$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa File: 7677A43AF8C511EBA498E771C4F9AE02.roa (raw, json) Hash identifier: Ahb9X8aGkM4hgOjSkOVMY4nk30td0okGRRUIVN6nUDA= Subject key identifier: 09:DD:13:4B:87:2D:37:08:32:8E:DA:CD:CC:EB:D7:63:40:01:99:CF Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 1248 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa Signing time: Mon 26 Feb 2024 17:55:37 +0000 ROA not before: Mon 26 Feb 2024 17:55:37 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 55002 IP address blocks: 159.196.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4680 (0x1248) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Feb 26 17:55:37 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65dcd099-52fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:01:36:6b:1d:77:4d:95:da:e2:63:01:ed:37: a4:ee:46:52:f1:1e:bc:c7:5c:a3:23:96:ad:3c:eb: 99:30:63:45:99:97:e7:24:96:67:08:61:9d:37:71: ba:fe:dd:71:2c:9d:3e:3e:78:d9:ed:0d:63:69:ad: 88:2f:ec:00:0a:f3:ba:ee:e4:64:f0:cb:32:02:55: 41:37:5e:a2:ee:e8:fe:80:24:fc:93:a9:53:53:aa: 55:3a:3e:04:10:ce:7b:82:48:a0:d2:21:d0:34:af: 58:b4:b3:d1:ce:3e:c0:34:5b:4f:c3:28:09:c0:e9: 78:c0:14:59:46:11:3d:83:42:d8:03:3f:90:71:35: 6f:87:2e:83:2b:de:15:89:7f:ed:50:a2:e3:2b:84: c3:de:8f:dd:53:70:1a:8c:2c:da:92:d5:9f:bf:83: bb:a3:50:06:4c:85:28:fa:9c:1b:59:a9:68:10:df: 11:00:84:4b:b3:49:2f:dd:f1:d2:ec:4b:90:72:89: f7:1a:4e:1a:14:b5:07:80:6a:f0:b7:29:33:a1:89: 3b:b5:fe:07:4a:06:96:48:f7:6e:9d:08:17:2e:14: 9f:5a:d7:3b:99:dc:5c:b8:76:7e:98:0b:8d:dd:b0: c1:54:50:3d:ca:ed:ab:1b:b2:47:18:c4:ac:c4:31: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DD:13:4B:87:2D:37:08:32:8E:DA:CD:CC:EB:D7:63:40:01:99:CF X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 159.196.220.0/22 Signature Algorithm: sha256WithRSAEncryption 74:9b:f2:80:b2:d0:6f:8a:09:85:74:0b:3d:65:27:e4:28:0d: 9f:e0:27:d3:5f:35:06:33:99:f4:3c:07:bd:e0:01:1c:1c:01: 56:75:20:d9:b8:59:31:8e:e9:00:53:83:de:0a:6f:9a:03:1b: 69:8e:65:b0:09:4e:25:01:0c:49:84:f1:26:db:09:00:58:2a: d4:85:77:08:de:f6:b7:cc:29:a6:04:d2:3a:9a:bd:c3:cc:8e: e4:61:3f:71:84:c9:e2:49:dd:71:dc:2a:41:ff:04:09:8d:47: c8:dc:f7:44:bd:23:4a:4c:da:14:86:5a:fc:01:64:96:34:3a: 24:cb:cd:cc:68:bd:7f:31:5b:ef:26:b8:c4:bb:e4:e5:19:5b: 92:70:90:05:83:cc:e1:34:5d:fd:d2:cf:54:20:81:90:ee:62: db:69:2d:a5:9b:b8:f1:f7:df:36:8a:d7:d4:3f:56:93:d0:1f: 5e:15:53:0d:c8:dc:26:f7:94:36:f2:8c:ab:dd:e7:3d:20:3d: ad:d8:27:5c:a9:d1:5b:0c:02:29:ff:28:d9:8c:29:00:f4:19: a5:a3:0d:22:e1:15:80:ee:3c:3f:65:ec:17:0d:14:34:ad:37: a6:78:f3:30:bd:4a:f6:36:22:f9:ea:af:5c:e7:bd:eb:63:d9: 28:07:b8:70 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEkgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjQwMjI2MTc1NTM3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRjZDA5OS01MmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwE2ax13TZXa4mMB7Tek7kZS8R68x1yjI5atPOuZMGNFmZfnJJZnCGGdN3G6 /t1xLJ0+PnjZ7Q1jaa2IL+wACvO67uRk8MsyAlVBN16i7uj+gCT8k6lTU6pVOj4E EM57gkig0iHQNK9YtLPRzj7ANFtPwygJwOl4wBRZRhE9g0LYAz+QcTVvhy6DK94V iX/tUKLjK4TD3o/dU3AajCzaktWfv4O7o1AGTIUo+pwbWaloEN8RAIRLs0kv3fHS 7EuQcon3Gk4aFLUHgGrwtykzoYk7tf4HSgaWSPdunQgXLhSfWtc7mdxcuHZ+mAuN 3bDBVFA9yu2rG7JHGMSsxDETGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAndE0uH LTcIMo7azczr12NAAZnPMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGQTgvREY0NzA5MDJBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvNzY3N0E0M0FG OEM1MTFFQkE0OThFNzcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKfxNwwDQYJKoZIhvcNAQELBQADggEBAHSb8oCy0G+KCYV0 Cz1lJ+QoDZ/gJ9NfNQYzmfQ8B73gARwcAVZ1INm4WTGO6QBTg94Kb5oDG2mOZbAJ TiUBDEmE8SbbCQBYKtSFdwje9rfMKaYE0jqavcPMjuRhP3GEyeJJ3XHcKkH/BAmN R8jc90S9I0pM2hSGWvwBZJY0OiTLzcxovX8xW+8muMS75OUZW5JwkAWDzOE0Xf3S z1QggZDuYttpLaWbuPH33zaK19Q/VpPQH14VUw3I3Cb3lDbyjKvd5z0gPa3YJ1yp 0VsMAin/KNmMKQD0GaWjDSLhFYDuPD9l7BcNFDStN6Z48zC9SvY2Ivnqr1znvetj 2SgHuHA= -----END CERTIFICATE-----Generated at Sat May 18 18:12:33 2024 by rpki-client on console-fra.rpki-client.org