$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/8F2728B45C8511EDA172EE5CC4F9AE02.roa File: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (raw, json) Hash identifier: 5cFE2+DHvyy580H7GLu07rQpzF29u5j14knEntbBKDA= Subject key identifier: 55:43:E2:38:2F:27:0C:3B:48:62:49:75:DF:BE:36:84:26:A7:0B:65 Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 020D Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/8F2728B45C8511EDA172EE5CC4F9AE02.roa Signing time: Wed 31 Jan 2024 04:16:38 +0000 ROA not before: Wed 31 Jan 2024 04:16:38 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 34051 IP address blocks: 168.153.144.0/24 maxlen: 24 168.153.145.0/24 maxlen: 24 168.153.146.0/24 maxlen: 24 168.153.160.0/24 maxlen: 24 168.153.161.0/24 maxlen: 24 168.153.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jan 31 04:16:38 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b9c9a6-efda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:95:ab:3d:88:e6:49:6e:66:2c:2d:2c:c0:a5: 50:f5:b8:02:e2:5c:01:a8:c3:60:4d:cb:ff:d9:30: f6:28:f8:c2:89:03:29:8c:f3:70:f5:a2:64:70:29: 7c:dc:26:49:c0:88:79:2f:8d:4b:77:f8:76:2d:9d: 40:2c:4a:22:88:1d:02:9d:90:52:70:74:13:1c:5e: 0e:bf:34:c3:97:9b:91:35:60:1a:1f:dc:e4:c5:4b: d2:8b:2d:18:78:35:09:ee:7c:f1:a7:0d:fe:bc:ca: 66:2b:37:17:c0:97:8c:6c:c1:15:0c:9a:29:30:b8: 46:f6:05:cf:f3:75:c1:da:37:f1:b3:80:93:58:a3: 9d:23:16:66:22:8a:4f:59:1e:c4:2a:24:99:e4:df: 19:f2:91:1a:a9:37:28:11:fc:46:2d:c5:83:6a:98: 40:ec:4b:e2:5c:e0:be:ea:e2:66:25:fc:82:f2:5d: 6d:55:71:57:a7:98:99:c3:19:77:1f:ef:c0:83:9f: 56:1d:51:e5:ce:3a:04:d5:88:04:f5:3f:bf:4c:bb: 1a:9f:03:15:1b:61:75:17:36:e1:84:3e:38:f9:fa: 74:65:74:3d:6b:88:45:2b:5a:49:6a:36:db:01:54: 1c:b6:6a:09:85:90:1e:90:b8:f1:c7:fa:55:96:b7: 79:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:43:E2:38:2F:27:0C:3B:48:62:49:75:DF:BE:36:84:26:A7:0B:65 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/8F2728B45C8511EDA172EE5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.153.144.0-168.153.146.255 168.153.160.0-168.153.162.255 Signature Algorithm: sha256WithRSAEncryption a3:bb:19:f9:d7:5f:ae:a0:0d:2e:3e:7c:09:28:aa:4f:14:49: 08:b7:27:7c:08:8c:48:b8:b8:b5:24:58:87:b2:d2:20:20:a9: ce:c8:f2:c3:69:9e:8a:0b:7f:5e:7d:16:b9:17:1e:0a:72:2f: 7a:fb:87:83:59:fc:b7:74:20:b6:ce:b3:cd:56:fc:d9:81:40: ac:b3:43:2e:ca:99:0a:22:d9:93:98:6b:a0:19:09:1a:10:96: 76:ab:eb:2b:5d:13:7f:80:32:50:e0:61:b8:9a:cd:bd:4b:ed: 95:fc:b4:6c:1c:58:07:4b:d6:39:b8:22:31:f4:63:09:33:eb: 6d:8b:ac:43:31:9e:3e:87:8f:d6:a2:81:91:08:ea:18:37:cc: 63:6e:18:0d:fe:d7:1d:56:4a:24:64:12:db:33:fd:1a:da:f4: a8:f7:2d:77:99:e0:40:3a:72:15:78:bd:cc:2e:68:bb:b6:a9: 72:e0:de:65:f0:a2:50:5a:c0:0d:07:64:8d:6d:4e:ef:8e:bf: 5f:17:5a:1c:8b:e8:b6:c2:d6:70:04:b6:b5:5e:20:a9:4e:7c: db:9c:8f:d1:69:61:2a:11:51:99:6a:82:f5:a1:fa:40:f9:0f: ce:18:8d:fc:73:9d:9c:e2:b3:94:38:58:2b:33:3f:e1:45:91: 62:66:19:f1 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjQwMTMxMDQxNjM4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5YzlhNi1lZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5WrPYjmSW5mLC0swKVQ9bgC4lwBqMNgTcv/2TD2KPjCiQMpjPNw9aJkcCl8 3CZJwIh5L41Ld/h2LZ1ALEoiiB0CnZBScHQTHF4OvzTDl5uRNWAaH9zkxUvSiy0Y eDUJ7nzxpw3+vMpmKzcXwJeMbMEVDJopMLhG9gXP83XB2jfxs4CTWKOdIxZmIopP WR7EKiSZ5N8Z8pEaqTcoEfxGLcWDaphA7EviXOC+6uJmJfyC8l1tVXFXp5iZwxl3 H+/Ag59WHVHlzjoE1YgE9T+/TLsanwMVG2F1FzbhhD44+fp0ZXQ9a4hFK1pJajbb AVQctmoJhZAekLjxx/pVlrd52wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFFVD4jgv Jww7SGJJdd++NoQmpwtlMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3MTMvMzQ5OTRDQjRFMERBMTFFQzk0QzdFMDYyQzRGOUFFMDIvOEYyNzI4QjQ1 Qzg1MTFFREExNzJFRTVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEBKiZkAMEAKiZkjAMAwQFqJmgAwQAqJmiMA0GCSqGSIb3 DQEBCwUAA4IBAQCjuxn511+uoA0uPnwJKKpPFEkItyd8CIxIuLi1JFiHstIgIKnO yPLDaZ6KC39efRa5Fx4Kci96+4eDWfy3dCC2zrPNVvzZgUCss0MuypkKItmTmGug GQkaEJZ2q+srXRN/gDJQ4GG4ms29S+2V/LRsHFgHS9Y5uCIx9GMJM+tti6xDMZ4+ h4/WooGRCOoYN8xjbhgN/tcdVkokZBLbM/0a2vSo9y13meBAOnIVeL3MLmi7tqly 4N5l8KJQWsANB2SNbU7vjr9fF1oci+i2wtZwBLa1XiCpTnzbnI/RaWEqEVGZaoL1 ofpA+Q/OGI38c52c4rOUOFgrMz/hRZFiZhnx -----END CERTIFICATE-----Generated at Wed May 15 05:28:55 2024 by rpki-client on console-ams.rpki-client.org