$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa File: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (raw, json) Hash identifier: eFxwV6TYZjxk4/Ekn5nyzAgAfEQn65e+4zP6/WFsXnw= Subject key identifier: B9:8F:23:CD:41:FF:41:11:C8:B6:17:14:7C:00:73:24:50:6B:42:56 Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 0580 Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa Signing time: Fri 26 Apr 2024 21:09:58 +0000 ROA not before: Fri 26 Apr 2024 21:09:58 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133752 IP address blocks: 192.131.142.0/24 maxlen: 24 205.189.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1408 (0x580) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Apr 26 21:09:58 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=662c1826-bbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:57:13:de:bd:8c:b4:5b:2e:26:c6:9e:97: a5:5b:bd:c5:77:bb:fc:2a:34:d1:ce:e7:41:b5:1f: 77:e7:bd:b6:b6:ce:11:df:ca:27:d0:0d:c8:fe:21: 65:20:81:aa:36:0b:37:1e:3b:30:f1:17:e4:24:d6: 6c:bd:26:bc:47:55:d5:ce:d6:cd:e9:8a:43:d6:6a: 35:29:c2:43:27:1d:55:61:7e:16:e5:7d:73:c2:84: b1:e2:bd:31:2b:0a:07:eb:85:b5:ee:04:97:51:bb: 67:6c:16:ab:20:6e:0f:44:0a:50:ce:ba:ad:85:63: c4:40:44:84:3b:ac:89:00:3e:eb:a9:89:11:4a:30: ca:19:1c:c8:b3:9a:84:ec:ca:f5:1a:fa:8f:1a:59: 93:26:73:a8:93:8b:df:36:28:7b:65:57:e0:fa:b3: 5d:29:71:eb:13:e2:ee:db:1d:ec:5a:6f:70:f1:ad: c2:77:3b:51:a7:f8:19:2c:30:89:73:17:88:a0:7e: a6:c0:a6:9b:a2:31:93:87:02:bf:38:4d:a3:1f:1e: 14:07:58:77:de:0b:7f:c5:63:32:c8:5b:93:bf:d1: 63:6f:81:60:7e:e3:8e:0b:35:09:19:70:41:bc:05: 34:f1:e8:0b:93:66:6d:d7:42:0e:28:1d:96:df:7d: 27:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8F:23:CD:41:FF:41:11:C8:B6:17:14:7C:00:73:24:50:6B:42:56 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.131.142.0/24 205.189.160.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:73:b7:d4:3c:51:f1:23:46:ec:a8:c6:29:74:af:28:13:bd: 6d:10:b3:4a:84:ee:cc:cc:75:8f:d0:62:f4:f5:ba:aa:fd:6e: 18:6b:46:91:76:61:17:e1:59:e6:82:66:6e:4f:db:ac:55:35: 57:78:be:71:ad:8b:45:eb:58:d6:23:42:4f:8a:cc:b2:44:d3: e4:36:ed:f3:48:c6:4c:f9:27:c5:45:41:ab:1e:57:0d:8b:78: f8:2a:22:8c:2b:79:8c:32:bf:93:03:c4:31:55:fc:c8:c6:ab: 12:3a:e0:8f:1d:35:ae:40:7e:8d:91:4e:48:58:e1:10:3c:db: e9:aa:af:1f:de:25:52:43:14:60:0a:14:af:49:f2:e4:0a:7a: 22:c5:ab:6b:7b:cc:c3:7a:f3:10:2c:c3:79:f0:3e:86:10:a5: 91:08:0e:e2:01:a8:e5:98:93:ee:3b:d1:e2:24:d5:2c:f9:4a: b6:68:8f:73:ab:3e:af:73:cd:0b:5a:9f:6a:61:02:6c:96:de: 2c:ee:86:89:00:d2:5a:53:d9:b5:02:7f:cf:5f:1e:bf:9e:62: c8:ac:9d:f8:60:8d:3b:cc:75:04:55:91:10:4a:c8:4d:ad:5d: ff:cc:6e:18:e5:2a:ff:1c:82:3d:2a:6d:04:0a:c4:47:dd:3e: 1d:68:bc:fc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjQwNDI2MjEwOTU4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjJjMTgyNi1iYmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxEdXE969jLRbLibGnpelW73Fd7v8KjTRzudBtR935722ts4R38on0A3I/iFl IIGqNgs3Hjsw8RfkJNZsvSa8R1XVztbN6YpD1mo1KcJDJx1VYX4W5X1zwoSx4r0x KwoH64W17gSXUbtnbBarIG4PRApQzrqthWPEQESEO6yJAD7rqYkRSjDKGRzIs5qE 7Mr1GvqPGlmTJnOok4vfNih7ZVfg+rNdKXHrE+Lu2x3sWm9w8a3CdztRp/gZLDCJ cxeIoH6mwKabojGThwK/OE2jHx4UB1h33gt/xWMyyFuTv9Fjb4FgfuOOCzUJGXBB vAU08egLk2Zt10IOKB2W330nlwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLmPI81B /0ERyLYXFHwAcyRQa0JWMB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvNkVGQzBCRUU5ODRDMTFFQjhBNDFGQTIwQzRGOUFFMDIvRjlDMjNFMkEz QUNCMTFFQzlGRUJCMzY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADAg44DBADNvaAwDQYJKoZIhvcNAQELBQADggEBAExzt9Q8 UfEjRuyoxil0rygTvW0Qs0qE7szMdY/QYvT1uqr9bhhrRpF2YRfhWeaCZm5P26xV NVd4vnGti0XrWNYjQk+KzLJE0+Q27fNIxkz5J8VFQaseVw2LePgqIowreYwyv5MD xDFV/MjGqxI64I8dNa5Afo2RTkhY4RA82+mqrx/eJVJDFGAKFK9J8uQKeiLFq2t7 zMN68xAsw3nwPoYQpZEIDuIBqOWYk+470eIk1Sz5SrZoj3OrPq9zzQtan2phAmyW 3izuhokA0lpT2bUCf89fHr+eYsisnfhgjTvMdQRVkRBKyE2tXf/MbhjlKv8cgj0q bQQKxEfdPh1ovPw= -----END CERTIFICATE-----Generated at Thu May 2 22:28:52 2024 by rpki-client on console-ams.rpki-client.org