$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa File: 4426B244F6A011EC8E197883C4F9AE02.roa (raw, json) Hash identifier: bBZfLoHpOK0OlB0OzQEVHa924CCG++Yge8OBC7CQuI4= Subject key identifier: E0:12:10:33:AD:2A:59:72:BE:D6:A8:A2:59:83:64:2F:48:53:F2:B5 Certificate issuer: /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367 Certificate serial: 11E3 Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa Signing time: Tue 02 Apr 2024 17:55:53 +0000 ROA not before: Tue 02 Apr 2024 17:55:53 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 55002 IP address blocks: 167.179.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4579 (0x11e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191436 Validity Not Before: Apr 2 17:55:53 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660c46a8-46d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:82:1f:42:b0:0c:6b:c8:34:f0:54:c2:06:1d: ad:2c:08:89:89:fa:74:ba:8c:8a:8f:ca:a0:3d:3a: 1e:b2:6e:12:b7:80:e7:e1:f6:ef:03:e0:29:c1:24: 3b:e2:c1:41:24:86:c5:9c:79:e6:b7:5e:b1:9b:59: 8c:c3:e2:25:96:5c:ac:01:26:16:d2:01:26:d1:fc: a9:0a:f3:44:53:1b:f3:48:76:17:91:40:43:7f:38: 48:bd:20:e2:3b:60:9b:fe:9d:8e:ad:df:32:56:f4: fc:2e:43:2c:5e:f5:49:5f:86:3b:60:70:1e:8f:9d: bc:6b:47:8b:18:a1:82:4c:1c:cd:32:53:54:3a:fa: 7a:55:00:08:16:6e:0a:b9:fd:23:6b:a4:d0:8a:c1: 5d:76:74:ef:0a:66:c2:5b:5d:e3:2c:d6:5c:04:34: e7:25:68:41:02:2a:33:ff:9d:81:f6:c6:e7:04:48: a3:40:cc:aa:f7:c8:33:6d:96:7a:f8:10:de:c7:a9: ef:dc:f3:c6:eb:15:a5:8b:8e:76:20:0b:dc:54:d0: 9b:e9:27:dd:38:aa:9a:11:74:ce:e3:9a:62:65:f5: 43:56:b3:ac:60:aa:d4:bb:9e:98:1f:cb:78:c5:28: aa:64:66:64:95:c9:70:5e:5b:21:6c:09:7c:bf:ff: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:12:10:33:AD:2A:59:72:BE:D6:A8:A2:59:83:64:2F:48:53:F2:B5 X509v3 Authority Key Identifier: keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/4426B244F6A011EC8E197883C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.179.8.0/21 Signature Algorithm: sha256WithRSAEncryption 7b:00:9f:13:9d:4e:04:f6:68:c1:b1:a1:67:5c:2c:ea:ca:ba: 75:8d:e9:d2:96:51:5e:14:01:27:ee:e0:a7:51:1e:70:e2:c3: 4d:db:e9:e5:83:95:c6:53:4b:a9:da:29:5d:9d:01:d6:63:0b: 3c:24:d4:84:44:3d:fe:26:ad:a1:4e:7b:ba:2b:79:af:c2:5d: fa:25:52:14:fd:9f:22:f2:bf:61:88:05:3c:ea:ab:44:37:cd: 4f:f7:c8:a8:5d:8b:75:78:0c:1d:c1:15:ce:ca:60:84:b3:56: f5:2f:2e:da:eb:d5:0d:53:74:4f:12:c4:6f:b7:a1:22:81:c6: c1:df:69:35:a0:da:1a:e6:ff:15:31:ee:13:81:74:38:7d:28: a8:9e:15:ec:6f:1f:6a:08:eb:ce:b8:b5:07:16:08:29:3a:fe: e2:52:43:76:c0:80:fe:0e:0b:91:20:72:15:dc:90:9b:b8:73: 47:f7:3d:cb:62:35:2d:fc:ad:69:3a:68:f8:f5:3e:ab:da:aa: b4:9f:f9:76:9c:d9:d4:81:61:b6:ba:a5:b2:a5:9e:23:e9:ce: ca:81:45:4a:bc:5c:28:cd:ca:f9:38:28:5a:0c:7a:4c:07:96: 02:66:5a:73:80:54:5f:83:da:5f:0f:7e:ab:8d:8e:d6:d3:c3: 05:9b:14:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE0MzYxMTAvBgNVBAUTKEFEM0JCNjAzQjE0RUZCMjZENzE1NjgyRkIwNDEzNTFF QzhGOUQzNjcwHhcNMjQwNDAyMTc1NTUzWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBjNDZhOC00NmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroIfQrAMa8g08FTCBh2tLAiJifp0uoyKj8qgPToesm4St4Dn4fbvA+ApwSQ7 4sFBJIbFnHnmt16xm1mMw+IlllysASYW0gEm0fypCvNEUxvzSHYXkUBDfzhIvSDi O2Cb/p2Ord8yVvT8LkMsXvVJX4Y7YHAej528a0eLGKGCTBzNMlNUOvp6VQAIFm4K uf0ja6TQisFddnTvCmbCW13jLNZcBDTnJWhBAioz/52B9sbnBEijQMyq98gzbZZ6 +BDex6nv3PPG6xWli452IAvcVNCb6SfdOKqaEXTO45piZfVDVrOsYKrUu56YH8t4 xSiqZGZklclwXlshbAl8v//IQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOASEDOt KllyvtaoolmDZC9IU/K1MB8GA1UdIwQYMBaAFK07tgOxTvsm1xVoL7BBNR7I+dNn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTQzNi9BMzBCNUE0QUM3 OEMxMUU4QTc2Q0Q5MTRDNEY5QUUwMi9yVHUyQTdGTy15YlhGV2d2c0VFMUhzajUw MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JUdTJBN0ZPLXliWEZXZ3ZzRUUxSHNqNTAyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE0MzYvQTMwQjVBNEFDNzhDMTFFOEE3NkNEOTE0QzRGOUFFMDIvNDQyNkIyNDRG NkEwMTFFQzhFMTk3ODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAOnswgwDQYJKoZIhvcNAQELBQADggEBAHsAnxOdTgT2aMGx oWdcLOrKunWN6dKWUV4UASfu4KdRHnDiw03b6eWDlcZTS6naKV2dAdZjCzwk1IRE Pf4mraFOe7orea/CXfolUhT9nyLyv2GIBTzqq0Q3zU/3yKhdi3V4DB3BFc7KYISz VvUvLtrr1Q1TdE8SxG+3oSKBxsHfaTWg2hrm/xUx7hOBdDh9KKieFexvH2oI6864 tQcWCCk6/uJSQ3bAgP4OC5EgchXckJu4c0f3PctiNS38rWk6aPj1PqvaqrSf+Xac 2dSBYba6pbKlniPpzsqBRUq8XCjNyvk4KFoMekwHlgJmWnOAVF+D2l8PfquNjtbT wwWbFK4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:04 2025 by rpki-client