$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa File: D66D72562EAB11EF9B369566C4F9AE02.roa (raw, json) Hash identifier: vgycUMJflkOKjlkv8zbw+R+KI7mdfPpws5+U5fcO9GA= Subject key identifier: D7:69:1C:98:D8:88:16:DE:70:FC:42:3E:F1:95:59:7C:80:74:C1:76 Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 50 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa Signing time: Wed 17 Jul 2024 02:12:26 +0000 ROA not before: Wed 17 Jul 2024 02:12:26 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132139 IP address blocks: 185.81.70.0/24 maxlen: 24 185.81.70.236/31 maxlen: 31 185.81.70.238/31 maxlen: 31 185.81.70.240/29 maxlen: 29 185.81.70.248/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Jul 17 02:12:26 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66972889-d11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:08:04:c3:84:d8:7a:af:44:8f:50:4f:9c: c8:05:c0:ad:1b:a7:96:91:4a:7d:ac:64:a0:b2:03: 50:f4:11:58:9e:16:4d:a1:0b:0f:c0:ea:24:5c:b9: 85:71:35:e0:d4:ba:6e:c1:5d:b3:a7:a4:4e:1d:a2: ae:96:f6:82:2d:2f:9a:7a:64:22:27:f5:43:f0:f2: 04:40:c0:bf:1e:e8:5c:4e:d7:7d:42:a1:bf:06:d6: 5d:c3:5e:0d:4e:41:27:7e:3e:57:41:bf:42:a5:ff: 32:bd:1e:34:c6:e6:c8:32:d6:a3:70:ae:ad:c7:b3: f4:e5:36:8e:7b:31:04:0a:61:50:25:3d:9f:12:68: fa:90:94:6e:fb:10:dd:9a:dd:13:be:3f:ee:50:27: 51:aa:b5:61:9a:1b:4b:d5:b3:ba:29:af:64:6c:46: ee:8e:d5:b5:da:8d:2a:18:b6:c4:6a:d3:53:88:7d: 61:55:e4:f5:fb:6b:cf:ec:95:b0:96:3a:fc:bb:b4: 35:a2:64:3a:10:99:d0:1b:a6:71:2f:dd:3f:0c:eb: b6:2a:ea:06:ca:eb:e3:82:24:ea:ae:45:16:b0:9c: 04:05:f2:1b:7b:4d:03:ee:8e:94:73:51:94:aa:4c: a7:f2:94:98:b1:75:c3:90:fe:09:eb:08:13:23:23: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:1C:98:D8:88:16:DE:70:FC:42:3E:F1:95:59:7C:80:74:C1:76 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.81.70.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:e0:69:af:24:52:2e:81:cd:2f:0d:1d:f7:cc:78:7c:b8:05: 4c:15:e9:fb:fc:1c:24:63:49:2c:02:68:3e:8b:72:e0:f8:b3: 2d:d0:ee:63:ba:48:82:3c:c1:43:69:ed:4b:8f:78:53:18:a1: bb:2d:1c:76:42:32:e4:ef:af:68:1b:04:f6:a9:d9:44:9a:b1: 21:fa:8c:5a:76:33:a0:7d:10:81:19:c9:bf:45:fb:57:ff:7f: 6a:1d:e0:7e:47:ee:8c:7a:3b:aa:2d:c4:f7:76:85:98:92:c4: d1:d5:a3:52:ad:d7:4e:ae:c4:b8:07:26:24:14:f0:52:76:74: bf:bb:3b:c9:81:2a:1c:2c:88:94:3e:de:12:3e:0e:36:e3:44: 44:3f:85:3f:ff:9c:bd:03:b4:e5:2b:fe:8b:97:00:cc:69:a9: f9:af:1a:49:5c:e8:77:b4:50:87:3b:13:9b:b6:ad:99:c8:f7: 0b:75:0f:dc:9d:5a:46:91:a2:f3:01:f0:73:bf:4c:4d:9a:5a: 28:40:7b:f3:a8:9b:73:ae:ee:62:a9:9a:36:11:be:71:42:1d: b3:6c:a7:d1:80:78:fc:c8:46:9f:a1:f9:5f:0d:3c:2d:14:b1: 39:eb:91:8d:4e:fb:66:5d:b7:d8:17:e6:c2:3e:3a:d9:f8:f4: bb:4a:1f:77 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0JEQzExMC8GA1UEBRMoRUYyNUE5MjVCRkJENENCQUVGNTI0NTZBQjNCMzA5Qjc0 NzA0MERGRTAeFw0yNDA3MTcwMjEyMjZaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2OTcyODg5LWQxMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChLggEw4TYeq9Ej1BPnMgFwK0bp5aRSn2sZKCyA1D0EVieFk2hCw/A6iRcuYVx NeDUum7BXbOnpE4doq6W9oItL5p6ZCIn9UPw8gRAwL8e6FxO131Cob8G1l3DXg1O QSd+PldBv0Kl/zK9HjTG5sgy1qNwrq3Hs/TlNo57MQQKYVAlPZ8SaPqQlG77EN2a 3RO+P+5QJ1GqtWGaG0vVs7opr2RsRu6O1bXajSoYtsRq01OIfWFV5PX7a8/slbCW Ovy7tDWiZDoQmdAbpnEv3T8M67Yq6gbK6+OCJOquRRawnAQF8ht7TQPujpRzUZSq TKfylJixdcOQ/gnrCBMjI1iFAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU12kcmNiI Ft5w/EI+8ZVZfIB0wXYwHwYDVR0jBBgwFoAU7yWpJb+9TLrvUkVqs7MJt0cEDf4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3QkRDLzc5RUUwQkM0RTI3 MjExRUVCODNENjA2QkM0RjlBRTAyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURm NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3lXcEpiLTlUTHJ2VWtWcXM3TUp0MGNFRGY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi9ENjZENzI1NjJF QUIxMUVGOUIzNjk1NjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEALlRRjANBgkqhkiG9w0BAQsFAAOCAQEAi+BpryRSLoHNLw0d 98x4fLgFTBXp+/wcJGNJLAJoPoty4PizLdDuY7pIgjzBQ2ntS494Uxihuy0cdkIy 5O+vaBsE9qnZRJqxIfqMWnYzoH0QgRnJv0X7V/9/ah3gfkfujHo7qi3E93aFmJLE 0dWjUq3XTq7EuAcmJBTwUnZ0v7s7yYEqHCyIlD7eEj4ONuNERD+FP/+cvQO05Sv+ i5cAzGmp+a8aSVzod7RQhzsTm7atmcj3C3UP3J1aRpGi8wHwc79MTZpaKEB786ib c67uYqmaNhG+cUIds2yn0YB4/MhGn6H5Xw08LRSxOeuRjU77Zl232Bfmwj462fj0 u0ofdw== -----END CERTIFICATE-----Generated at Thu Nov 21 01:26:04 2024 by rpki-client on console-ams.rpki-client.org