$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/2343647034AF11EE90E6263DC4F9AE02.roa File: 2343647034AF11EE90E6263DC4F9AE02.roa (raw, json) Hash identifier: z8PyZSKkqE0OPDhgFdw2+5u40wblB/EVRusySHA4vow= Subject key identifier: 33:FD:48:49:CB:25:F6:0B:2E:D8:A1:02:36:25:7B:56:D3:B3:0E:AB Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 66 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/2343647034AF11EE90E6263DC4F9AE02.roa Signing time: Mon 29 Jan 2024 06:48:20 +0000 ROA not before: Mon 29 Jan 2024 06:48:20 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 14618 IP address blocks: 192.150.138.0/24 maxlen: 24 192.150.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jan 29 06:48:20 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b74a34-bd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fa:e5:14:54:95:dd:92:3e:5f:ac:0f:d8:e5: aa:71:7d:0b:01:a5:36:c3:79:ad:bb:c9:a4:1f:53: 4d:89:d8:dd:d4:d0:b9:28:0b:5d:52:38:30:99:02: 60:7b:24:16:7a:0e:9e:8d:83:53:56:df:e4:a8:bc: 66:89:dd:55:f2:71:8c:ac:4e:83:dd:e6:c1:39:07: 5e:d4:6c:ce:3e:f2:49:2d:8e:c5:af:36:2f:64:1b: 83:8f:d8:47:08:fd:41:7a:84:bc:89:03:8e:d8:f3: 6b:47:fe:c0:50:52:65:55:ef:a4:a8:1a:d6:6f:3a: 13:14:68:3a:a7:79:dd:79:d8:93:1b:3d:21:b7:c7: 1f:3f:84:fe:a3:0f:ed:12:43:9c:9c:a0:9c:ac:94: b4:f2:31:a9:99:e7:79:62:fc:6a:f6:a0:6b:ec:2c: 7d:ba:86:3c:a8:ff:aa:e0:2d:b8:1c:b5:43:d5:c0: bf:30:37:4e:6c:64:4a:e4:2f:e4:92:da:aa:d1:0b: 56:15:50:a1:87:c6:7e:a4:b8:22:f2:f3:a2:6b:be: ad:d7:43:c6:5b:3b:03:9b:9b:d5:a6:66:34:b3:69: 7c:9f:d8:01:89:8d:c9:21:ea:2c:ee:31:11:4b:01: 7d:eb:a5:f7:88:29:f3:1d:71:09:e8:41:f4:a8:56: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FD:48:49:CB:25:F6:0B:2E:D8:A1:02:36:25:7B:56:D3:B3:0E:AB X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/2343647034AF11EE90E6263DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.150.138.0/23 Signature Algorithm: sha256WithRSAEncryption ce:f2:80:86:0b:6f:49:5e:7d:32:30:df:92:4c:bf:83:ac:3a: 4a:6d:56:e6:db:af:96:b2:f7:7d:c3:31:c1:29:06:64:43:5c: 33:d8:cd:28:6c:a3:38:61:a2:1a:13:52:8f:a9:d3:fe:4a:a9: a5:cc:29:fc:f0:15:8a:d8:99:67:a2:6b:a9:9c:cd:73:e1:e2: 40:e2:b0:53:70:60:02:45:7f:27:c2:d0:50:d5:11:e3:ae:05: 13:5a:cc:4f:50:1a:bf:8a:6c:a8:c9:9e:7a:17:23:49:98:70: 29:a4:e7:39:af:47:eb:f8:0a:d8:70:d7:77:3e:12:b3:b5:c1: 73:fa:11:9c:c8:6f:cc:f9:a5:76:d0:2c:de:38:79:d2:59:29: a9:42:a5:be:94:44:7f:41:a9:cc:6d:ef:0f:3f:ed:c9:02:7d: 48:31:ee:9a:f9:77:13:20:d3:4a:e6:21:33:e2:12:ec:bf:30: 21:f0:18:58:43:87:ac:bd:5a:3a:88:8a:ec:82:19:42:25:a2: 91:cd:d9:85:33:df:30:57:83:a1:67:e4:86:87:d3:a4:5a:96: 81:9a:c1:1b:c2:f7:68:83:8d:96:36:4a:35:e3:bf:e0:47:79: cc:eb:6c:7a:a9:e4:b2:79:00:2f:4e:fb:00:9c:77:07:3d:28: 92:e6:80:88 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzRCNTExMC8GA1UEBRMoRTBFQ0E3QkM1QjI1QTBDQTM3NEQ5QTgzQ0M0Q0Y5MERE NkNGMjIwOTAeFw0yNDAxMjkwNjQ4MjBaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Yjc0YTM0LWJkMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDm+uUUVJXdkj5frA/Y5apxfQsBpTbDea27yaQfU02J2N3U0LkoC11SODCZAmB7 JBZ6Dp6Ng1NW3+SovGaJ3VXycYysToPd5sE5B17UbM4+8kktjsWvNi9kG4OP2EcI /UF6hLyJA47Y82tH/sBQUmVV76SoGtZvOhMUaDqned152JMbPSG3xx8/hP6jD+0S Q5ycoJyslLTyMamZ53li/Gr2oGvsLH26hjyo/6rgLbgctUPVwL8wN05sZErkL+SS 2qrRC1YVUKGHxn6kuCLy86Jrvq3XQ8ZbOwObm9WmZjSzaXyf2AGJjckh6izuMRFL AX3rpfeIKfMdcQnoQfSoVu+rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUM/1IScsl 9gsu2KECNiV7VtOzDqswHwYDVR0jBBgwFoAU4OynvFsloMo3TZqDzEz5DdbPIgkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NEI1Lzk4MDQzNTZFMzRB QTExRUVBMDZBRTEzM0M0RjlBRTAyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUEln ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNE95bnZGc2xvTW8zVFpxRHpFejVEZGJQSWdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi8yMzQzNjQ3MDM0 QUYxMUVFOTBFNjI2M0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcCWijANBgkqhkiG9w0BAQsFAAOCAQEAzvKAhgtvSV59MjDf kky/g6w6Sm1W5tuvlrL3fcMxwSkGZENcM9jNKGyjOGGiGhNSj6nT/kqppcwp/PAV itiZZ6JrqZzNc+HiQOKwU3BgAkV/J8LQUNUR464FE1rMT1Aav4psqMmeehcjSZhw KaTnOa9H6/gK2HDXdz4Ss7XBc/oRnMhvzPmldtAs3jh50lkpqUKlvpREf0GpzG3v Dz/tyQJ9SDHumvl3EyDTSuYhM+IS7L8wIfAYWEOHrL1aOoiK7IIZQiWikc3ZhTPf MFeDoWfkhofTpFqWgZrBG8L3aIONljZKNeO/4Ed5zOtseqnksnkAL077AJx3Bz0o kuaAiA== -----END CERTIFICATE-----Generated at Wed May 1 08:05:05 2024 by rpki-client on console-ams.rpki-client.org