$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/54EDB8542E1811EBB4E80B1FC4F9AE02.roa File: 54EDB8542E1811EBB4E80B1FC4F9AE02.roa (raw, json) Hash identifier: vez5gs+Pt4ya6YLdOueO0QMF6IGNEZr0U1SUVMLX8CY= Subject key identifier: 03:D8:4B:5D:F1:59:13:C4:0F:CC:B5:A9:9D:49:08:63:AD:47:3B:17 Certificate issuer: /CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Certificate serial: 09C8 Authority key identifier: 90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/54EDB8542E1811EBB4E80B1FC4F9AE02.roa Signing time: Mon 18 Mar 2024 20:49:02 +0000 ROA not before: Mon 18 Mar 2024 20:49:02 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 4628 IP address blocks: 192.154.17.0/24 maxlen: 24 192.154.18.0/23 maxlen: 24 192.154.20.0/22 maxlen: 24 192.169.32.0/24 maxlen: 24 192.169.34.0/24 maxlen: 24 192.169.37.0/24 maxlen: 24 192.169.38.0/24 maxlen: 24 192.169.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2504 (0x9c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2/serialNumber=909516597C76FA3CFFAB15208C0AE9886634AA03 Validity Not Before: Mar 18 20:49:02 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f8a8be-6a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:59:df:5b:aa:8b:7b:1f:5e:34:85:9b:08:43: 2b:7a:f8:8d:ba:7b:a1:02:5a:fd:44:dc:e5:72:77: a3:5e:4b:c8:75:50:af:05:4d:6a:08:23:62:b6:90: c7:e4:72:66:60:61:aa:43:20:1e:ab:01:e4:2b:e1: 1b:a2:09:17:ef:27:2e:84:cc:f4:9a:75:9b:9b:dd: b1:28:e8:c7:0c:b6:97:9f:33:c8:56:8a:40:59:47: 8f:b7:5b:81:98:61:d2:cb:b0:95:b9:75:57:c4:65: db:42:5d:83:77:68:a2:aa:34:c7:b7:7f:4a:5b:a0: 83:36:a9:f0:46:6b:48:3e:b5:0c:04:17:66:e2:54: ae:80:01:ec:71:b4:6e:c3:20:8b:09:03:66:7a:67: d6:33:8e:21:c2:f9:a9:af:b9:4e:8d:60:f9:a4:5c: 1c:45:c1:1a:d3:9d:a0:2a:a9:8c:bd:bf:74:54:d6: 8a:10:29:9b:08:4d:57:02:90:8c:97:75:2d:cf:17: 94:f1:9e:f1:01:7b:1b:6f:27:d2:04:e8:35:00:6d: 97:56:71:d4:08:aa:7b:ff:f1:f7:c1:da:ea:42:cd: b2:b1:84:c3:73:7a:d6:37:f2:65:7b:38:26:03:7b: ec:66:91:c7:06:53:da:85:c0:2a:e5:02:37:88:ea: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D8:4B:5D:F1:59:13:C4:0F:CC:B5:A9:9D:49:08:63:AD:47:3B:17 X509v3 Authority Key Identifier: keyid:90:95:16:59:7C:76:FA:3C:FF:AB:15:20:8C:0A:E9:88:66:34:AA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/kJUWWXx2-jz_qxUgjArpiGY0qgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kJUWWXx2-jz_qxUgjArpiGY0qgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/AED3D35E594211EA936FCE43C4F9AE02/54EDB8542E1811EBB4E80B1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.154.17.0-192.154.23.255 192.169.32.0/24 192.169.34.0/24 192.169.37.0-192.169.38.255 192.169.41.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:98:9f:3d:96:d8:0d:2e:65:74:51:c2:40:60:b3:96:3f:72: ed:83:a9:e6:62:06:32:db:a8:0e:12:c4:06:3b:59:77:7e:a2: 4b:0b:55:68:50:fa:0b:46:f2:7b:85:27:25:c2:a9:f1:09:2c: 61:a0:86:ba:e2:05:11:46:c9:c0:db:4a:ac:4e:9e:14:b8:4b: 3c:fc:33:58:4b:0c:ce:f9:e8:a1:b1:c6:16:3a:16:80:04:fe: 7f:55:d0:9e:d5:df:7f:c8:33:35:bd:1f:7d:9e:6b:d5:04:14: 4c:10:2b:dd:63:06:52:3e:a7:a0:25:f1:55:24:ab:c3:54:7b: 0b:f7:05:de:61:12:63:86:05:bd:f1:0c:0a:36:75:56:7d:13: 9d:a2:b8:d0:2b:15:d2:bd:fa:ab:b0:df:55:4f:11:da:ce:94: f4:be:e6:1b:36:e7:2d:66:93:74:93:5c:58:9c:88:92:fd:75: ed:dc:03:c2:bc:51:a7:34:dd:3c:14:e9:e7:64:6e:be:ee:db: 72:62:58:0e:78:1b:cf:46:29:b5:f2:62:f1:c9:16:21:3b:3a: ea:76:69:b0:55:72:03:fa:72:88:88:1c:8a:af:38:6c:16:fa: 40:37:f7:e6:f4:46:09:1c:b0:d1:da:fc:ee:e8:21:6e:23:6d: 0b:08:61:5c -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkwOTUxNjU5N0M3NkZBM0NGRkFCMTUyMDhDMEFFOTg4 NjYzNEFBMDMwHhcNMjQwMzE4MjA0OTAyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4YThiZS02YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtFnfW6qLex9eNIWbCEMreviNunuhAlr9RNzlcnejXkvIdVCvBU1qCCNitpDH 5HJmYGGqQyAeqwHkK+EbogkX7ycuhMz0mnWbm92xKOjHDLaXnzPIVopAWUePt1uB mGHSy7CVuXVXxGXbQl2Dd2iiqjTHt39KW6CDNqnwRmtIPrUMBBdm4lSugAHscbRu wyCLCQNmemfWM44hwvmpr7lOjWD5pFwcRcEa052gKqmMvb90VNaKECmbCE1XApCM l3UtzxeU8Z7xAXsbbyfSBOg1AG2XVnHUCKp7//H3wdrqQs2ysYTDc3rWN/Jlezgm A3vsZpHHBlPahcAq5QI3iOq58wIDAQABo4ICvTCCArkwHQYDVR0OBBYEFAPYS13x WRPED8y1qZ1JCGOtRzsXMB8GA1UdIwQYMBaAFJCVFll8dvo8/6sVIIwK6YhmNKoD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9BRUQzRDM1RTU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rSlVXV1h4Mi1qel9xeFVnakFycGlHWTBx Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tKVVdXWHgyLWp6X3F4VWdqQXJwaUdZMHFnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTIvQUVEM0QzNUU1OTQyMTFFQTkzNkZDRTQzQzRGOUFFMDIvNTRFREI4NTQy RTE4MTFFQkI0RTgwQjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MDQEAgABMC4wDAMEAMCaEQMEA8CaEAMEAMCpIAMEAMCpIjAMAwQAwKklAwQA wKkmAwQAwKkpMA0GCSqGSIb3DQEBCwUAA4IBAQBNmJ89ltgNLmV0UcJAYLOWP3Lt g6nmYgYy26gOEsQGO1l3fqJLC1VoUPoLRvJ7hSclwqnxCSxhoIa64gURRsnA20qs Tp4UuEs8/DNYSwzO+eihscYWOhaABP5/VdCe1d9/yDM1vR99nmvVBBRMECvdYwZS PqegJfFVJKvDVHsL9wXeYRJjhgW98QwKNnVWfROdorjQKxXSvfqrsN9VTxHazpT0 vuYbNuctZpN0k1xYnIiS/XXt3APCvFGnNN08FOnnZG6+7ttyYlgOeBvPRim18mLx yRYhOzrqdmmwVXID+nKIiByKrzhsFvpAN/fm9EYJHLDR2vzu6CFuI20LCGFc -----END CERTIFICATE-----Generated at Mon May 6 22:40:58 2024 by rpki-client on console-ams.rpki-client.org