$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2FF90B2A9B4711EFB5F9045DC4F9AE02.roa File: 2FF90B2A9B4711EFB5F9045DC4F9AE02.roa (raw, json) Hash identifier: NOeffiDgtnQ8+UvaWHYw+KR2cYyCOpzpo2xQWNxzq+Q= Subject key identifier: 1C:4F:80:A9:61:41:46:88:70:5C:E0:D4:CA:56:43:60:C4:54:9A:DC Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1BD3 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2FF90B2A9B4711EFB5F9045DC4F9AE02.roa Signing time: Tue 05 Nov 2024 07:25:52 +0000 ROA not before: Tue 05 Nov 2024 07:25:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133647 IP address blocks: 160.191.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 05:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7123 (0x1bd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Nov 5 07:25:52 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6729c880-2797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:49:af:88:5b:79:12:e4:bc:42:2b:cd:50: fd:18:0c:d3:51:c5:d4:a5:13:b2:41:92:c4:71:26: e9:1b:d1:15:6b:62:a8:6e:bf:c1:ad:18:76:4f:1f: 6d:0c:a7:0c:cc:35:41:25:09:8e:06:e0:dd:69:86: 69:42:10:c9:cb:1d:4d:c3:ea:c2:a4:d2:74:e9:b1: 64:51:87:cd:ad:34:cb:93:8f:58:27:15:22:e3:7c: 08:0a:44:9d:13:90:af:33:ad:ce:2c:09:a6:72:9f: 91:85:3a:f8:40:df:3f:aa:99:e0:b8:74:e1:30:87: 65:c8:b0:2a:5f:e0:cb:f7:50:7f:98:0f:e6:39:5f: 87:03:72:ff:b2:9c:d4:95:27:d2:4e:29:68:57:75: 4b:ae:65:8b:23:ad:e0:9a:c4:b4:9e:c8:54:9c:07: e3:70:89:61:eb:ef:0e:22:9f:d8:2d:f9:0d:ac:12: 23:00:62:e6:7c:96:3a:6d:e4:6a:3a:2a:a2:cd:e3: df:5a:2b:78:70:f2:ba:38:ce:01:21:9d:eb:6e:cc: e1:82:76:07:25:03:8b:47:74:55:84:2a:b0:f5:4b: fd:72:4e:11:a7:a5:2a:9d:e3:17:8e:8c:ab:40:b2: b5:4f:65:11:1b:68:d0:32:85:3e:65:68:dd:1f:1e: b4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4F:80:A9:61:41:46:88:70:5C:E0:D4:CA:56:43:60:C4:54:9A:DC X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2FF90B2A9B4711EFB5F9045DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.108.0/23 Signature Algorithm: sha256WithRSAEncryption a1:69:e9:43:dd:83:00:54:ef:3c:8c:6c:b2:6b:44:46:d1:9a: bc:ee:a1:d1:30:fd:8d:5d:d1:2a:7e:71:dc:1f:1b:71:f7:20: 98:c0:86:f6:a2:7c:0a:17:47:1c:d5:fb:72:b4:54:f3:64:30: ad:5a:4c:ed:28:62:dd:c8:55:02:b8:83:a2:13:09:36:8f:58: 9d:8a:f3:86:a7:e1:7f:a2:fe:51:23:7a:c0:45:c2:15:aa:e6: bb:76:2b:c4:48:5e:bf:81:1e:d4:6e:9b:75:bc:c3:eb:e2:1e: 74:65:31:ae:aa:cb:f6:53:c7:45:2e:77:22:54:f9:06:d9:74: 6c:e5:b6:44:4a:03:83:20:7b:8a:c2:b8:92:45:19:66:1f:0b: 87:58:44:9d:7b:13:a6:81:5f:8a:1a:f3:a1:3f:bd:7a:fa:96: 28:64:f9:99:7d:fe:2c:f5:13:e4:d1:d1:10:15:11:42:02:17: c4:83:fe:c1:93:fe:90:d0:c4:a5:cd:bc:db:6f:59:a6:1f:29: 71:e8:f0:81:17:5f:18:88:45:69:2a:50:47:f0:b8:7b:46:21: f7:6b:c9:80:b7:68:90:55:3d:c8:31:1c:8a:24:dd:1c:05:bf: d5:bd:d4:d4:f8:99:bb:e2:04:21:51:fa:c5:dc:0c:ef:f9:b5: a8:f3:e4:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjQxMTA1MDcyNTUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzI5Yzg4MC0yNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtq9Jr4hbeRLkvEIrzVD9GAzTUcXUpROyQZLEcSbpG9EVa2Kobr/BrRh2Tx9t DKcMzDVBJQmOBuDdaYZpQhDJyx1Nw+rCpNJ06bFkUYfNrTTLk49YJxUi43wICkSd E5CvM63OLAmmcp+RhTr4QN8/qpnguHThMIdlyLAqX+DL91B/mA/mOV+HA3L/spzU lSfSTiloV3VLrmWLI63gmsS0nshUnAfjcIlh6+8OIp/YLfkNrBIjAGLmfJY6beRq OiqizePfWit4cPK6OM4BIZ3rbszhgnYHJQOLR3RVhCqw9Uv9ck4Rp6UqneMXjoyr QLK1T2URG2jQMoU+ZWjdHx608QIDAQABo4IClTCCApEwHQYDVR0OBBYEFBxPgKlh QUaIcFzg1MpWQ2DEVJrcMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkZGOTBCMkE5 QjQ3MTFFRkI1RjkwNDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv2wwDQYJKoZIhvcNAQELBQADggEBAKFp6UPdgwBU7zyM bLJrREbRmrzuodEw/Y1d0Sp+cdwfG3H3IJjAhvaifAoXRxzV+3K0VPNkMK1aTO0o Yt3IVQK4g6ITCTaPWJ2K84an4X+i/lEjesBFwhWq5rt2K8RIXr+BHtRum3W8w+vi HnRlMa6qy/ZTx0UudyJU+QbZdGzltkRKA4Mge4rCuJJFGWYfC4dYRJ17E6aBX4oa 86E/vXr6lihk+Zl9/iz1E+TR0RAVEUICF8SD/sGT/pDQxKXNvNtvWaYfKXHo8IEX XxiIRWkqUEfwuHtGIfdryYC3aJBVPcgxHIok3RwFv9W91NT4mbviBCFR+sXcDO/5 tajz5Fk= -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:54 2024 by rpki-client on console-ams.rpki-client.org