$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa File: AFA37450139811EA807F1A26C4F9AE02.roa (raw, json) Hash identifier: l6ozucYTFKjn39HEiVgGalsJ6EF9CCKenjj1DUfT/Ak= Subject key identifier: 77:F8:3D:6B:8E:B6:19:B6:39:8D:21:A5:97:A4:DA:4F:1D:D4:43:6C Certificate issuer: /CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Certificate serial: 1984 Authority key identifier: 8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa Signing time: Mon 22 Jan 2024 16:12:40 +0000 ROA not before: Mon 22 Jan 2024 16:12:40 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 24389 IP address blocks: 37.111.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6532 (0x1984) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3A74/serialNumber=8E11FCB4E8BD63D27B84EB2D52670CA174F9C43C Validity Not Before: Jan 22 16:12:40 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65ae93f8-f9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:a0:3d:56:d4:70:e9:ef:d9:ea:21:22:1a: 27:46:30:9b:f0:b6:3f:70:ec:49:4f:be:43:81:bb: 21:19:23:0d:79:a8:b6:db:d7:91:d4:72:72:19:60: 91:e0:f5:9a:93:91:35:1a:00:a0:3f:16:75:00:8e: cf:f4:17:cb:96:74:3e:f1:c9:7f:b0:1d:9e:0f:81: 30:1e:1f:72:08:1b:12:95:6c:d2:16:c1:dd:75:a5: 32:3d:ba:6d:eb:2c:83:da:81:ed:b9:6f:85:7a:90: 1d:57:a1:fc:c3:e5:56:64:7f:1e:64:97:17:d3:0c: dd:8e:bb:25:df:3c:8c:f7:67:0c:38:45:39:55:95: cd:f3:99:bc:9b:6d:aa:3a:7c:d4:fc:0b:cd:4c:51: dd:1e:b7:20:c8:bd:7e:a3:99:d1:f7:d2:59:b0:75: fe:12:a9:23:c0:60:d6:8f:48:92:16:5a:bc:e3:47: 38:df:a1:ae:62:6c:11:92:8a:ca:7a:c6:e0:a2:3d: 8a:c3:96:08:f6:be:fb:09:65:ea:65:4c:79:f4:2c: d0:be:aa:0c:97:93:fd:5c:f3:91:d4:71:78:50:8d: 72:61:d1:3f:a6:82:16:37:ab:33:d6:fb:51:df:63: 68:ab:df:00:de:94:ed:52:9d:25:76:29:68:05:48: d7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F8:3D:6B:8E:B6:19:B6:39:8D:21:A5:97:A4:DA:4F:1D:D4:43:6C X509v3 Authority Key Identifier: keyid:8E:11:FC:B4:E8:BD:63:D2:7B:84:EB:2D:52:67:0C:A1:74:F9:C4:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/jhH8tOi9Y9J7hOstUmcMoXT5xDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jhH8tOi9Y9J7hOstUmcMoXT5xDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3A74/753D71EE3AB511E7B8609F1CC4F9AE02/AFA37450139811EA807F1A26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 37.111.192.0/18 Signature Algorithm: sha256WithRSAEncryption 52:5a:3d:d3:c1:4f:d2:d2:31:f6:a7:fd:e0:8b:f6:e8:4c:28: 94:63:9d:48:7e:b2:3a:c9:8a:ec:13:6a:3e:83:26:fe:17:c9: 1d:9d:2a:1e:00:db:b2:c7:b8:1f:c2:79:73:64:6e:91:aa:9a: 9a:21:2a:66:84:ee:9b:08:7e:ce:2e:99:a2:61:ad:bf:f3:fa: 3b:32:b8:ae:f3:c3:f9:98:bf:72:4b:12:23:e9:74:76:d9:53: 0b:74:fd:bd:45:4e:35:f2:cc:5a:9d:d7:62:3f:2d:df:24:3e: 25:61:7a:31:cd:92:a1:71:11:71:59:c4:b0:57:72:ed:da:6e: 2c:1e:39:89:4f:24:a6:12:a3:1a:4c:6a:dd:8d:0a:86:b7:87: 61:5d:4c:7f:d5:07:8d:81:37:4e:79:b1:e4:7d:96:4a:9a:f4: d7:e7:6d:b0:49:92:38:a9:27:58:05:ec:15:ad:a7:2e:cf:4a: b6:43:ad:65:33:83:0e:23:4f:95:29:cf:52:d2:61:77:a3:98: 48:3e:9b:0d:83:52:3a:9f:b8:2e:86:5a:f5:64:6a:b9:5c:8e: b6:49:9d:bc:52:b9:6c:86:12:ff:dd:06:a1:a7:af:ac:ea:15: 91:c7:47:db:2d:31:85:48:04:5f:3b:a9:5d:fa:95:2e:20:ee: 7a:3b:93:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBNzQxMTAvBgNVBAUTKDhFMTFGQ0I0RThCRDYzRDI3Qjg0RUIyRDUyNjcwQ0Ex NzRGOUM0M0MwHhcNMjQwMTIyMTYxMjQwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFlOTNmOC1mOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZigPVbUcOnv2eohIhonRjCb8LY/cOxJT75DgbshGSMNeai229eR1HJyGWCR 4PWak5E1GgCgPxZ1AI7P9BfLlnQ+8cl/sB2eD4EwHh9yCBsSlWzSFsHddaUyPbpt 6yyD2oHtuW+FepAdV6H8w+VWZH8eZJcX0wzdjrsl3zyM92cMOEU5VZXN85m8m22q OnzU/AvNTFHdHrcgyL1+o5nR99JZsHX+EqkjwGDWj0iSFlq840c436GuYmwRkorK esbgoj2Kw5YI9r77CWXqZUx59CzQvqoMl5P9XPOR1HF4UI1yYdE/poIWN6sz1vtR 32Noq98A3pTtUp0ldiloBUjXvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHf4PWuO thm2OY0hpZek2k8d1ENsMB8GA1UdIwQYMBaAFI4R/LTovWPSe4TrLVJnDKF0+cQ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0E3NC83NTNENzFFRTNB QjUxMUU3Qjg2MDlGMUNDNEY5QUUwMi9qaEg4dE9pOVk5SjdoT3N0VW1jTW9YVDV4 RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2poSDh0T2k5WTlKN2hPc3RVbWNNb1hUNXhEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzNBNzQvNzUzRDcxRUUzQUI1MTFFN0I4NjA5RjFDQzRGOUFFMDIvQUZBMzc0NTAx Mzk4MTFFQTgwN0YxQTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAYlb8AwDQYJKoZIhvcNAQELBQADggEBAFJaPdPBT9LSMfan /eCL9uhMKJRjnUh+sjrJiuwTaj6DJv4XyR2dKh4A27LHuB/CeXNkbpGqmpohKmaE 7psIfs4umaJhrb/z+jsyuK7zw/mYv3JLEiPpdHbZUwt0/b1FTjXyzFqd12I/Ld8k PiVhejHNkqFxEXFZxLBXcu3abiweOYlPJKYSoxpMat2NCoa3h2FdTH/VB42BN055 seR9lkqa9NfnbbBJkjipJ1gF7BWtpy7PSrZDrWUzgw4jT5Upz1LSYXejmEg+mw2D UjqfuC6GWvVkarlcjrZJnbxSuWyGEv/dBqGnr6zqFZHHR9stMYVIBF87qV36lS4g 7no7k1Y= -----END CERTIFICATE-----Generated at Fri Nov 22 17:56:20 2024 by rpki-client on console-fra.rpki-client.org