$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa File: A63A2DFA2F5411EF9A12027FC4F9AE02.roa (raw, json) Hash identifier: 3L8GR/TKBQutwByYr9Yt28Y5Yf6Lgn2PEAhMb4FmV9A= Subject key identifier: E4:D0:51:90:E1:D8:5D:50:67:D0:66:F1:63:98:7B:E2:6A:31:24:C4 Certificate issuer: /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Certificate serial: 03 Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa Signing time: Thu 20 Jun 2024 22:30:09 +0000 ROA not before: Thu 20 Jun 2024 22:30:09 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 152893 IP address blocks: 160.22.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D Validity Not Before: Jun 20 22:30:09 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6674ad70-e1be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:20:ea:db:17:87:b8:23:c7:50:1e:57:fa:fd: 66:02:83:42:60:52:09:e8:47:c2:6e:9a:1a:f2:e9: 8b:ef:82:8e:12:24:8c:5c:fa:37:64:0e:8e:85:52: b6:2f:f1:a7:d0:ee:66:ff:10:75:7d:1d:dc:fb:d1: 67:7a:cd:99:be:3a:cc:84:95:e6:04:ba:5a:64:2f: 48:a1:a1:37:22:43:29:8b:f9:3f:a1:92:57:25:34: 2e:ed:10:7a:8c:88:d0:09:d7:ff:dc:29:11:57:e6: 05:e7:fe:60:0b:eb:34:12:60:bd:3f:f2:f3:4b:36: fb:51:69:2a:93:6d:f5:6c:ed:f5:b8:3e:f3:b7:09: 03:f1:d4:0b:70:b6:38:1b:09:5e:95:32:b4:77:82: de:5d:2e:8a:96:51:10:56:c7:98:5b:6a:3a:dd:12: 0a:e1:db:cc:e9:31:ff:89:35:eb:d5:74:56:98:d3: a6:44:aa:0e:2b:44:da:d8:ae:1a:a4:4a:5e:4d:cf: 79:a0:b2:30:e8:2b:1c:8c:d4:a0:23:c4:37:3e:bb: a6:93:a6:27:3b:39:1a:2d:6e:88:a0:bf:e4:fd:81: 78:ff:59:aa:97:22:84:76:bf:4f:6c:a4:df:b5:97: a7:36:b2:04:dc:78:87:eb:c8:73:c4:5f:5d:f3:1e: 01:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D0:51:90:E1:D8:5D:50:67:D0:66:F1:63:98:7B:E2:6A:31:24:C4 X509v3 Authority Key Identifier: keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.42.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:fe:07:b7:7a:6d:4f:40:43:92:58:bb:a9:85:69:5c:cd:7c: 65:78:f8:9d:16:eb:79:94:34:d6:d5:b7:99:42:3b:e7:36:22: 10:89:48:ee:39:da:ad:e0:6a:dd:24:c5:5a:8a:a6:bc:73:22: 7b:bc:cd:64:db:d0:b1:61:0c:ec:01:0d:5a:69:fe:9e:ed:d5: 6a:7b:57:c3:78:dc:09:18:b1:6d:22:ab:28:c2:ca:79:1d:72: b5:de:2d:2e:51:05:c7:c7:7c:b0:db:2b:3f:d9:96:0f:c7:eb: a9:4d:b5:59:59:4e:01:15:25:15:9e:c7:b9:14:01:56:7e:c6: 2f:32:a3:10:20:19:dd:37:77:84:e6:65:0d:cb:02:15:80:7d: 6b:b3:55:94:c5:79:0d:21:24:2e:00:1d:e0:dc:19:37:de:9a: fd:e7:04:88:11:93:e8:a6:79:60:e7:3f:31:d9:c6:8b:f3:3f: d9:f2:8f:04:db:e3:20:bb:c7:37:e5:83:72:1f:52:9f:ea:07: 6c:50:10:f3:7d:3d:18:ae:ec:2d:fe:58:eb:b1:cc:10:df:e8: 48:33:fb:77:f6:26:33:a7:8f:6f:58:46:31:b9:ee:f8:97:5e: a0:98:c9:95:64:c5:82:65:92:a4:b9:44:19:f4:88:cd:00:2b: ab:2b:d0:ac -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NkQ5RjExMC8GA1UEBRMoNDNGNzQyM0Y5M0Q2QkEwOTY5NDA1OUZCMjNERUY4NTI4 RDI2NDk5RDAeFw0yNDA2MjAyMjMwMDlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NzRhZDcwLWUxYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7IOrbF4e4I8dQHlf6/WYCg0JgUgnoR8Jumhry6Yvvgo4SJIxc+jdkDo6FUrYv 8afQ7mb/EHV9Hdz70Wd6zZm+OsyEleYEulpkL0ihoTciQymL+T+hklclNC7tEHqM iNAJ1//cKRFX5gXn/mAL6zQSYL0/8vNLNvtRaSqTbfVs7fW4PvO3CQPx1Atwtjgb CV6VMrR3gt5dLoqWURBWx5hbajrdEgrh28zpMf+JNevVdFaY06ZEqg4rRNrYrhqk Sl5Nz3mgsjDoKxyM1KAjxDc+u6aTpic7ORotboigv+T9gXj/WaqXIoR2v09spN+1 l6c2sgTceIfryHPEX13zHgFDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5NBRkOHY XVBn0GbxY5h74moxJMQwHwYDVR0jBBgwFoAUQ/dCP5PWuglpQFn7I974Uo0mSZ0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg2RDlGL0E5MzZFNDQwMkUw NDExRUY4NkYyOUQ3OUM0RjlBRTAyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNa MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUV9kQ1A1UFd1Z2xwUUZuN0k5NzRVbzBtU1owLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9BOTM2RTQ0MDJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi9BNjNBMkRGQTJG NTQxMUVGOUExMjAyN0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAWKjANBgkqhkiG9w0BAQsFAAOCAQEAO/4Ht3ptT0BDkli7 qYVpXM18ZXj4nRbreZQ01tW3mUI75zYiEIlI7jnareBq3STFWoqmvHMie7zNZNvQ sWEM7AENWmn+nu3VantXw3jcCRixbSKrKMLKeR1ytd4tLlEFx8d8sNsrP9mWD8fr qU21WVlOARUlFZ7HuRQBVn7GLzKjECAZ3Td3hOZlDcsCFYB9a7NVlMV5DSEkLgAd 4NwZN96a/ecEiBGT6KZ5YOc/MdnGi/M/2fKPBNvjILvHN+WDch9Sn+oHbFAQ8309 GK7sLf5Y67HMEN/oSDP7d/YmM6ePb1hGMbnu+JdeoJjJlWTFgmWSpLlEGfSIzQAr qyvQrA== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:14 2024 by rpki-client on console-ams.rpki-client.org