$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DFB95F6A909D11EF966B0652C4F9AE02.roa File: DFB95F6A909D11EF966B0652C4F9AE02.roa (raw, json) Hash identifier: /jzzkLHjW+rMVrixGa4McwUd8tSUaYbxqWIpC89BWPs= Subject key identifier: AB:D4:5C:D0:5E:AA:41:89:8B:7A:E8:98:24:B9:69:EB:69:85:24:03 Certificate issuer: /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Certificate serial: 02 Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DFB95F6A909D11EF966B0652C4F9AE02.roa Signing time: Tue 22 Oct 2024 17:48:41 +0000 ROA not before: Tue 22 Oct 2024 17:48:41 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153371 IP address blocks: 160.191.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 17:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C Validity Not Before: Oct 22 17:48:41 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6717e579-c0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:87:0b:0d:e2:a5:38:42:c8:77:d2:46:59: 14:89:db:b2:d2:94:05:79:4b:21:92:96:c5:d3:65: f0:b6:ea:b7:45:ca:0b:06:26:d0:a6:c2:f5:ec:52: 51:34:31:1d:91:f1:36:d1:da:9e:30:97:f2:21:e2: cb:e5:4d:46:f5:f0:a6:e0:fc:7c:83:46:5d:3d:c5: 89:30:56:82:5e:78:bf:af:30:5d:8f:54:54:ea:d9: c9:30:8a:71:50:4c:10:e3:08:4b:f8:93:41:d7:af: 20:bd:1c:82:8f:6c:19:70:90:af:99:ef:02:f5:ed: 67:65:ac:76:fe:68:a2:56:47:38:69:90:6e:fd:7d: 6c:0f:1d:39:0a:e8:22:a5:61:dd:8f:72:ea:6c:08: 9c:05:77:78:93:f5:1d:4c:b4:15:ce:61:72:2c:fc: db:2b:57:79:ea:68:36:02:64:44:d9:17:14:b4:09: f0:17:30:10:e8:27:ec:e1:8f:36:5f:7d:59:71:af: 58:b6:97:54:8c:d5:7f:e7:03:5a:3d:88:00:e5:b3: 19:59:e3:3e:f1:38:72:d6:57:d8:c1:22:4f:ce:7d: 38:58:0c:d1:06:ea:59:37:97:37:33:3e:92:24:ab: a9:d4:0a:d1:bd:c2:f4:1f:2a:c6:d8:75:b7:59:38: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D4:5C:D0:5E:AA:41:89:8B:7A:E8:98:24:B9:69:EB:69:85:24:03 X509v3 Authority Key Identifier: keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DFB95F6A909D11EF966B0652C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.40.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:31:ea:83:94:96:14:0a:31:6f:30:c4:15:41:36:50:88:86: 80:eb:bb:84:b6:1f:ae:86:1a:a4:62:35:61:ca:95:8b:d8:b0: c6:e5:c6:9b:47:ef:d6:bc:e8:6a:1d:7b:18:42:26:2c:35:db: 7a:2d:7f:91:99:d1:d8:f0:91:de:ce:1c:de:e9:a1:41:8d:e4: f3:23:ae:e8:31:cd:b8:9d:a6:9d:cb:64:c9:0c:24:51:63:c7: 0e:f2:14:9d:17:4f:a3:8f:17:69:d2:7b:13:c1:83:80:a9:7b: f4:59:f6:7c:05:02:d6:7e:d0:42:bf:a8:52:5c:8d:e0:55:76: 7b:f4:68:7d:7d:79:18:d6:80:9b:1d:ec:59:22:4c:1e:3b:89: 83:b9:43:f8:68:72:8b:6f:c3:61:21:2c:0a:37:3c:d6:c0:fd: 1a:c4:0e:e9:cf:ba:06:25:2b:0c:dd:e7:ee:95:0e:c2:b3:07: aa:ef:c5:a1:a5:4f:57:1f:c6:7f:10:29:43:0a:ef:fb:26:da: b7:3b:dc:5b:6e:15:6e:97:2d:b6:f3:f6:4f:07:34:7a:a3:f2: b5:83:54:fa:73:4d:c8:1f:96:5b:22:0d:d7:25:2d:f6:96:ab: 67:b6:c7:53:00:d1:ee:a3:a1:e5:6a:83:52:5e:6c:2c:55:e9: ee:7b:c9:b0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDgxODExMC8GA1UEBRMoNEY0NUZBNjlEOUU1RjU1MDg0RERDOTIyODk1Mjc2QTY0 MDIzOUMxQzAeFw0yNDEwMjIxNzQ4NDFaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MTdlNTc5LWMwZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPIYcLDeKlOELId9JGWRSJ27LSlAV5SyGSlsXTZfC26rdFygsGJtCmwvXsUlE0 MR2R8TbR2p4wl/Ih4svlTUb18Kbg/HyDRl09xYkwVoJeeL+vMF2PVFTq2ckwinFQ TBDjCEv4k0HXryC9HIKPbBlwkK+Z7wL17WdlrHb+aKJWRzhpkG79fWwPHTkK6CKl Yd2PcupsCJwFd3iT9R1MtBXOYXIs/NsrV3nqaDYCZETZFxS0CfAXMBDoJ+zhjzZf fVlxr1i2l1SM1X/nA1o9iADlsxlZ4z7xOHLWV9jBIk/OfThYDNEG6lk3lzczPpIk q6nUCtG9wvQfKsbYdbdZOOejAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUq9Rc0F6q QYmLeuiYJLlp62mFJAMwHwYDVR0jBBgwFoAUT0X6adnl9VCE3ckiiVJ2pkAjnBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4Lzc1M0MzMDE4OTA5 RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZDRTNja2lpVkoycGtBam5C dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVDBYNmFkbmw5VkNFM2NraWlWSjJwa0FqbkJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDgxOC83NTNDMzAxODkwOUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9ERkI5NUY2QTkw OUQxMUVGOTY2QjA2NTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/KDANBgkqhkiG9w0BAQsFAAOCAQEAWjHqg5SWFAoxbzDE FUE2UIiGgOu7hLYfroYapGI1YcqVi9iwxuXGm0fv1rzoah17GEImLDXbei1/kZnR 2PCR3s4c3umhQY3k8yOu6DHNuJ2mnctkyQwkUWPHDvIUnRdPo48XadJ7E8GDgKl7 9Fn2fAUC1n7QQr+oUlyN4FV2e/RofX15GNaAmx3sWSJMHjuJg7lD+Ghyi2/DYSEs Cjc81sD9GsQO6c+6BiUrDN3n7pUOwrMHqu/FoaVPVx/GfxApQwrv+ybatzvcW24V bpcttvP2Twc0eqPytYNU+nNNyB+WWyIN1yUt9parZ7bHUwDR7qOh5WqDUl5sLFXp 7nvJsA== -----END CERTIFICATE-----Generated at Tue Oct 22 18:33:18 2024 by rpki-client on console-fra.rpki-client.org