$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/23AF26C40C2B11EBAD607865C4F9AE02.roa File: 23AF26C40C2B11EBAD607865C4F9AE02.roa (raw, json) Hash identifier: YCjgtUnq0bK/nQUFojfVd+RvvleBXGJZLtaNdj95Zd4= Subject key identifier: 40:A8:14:89:12:E5:58:87:06:89:E6:CB:CE:07:26:94:D4:BF:FF:9E Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 06CE Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/23AF26C40C2B11EBAD607865C4F9AE02.roa Signing time: Tue 30 Apr 2024 23:32:17 +0000 ROA not before: Tue 30 Apr 2024 23:32:17 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 133448 IP address blocks: 139.5.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 22:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Apr 30 23:32:17 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66317f81-e0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:8e:0d:5d:d7:3b:ff:8c:a5:98:df:c8:75: a3:cf:1b:ed:6d:ce:6a:c4:48:51:9b:ec:85:bd:b0: 3f:a5:ab:df:b3:24:ec:6f:07:a5:6b:ea:cd:7c:99: 81:7e:53:15:cb:68:c9:05:e9:f6:aa:38:92:16:11: 94:8a:da:32:23:b4:61:05:ba:6a:67:1e:07:c9:88: a4:97:b2:6e:0c:38:10:b7:e6:18:78:48:cc:83:15: 58:1b:0c:3e:90:3b:89:44:e1:f1:2a:c8:a8:73:9b: 80:21:5d:0f:69:ed:e8:66:08:0c:87:a8:bf:28:1a: 1e:6c:ce:e0:bc:0a:49:be:9c:c6:63:fa:d5:f4:32: db:cd:a8:42:aa:67:f2:76:de:d6:f3:6b:bc:ed:b7: 7c:83:4e:ee:f4:be:04:a1:00:c0:ff:66:19:90:f5: 19:28:58:6b:85:8a:38:19:0f:1b:be:76:79:da:e9: 63:d1:a9:99:93:7e:0c:3d:fd:a0:37:b4:17:08:b5: 94:71:02:f0:ea:40:ce:b0:79:86:04:7c:58:6f:16: 20:41:af:45:9c:a3:dc:3d:b7:bb:cc:8f:44:40:b9: 42:c4:1c:35:1a:8a:95:7d:bb:59:08:90:86:84:e6: 96:b6:69:ad:a9:c6:17:85:fa:cd:32:98:74:d5:90: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A8:14:89:12:E5:58:87:06:89:E6:CB:CE:07:26:94:D4:BF:FF:9E X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/23AF26C40C2B11EBAD607865C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.5.176.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d8:2c:4d:84:02:97:bd:26:98:9f:a3:3a:c4:35:ad:ce:b7: 7b:7c:ec:df:14:e9:9e:60:39:b4:14:f2:c6:6c:fd:11:b7:54: 85:96:5f:46:39:2a:62:ef:db:8b:03:e5:39:1d:3f:81:96:a3: 43:9c:fc:81:3c:3b:4f:4f:d3:d9:3e:20:5e:13:ab:6f:74:93: 56:64:7e:7a:25:0c:3a:30:d0:d8:82:ee:1e:ec:f9:30:41:0d: 00:a8:28:4c:83:04:a4:8f:eb:25:4d:27:f2:b8:c5:a1:e5:37: 32:3c:4e:89:21:2e:10:8e:53:26:7f:42:ef:41:1a:3e:d5:32: 81:3f:2c:d8:7b:75:13:2d:8c:76:63:c8:7d:38:ae:2a:63:d5: f2:7b:93:da:58:06:a8:12:60:98:42:08:52:7b:e8:d9:ee:31: 71:db:cf:90:c8:42:16:07:fc:4e:2e:a4:5c:e7:3c:4f:e0:ff: 6b:a8:c8:43:c7:f8:94:9c:d5:ba:33:ad:93:41:27:9c:ed:92: fd:c9:9b:bc:ab:f6:69:6e:6b:c9:81:69:a4:ed:bc:4c:e0:8a: 7f:5c:53:80:c5:d5:36:62:86:fc:08:d0:64:af:0d:16:7b:4f: d3:63:83:d1:1c:1c:81:45:66:fa:f2:ff:45:d5:29:9f:0b:41: 4b:4a:c6:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjQwNDMwMjMzMjE3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxN2Y4MS1lMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzOODV3XO/+MpZjfyHWjzxvtbc5qxEhRm+yFvbA/pavfsyTsbwela+rNfJmB flMVy2jJBen2qjiSFhGUitoyI7RhBbpqZx4HyYikl7JuDDgQt+YYeEjMgxVYGww+ kDuJROHxKsioc5uAIV0Pae3oZggMh6i/KBoebM7gvApJvpzGY/rV9DLbzahCqmfy dt7W82u87bd8g07u9L4EoQDA/2YZkPUZKFhrhYo4GQ8bvnZ52ulj0amZk34MPf2g N7QXCLWUcQLw6kDOsHmGBHxYbxYgQa9FnKPcPbe7zI9EQLlCxBw1GoqVfbtZCJCG hOaWtmmtqcYXhfrNMph01ZBcpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFECoFIkS 5ViHBonmy84HJpTUv/+eMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYzMTIvQUE5MkI5NzgwQzI5MTFFQjk1NDBERDYxQzRGOUFFMDIvMjNBRjI2QzQw QzJCMTFFQkFENjA3ODY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACLBbAwDQYJKoZIhvcNAQELBQADggEBADbYLE2EApe9Jpif ozrENa3Ot3t87N8U6Z5gObQU8sZs/RG3VIWWX0Y5KmLv24sD5TkdP4GWo0Oc/IE8 O09P09k+IF4Tq290k1ZkfnolDDow0NiC7h7s+TBBDQCoKEyDBKSP6yVNJ/K4xaHl NzI8TokhLhCOUyZ/Qu9BGj7VMoE/LNh7dRMtjHZjyH04ripj1fJ7k9pYBqgSYJhC CFJ76NnuMXHbz5DIQhYH/E4upFznPE/g/2uoyEPH+JSc1bozrZNBJ5ztkv3Jm7yr 9mlua8mBaaTtvEzgin9cU4DF1TZihvwI0GSvDRZ7T9Njg9EcHIFFZvry/0XVKZ8L QUtKxkk= -----END CERTIFICATE-----Generated at Fri May 3 00:07:13 2024 by rpki-client on console-ams.rpki-client.org