$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa File: F6382C7A56EC11EF85879C50C4F9AE02.roa (raw, json) Hash identifier: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE= Subject key identifier: CE:A4:0B:70:66:EE:BC:01:C7:40:13:06:C0:E6:C7:F5:0B:05:DD:47 Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 02 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa Signing time: Sat 10 Aug 2024 07:48:42 +0000 ROA not before: Sat 10 Aug 2024 07:48:42 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 64096 IP address blocks: 160.25.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Aug 10 07:48:42 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66b71b59-072a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:c2:60:40:fd:67:48:f0:f5:65:b7:af:30:4a: 4d:9d:93:af:5a:0b:d8:b8:ad:2e:dc:a2:94:9c:e1: 67:27:1b:f8:93:ae:56:3f:41:01:a1:69:ea:bf:9e: bc:9f:d6:e8:4d:a8:0b:8e:98:7b:a6:81:40:59:6a: 11:b7:2c:52:73:45:f4:f6:4e:ea:34:50:35:52:71: 9d:22:1e:29:7c:9a:e8:bb:47:1e:80:d0:11:05:f6: 3c:ac:1f:1d:28:5a:48:ff:03:3e:ad:c5:6d:92:90: f7:8f:d0:3c:6f:d0:6f:ea:00:bc:83:44:c3:a8:e8: ad:7d:92:86:5b:48:2f:54:5e:9d:f6:07:78:4f:48: a7:2c:8c:5e:b9:29:35:d2:63:b3:0c:b1:65:ae:8e: 3b:35:62:97:08:6d:3a:5a:85:f2:b5:91:89:02:8e: e4:31:26:62:45:71:45:ef:59:7e:b0:15:fb:fa:67: fe:05:7e:f4:e0:e4:1e:cc:30:d6:85:98:34:bc:1b: 69:55:2a:b3:4f:5a:9b:ed:a9:01:94:89:0a:66:9e: 80:bc:42:1a:ea:60:30:79:15:b6:03:55:b8:88:ea: e3:b8:e1:19:06:41:72:0e:08:3b:12:2c:fb:ca:fa: 7b:09:51:86:36:da:5f:82:22:6b:da:33:d4:a8:99: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A4:0B:70:66:EE:BC:01:C7:40:13:06:C0:E6:C7:F5:0B:05:DD:47 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/F6382C7A56EC11EF85879C50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.117.0/24 Signature Algorithm: sha256WithRSAEncryption a3:9a:55:1e:53:40:10:09:88:1d:13:a1:97:73:c0:d2:2c:97: 3e:d4:63:42:86:2f:ad:48:b7:1d:b9:5e:5e:75:53:28:e9:26: f9:a9:96:4a:bb:c8:c2:b1:35:42:75:75:61:2b:24:09:38:35: b8:71:af:16:9c:ac:44:09:83:d6:5f:85:8c:0f:d8:8c:f9:b0: 98:ec:9d:f4:38:cd:d2:61:bc:43:5d:09:41:51:87:56:8d:37: 91:4d:7d:9a:4a:bd:c9:5e:1f:d7:66:b0:92:6c:43:f9:97:d5: 82:86:8c:9b:77:46:e9:fb:08:ff:1d:93:89:d9:eb:11:40:75: 7c:79:c2:5d:fd:bb:f7:b8:f0:04:74:fa:72:ba:92:b0:81:fd: 7b:e4:bd:77:3d:30:33:b4:65:b4:7c:cf:33:97:1e:09:31:4e: e3:4a:10:0d:f9:d9:10:36:c4:c2:af:27:27:da:40:3c:bf:b5: 6d:4a:a9:20:bf:c6:ec:6e:f3:1c:66:36:98:66:83:dc:2d:c7: 74:b1:1a:2b:59:d0:6c:8a:03:4d:c4:64:dd:47:7f:83:dd:19: e7:7a:13:15:b9:1e:99:cf:cc:dd:62:28:63:71:12:97:e6:08: cb:35:4f:c7:05:30:51:fe:94:f6:a0:b9:95:b3:f8:28:88:85: c4:ad:d5:dc -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUE1NzExMC8GA1UEBRMoRDlDNUQ4MkFCRDMwRkREMjBGQTlDQUYzRDFFRDg2N0RC MDc2OTU2QjAeFw0yNDA4MTAwNzQ4NDJaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YjcxYjU5LTA3MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDswmBA/WdI8PVlt68wSk2dk69aC9i4rS7copSc4WcnG/iTrlY/QQGhaeq/nryf 1uhNqAuOmHumgUBZahG3LFJzRfT2Tuo0UDVScZ0iHil8mui7Rx6A0BEF9jysHx0o Wkj/Az6txW2SkPeP0Dxv0G/qALyDRMOo6K19koZbSC9UXp32B3hPSKcsjF65KTXS Y7MMsWWujjs1YpcIbTpahfK1kYkCjuQxJmJFcUXvWX6wFfv6Z/4FfvTg5B7MMNaF mDS8G2lVKrNPWpvtqQGUiQpmnoC8QhrqYDB5FbYDVbiI6uO44RkGQXIOCDsSLPvK +nsJUYY22l+CImvaM9SomfUJAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzqQLcGbu vAHHQBMGwObH9QsF3UcwHwYDVR0jBBgwFoAU2cXYKr0w/dIPqcrz0e2GfbB2lWsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1QTU3LzZFNzQ4MzEwNTZF QzExRUY4QTBDQjI0RkM0RjlBRTAyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxX cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMmNYWUtyMHdfZElQcWNyejBlMkdmYkIybFdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi9GNjM4MkM3QTU2 RUMxMUVGODU4NzlDNTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAZdTANBgkqhkiG9w0BAQsFAAOCAQEAo5pVHlNAEAmIHROh l3PA0iyXPtRjQoYvrUi3HbleXnVTKOkm+amWSrvIwrE1QnV1YSskCTg1uHGvFpys RAmD1l+FjA/YjPmwmOyd9DjN0mG8Q10JQVGHVo03kU19mkq9yV4f12awkmxD+ZfV goaMm3dG6fsI/x2TidnrEUB1fHnCXf2797jwBHT6crqSsIH9e+S9dz0wM7RltHzP M5ceCTFO40oQDfnZEDbEwq8nJ9pAPL+1bUqpIL/G7G7zHGY2mGaD3C3HdLEaK1nQ bIoDTcRk3Ud/g90Z53oTFbkemc/M3WIoY3ESl+YIyzVPxwUwUf6U9qC5lbP4KIiF xK3V3A== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:23 2024 by rpki-client on console-fra.rpki-client.org