$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/8D57E1664D0911EEA9837D4AC4F9AE02.roa File: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (raw, json) Hash identifier: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U= Subject key identifier: 41:F3:D8:F4:35:E4:CF:2D:89:D1:6B:AD:E7:41:9C:56:3C:BE:D5:29 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 341A Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/8D57E1664D0911EEA9837D4AC4F9AE02.roa Signing time: Wed 16 Oct 2024 15:01:02 +0000 ROA not before: Wed 16 Oct 2024 15:01:02 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 4768 IP address blocks: 192.173.16.0/21 maxlen: 21 192.173.16.0/24 maxlen: 24 192.173.17.0/24 maxlen: 24 192.173.18.0/24 maxlen: 24 192.173.19.0/24 maxlen: 24 192.173.20.0/24 maxlen: 24 192.173.23.0/24 maxlen: 24 192.173.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 14:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13338 (0x341a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Oct 16 15:01:02 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670fd52e-068b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:9c:ea:b5:09:84:65:86:c1:d7:b2:44:e7: a3:d4:71:67:49:28:4c:a0:be:ec:cb:f8:f2:d1:19: f5:ea:05:89:9f:a7:65:f9:4f:76:83:79:bd:1e:43: b6:d7:5f:c6:9d:01:31:70:b8:0a:98:2f:c4:98:c0: 7d:e9:95:29:33:e7:12:c0:9f:29:9f:a7:83:7b:cf: 4d:29:d1:f4:ba:b6:b2:5b:c2:c0:b1:0b:d3:d7:5f: 88:11:da:67:10:87:bc:fa:99:fd:0e:df:62:27:6a: 02:92:eb:3a:99:98:df:33:fe:e6:5e:58:32:2c:f1: 84:cb:86:17:01:11:b8:51:51:7f:0f:f7:c7:29:ae: cd:b4:9c:3f:9a:35:b5:21:b3:ab:fa:1e:b0:9f:76: 76:74:45:85:88:94:c9:4a:77:98:54:0d:f4:36:1a: 35:36:c9:2a:85:c1:57:ae:49:9d:ef:e6:08:e9:3b: 07:90:45:fa:bd:08:9b:7a:4f:17:16:82:30:ed:5a: a7:8e:28:8c:49:5f:21:d0:41:9c:30:35:9f:e0:9b: 7b:1e:f2:a8:90:72:0a:ac:2b:c6:47:fb:49:39:7e: 5d:9f:c3:f7:ce:d1:07:44:d3:65:38:7d:ef:2d:55: 2b:5b:cb:41:e7:f4:a4:b2:c8:a0:f5:39:9e:2b:ba: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F3:D8:F4:35:E4:CF:2D:89:D1:6B:AD:E7:41:9C:56:3C:BE:D5:29 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/8D57E1664D0911EEA9837D4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.173.16.0-192.173.24.255 Signature Algorithm: sha256WithRSAEncryption 49:47:05:ad:ed:ab:f5:7a:2b:9b:6b:78:75:b9:5a:7b:bd:98: c1:c4:b5:c5:28:72:b7:6f:89:9d:26:4d:fc:c4:14:00:ff:d8: 0c:9b:21:c7:14:35:c4:55:24:45:49:ae:be:cb:a1:1f:6f:98: 4a:96:38:8a:88:2c:b5:87:59:ac:6a:c5:23:b9:0f:dc:c5:14: 9e:87:49:fe:85:72:87:0b:59:19:0c:fe:29:d5:a7:59:f1:65: 46:cf:35:2d:5a:fd:ed:09:2e:71:fa:e2:71:40:05:29:f3:47: 9a:09:c9:8a:7d:7e:d8:7a:77:e4:0a:66:25:39:65:18:fa:eb: cd:fc:db:a0:f9:65:74:4b:92:ec:f7:5c:7c:37:35:12:10:16: c6:8d:78:a8:e5:de:23:62:23:d7:bc:08:01:ae:65:f2:52:f9: 5c:7f:a4:1f:59:f8:6f:99:52:f2:dd:28:fe:42:f5:37:fc:15: fd:7d:63:0a:80:23:8c:e1:16:35:50:b9:3d:0d:d8:31:c5:cc: b0:04:a9:24:31:a2:ee:e5:44:af:6e:90:01:38:21:b9:61:a0: a4:7d:20:91:9c:90:64:4f:8b:eb:a8:3e:1a:f7:ef:36:fd:1d: dd:37:ac:d6:a7:99:a3:f5:03:ab:3a:85:bc:02:22:30:a2:c4: e9:e9:f0:76 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICNBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjQxMDE2MTUwMTAyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBmZDUyZS0wNjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0uc6rUJhGWGwdeyROej1HFnSShMoL7sy/jy0Rn16gWJn6dl+U92g3m9HkO2 11/GnQExcLgKmC/EmMB96ZUpM+cSwJ8pn6eDe89NKdH0urayW8LAsQvT11+IEdpn EIe8+pn9Dt9iJ2oCkus6mZjfM/7mXlgyLPGEy4YXARG4UVF/D/fHKa7NtJw/mjW1 IbOr+h6wn3Z2dEWFiJTJSneYVA30Nho1NskqhcFXrkmd7+YI6TsHkEX6vQibek8X FoIw7VqnjiiMSV8h0EGcMDWf4Jt7HvKokHIKrCvGR/tJOX5dn8P3ztEHRNNlOH3v LVUrW8tB5/Skssig9TmeK7rAKQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFEHz2PQ1 5M8tidFrredBnFY8vtUpMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODg5QjYvMkM0RUY5NzYxRDk2MTFFMkE2NTQ4RTdFMDhCMDJDRDIvOEQ1N0UxNjY0 RDA5MTFFRUE5ODM3RDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBMCtEAMEAMCtGDANBgkqhkiG9w0BAQsFAAOCAQEASUcF re2r9Xorm2t4dblae72YwcS1xShyt2+JnSZN/MQUAP/YDJshxxQ1xFUkRUmuvsuh H2+YSpY4iogstYdZrGrFI7kP3MUUnodJ/oVyhwtZGQz+KdWnWfFlRs81LVr97Qku cfricUAFKfNHmgnJin1+2Hp35ApmJTllGPrrzfzboPlldEuS7PdcfDc1EhAWxo14 qOXeI2Ij17wIAa5l8lL5XH+kH1n4b5lS8t0o/kL1N/wV/X1jCoAjjOEWNVC5PQ3Y McXMsASpJDGi7uVEr26QATghuWGgpH0gkZyQZE+L66g+GvfvNv0d3Tes1qeZo/UD qzqFvAIiMKLE6enwdg== -----END CERTIFICATE-----Generated at Wed Nov 20 16:00:11 2024 by rpki-client on console-ams.rpki-client.org