$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa File: 403398AA233111EEAF768F66C4F9AE02.roa (raw, json) Hash identifier: FLNHQ37nVN7jzWdzIG3Z7vJwyk/LRxgATl+aq5j57sQ= Subject key identifier: AA:77:AB:CE:06:A3:17:4E:1C:BE:58:39:39:61:72:DF:CD:13:9A:C0 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 11E2 Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa Signing time: Tue 02 Apr 2024 17:55:52 +0000 ROA not before: Tue 02 Apr 2024 17:55:52 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 133200 IP address blocks: 167.179.4.0/24 maxlen: 24 167.179.6.0/24 maxlen: 24 167.179.12.0/24 maxlen: 24 167.179.13.0/24 maxlen: 24 167.179.14.0/24 maxlen: 24 167.179.18.0/24 maxlen: 24 167.179.19.0/24 maxlen: 24 167.179.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4578 (0x11e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Validity Not Before: Apr 2 17:55:52 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660c46a7-8256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c2:e8:73:58:9d:66:03:97:36:d0:eb:05:ed: 85:ff:85:d2:87:2a:e5:a4:ef:5a:2e:ba:21:8e:5b: fa:da:53:40:c0:57:35:c6:c0:5c:fc:d8:10:39:59: dc:3d:c3:3e:6d:f8:c5:d4:e3:ce:38:8e:72:6a:f1: 1a:bc:87:6b:29:a9:cd:8e:27:07:c7:1b:ff:f3:93: b5:c1:81:bc:8f:ed:f9:57:5f:ca:7f:b0:0f:f6:70: 09:0f:83:f3:5b:bf:be:90:35:dc:4b:ef:d6:cc:73: 3f:11:f3:6f:be:f2:ef:c2:ac:a8:f5:04:c0:fd:66: 92:d2:15:9a:7e:aa:cc:13:0e:49:10:a9:65:d2:e0: 9f:4c:0d:46:77:3f:54:e5:fe:eb:a4:26:ec:76:7e: 7f:62:28:f0:0d:31:47:a0:af:53:10:0c:58:c8:af: 51:5b:e2:26:3f:42:14:6f:eb:91:dd:40:84:7b:4d: df:14:2b:13:9c:9f:b6:99:5d:96:19:3c:fe:ad:84: b0:a6:0f:4b:c7:5a:02:93:a8:bd:dd:41:cc:56:bf: 64:32:6f:6a:5e:9a:83:39:bf:17:1f:6c:e8:51:cd: 21:5b:a4:b0:9b:3c:4c:f2:f6:0d:da:01:57:83:48: cb:dc:79:c4:98:bd:14:42:2c:e3:3e:31:cd:cd:2b: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:77:AB:CE:06:A3:17:4E:1C:BE:58:39:39:61:72:DF:CD:13:9A:C0 X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/403398AA233111EEAF768F66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.4.0/24 167.179.6.0/24 167.179.12.0-167.179.14.255 167.179.18.0/23 167.179.38.0/24 Signature Algorithm: sha256WithRSAEncryption 58:f2:1a:16:8f:86:fe:e8:d3:6e:7f:44:40:c5:4c:0e:d2:b6: 10:bb:bf:80:97:67:51:dd:89:d7:aa:25:f8:54:13:7a:eb:36: e2:86:9a:7e:0a:1f:1f:8c:d0:96:a6:19:29:88:75:23:29:6f: 2e:05:9e:50:32:f5:d7:45:77:d2:5a:44:ae:b8:fe:05:60:a8: ae:c9:ef:23:ce:58:97:7c:99:c8:50:81:a7:ee:34:59:0f:54: 3c:4e:32:cc:a1:05:d5:10:ec:b2:78:70:7a:35:16:9f:69:e9: 21:99:63:b6:1a:10:71:6f:11:d7:e8:39:73:f1:e3:7f:76:29: eb:91:57:e5:31:7d:da:70:e1:1b:2c:e1:6b:ec:67:45:b7:94: 01:1f:a9:5f:1c:1a:3f:21:d4:26:81:28:77:e0:77:23:e9:64: f2:15:ff:44:36:69:38:e1:10:05:17:01:d4:05:49:71:0f:4b: 33:a3:95:e0:22:9b:bf:72:52:e2:71:6d:6c:47:a8:f6:2c:e8: 04:e1:05:55:b4:7f:29:d6:eb:6c:3b:ab:a5:87:43:37:0c:55: f3:19:06:3f:68:ea:93:7f:3c:65:77:9c:87:be:8b:fc:4a:2b: 9d:44:96:56:43:51:c2:9b:74:42:25:f9:5d:44:5e:a3:f8:60: 6f:7b:c0:f6 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICEeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjQwNDAyMTc1NTUyWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjNDZhNy04MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8Loc1idZgOXNtDrBe2F/4XShyrlpO9aLrohjlv62lNAwFc1xsBc/NgQOVnc PcM+bfjF1OPOOI5yavEavIdrKanNjicHxxv/85O1wYG8j+35V1/Kf7AP9nAJD4Pz W7++kDXcS+/WzHM/EfNvvvLvwqyo9QTA/WaS0hWafqrMEw5JEKll0uCfTA1Gdz9U 5f7rpCbsdn5/YijwDTFHoK9TEAxYyK9RW+ImP0IUb+uR3UCEe03fFCsTnJ+2mV2W GTz+rYSwpg9Lx1oCk6i93UHMVr9kMm9qXpqDOb8XH2zoUc0hW6SwmzxM8vYN2gFX g0jL3HnEmL0UQizjPjHNzSsUSQIDAQABo4ICtTCCArEwHQYDVR0OBBYEFKp3q84G oxdOHL5YOTlhct/NE5rAMB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvNDAzMzk4QUEy MzMxMTFFRUFGNzY4RjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYDBACnswQDBACnswYwDAMEAqezDAMEAKezDgMEAaezEgMEAKez JjANBgkqhkiG9w0BAQsFAAOCAQEAWPIaFo+G/ujTbn9EQMVMDtK2ELu/gJdnUd2J 16ol+FQTeus24oaafgofH4zQlqYZKYh1IylvLgWeUDL110V30lpErrj+BWCorsnv I85Yl3yZyFCBp+40WQ9UPE4yzKEF1RDssnhwejUWn2npIZljthoQcW8R1+g5c/Hj f3Yp65FX5TF92nDhGyzha+xnRbeUAR+pXxwaPyHUJoEod+B3I+lk8hX/RDZpOOEQ BRcB1AVJcQ9LM6OV4CKbv3JS4nFtbEeo9izoBOEFVbR/KdbrbDurpYdDNwxV8xkG P2jqk388ZXech76L/EornUSWVkNRwpt0QiX5XUReo/hgb3vA9g== -----END CERTIFICATE-----Generated at Sat May 18 18:21:38 2024 by rpki-client on console-ams.rpki-client.org