$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/13C828C62D8911EBA7D22C3EC4F9AE02.roa File: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (raw, json) Hash identifier: ITrdVs65XiKT5eY7TYbNYiODzMY+u/b74/g0UqMYEiM= Subject key identifier: BF:33:5B:65:C2:4F:3E:30:8F:D1:A2:4D:BF:32:F7:66:80:78:FA:7B Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 35E2 Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/13C828C62D8911EBA7D22C3EC4F9AE02.roa Signing time: Thu 04 Apr 2024 15:21:04 +0000 ROA not before: Thu 04 Apr 2024 15:21:04 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 141031 IP address blocks: 39.34.164.0/24 maxlen: 24 39.34.165.0/24 maxlen: 24 39.34.166.0/24 maxlen: 24 39.34.167.0/24 maxlen: 24 39.34.168.0/21 maxlen: 24 39.34.184.0/21 maxlen: 24 59.103.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13794 (0x35e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Validity Not Before: Apr 4 15:21:04 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660ec560-2b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:0e:dd:9d:51:20:b5:ad:10:23:b3:05:10: 99:c3:f7:62:ab:92:20:fb:25:7e:3d:c9:b4:a2:39: df:4e:50:1b:50:af:7b:57:3c:b0:a7:72:60:05:45: e9:e3:1e:8c:cc:c6:f8:d2:ce:c2:25:e1:e2:14:e9: 7e:c6:5b:27:ca:35:73:ca:bf:99:26:f2:77:27:1b: be:fb:96:85:c7:f6:1c:1a:4c:94:5e:64:92:60:74: 89:a2:f7:3d:24:75:7f:e3:d2:44:90:3d:b9:97:c5: c7:a6:f6:e2:2f:55:37:5a:9d:93:ad:9a:bd:20:ad: bd:ed:db:76:ce:8d:94:65:57:f1:38:fc:47:c8:74: d4:8d:46:9d:8f:4d:ff:aa:9f:43:91:0a:95:db:31: af:99:74:f6:14:3e:21:a2:55:f8:35:54:95:19:7a: f9:03:dc:99:94:31:75:a4:a1:ef:28:76:83:8a:cb: c3:bc:82:dd:82:8f:23:72:7d:0f:35:03:c4:6b:0b: 98:20:ed:6c:9a:f9:0d:ee:a5:01:0a:f0:db:45:39: 4c:f9:95:08:e6:8e:32:3b:16:07:57:dc:ce:ed:ab: 18:5b:1d:9c:77:95:0a:0b:54:9e:1a:20:26:3a:84: dd:e7:c1:e4:5b:73:a6:a3:f5:0a:75:04:4d:a4:de: 95:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:33:5B:65:C2:4F:3E:30:8F:D1:A2:4D:BF:32:F7:66:80:78:FA:7B X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/13C828C62D8911EBA7D22C3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 39.34.164.0-39.34.175.255 39.34.184.0/21 59.103.208.0/20 Signature Algorithm: sha256WithRSAEncryption af:04:d7:4f:4d:1d:66:d9:f8:2e:bf:b4:23:17:b4:f3:81:36: b3:e8:6a:a1:2a:35:db:22:6d:bd:87:78:9d:37:5f:d3:26:99: da:18:5c:a7:e9:87:99:78:46:01:78:ed:f7:09:e0:60:86:53: 1d:72:d8:e6:34:2e:95:a1:45:ca:a4:a7:04:ad:99:c1:0d:31: 67:18:12:a5:26:0c:ac:d3:6c:b9:ca:1a:29:ed:fb:21:58:c8: 5f:f2:12:8c:61:8d:26:11:c6:90:7a:41:d2:26:4a:1e:9d:16: 6e:2d:92:2b:80:9b:51:d3:03:0f:4e:0e:f6:40:07:c1:fb:0e: d7:c0:f0:1c:83:72:e5:81:0b:2f:02:55:79:d7:df:82:2a:79: 26:35:b9:ae:1c:c8:61:be:e3:15:76:a7:2e:94:9e:ed:07:21: 88:c9:34:7e:80:db:2a:ab:0c:da:ed:23:ce:17:53:61:de:d2: 4f:cf:80:85:81:1e:ff:56:ac:e9:0d:e0:a2:87:ca:6f:65:ff: 28:b9:e8:47:b4:e4:1e:6c:49:69:1e:c0:8b:89:4c:54:17:cb: 46:a8:7d:33:e5:28:df:c4:d3:16:af:7c:6a:36:64:c1:98:f1: 24:a5:c7:7c:e0:a0:19:59:3e:02:52:73:31:83:15:57:92:00: 02:ae:3a:76 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICNeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjQwNDA0MTUyMTA0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlYzU2MC0yYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqwO3Z1RILWtECOzBRCZw/diq5Ig+yV+Pcm0ojnfTlAbUK97Vzywp3JgBUXp 4x6MzMb40s7CJeHiFOl+xlsnyjVzyr+ZJvJ3Jxu++5aFx/YcGkyUXmSSYHSJovc9 JHV/49JEkD25l8XHpvbiL1U3Wp2TrZq9IK297dt2zo2UZVfxOPxHyHTUjUadj03/ qp9DkQqV2zGvmXT2FD4holX4NVSVGXr5A9yZlDF1pKHvKHaDisvDvILdgo8jcn0P NQPEawuYIO1smvkN7qUBCvDbRTlM+ZUI5o4yOxYHV9zO7asYWx2cd5UKC1SeGiAm OoTd58HkW3Omo/UKdQRNpN6VawIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFL8zW2XC Tz4wj9GiTb8y92aAePp7MB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvMTNDODI4QzYy RDg5MTFFQkE3RDIyQzNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAicipAMEBCcioAMEAyciuAMEBDtn0DANBgkqhkiG9w0B AQsFAAOCAQEArwTXT00dZtn4Lr+0Ixe084E2s+hqoSo12yJtvYd4nTdf0yaZ2hhc p+mHmXhGAXjt9wngYIZTHXLY5jQulaFFyqSnBK2ZwQ0xZxgSpSYMrNNsucoaKe37 IVjIX/ISjGGNJhHGkHpB0iZKHp0Wbi2SK4CbUdMDD04O9kAHwfsO18DwHINy5YEL LwJVedffgip5JjW5rhzIYb7jFXanLpSe7QchiMk0foDbKqsM2u0jzhdTYd7ST8+A hYEe/1as6Q3goofKb2X/KLnoR7TkHmxJaR7Ai4lMVBfLRqh9M+Uo38TTFq98ajZk wZjxJKXHfOCgGVk+AlJzMYMVV5IAAq46dg== -----END CERTIFICATE-----Generated at Sat May 4 15:45:47 2024 by rpki-client on console-fra.rpki-client.org