$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AB8A9D16855411EFAE43CB12C4F9AE02.roa File: AB8A9D16855411EFAE43CB12C4F9AE02.roa (raw, json) Hash identifier: Q7r1RZg55QoOhblsHWVHeurfqZlaCjyNZlvDZnEAutU= Subject key identifier: 6C:AE:1A:60:90:A6:E8:FB:96:1F:B1:4D:8D:F0:19:19:D7:60:E2:87 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 033A Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AB8A9D16855411EFAE43CB12C4F9AE02.roa Signing time: Tue 08 Oct 2024 09:06:58 +0000 ROA not before: Tue 08 Oct 2024 09:06:58 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 152999 IP address blocks: 160.187.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 8 09:06:58 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6704f631-c893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:74:74:60:93:e3:61:e4:99:de:47:bc:5a: 7d:86:97:b8:04:0b:73:49:9b:4d:e2:27:d8:cf:17: 49:e2:22:a0:22:e1:41:70:02:34:33:49:90:37:22: 5b:ce:64:51:64:f1:f3:b3:42:e1:d9:d3:08:1f:61: fc:a5:6d:4b:75:a1:e4:1d:90:7f:b2:37:af:b5:70: 83:4e:a4:41:ba:8f:96:60:44:cc:42:fe:0b:df:0c: f2:2d:09:2b:5e:71:0a:17:d8:ed:98:ae:7a:cf:33: e6:b7:dd:5f:c4:b8:74:38:a5:c0:cc:a4:d4:6e:01: aa:2f:0f:54:af:59:36:ca:cf:bf:57:74:a1:3e:8f: 14:24:8a:49:c2:8c:a6:1e:af:a5:a6:1f:b7:4b:71: 89:ef:58:af:f7:86:02:08:42:e1:38:a8:b9:20:8f: 3e:8f:86:40:5e:3e:e4:e8:a0:e3:75:e9:f7:44:03: a3:4f:bc:be:be:49:39:6a:6b:e7:e2:0f:1f:6e:b4: e7:c3:c4:b3:19:e1:b6:c1:b3:6e:5a:dd:ed:ec:64: ff:4e:80:72:06:aa:73:b4:3e:1e:d5:59:e9:9f:4b: 88:d7:c9:6f:dc:07:6e:13:94:e5:d7:94:16:4d:25: 03:6c:fc:4e:39:75:ea:d6:15:84:8f:f1:c0:8a:16: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AE:1A:60:90:A6:E8:FB:96:1F:B1:4D:8D:F0:19:19:D7:60:E2:87 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AB8A9D16855411EFAE43CB12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.104.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:6d:43:26:a8:71:47:29:d4:0f:24:bd:bf:27:c8:cb:8a:62: 24:ea:3f:98:7c:11:ff:df:b2:91:a5:24:22:ce:7f:04:5a:45: 1f:71:d1:bb:b9:7f:b0:ce:f4:e0:54:7f:37:14:29:eb:6c:aa: 9f:3b:79:c6:93:13:80:16:e2:b8:e8:50:f8:8f:31:08:f5:b1: 57:a6:93:1d:9f:60:4d:7a:4b:1d:96:22:90:2b:bf:b3:b5:ea: 75:15:a1:f2:8d:68:f6:97:ca:ab:b6:9a:9e:0e:9f:5e:f3:fd: 29:8f:82:ed:c3:58:ba:25:85:47:21:26:e2:46:c4:3d:a2:34: 3e:59:83:c9:db:e5:db:c3:fc:53:f3:45:b2:ca:fb:95:40:d7: 4b:f3:08:4c:b7:6b:97:c7:ab:19:41:25:95:e2:83:80:0f:ed: 84:77:f6:cb:f5:c6:09:01:93:c3:8d:8a:52:54:16:a7:38:0a: 33:f9:02:db:10:a1:d2:90:55:7d:5d:4c:c6:7f:1b:ec:94:26: 65:d3:59:84:24:b1:02:b4:f5:57:ec:c0:ab:3e:80:6d:10:53: 26:57:80:e8:3e:ff:0f:bc:cd:ff:24:5c:8c:ac:76:50:4c:4d: 80:30:b0:dd:d1:a2:70:c7:a9:fb:8c:b4:14:02:65:98:4a:fe: 7d:57:d1:88 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjQxMDA4MDkwNjU4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzA0ZjYzMS1jODkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybJ0dGCT42Hkmd5HvFp9hpe4BAtzSZtN4ifYzxdJ4iKgIuFBcAI0M0mQNyJb zmRRZPHzs0Lh2dMIH2H8pW1LdaHkHZB/sjevtXCDTqRBuo+WYETMQv4L3wzyLQkr XnEKF9jtmK56zzPmt91fxLh0OKXAzKTUbgGqLw9Ur1k2ys+/V3ShPo8UJIpJwoym Hq+lph+3S3GJ71iv94YCCELhOKi5II8+j4ZAXj7k6KDjden3RAOjT7y+vkk5amvn 4g8fbrTnw8SzGeG2wbNuWt3t7GT/ToByBqpztD4e1Vnpn0uI18lv3AduE5Tl15QW TSUDbPxOOXXq1hWEj/HAihYpEwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGyuGmCQ puj7lh+xTY3wGRnXYOKHMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQUI4QTlEMTY4 NTU0MTFFRkFFNDNDQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgu2gwDQYJKoZIhvcNAQELBQADggEBABptQyaocUcp1A8k vb8nyMuKYiTqP5h8Ef/fspGlJCLOfwRaRR9x0bu5f7DO9OBUfzcUKetsqp87ecaT E4AW4rjoUPiPMQj1sVemkx2fYE16Sx2WIpArv7O16nUVofKNaPaXyqu2mp4On17z /SmPgu3DWLolhUchJuJGxD2iND5Zg8nb5dvD/FPzRbLK+5VA10vzCEy3a5fHqxlB JZXig4AP7YR39sv1xgkBk8ONilJUFqc4CjP5AtsQodKQVX1dTMZ/G+yUJmXTWYQk sQK09VfswKs+gG0QUyZXgOg+/w+8zf8kXIysdlBMTYAwsN3RonDHqfuMtBQCZZhK /n1X0Yg= -----END CERTIFICATE-----Generated at Fri Nov 22 03:53:02 2024 by rpki-client on console-fra.rpki-client.org