$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/2895D9E667AB11EF82EC0929C4F9AE02.roa File: 2895D9E667AB11EF82EC0929C4F9AE02.roa (raw, json) Hash identifier: gwD5ZrkmQlo4Co/1BvzwR+ImrO+KReOWGQUcQAVYxug= Subject key identifier: 8F:F8:13:B6:F7:08:1F:0D:3D:0B:54:8E:53:04:8C:72:D7:E4:52:17 Certificate issuer: /CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Certificate serial: 02 Authority key identifier: 50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/2895D9E667AB11EF82EC0929C4F9AE02.roa Signing time: Sat 31 Aug 2024 15:10:29 +0000 ROA not before: Sat 31 Aug 2024 15:10:29 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 151656 IP address blocks: 160.30.100.0/24 maxlen: 24 160.30.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2D9/serialNumber=50D24042A4A65EEE67A7EA4D3FC489443A39AA74 Validity Not Before: Aug 31 15:10:29 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66d33265-93c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:9f:6a:d0:93:ee:76:47:18:72:07:13:2b: 58:85:74:04:e6:a0:16:d2:84:80:3f:2e:61:da:c2: 7e:43:00:3c:b4:e1:e8:5d:b1:13:c6:b6:2a:f8:12: 59:d6:93:bf:b9:50:ee:e9:2d:1a:ef:9b:86:26:12: 5e:57:24:89:73:bf:d4:c5:57:3a:f3:42:51:06:3f: 8c:0a:84:6a:16:43:aa:23:ce:56:20:a8:da:7f:5b: d9:bf:d1:23:a8:6f:b0:70:69:24:84:62:89:84:47: ab:9e:ad:33:37:a7:fe:8b:e6:56:cd:d0:5f:e7:e4: da:21:52:c6:a9:ea:8d:8c:70:3e:50:a0:37:9e:31: 70:81:60:e5:a2:57:c7:aa:7e:80:6c:7f:5c:7c:b6: da:11:d0:ee:74:6c:5d:cb:25:3b:1c:2c:a6:98:7b: a5:f5:36:8b:9a:97:b2:0e:fa:5d:ee:46:a6:da:4d: 04:9e:86:fc:da:01:f5:9e:32:36:df:4c:3e:1e:41: d7:6b:81:e5:2f:e8:df:40:f0:85:d0:f3:45:d5:a6: 71:01:52:43:3c:7f:9a:07:c0:92:c9:76:f8:e1:b4: 49:14:3b:29:60:8b:37:f6:89:e2:8d:b3:44:74:a4: 50:7e:34:da:1e:06:2f:8e:89:13:e1:5a:1f:63:46: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F8:13:B6:F7:08:1F:0D:3D:0B:54:8E:53:04:8C:72:D7:E4:52:17 X509v3 Authority Key Identifier: keyid:50:D2:40:42:A4:A6:5E:EE:67:A7:EA:4D:3F:C4:89:44:3A:39:AA:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/UNJAQqSmXu5np-pNP8SJRDo5qnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UNJAQqSmXu5np-pNP8SJRDo5qnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2D9/A99C162867AA11EF8F498A27C4F9AE02/2895D9E667AB11EF82EC0929C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.100.0/23 Signature Algorithm: sha256WithRSAEncryption b5:58:c4:96:ba:c6:20:26:93:87:e1:c3:c3:0d:65:45:5e:19: 76:98:a4:17:cb:93:07:e1:f6:f6:8d:87:11:90:86:9e:33:c4: 9f:30:64:7f:1c:85:83:02:88:f9:24:d9:75:a3:48:e9:af:d3: 0b:67:50:d7:61:33:9c:3d:8c:23:ca:e8:aa:75:0c:de:38:23: 30:46:58:b4:9d:3e:d4:90:11:ce:6a:9c:5b:1b:b6:e8:90:5a: 0b:12:ed:ff:ae:ae:31:d4:15:00:f0:0f:e2:41:5f:5a:57:c0: 70:b3:01:e4:e2:49:bd:61:a2:98:e8:f8:d2:df:8d:83:6e:c2: a4:e1:cd:aa:4a:53:0e:b6:5f:4e:59:fe:e7:b1:84:d3:c9:23: 48:cc:5a:0e:c5:64:e2:73:b5:3e:b2:9f:7b:06:03:b3:ba:1b: 0d:c3:91:cd:3d:93:cc:e7:0d:59:cc:89:ad:b7:67:e5:bc:e0: 1d:58:0c:e4:49:e3:9f:e3:31:1e:ae:0c:c3:2f:85:06:0a:7f: 5f:3a:b0:c4:10:f5:5f:63:7a:3c:77:4c:3d:4b:78:54:6f:f9: ac:06:be:37:03:1b:c9:27:1c:24:d0:13:ec:0c:5c:c8:bc:a2: 8b:e5:27:8c:1c:b3:6d:e2:82:54:6e:b1:8e:a7:a8:6d:93:b7: ee:02:b9:93 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjJEOTExMC8GA1UEBRMoNTBEMjQwNDJBNEE2NUVFRTY3QTdFQTREM0ZDNDg5NDQz QTM5QUE3NDAeFw0yNDA4MzExNTEwMjlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDMzMjY1LTkzYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjkZ9q0JPudkcYcgcTK1iFdATmoBbShIA/LmHawn5DADy04ehdsRPGtir4ElnW k7+5UO7pLRrvm4YmEl5XJIlzv9TFVzrzQlEGP4wKhGoWQ6ojzlYgqNp/W9m/0SOo b7BwaSSEYomER6uerTM3p/6L5lbN0F/n5NohUsap6o2McD5QoDeeMXCBYOWiV8eq foBsf1x8ttoR0O50bF3LJTscLKaYe6X1Noual7IO+l3uRqbaTQSehvzaAfWeMjbf TD4eQddrgeUv6N9A8IXQ80XVpnEBUkM8f5oHwJLJdvjhtEkUOylgizf2ieKNs0R0 pFB+NNoeBi+OiRPhWh9jRoBPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUj/gTtvcI Hw09C1SOUwSMctfkUhcwHwYDVR0jBBgwFoAUUNJAQqSmXu5np+pNP8SJRDo5qnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMkQ5L0E5OUMxNjI4NjdB QTExRUY4RjQ5OEEyN0M0RjlBRTAyL1VOSkFRcVNtWHU1bnAtcE5QOFNKUkRvNXFu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVU5KQVFxU21YdTVucC1wTlA4U0pSRG81cW5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJEOS9BOTlDMTYyODY3QUExMUVGOEY0OThBMjdDNEY5QUUwMi8yODk1RDlFNjY3 QUIxMUVGODJFQzA5MjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAeZDANBgkqhkiG9w0BAQsFAAOCAQEAtVjElrrGICaTh+HD ww1lRV4ZdpikF8uTB+H29o2HEZCGnjPEnzBkfxyFgwKI+STZdaNI6a/TC2dQ12Ez nD2MI8roqnUM3jgjMEZYtJ0+1JARzmqcWxu26JBaCxLt/66uMdQVAPAP4kFfWlfA cLMB5OJJvWGimOj40t+Ng27CpOHNqkpTDrZfTln+57GE08kjSMxaDsVk4nO1PrKf ewYDs7obDcORzT2TzOcNWcyJrbdn5bzgHVgM5Enjn+MxHq4Mwy+FBgp/XzqwxBD1 X2N6PHdMPUt4VG/5rAa+NwMbySccJNAT7AxcyLyii+UnjByzbeKCVG6xjqeobZO3 7gK5kw== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org