$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa File: 431868FE2EC811EFBB3A6574C4F9AE02.roa (raw, json) Hash identifier: yYqs2C5AMpVdcomEvwsEelNt35bcShUcpatPOoqg3y0= Subject key identifier: A7:4B:66:25:BF:DD:64:8A:EB:CD:73:98:1D:5A:AB:8B:0F:82:CD:E9 Certificate issuer: /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF Certificate serial: 02 Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa Signing time: Thu 20 Jun 2024 05:45:12 +0000 ROA not before: Thu 20 Jun 2024 05:45:12 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 138997 IP address blocks: 160.22.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF Validity Not Before: Jun 20 05:45:12 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=6673c1e8-958a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:6f:d0:c7:47:e6:db:6f:4f:ed:1a:10:86: 52:96:44:94:30:40:af:de:5f:12:cc:cb:dc:ae:e8: 00:63:5a:91:67:8d:66:4a:91:12:5a:b8:3b:f1:68: ee:65:b2:9e:93:23:e4:ca:31:5b:ad:4f:f9:ed:03: 22:1f:4c:51:63:aa:90:fc:a7:40:11:37:84:62:5a: 5f:79:fe:30:20:a6:52:8c:0a:ec:63:8d:a2:4b:2e: 5c:a2:e0:0b:a8:15:65:6d:da:d1:a9:83:62:14:7b: 5b:cb:97:f6:6f:12:9c:52:3f:a1:6f:9a:44:ae:ff: e2:aa:21:28:c6:c6:fc:3c:8e:ad:b9:b7:3f:d1:8d: 63:7c:19:34:77:1f:dc:e9:e4:e8:b2:c1:f0:66:59: 4e:4b:1f:e3:58:f5:eb:46:89:51:83:1c:1c:0d:db: 40:8b:f8:b1:e4:86:31:33:fd:66:f0:52:d2:d7:52: 83:7b:f3:83:2c:7c:9f:c9:da:25:a0:be:c2:54:30: 02:36:22:f7:ea:b2:eb:91:e6:aa:c9:75:c9:26:b9: 09:9b:bd:5e:2a:31:bb:3d:43:c2:7b:d9:a0:3d:4f: 9c:17:8f:9b:fb:5f:fa:e6:6c:5b:a0:5c:a6:43:b7: 96:57:1a:38:b2:d4:df:6c:bf:b8:f8:cd:ae:6d:d7: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4B:66:25:BF:DD:64:8A:EB:CD:73:98:1D:5A:AB:8B:0F:82:CD:E9 X509v3 Authority Key Identifier: keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.48.0/23 Signature Algorithm: sha256WithRSAEncryption 95:da:73:e0:07:e7:61:87:12:80:ed:c5:d0:c7:82:e1:b2:86: 87:93:14:4f:99:76:0f:4d:c2:b2:4a:13:1d:97:44:16:cd:63: 28:e3:5c:68:1c:8a:41:1b:20:17:52:1d:fe:16:c9:91:ae:25: d2:e9:03:eb:9f:33:0e:3e:6f:03:ec:8c:4f:df:94:79:dc:17: af:fd:11:aa:7b:56:c8:cc:5c:1d:0e:bc:43:41:51:d5:bc:20: f0:1b:ae:8f:67:51:a4:8e:6d:4c:b0:79:45:55:aa:54:2b:65: f1:f4:8e:2d:32:b1:21:50:64:23:b7:d3:f4:b9:22:6e:78:96: b8:02:2f:98:4d:ad:2f:7c:7c:86:a5:c8:13:30:be:bd:57:aa: 0f:4b:81:6e:5d:94:0d:44:2b:0f:45:89:b0:79:fb:ca:e8:e5: f3:94:9f:d7:b9:1a:3c:fa:53:4e:91:3c:50:08:e6:91:c1:a9: 94:42:5e:eb:30:aa:e5:fb:7b:94:b0:76:37:71:e2:e5:4d:a7: 6c:dc:fb:b8:a6:ef:7a:01:30:83:de:c7:b9:47:19:ec:fd:e1: 5c:d4:65:d7:82:40:4a:3b:a2:8d:11:c3:f4:b3:b7:cf:9a:92: 69:45:d9:13:f5:37:7c:96:9f:48:43:e9:09:1e:84:54:86:2d: 7e:80:2e:65 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MTVGQjExMC8GA1UEBRMoOTJFNjMzOTc4RjNDNUMyRDA4NjBBQ0RCMEUxREQ1MTIx MDBFODlFRjAeFw0yNDA2MjAwNTQ1MTJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NzNjMWU4LTk1OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+Gm/Qx0fm229P7RoQhlKWRJQwQK/eXxLMy9yu6ABjWpFnjWZKkRJauDvxaO5l sp6TI+TKMVutT/ntAyIfTFFjqpD8p0ARN4RiWl95/jAgplKMCuxjjaJLLlyi4Auo FWVt2tGpg2IUe1vLl/ZvEpxSP6FvmkSu/+KqISjGxvw8jq25tz/RjWN8GTR3H9zp 5OiywfBmWU5LH+NY9etGiVGDHBwN20CL+LHkhjEz/WbwUtLXUoN784MsfJ/J2iWg vsJUMAI2IvfqsuuR5qrJdckmuQmbvV4qMbs9Q8J72aA9T5wXj5v7X/rmbFugXKZD t5ZXGjiy1N9sv7j4za5t19fXAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp0tmJb/d ZIrrzXOYHVqriw+CzekwHwYDVR0jBBgwFoAUkuYzl488XC0IYKzbDh3VEhAOie8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUExNUZCL0JFODhBNzBDMkVD NzExRUY4MjIwODI3M0M0RjlBRTAyL2t1WXpsNDg4WEMwSVlLemJEaDNWRWhBT2ll OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIva3VZemw0ODhYQzBJWUt6YkRoM1ZFaEFPaWU4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTVGQi9CRTg4QTcwQzJFQzcxMUVGODIyMDgyNzNDNEY5QUUwMi80MzE4NjhGRTJF QzgxMUVGQkIzQTY1NzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAWMDANBgkqhkiG9w0BAQsFAAOCAQEAldpz4AfnYYcSgO3F 0MeC4bKGh5MUT5l2D03CskoTHZdEFs1jKONcaByKQRsgF1Id/hbJka4l0ukD658z Dj5vA+yMT9+UedwXr/0RqntWyMxcHQ68Q0FR1bwg8Buuj2dRpI5tTLB5RVWqVCtl 8fSOLTKxIVBkI7fT9LkibniWuAIvmE2tL3x8hqXIEzC+vVeqD0uBbl2UDUQrD0WJ sHn7yujl85Sf17kaPPpTTpE8UAjmkcGplEJe6zCq5ft7lLB2N3Hi5U2nbNz7uKbv egEwg97HuUcZ7P3hXNRl14JASjuijRHD9LO3z5qSaUXZE/U3fJafSEPpCR6EVIYt foAuZQ== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:51 2024 by rpki-client on console-ams.rpki-client.org