$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa File: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: F4raeokC024t1MUrlhDL6rWPjTH1bexdrjC1fmAeN5w= Subject key identifier: 63:52:F3:D1:68:E4:2B:9A:81:89:B6:E1:27:9A:63:F1:35:DE:A3:03 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 01BB Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa Signing time: Tue 01 Oct 2024 03:16:28 +0000 ROA not before: Tue 01 Oct 2024 03:16:28 +0000 ROA not after: Thu 30 Jan 2025 00:00:00 +0000 asID: 132621 IP address blocks: 140.168.244.0/22 maxlen: 22 140.168.244.0/24 maxlen: 24 140.168.245.0/24 maxlen: 24 140.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Oct 1 03:16:28 2024 GMT Not After : Jan 30 00:00:00 2025 GMT Subject: CN=66fb698c-8fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:91:c7:ea:58:88:3d:be:fd:29:df:eb:59:ec: b3:12:00:cc:e8:16:1d:95:4c:a8:f6:51:4b:56:d7: b3:07:ca:9a:a9:ca:eb:ee:85:fd:44:d7:12:45:32: a2:6c:ab:7e:b3:bc:0e:44:c8:52:00:23:8a:b6:9b: 6f:54:b9:c7:99:8d:2f:f4:98:7f:6b:ab:de:fe:f0: 2a:0f:23:d0:a0:62:a7:20:db:ad:ae:df:cf:a4:10: 04:4a:0b:46:d0:bb:b5:eb:be:7d:39:bc:fe:49:a2: 3e:e1:59:11:ec:ae:d3:c6:07:1d:ea:21:3d:01:88: 9d:38:12:13:0d:13:1f:0f:52:9e:79:29:92:bc:5a: 4e:09:31:d6:a7:04:69:57:83:01:8f:1a:8b:97:d5: 60:32:f4:be:6f:66:f6:17:61:4e:c9:c5:a0:82:e2: 4b:b3:f9:6c:67:78:2d:11:bb:26:04:22:12:5c:bf: 4e:48:50:6c:17:cd:60:cc:d1:64:0a:f5:1d:6e:c4: 46:54:40:6e:fe:8e:42:86:27:da:c7:09:1f:68:23: fc:1c:f2:98:1d:21:3f:9e:03:a2:99:28:87:25:87: ad:5e:aa:b3:78:ac:c1:38:7f:19:e2:be:0e:99:3f: 06:c9:96:05:28:ee:c0:66:2c:2d:ce:a6:b3:46:fa: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:52:F3:D1:68:E4:2B:9A:81:89:B6:E1:27:9A:63:F1:35:DE:A3:03 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:d8:45:f0:89:43:9b:07:3f:2d:a8:72:28:49:28:7b:fa:a7: 61:db:f5:4f:ef:4c:3e:f4:fe:e2:3e:57:04:e5:a7:fa:e0:38: 12:58:bf:b9:21:e4:63:29:ed:89:4e:f3:08:67:9c:71:0f:b5: 4c:1f:4a:bb:de:08:e5:40:90:b6:e0:f1:46:08:6c:ab:29:39: 7e:a4:44:73:32:c6:14:54:ca:09:50:34:7e:f1:54:df:fb:6b: 1a:2d:68:87:fb:e1:90:7b:20:0d:74:98:ed:c5:26:de:62:88: 71:b3:25:49:0e:b5:13:83:0c:15:65:5a:8c:81:ec:14:8c:6b: 14:80:3f:ee:8e:6c:6a:bd:d4:83:cb:e4:e0:9f:34:89:33:3d: 73:ba:80:9f:0f:b4:96:a7:ec:57:50:6d:aa:0d:ee:f2:32:bb: 84:1f:05:a5:ca:d8:f4:44:27:9e:7e:b4:19:2e:7a:d6:15:e7: 22:9d:c1:af:ae:e6:e6:32:b7:c0:4b:b8:a7:f4:25:54:f8:71: 69:22:5c:ff:af:63:d7:20:96:65:4b:73:9a:f2:ba:a9:c6:c8: 82:43:7c:a1:08:24:2d:d2:64:c3:80:86:54:89:99:68:87:c3: ab:80:6f:55:85:cd:2a:75:12:22:62:75:4a:6d:f3:2a:21:72: 85:89:d5:e0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjQxMDAxMDMxNjI4WhcNMjUwMTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmZiNjk4Yy04ZmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ZHH6liIPb79Kd/rWeyzEgDM6BYdlUyo9lFLVtezB8qaqcrr7oX9RNcSRTKi bKt+s7wORMhSACOKtptvVLnHmY0v9Jh/a6ve/vAqDyPQoGKnINutrt/PpBAESgtG 0Lu16759Obz+SaI+4VkR7K7Txgcd6iE9AYidOBITDRMfD1KeeSmSvFpOCTHWpwRp V4MBjxqLl9VgMvS+b2b2F2FOycWgguJLs/lsZ3gtEbsmBCISXL9OSFBsF81gzNFk CvUdbsRGVEBu/o5ChifaxwkfaCP8HPKYHSE/ngOimSiHJYetXqqzeKzBOH8Z4r4O mT8GyZYFKO7AZiwtzqazRvrAnwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGNS89Fo 5CuagYm24SeaY/E13qMDMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkREQTE2ODQ1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKMqPQwDQYJKoZIhvcNAQELBQADggEBAG/YRfCJQ5sHPy2o cihJKHv6p2Hb9U/vTD70/uI+VwTlp/rgOBJYv7kh5GMp7YlO8whnnHEPtUwfSrve COVAkLbg8UYIbKspOX6kRHMyxhRUyglQNH7xVN/7axotaIf74ZB7IA10mO3FJt5i iHGzJUkOtRODDBVlWoyB7BSMaxSAP+6ObGq91IPL5OCfNIkzPXO6gJ8PtJan7FdQ baoN7vIyu4QfBaXK2PREJ55+tBkuetYV5yKdwa+u5uYyt8BLuKf0JVT4cWkiXP+v Y9cglmVLc5ryuqnGyIJDfKEIJC3SZMOAhlSJmWiHw6uAb1WFzSp1EiJidUpt8yoh coWJ1eA= -----END CERTIFICATE-----Generated at Thu Nov 21 03:12:03 2024 by rpki-client on console-fra.rpki-client.org