$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/CF96FC32E0E111ECBFF27B44C4F9AE02.roa File: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (raw, json) Hash identifier: Vw3MBjP1RuU5tdxt+beNhLzaUjT0qpNMidEvPuJBqP8= Subject key identifier: 44:D4:00:2F:70:87:04:BA:0B:43:AE:7B:44:61:77:5B:38:AC:B0:3B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0209 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/CF96FC32E0E111ECBFF27B44C4F9AE02.roa Signing time: Wed 31 Jan 2024 04:16:35 +0000 ROA not before: Wed 31 Jan 2024 04:16:35 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 133036 IP address blocks: 168.153.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jan 31 04:16:35 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b9c9a3-214e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:70:d2:80:c2:5e:a7:c9:c5:21:04:d7:68: ad:05:d5:d8:3d:e3:a7:ec:5d:1f:da:42:aa:62:fa: 31:00:35:1a:5a:37:d3:da:3e:2e:db:d8:0b:2d:86: fd:26:42:4f:43:b4:52:e6:32:50:4b:5d:8a:27:ce: ea:81:7a:87:56:a3:2e:74:f0:b8:c0:a7:2b:f2:48: fa:4d:a4:c8:21:17:be:b4:73:f9:38:48:fc:a5:9b: a2:18:f1:54:34:b0:37:c4:1d:aa:12:f8:d6:38:a6: 88:3d:e8:53:90:86:61:5c:9a:3b:96:ca:b2:e7:87: 99:01:1d:65:76:de:a9:97:91:2b:77:79:fe:7a:bf: f0:59:45:fc:d7:f6:32:b4:70:10:b8:2d:e2:96:9f: 3f:eb:8b:bc:e3:a6:9d:2a:28:7d:df:b2:76:dd:a4: 36:a0:06:82:d0:b4:1a:3f:9f:ea:49:24:73:3e:a4: b2:08:2f:00:08:f9:ef:36:5c:bc:a9:77:df:15:d0: 39:92:73:62:fe:e1:5c:73:06:c3:34:67:e0:d3:34: 4e:dd:96:08:b2:c1:b6:03:f1:50:a8:f9:05:e7:be: c9:5c:62:b2:79:b3:0c:d0:54:50:6a:53:b2:71:27: b1:2b:63:79:ec:77:78:69:41:02:4c:5b:79:ca:cc: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D4:00:2F:70:87:04:BA:0B:43:AE:7B:44:61:77:5B:38:AC:B0:3B X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/CF96FC32E0E111ECBFF27B44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.153.1.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:44:d1:91:54:e4:3d:df:d2:cb:98:dc:dc:5f:ca:0e:4b:5d: 16:77:75:ee:3b:40:bc:ee:bb:8f:0d:c5:d6:52:2b:73:cf:2b: 17:43:07:c6:3e:cd:93:08:73:48:d3:39:3d:49:71:0a:92:61: a4:d0:d8:2e:ec:bd:5f:20:2f:51:2c:84:80:ac:02:06:85:da: 5d:a7:62:ad:15:fd:5b:b0:85:f9:52:5d:6c:79:49:74:32:1a: 77:57:f4:dd:ac:04:bb:ef:d5:75:fd:96:c4:a8:4e:39:c5:4e: 7c:d8:14:54:ec:3c:9b:77:6e:74:9a:8d:fb:dd:c2:40:db:e9: b0:a0:56:98:77:2a:87:2e:93:f4:12:56:b6:c6:f2:10:18:32: eb:ed:3d:f6:64:8f:77:25:c2:68:f2:37:79:87:e4:ec:9c:39: 70:8e:f6:fc:d4:c2:a0:bb:b2:0f:4d:f6:6f:5b:24:cc:4b:c5: 42:30:90:7f:30:ab:14:30:24:cc:9c:ec:52:91:fc:51:9f:f5: 5b:26:4e:10:4f:4e:4b:1d:d4:16:b8:b0:54:f4:61:8f:20:8f: df:1e:f0:de:9c:fc:92:31:80:58:c3:83:6d:f8:9c:e6:09:52: fd:60:b0:19:4c:08:c3:29:36:27:9f:29:68:6f:0a:b1:69:70: 4c:ca:b0:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjQwMTMxMDQxNjM1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5YzlhMy0yMTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+Nw0oDCXqfJxSEE12itBdXYPeOn7F0f2kKqYvoxADUaWjfT2j4u29gLLYb9 JkJPQ7RS5jJQS12KJ87qgXqHVqMudPC4wKcr8kj6TaTIIRe+tHP5OEj8pZuiGPFU NLA3xB2qEvjWOKaIPehTkIZhXJo7lsqy54eZAR1ldt6pl5Erd3n+er/wWUX81/Yy tHAQuC3ilp8/64u846adKih937J23aQ2oAaC0LQaP5/qSSRzPqSyCC8ACPnvNly8 qXffFdA5knNi/uFccwbDNGfg0zRO3ZYIssG2A/FQqPkF577JXGKyebMM0FRQalOy cSexK2N57Hd4aUECTFt5ysxhYQIDAQABo4IClTCCApEwHQYDVR0OBBYEFETUAC9w hwS6C0Oue0Rhd1s4rLA7MB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE3MTMvMzQ5OTRDQjRFMERBMTFFQzk0QzdFMDYyQzRGOUFFMDIvQ0Y5NkZDMzJF MEUxMTFFQ0JGRjI3QjQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAComQEwDQYJKoZIhvcNAQELBQADggEBAA9E0ZFU5D3f0suY 3Nxfyg5LXRZ3de47QLzuu48NxdZSK3PPKxdDB8Y+zZMIc0jTOT1JcQqSYaTQ2C7s vV8gL1EshICsAgaF2l2nYq0V/VuwhflSXWx5SXQyGndX9N2sBLvv1XX9lsSoTjnF TnzYFFTsPJt3bnSajfvdwkDb6bCgVph3Kocuk/QSVrbG8hAYMuvtPfZkj3clwmjy N3mH5OycOXCO9vzUwqC7sg9N9m9bJMxLxUIwkH8wqxQwJMyc7FKR/FGf9VsmThBP Tksd1Ba4sFT0YY8gj98e8N6c/JIxgFjDg234nOYJUv1gsBlMCMMpNiefKWhvCrFp cEzKsHk= -----END CERTIFICATE-----Generated at Wed May 15 05:28:55 2024 by rpki-client on console-ams.rpki-client.org