$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa File: 40CD7F9A4F4711EFA3EF0919C4F9AE02.roa (raw, json) Hash identifier: 4FwOQwuKNUy9HH7oB4xbpz2DGuRiWMyoF/td7En2UDc= Subject key identifier: 58:71:E3:8B:99:B7:C9:3B:96:3E:1B:90:DE:26:AD:A1:D0:8A:24:54 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 027C Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:30:44 +0000 ROA not before: Thu 05 Sep 2024 03:30:44 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135912 IP address blocks: 160.19.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 636 (0x27c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Sep 5 03:30:44 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d925e3-91b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:8b:d8:60:0e:d8:f9:2f:ba:3b:44:68:c8: 1d:7b:fa:93:e7:34:ff:e4:29:16:a9:5e:ee:f7:43: 7b:e7:93:96:9e:13:d2:42:a0:84:b7:56:81:a4:20: cb:d7:16:0f:2b:61:cf:0f:10:0e:83:33:f9:6e:fc: fd:16:85:60:99:0b:24:6c:19:00:00:56:d9:14:d3: f2:c6:aa:2b:b9:e6:0c:4f:85:b1:ab:5c:c3:92:87: 4a:e6:cc:f7:3d:e0:c0:29:cd:d1:00:dc:04:ed:c5: 78:f8:1b:8d:03:60:59:15:53:70:6b:36:4f:51:76: 7b:99:3f:9b:9b:e3:9d:2e:9e:e1:a3:08:f2:85:da: 46:00:33:af:ff:37:b0:da:71:95:9e:51:1b:bd:b7: 9f:f0:58:28:c8:bb:26:1f:e0:3a:41:c8:2c:75:12: 03:1b:64:bc:61:62:c5:ac:78:45:37:27:94:9d:ba: 54:21:12:08:a7:47:e8:08:eb:d4:83:aa:0e:e5:e0: 88:3d:3a:5c:a7:03:5c:86:7d:69:fb:73:29:ca:c3: fd:21:3c:a6:0d:db:be:b0:0e:f7:ee:71:d6:65:98: 66:bc:80:d5:57:3d:52:77:71:be:23:59:d5:ee:4f: 8e:1d:09:3e:65:d8:2d:25:77:7f:e1:7b:2c:37:1b: a7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:71:E3:8B:99:B7:C9:3B:96:3E:1B:90:DE:26:AD:A1:D0:8A:24:54 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.19.159.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:21:7c:d3:00:3d:a6:f7:ff:a2:91:99:f7:3b:8a:47:d3:e4: ba:b5:bf:8a:1c:dd:d7:df:41:93:33:7f:ff:53:42:8a:9e:34: ea:81:1a:2f:00:c6:57:6a:d9:ed:b3:a6:cb:11:0a:d8:c7:c5: 05:92:37:a4:46:d9:f7:ce:db:a4:c7:c5:60:68:09:9a:cf:4a: 73:8f:39:ff:de:9a:8a:c6:37:09:0b:4a:47:f8:74:91:bb:40: 87:47:db:3f:dc:bf:2a:7e:3a:c3:12:c5:a5:f6:6a:4e:eb:ac: eb:75:48:c4:78:c2:3c:cf:d5:07:72:20:0b:ec:2c:bd:7a:89: de:d8:7e:f3:d0:29:71:d2:36:9f:a2:f1:6b:22:ee:09:e6:60: d4:0a:50:08:50:0d:4a:c0:cd:49:0d:5b:06:15:3e:13:fb:95: 74:9f:ad:5a:0a:12:45:3d:1b:4d:fa:27:1c:e0:8e:9e:3b:2e: 29:eb:d9:5b:b0:e6:13:4d:f1:04:d4:6a:a7:9f:7c:66:e8:34: e5:6a:67:3c:01:24:0c:e2:c0:6d:50:29:9d:d5:56:9a:a2:30: 14:6e:14:83:7e:71:0e:0c:e4:c7:91:13:ab:2f:8a:8d:86:5f: 13:f1:83:b3:ff:2c:47:45:b2:88:4e:be:1a:37:2e:24:cb:ab: 04:6f:94:31 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQwOTA1MDMzMDQ0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjVlMy05MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApl6L2GAO2PkvujtEaMgde/qT5zT/5CkWqV7u90N755OWnhPSQqCEt1aBpCDL 1xYPK2HPDxAOgzP5bvz9FoVgmQskbBkAAFbZFNPyxqorueYMT4Wxq1zDkodK5sz3 PeDAKc3RANwE7cV4+BuNA2BZFVNwazZPUXZ7mT+bm+OdLp7howjyhdpGADOv/zew 2nGVnlEbvbef8FgoyLsmH+A6QcgsdRIDG2S8YWLFrHhFNyeUnbpUIRIIp0foCOvU g6oO5eCIPTpcpwNchn1p+3MpysP9ITymDdu+sA737nHWZZhmvIDVVz1Sd3G+I1nV 7k+OHQk+ZdgtJXd/4XssNxun2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFhx44uZ t8k7lj4bkN4mraHQiiRUMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDBDRDdGOUE0 RjQ3MTFFRkEzRUYwOTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgE58wDQYJKoZIhvcNAQELBQADggEBAAwhfNMAPab3/6KR mfc7ikfT5Lq1v4oc3dffQZMzf/9TQoqeNOqBGi8Axldq2e2zpssRCtjHxQWSN6RG 2ffO26THxWBoCZrPSnOPOf/emorGNwkLSkf4dJG7QIdH2z/cvyp+OsMSxaX2ak7r rOt1SMR4wjzP1QdyIAvsLL16id7YfvPQKXHSNp+i8Wsi7gnmYNQKUAhQDUrAzUkN WwYVPhP7lXSfrVoKEkU9G036Jxzgjp47Linr2Vuw5hNN8QTUaqeffGboNOVqZzwB JAziwG1QKZ3VVpqiMBRuFIN+cQ4M5MeRE6svio2GXxPxg7P/LEdFsohOvho3LiTL qwRvlDE= -----END CERTIFICATE-----Generated at Fri Nov 22 03:53:02 2024 by rpki-client on console-fra.rpki-client.org