$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa File: EAF1E48478FA11EF9043060AC4F9AE02.roa (raw, json) Hash identifier: Y94sd9E5GlcMt+lxymyuqjd3AEApdFlcMVQYEZaGYA0= Subject key identifier: 29:A2:A6:1F:13:B1:3E:27:A2:89:E4:A8:75:0B:99:61:90:DC:34:67 Certificate issuer: /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Certificate serial: 03 Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa Signing time: Sun 22 Sep 2024 15:54:15 +0000 ROA not before: Sun 22 Sep 2024 15:54:15 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150341 IP address blocks: 160.187.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8 Validity Not Before: Sep 22 15:54:15 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66f03da7-d41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:39:61:26:32:b0:49:36:cc:59:75:a6:de: f4:cd:17:2b:4f:26:ca:ae:42:f9:f0:c8:fe:7e:73: b5:2d:c6:28:88:b7:d3:97:e2:3c:1f:c0:47:e2:1c: e6:97:8c:90:01:3f:a9:4e:27:33:4a:49:02:67:af: 31:e6:7b:04:5f:28:6f:44:8d:ec:a1:ef:93:95:ad: 75:12:e1:33:05:d4:bf:e2:f5:f4:a9:e9:7f:8c:9e: 8c:86:80:16:0b:45:ee:9d:a3:50:78:a1:ee:0a:b3: 0e:55:ef:be:05:c7:6e:a3:b4:34:31:ba:f9:36:75: 44:64:bd:6e:18:14:1f:db:c4:66:80:cd:fd:68:5f: 1f:de:66:14:4f:7c:0f:6e:5c:52:a3:6b:27:f7:ca: fb:f3:49:30:85:1a:2c:fd:b4:4b:8c:7b:ea:12:99: 7c:a8:0a:e4:e8:fc:7d:be:70:02:bb:d3:7d:24:4d: 38:18:64:00:0f:02:78:39:9e:aa:72:28:d0:67:bb: ea:0e:d5:f6:47:b8:4a:99:2c:67:7f:33:b4:80:b6: ac:85:1e:4c:f3:b9:00:bf:86:a1:8a:6a:93:63:ae: c2:c5:8e:58:59:99:bb:b2:95:92:8c:bc:33:22:82: 81:94:46:df:f2:20:9b:33:06:17:6a:94:a4:00:ce: 72:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A2:A6:1F:13:B1:3E:27:A2:89:E4:A8:75:0B:99:61:90:DC:34:67 X509v3 Authority Key Identifier: keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EAF1E48478FA11EF9043060AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.34.0/24 Signature Algorithm: sha256WithRSAEncryption bf:c9:c9:a0:6b:e1:65:5d:ad:05:6e:7b:47:b0:d4:ce:bc:40: 12:49:e4:ab:f3:7e:5f:e9:8a:a8:a9:13:b1:f4:56:64:74:a1: 1b:25:b9:0f:71:d4:89:c0:28:69:f9:a3:50:50:6b:49:20:a9: c8:5b:c9:01:a5:f8:fc:85:96:70:1c:be:fe:78:3a:4f:7b:ac: 05:25:36:f9:27:1c:92:bd:e2:a4:ee:fb:dd:f5:7d:e9:8c:dc: 91:cd:0e:91:d3:31:ec:c8:83:22:f3:a8:ed:a1:33:a9:5a:0a: 5c:d4:b1:87:d0:19:c9:c9:f1:41:0c:74:35:86:ae:46:e1:58: 32:76:63:e7:9a:ce:63:ce:fe:65:ad:5b:07:82:57:8d:6d:3f: 96:25:75:db:f3:ae:aa:bc:f6:35:0e:2a:9a:47:e8:82:d3:1a: 36:07:0e:11:7a:e9:74:d0:13:1c:ae:a7:27:f3:e5:32:85:2e: 29:a3:df:e6:f9:d1:9a:ee:bc:d7:8c:3f:6e:8c:6b:5b:b2:42: 30:9f:42:e0:a3:44:ee:ea:0d:e0:3a:76:fd:2f:d4:ad:6f:6d: 2f:ac:ce:10:80:ab:f0:d2:b2:37:ba:6d:93:28:7f:fa:f4:62: 3e:8c:b3:b8:ca:31:07:1c:54:18:2f:71:a3:d4:87:7b:53:e1: 4f:b9:9e:c6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoREQ3QzhEMEY0NzhGOUJFNkFCRjczOUMwNEY1QjVCRTRE QzlGNjFGODAeFw0yNDA5MjIxNTU0MTVaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZjAzZGE3LWQ0MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ0TlhJjKwSTbMWXWm3vTNFytPJsquQvnwyP5+c7UtxiiIt9OX4jwfwEfiHOaX jJABP6lOJzNKSQJnrzHmewRfKG9Ejeyh75OVrXUS4TMF1L/i9fSp6X+MnoyGgBYL Re6do1B4oe4Ksw5V774Fx26jtDQxuvk2dURkvW4YFB/bxGaAzf1oXx/eZhRPfA9u XFKjayf3yvvzSTCFGiz9tEuMe+oSmXyoCuTo/H2+cAK7030kTTgYZAAPAng5nqpy KNBnu+oO1fZHuEqZLGd/M7SAtqyFHkzzuQC/hqGKapNjrsLFjlhZmbuylZKMvDMi goGURt/yIJszBhdqlKQAznJ/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKaKmHxOx PieiieSodQuZYZDcNGcwHwYDVR0jBBgwFoAU3XyND0ePm+ar9znAT1tb5NyfYfgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzRDMDk4NjJFNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyLzNYeU5EMGVQbS1hcjl6bkFUMXRiNU55Zllm Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM1h5TkQwZVBtLWFyOXpuQVQxdGI1TnlmWWZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS80QzA5ODYyRTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9FQUYxRTQ4NDc4 RkExMUVGOTA0MzA2MEFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7IjANBgkqhkiG9w0BAQsFAAOCAQEAv8nJoGvhZV2tBW57 R7DUzrxAEknkq/N+X+mKqKkTsfRWZHShGyW5D3HUicAoafmjUFBrSSCpyFvJAaX4 /IWWcBy+/ng6T3usBSU2+Scckr3ipO773fV96Yzckc0OkdMx7MiDIvOo7aEzqVoK XNSxh9AZycnxQQx0NYauRuFYMnZj55rOY87+Za1bB4JXjW0/liV12/Ouqrz2NQ4q mkfogtMaNgcOEXrpdNATHK6nJ/PlMoUuKaPf5vnRmu6814w/boxrW7JCMJ9C4KNE 7uoN4Dp2/S/UrW9tL6zOEICr8NKyN7ptkyh/+vRiPoyzuMoxBxxUGC9xo9SHe1Ph T7mexg== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:24 2024 by rpki-client on console-fra.rpki-client.org