$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa File: B7E86B40595311EC9ECF510BC4F9AE02.roa (raw, json) Hash identifier: I3AqCAvryjVR50FDwOB2eOkU4GLBFJs3HZ3gb9KEimo= Subject key identifier: 4C:8C:8C:FE:38:3A:0A:20:74:CC:A1:D1:D8:F6:3E:67:4D:D5:DC:0B Certificate issuer: /CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Certificate serial: 03E0 Authority key identifier: E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa Signing time: Mon 14 Oct 2024 17:25:23 +0000 ROA not before: Mon 14 Oct 2024 17:25:23 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 138398 IP address blocks: 91.208.208.0/24 maxlen: 24 91.208.228.0/24 maxlen: 24 91.208.230.0/24 maxlen: 24 91.208.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 992 (0x3e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E/serialNumber=E79E9B5212637E33CA5DCB6176909CE19621BA64 Validity Not Before: Oct 14 17:25:23 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=670d5403-65a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:26:92:b2:dc:ea:ff:7e:db:39:8e:65:65:ea: 0e:9f:02:98:9e:75:cb:7d:fb:48:8e:e2:21:b3:0d: 07:7f:d4:19:83:9f:3a:e8:f8:c0:8b:7f:68:2b:15: 8a:0f:c4:79:b3:7b:0f:3b:54:da:4c:18:a4:2e:a4: a8:82:8d:33:43:a0:07:08:ad:2b:6f:82:02:e7:29: 57:38:60:43:9a:a6:77:8e:84:d9:55:b1:b5:f2:10: 4f:22:58:da:a8:25:99:09:4e:e1:be:3d:5f:54:f1: 1d:75:93:9b:69:a2:e7:d7:bd:a3:1f:2d:f9:95:df: 1c:05:2f:30:be:50:63:cc:08:63:4b:17:fa:f4:6b: 81:0e:11:25:2a:d2:f6:ec:10:a8:45:f2:20:ac:eb: 5b:01:46:82:07:9f:13:c6:31:92:e9:e6:21:7b:1a: 51:41:cd:5e:f6:10:3e:0f:04:1f:5d:03:c1:67:8c: 58:13:0c:64:b1:2e:4f:b6:f6:27:61:fc:82:4b:94: d0:cb:2e:ef:c9:3a:42:70:6f:a1:8e:de:11:d6:95: c5:64:94:59:4c:d2:13:b9:35:be:af:3b:3d:bb:4a: 01:53:03:91:46:dd:98:4f:60:0b:f5:21:3a:c9:b4: a3:fb:89:3c:c9:fe:19:6d:6a:e3:fa:12:f4:e3:bf: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:8C:FE:38:3A:0A:20:74:CC:A1:D1:D8:F6:3E:67:4D:D5:DC:0B X509v3 Authority Key Identifier: keyid:E7:9E:9B:52:12:63:7E:33:CA:5D:CB:61:76:90:9C:E1:96:21:BA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/556bUhJjfjPKXcthdpCc4ZYhumQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/556bUhJjfjPKXcthdpCc4ZYhumQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/1E753650594E11ECA0629256C4F9AE02/B7E86B40595311EC9ECF510BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 91.208.208.0/24 91.208.228.0/24 91.208.230.0/24 91.208.233.0/24 Signature Algorithm: sha256WithRSAEncryption 16:a4:ec:79:9c:ef:1a:79:d8:bb:e0:13:8b:52:d5:c4:27:b0: d1:81:57:d1:ea:2a:94:a9:8e:d2:ab:26:3b:25:71:28:3d:ee: d4:8f:83:0d:d3:1b:b0:f1:5a:7f:dc:5e:0d:85:79:85:51:f7: 33:c3:b1:57:16:2c:38:0d:6c:f5:9f:c5:12:24:cb:c4:09:76: 81:f7:9b:e1:28:b3:de:fb:d7:0a:d8:47:72:9f:01:a5:4b:ab: 66:94:96:bc:7a:f7:a9:96:93:c0:b1:4b:a9:ea:32:27:cf:17: e7:50:e2:39:cb:cf:2b:97:92:cf:8a:f9:5f:2d:30:49:e9:dc: 1c:3a:96:cb:aa:06:e9:28:8a:89:e6:3c:4e:5c:26:5d:04:27: 08:20:32:f0:44:88:2e:c4:44:d3:06:1a:1b:dd:04:27:49:e5: 2b:2a:a2:a8:37:5e:ed:59:cd:2b:1f:cd:2f:fa:38:81:38:4e: 5d:57:69:a0:68:a4:a3:7c:ec:bc:95:e2:f4:0d:01:7b:cd:de: fc:ec:b0:f7:e4:4e:b7:00:b2:0a:8b:a7:fb:62:33:3d:99:db: 9e:f1:f2:5f:d4:65:f7:0b:72:52:23:08:e7:43:24:32:58:4b: d1:04:cf:a6:0c:c5:15:18:35:e7:d9:fa:ff:dc:40:62:b8:07: cd:2a:e8:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKEU3OUU5QjUyMTI2MzdFMzNDQTVEQ0I2MTc2OTA5Q0Ux OTYyMUJBNjQwHhcNMjQxMDE0MTcyNTIzWhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzBkNTQwMy02NWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yaSstzq/37bOY5lZeoOnwKYnnXLfftIjuIhsw0Hf9QZg5866PjAi39oKxWK D8R5s3sPO1TaTBikLqSogo0zQ6AHCK0rb4IC5ylXOGBDmqZ3joTZVbG18hBPIlja qCWZCU7hvj1fVPEddZObaaLn172jHy35ld8cBS8wvlBjzAhjSxf69GuBDhElKtL2 7BCoRfIgrOtbAUaCB58TxjGS6eYhexpRQc1e9hA+DwQfXQPBZ4xYEwxksS5PtvYn YfyCS5TQyy7vyTpCcG+hjt4R1pXFZJRZTNITuTW+rzs9u0oBUwORRt2YT2AL9SE6 ybSj+4k8yf4ZbWrj+hL0478IbQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEyMjP44 OgogdMyh0dj2PmdN1dwLMB8GA1UdIwQYMBaAFOeem1ISY34zyl3LYXaQnOGWIbpk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS8xRTc1MzY1MDU5 NEUxMUVDQTA2MjkyNTZDNEY5QUUwMi81NTZiVWhKamZqUEtYY3RoZHBDYzRaWWh1 bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzU1NmJVaEpqZmpQS1hjdGhkcENjNFpZaHVtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUM0N0UvMUU3NTM2NTA1OTRFMTFFQ0EwNjI5MjU2QzRGOUFFMDIvQjdFODZCNDA1 OTUzMTFFQzlFQ0Y1MTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBABb0NADBABb0OQDBABb0OYDBABb0OkwDQYJKoZIhvcNAQEL BQADggEBABak7Hmc7xp52LvgE4tS1cQnsNGBV9HqKpSpjtKrJjslcSg97tSPgw3T G7DxWn/cXg2FeYVR9zPDsVcWLDgNbPWfxRIky8QJdoH3m+Eos9771wrYR3KfAaVL q2aUlrx696mWk8CxS6nqMifPF+dQ4jnLzyuXks+K+V8tMEnp3Bw6lsuqBukoionm PE5cJl0EJwggMvBEiC7ERNMGGhvdBCdJ5Ssqoqg3Xu1ZzSsfzS/6OIE4Tl1XaaBo pKN87LyV4vQNAXvN3vzssPfkTrcAsgqLp/tiMz2Z257x8l/UZfcLclIjCOdDJDJY S9EEz6YMxRUYNefZ+v/cQGK4B80q6CE= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:18 2024 by rpki-client on console-fra.rpki-client.org