkkLNVhTZTgYVpvv4bClzKpGF8vpIz2NIO2iiC+pz 9gxl7Vzm/KETFLRgnAslWGjmqEzaH4yisZTB+xB0OFyE+p1ty8zxEJt63etxxoJo j8+2Neisy49sG5dCX0Zg6VhYyzUZI2E6DDI33R64kkKFe1vuGVmrIXjR+0/G/5ek nBtF7Q== -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:03 2024 by rpki-client on console-ams.rpki-client.org