$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/6D6692CAAA0211EEAADA3D32C4F9AE02.roa File: 6D6692CAAA0211EEAADA3D32C4F9AE02.roa (raw, json) Hash identifier: CayamNnE7wETFTDD/NCIu0mz4XuwsUDXz4NCIpKnHG4= Subject key identifier: 4E:72:52:40:B9:15:84:59:05:9A:13:15:EC:91:F0:50:EE:CE:36:8C Certificate issuer: /CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Certificate serial: 1265 Authority key identifier: A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/6D6692CAAA0211EEAADA3D32C4F9AE02.roa Signing time: Sat 20 Jan 2024 17:44:39 +0000 ROA not before: Sat 20 Jan 2024 17:44:38 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 10204 IP address blocks: 146.88.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4709 (0x1265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8/serialNumber=A111E81C4B3E27BDA6E2712497F6DBBA0CFB0826 Validity Not Before: Jan 20 17:44:38 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65ac0686-f16c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:12:12:b3:46:bc:46:dc:d1:5f:5d:23:7e: 8b:9b:e3:fa:30:03:b7:2f:1e:4b:fb:7d:28:93:6a: 3a:50:56:a4:38:e4:e4:c5:d9:86:e1:c5:1f:9d:c1: a5:7f:4e:cd:26:ef:8c:77:e0:28:a4:4e:16:7c:77: 35:e3:aa:8e:eb:a1:5c:a8:20:29:fa:49:4e:6d:d1: 22:6e:d5:2e:05:73:5a:93:73:b7:60:df:bd:18:60: f8:b4:74:bb:e2:49:61:f3:49:86:dd:85:a5:71:b8: 19:14:e8:39:16:4e:99:86:82:c1:6e:fb:3b:98:37: 06:f3:ab:48:0f:bf:26:dc:4a:fc:b5:a2:12:3e:a3: be:b2:51:0a:92:15:7b:6c:cd:17:28:f4:17:57:5c: 45:aa:60:4c:7b:bb:66:66:90:fa:38:09:a6:5d:93: c0:b7:53:1c:87:ae:3d:c0:8b:36:17:aa:99:08:c2: 43:78:71:80:77:53:29:a6:d7:ab:c5:cf:1c:23:e0: dc:28:4f:6f:79:a3:c1:c9:8e:32:18:dc:a9:23:68: a0:1b:7d:bc:31:3c:12:bb:90:2a:10:fe:48:ba:fe: b8:5d:50:e4:c5:61:3a:c1:c3:6c:72:23:50:73:5a: 41:35:76:51:22:a2:fa:29:f3:e9:16:3c:54:10:c5: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:52:40:B9:15:84:59:05:9A:13:15:EC:91:F0:50:EE:CE:36:8C X509v3 Authority Key Identifier: keyid:A1:11:E8:1C:4B:3E:27:BD:A6:E2:71:24:97:F6:DB:BA:0C:FB:08:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/oRHoHEs-J72m4nEkl_bbugz7CCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oRHoHEs-J72m4nEkl_bbugz7CCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/0D9931BAA11E11E89E636710C4F9AE02/6D6692CAAA0211EEAADA3D32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.196.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:19:be:31:b1:f1:75:64:07:fa:70:ab:93:65:94:69:4d:aa: 9e:b1:5d:08:3c:9e:32:9c:f5:8c:ff:a4:5f:a5:7f:4d:2e:54: ce:e2:86:5e:64:17:07:68:ab:ff:c5:49:15:5d:39:3b:cf:7d: 33:c5:66:48:dd:5f:72:9c:21:d7:8c:c7:55:bb:0f:01:25:9f: 9d:e4:30:b4:bd:4b:28:5d:9a:64:18:e0:93:94:a4:95:45:f3: b1:18:a8:47:ca:e9:d1:cd:f7:df:70:9f:a8:8d:bc:7e:20:ad: cb:85:93:0c:07:4d:84:5c:7d:18:bf:71:ce:6c:59:59:71:3a: f1:88:ae:32:5d:d7:bc:af:c9:5d:29:08:fd:96:29:2e:34:62: f2:85:cd:0f:ae:79:9b:11:4f:a8:13:8d:a9:25:82:cf:0f:99: 02:63:f5:49:f4:90:91:c3:a6:a0:0c:41:9f:1a:41:ff:42:24: 7d:dd:ed:60:27:33:cc:57:ae:53:dc:e3:50:a2:37:5b:31:80: 73:3d:56:1e:74:3b:6f:3b:60:bd:36:a1:71:33:dd:54:e3:4f: f7:35:25:e1:b0:1f:87:5b:bf:ab:05:69:03:f1:e3:f1:76:33: 49:d5:b7:b5:b8:77:86:26:81:3a:db:6a:48:29:20:26:1e:72: c2:8b:27:4c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEExMTFFODFDNEIzRTI3QkRBNkUyNzEyNDk3RjZEQkJB MENGQjA4MjYwHhcNMjQwMTIwMTc0NDM4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFjMDY4Ni1mMTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp30SErNGvEbc0V9dI36Lm+P6MAO3Lx5L+30ok2o6UFakOOTkxdmG4cUfncGl f07NJu+Md+AopE4WfHc146qO66FcqCAp+klObdEibtUuBXNak3O3YN+9GGD4tHS7 4klh80mG3YWlcbgZFOg5Fk6ZhoLBbvs7mDcG86tID78m3Er8taISPqO+slEKkhV7 bM0XKPQXV1xFqmBMe7tmZpD6OAmmXZPAt1Mch649wIs2F6qZCMJDeHGAd1Mppter xc8cI+DcKE9veaPByY4yGNypI2igG328MTwSu5AqEP5Iuv64XVDkxWE6wcNsciNQ c1pBNXZRIqL6KfPpFjxUEMW2hQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE5yUkC5 FYRZBZoTFeyR8FDuzjaMMB8GA1UdIwQYMBaAFKER6BxLPie9puJxJJf227oM+wgm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8wRDk5MzFCQUEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi9vUkhvSEVzLUo3Mm00bkVrbF9iYnVnejdD Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29SSG9IRXMtSjcybTRuRWtsX2JidWd6N0NDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFEQjgvMEQ5OTMxQkFBMTFFMTFFODlFNjM2NzEwQzRGOUFFMDIvNkQ2NjkyQ0FB QTAyMTFFRUFBREEzRDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKSWMQwDQYJKoZIhvcNAQELBQADggEBAG8ZvjGx8XVkB/pw q5NllGlNqp6xXQg8njKc9Yz/pF+lf00uVM7ihl5kFwdoq//FSRVdOTvPfTPFZkjd X3KcIdeMx1W7DwEln53kMLS9SyhdmmQY4JOUpJVF87EYqEfK6dHN999wn6iNvH4g rcuFkwwHTYRcfRi/cc5sWVlxOvGIrjJd17yvyV0pCP2WKS40YvKFzQ+ueZsRT6gT jaklgs8PmQJj9Un0kJHDpqAMQZ8aQf9CJH3d7WAnM8xXrlPc41CiN1sxgHM9Vh50 O287YL02oXEz3VTjT/c1JeGwH4dbv6sFaQPx4/F2M0nVt7W4d4YmgTrbakgpICYe csKLJ0w= -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:06 2024 by rpki-client on console-ams.rpki-client.org