$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/A061E19A482511EFAE9AB069C4F9AE02.roa File: A061E19A482511EFAE9AB069C4F9AE02.roa (raw, json) Hash identifier: JMYd6U9nh2pgtA11Q3UJtsWRslMYYwMX9vg7LqHuPBE= Subject key identifier: EA:FB:F6:24:56:AB:47:14:AA:B3:B8:52:8E:1D:A9:AF:B2:B5:F2:B7 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 0F68 Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/A061E19A482511EFAE9AB069C4F9AE02.roa Signing time: Mon 22 Jul 2024 12:38:23 +0000 ROA not before: Mon 22 Jul 2024 12:38:23 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 9498 IP address blocks: 128.185.0.0/16 maxlen: 24 152.52.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 14:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3944 (0xf68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Jul 22 12:38:23 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=669e52be-d089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:ea:f0:d6:06:70:18:aa:6e:35:e7:09:ee: 55:27:ad:54:6a:ad:61:81:bf:3c:73:cf:78:6d:ae: e1:a0:91:4f:11:47:80:2b:23:69:ec:f3:f2:6f:47: a6:39:10:d4:80:4d:01:51:26:8d:2c:75:c3:c7:70: 56:63:e7:a9:0a:e1:12:76:54:8f:51:d0:6e:99:91: 15:9b:87:fc:17:62:90:96:59:16:b5:dd:68:86:c7: b7:77:a0:93:60:d3:10:c0:bf:1b:fd:5b:4a:3a:ae: 22:aa:07:90:e1:33:9d:42:34:97:41:64:82:65:ed: 71:07:ff:5b:d6:0c:75:b7:1d:ec:c8:52:4f:65:2f: 8e:ec:93:68:22:bb:fc:e5:3d:e1:70:4a:d8:6c:59: d8:31:ad:c4:91:f1:3a:94:87:63:1e:58:de:b5:79: 07:39:7e:06:e0:42:52:a7:5b:c6:52:20:c0:7f:ee: 45:dd:bc:cb:4a:1b:ea:5a:cd:8a:3c:9b:f9:5f:52: 73:82:62:d4:26:8d:94:45:ff:ee:6b:d1:f7:2d:70: ac:90:7b:d4:dc:c1:4d:61:39:e4:92:83:6f:96:16: 47:8b:bb:fc:14:18:85:c0:f1:df:1e:92:06:89:74: 20:9e:09:bc:b9:d0:9f:b6:a5:cb:40:9d:f0:5d:5d: 0c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FB:F6:24:56:AB:47:14:AA:B3:B8:52:8E:1D:A9:AF:B2:B5:F2:B7 X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/A061E19A482511EFAE9AB069C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 128.185.0.0/16 152.52.0.0/16 Signature Algorithm: sha256WithRSAEncryption b8:28:24:ca:6f:68:56:f6:0b:86:36:a4:cf:f0:67:2a:a1:31: 12:d8:89:72:e5:f4:cf:b2:15:1d:c7:99:28:28:f8:95:0e:9f: 0d:53:1b:96:df:5c:a0:ee:e5:03:e5:95:a1:04:13:29:e1:aa: 21:74:17:1a:47:66:7d:fb:7f:74:50:99:d9:dc:ca:ec:0a:c7: 12:3a:11:bb:9f:64:b0:c0:c5:58:8d:3a:8a:25:ae:e9:a4:fb: 02:df:44:b4:ad:93:a2:a9:a7:2f:15:1e:a0:1f:38:c6:3f:6d: 88:49:77:7e:75:5a:98:b7:76:f1:df:e3:8b:0d:58:24:40:19: df:dc:76:05:72:6a:4e:7c:ee:9d:36:d5:8a:9c:09:08:2b:e5: f2:92:15:8a:7d:96:1c:5f:51:d2:ca:c8:f7:bb:f7:6b:b3:c8: d0:a4:09:ba:85:3d:04:fd:0a:f5:b5:12:09:51:72:f7:d6:27: 96:99:cb:a7:f9:df:cb:2f:be:b8:3c:29:0c:fa:c4:da:ce:14: 6f:7c:59:ff:10:a6:93:d7:a0:65:ad:a9:03:ef:c1:ce:e7:74: 45:9b:93:2d:47:e2:30:1a:10:c7:ee:f9:90:be:36:27:0e:f6: 26:3b:2d:26:6a:2b:9c:f8:dd:cf:db:b3:fe:e0:60:48:5c:de: 8f:ce:64:34 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgICD2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjQwNzIyMTIzODIzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjllNTJiZS1kMDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnDq8NYGcBiqbjXnCe5VJ61Uaq1hgb88c894ba7hoJFPEUeAKyNp7PPyb0em ORDUgE0BUSaNLHXDx3BWY+epCuESdlSPUdBumZEVm4f8F2KQllkWtd1ohse3d6CT YNMQwL8b/VtKOq4iqgeQ4TOdQjSXQWSCZe1xB/9b1gx1tx3syFJPZS+O7JNoIrv8 5T3hcErYbFnYMa3EkfE6lIdjHljetXkHOX4G4EJSp1vGUiDAf+5F3bzLShvqWs2K PJv5X1JzgmLUJo2URf/ua9H3LXCskHvU3MFNYTnkkoNvlhZHi7v8FBiFwPHfHpIG iXQgngm8udCftqXLQJ3wXV0MqwIDAQABo4ICmTCCApUwHQYDVR0OBBYEFOr79iRW q0cUqrO4Uo4dqa+ytfK3MB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTY0QjMvMkE1OTQwRjI0QkIzMTFFOUFCMTUxQzE3QzRGOUFFMDIvQTA2MUUxOUE0 ODI1MTFFRkFFOUFCMDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQcBAf8E FDASMBAEAgABMAoDAwCAuQMDAJg0MA0GCSqGSIb3DQEBCwUAA4IBAQC4KCTKb2hW 9guGNqTP8GcqoTES2Ily5fTPshUdx5koKPiVDp8NUxuW31yg7uUD5ZWhBBMp4aoh dBcaR2Z9+390UJnZ3MrsCscSOhG7n2SwwMVYjTqKJa7ppPsC30S0rZOiqacvFR6g HzjGP22ISXd+dVqYt3bx3+OLDVgkQBnf3HYFcmpOfO6dNtWKnAkIK+XykhWKfZYc X1HSysj3u/drs8jQpAm6hT0E/Qr1tRIJUXL31ieWmcun+d/LL764PCkM+sTazhRv fFn/EKaT16BlrakD78HO53RFm5MtR+IwGhDH7vmQvjYnDvYmOy0maiuc+N3P27P+ 4GBIXN6PzmQ0 -----END CERTIFICATE-----Generated at Sun Nov 24 17:20:46 2024 by rpki-client on console-fra.rpki-client.org