$ rpki-client -vvf rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa File: B21985725F3711EFA108CA0CC4F9AE02.roa (raw, json) Hash identifier: qWDPCZUNoXxLfCTQ51artmgIDTxez9EecMCL2qvkzMg= Subject key identifier: 7B:8C:19:37:C1:0B:33:0D:0A:D1:AC:1C:03:E5:82:71:4E:C2:DB:2B Certificate issuer: /CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Certificate serial: 02 Authority key identifier: DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa Signing time: Tue 20 Aug 2024 21:03:49 +0000 ROA not before: Tue 20 Aug 2024 21:03:49 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 135559 IP address blocks: 160.30.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91813ED/serialNumber=DF24B4D51C67841DD600DD2A61786BCE98878667 Validity Not Before: Aug 20 21:03:49 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66c504b5-766d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:f9:0b:5b:16:34:58:0e:25:d5:4a:95:3c: 41:ff:43:dd:f1:8d:a2:83:b9:90:f4:db:38:e1:c9: 1f:be:a5:15:d7:3b:88:b2:30:56:3e:d8:bf:30:1f: be:13:09:26:d4:20:4e:de:97:44:1e:4c:eb:ba:c4: 45:01:63:37:a1:2b:3c:48:9e:72:0b:eb:2f:ca:84: 98:7a:0e:13:c8:89:6d:8e:a2:ba:1d:bb:b6:25:68: 08:b3:3d:5b:12:33:e8:c6:ff:42:6e:75:df:82:92: 02:86:6d:8a:0a:11:63:08:f4:b8:b6:f5:7d:4f:88: 76:02:38:95:a3:7a:db:f8:6c:3e:93:7b:3b:fd:6d: db:45:0b:dc:3a:05:b0:2b:5c:22:23:b7:7c:12:bd: 2b:03:e6:3e:d8:ea:7a:1a:1d:4e:c4:10:33:f3:71: e3:f6:90:bb:93:3e:d2:a7:60:a0:69:1c:74:c6:2a: 39:79:a1:52:56:80:0a:a8:8c:8a:13:17:a6:54:90: 54:5d:69:38:46:99:79:fc:13:a6:f0:f3:75:de:88: 07:a2:f3:23:f6:98:01:75:99:32:33:50:5d:44:34: 71:28:1c:55:af:6e:d0:90:f5:d3:1b:ec:38:56:9d: 1e:81:22:49:ca:cb:5d:35:bb:01:88:0c:3f:6d:f4: 4f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8C:19:37:C1:0B:33:0D:0A:D1:AC:1C:03:E5:82:71:4E:C2:DB:2B X509v3 Authority Key Identifier: keyid:DF:24:B4:D5:1C:67:84:1D:D6:00:DD:2A:61:78:6B:CE:98:87:86:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/3yS01RxnhB3WAN0qYXhrzpiHhmc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3yS01RxnhB3WAN0qYXhrzpiHhmc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91813ED/677AAA3C5F3711EFBF369E58C4F9AE02/B21985725F3711EFA108CA0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.37.0/24 Signature Algorithm: sha256WithRSAEncryption bb:df:28:8a:94:31:3a:36:6b:64:4d:96:61:97:db:89:5c:81: 06:b6:bc:fb:4a:d0:a9:04:5d:e0:2f:8f:a6:3d:c5:d1:6e:d8: 81:61:59:e1:1c:d1:08:26:13:ca:21:b7:8b:11:83:de:25:ae: bd:5f:45:6a:98:34:75:4c:ff:f7:a8:5f:a5:43:bb:4e:49:4d: 5e:fb:99:b8:4f:6d:1b:80:02:4c:a4:63:aa:92:d1:39:a3:93: 4c:73:58:50:99:d8:0a:96:3a:3a:74:c7:b9:f8:e1:6d:fe:76: 83:82:47:c5:0b:a9:ef:ed:37:33:fa:11:0a:0a:e8:58:2d:0a: 95:35:cc:4a:7d:22:8d:08:74:f0:a0:83:d0:64:4b:79:b7:58: 33:df:40:ab:3f:20:f2:26:f1:26:0c:4d:7b:80:1e:7f:db:35: 6e:23:35:83:c9:00:70:27:e8:2b:34:50:41:0a:d8:69:88:29: f8:92:a7:0f:25:67:35:3d:13:50:83:98:2a:82:7b:16:11:de: 1a:e7:41:16:98:8e:1b:2d:63:e4:1f:01:1d:b9:7d:5e:64:ed: 26:51:da:92:4a:0c:d9:cd:2f:f8:ff:c8:76:8e:c0:77:96:27: 79:19:8e:13:69:a3:e1:9c:8b:e4:e7:13:e5:e7:9a:32:a7:57: 34:e8:c0:5c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MTNFRDExMC8GA1UEBRMoREYyNEI0RDUxQzY3ODQxREQ2MDBERDJBNjE3ODZCQ0U5 ODg3ODY2NzAeFw0yNDA4MjAyMTAzNDlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YzUwNGI1LTc2NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/F/kLWxY0WA4l1UqVPEH/Q93xjaKDuZD02zjhyR++pRXXO4iyMFY+2L8wH74T CSbUIE7el0QeTOu6xEUBYzehKzxInnIL6y/KhJh6DhPIiW2Oorodu7YlaAizPVsS M+jG/0Judd+CkgKGbYoKEWMI9Li29X1PiHYCOJWjetv4bD6Tezv9bdtFC9w6BbAr XCIjt3wSvSsD5j7Y6noaHU7EEDPzceP2kLuTPtKnYKBpHHTGKjl5oVJWgAqojIoT F6ZUkFRdaThGmXn8E6bw83XeiAei8yP2mAF1mTIzUF1ENHEoHFWvbtCQ9dMb7DhW nR6BIknKy101uwGIDD9t9E8BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUe4wZN8EL Mw0K0awcA+WCcU7C2yswHwYDVR0jBBgwFoAU3yS01RxnhB3WAN0qYXhrzpiHhmcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxM0VELzY3N0FBQTNDNUYz NzExRUZCRjM2OUU1OEM0RjlBRTAyLzN5UzAxUnhuaEIzV0FOMHFZWGhyenBpSGht Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM3lTMDFSeG5oQjNXQU4wcVlYaHJ6cGlIaG1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTNFRC82NzdBQUEzQzVGMzcxMUVGQkYzNjlFNThDNEY5QUUwMi9CMjE5ODU3MjVG MzcxMUVGQTEwOENBMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAeJTANBgkqhkiG9w0BAQsFAAOCAQEAu98oipQxOjZrZE2W YZfbiVyBBra8+0rQqQRd4C+Ppj3F0W7YgWFZ4RzRCCYTyiG3ixGD3iWuvV9Fapg0 dUz/96hfpUO7TklNXvuZuE9tG4ACTKRjqpLROaOTTHNYUJnYCpY6OnTHufjhbf52 g4JHxQup7+03M/oRCgroWC0KlTXMSn0ijQh08KCD0GRLebdYM99Aqz8g8ibxJgxN e4Aef9s1biM1g8kAcCfoKzRQQQrYaYgp+JKnDyVnNT0TUIOYKoJ7FhHeGudBFpiO Gy1j5B8BHbl9XmTtJlHakkoM2c0v+P/Ido7Ad5YneRmOE2mj4ZyL5OcT5eeaMqdX NOjAXA== -----END CERTIFICATE-----Generated at Wed Oct 23 07:45:56 2024 by rpki-client on console-ams.rpki-client.org