$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa File: 23E0203034AF11EE90E6263DC4F9AE02.roa (raw, json) Hash identifier: qRwojUTlxnLhuw/Mk800h2tw73R4wHeoNMLoVaIWLSQ= Subject key identifier: 3A:C4:74:8B:7B:BB:DC:09:E8:31:CF:53:C3:DF:6D:10:B7:D2:EE:41 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 0127 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa Signing time: Fri 31 Jan 2025 04:20:11 +0000 ROA not before: Fri 31 Jan 2025 04:20:11 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 16509 IP address blocks: 192.150.138.0/24 maxlen: 24 192.150.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5 Validity Not Before: Jan 31 04:20:11 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=679c4f7b-46ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d0:a5:c9:ca:7d:7b:0f:cd:83:bb:3f:06:64: 80:e8:60:59:e9:c0:21:ee:db:15:69:85:5c:19:77: 94:4b:d6:10:f3:d8:a4:ee:ef:a5:92:18:74:70:64: 1c:e8:99:37:d8:0d:14:a1:85:98:f2:78:22:98:bf: 4c:50:b7:ef:de:84:45:4a:fa:6c:f6:19:cd:5e:52: 02:99:aa:3c:2d:3a:47:0a:2d:49:b9:a8:a1:0a:36: 00:0a:42:97:62:9b:b7:1d:b5:2c:1d:92:96:68:da: fc:0b:ce:e0:a6:7e:40:34:0e:e0:54:f9:37:c8:1e: f7:96:b3:ef:4c:34:00:65:8f:ff:1b:9b:76:18:82: 4a:54:c3:ef:c0:13:d9:4f:1c:25:21:58:89:ce:25: 72:3a:dd:1a:ae:43:96:8d:7b:29:eb:14:76:d9:51: af:6f:b4:7a:88:e2:c6:30:d5:c4:36:ec:73:0e:54: 6e:95:19:c4:6b:9b:20:e8:0a:4f:8a:22:ec:22:62: db:81:ae:ec:5f:92:a2:36:4d:3b:3a:b8:44:af:6a: 76:b7:e0:fc:75:07:0e:50:ba:b4:bd:08:87:0f:11: 12:28:a2:16:76:2d:3f:f7:c5:1e:05:ca:6a:64:9f: d8:37:4a:29:ec:4f:34:9a:b3:fd:8e:8e:6b:b4:f3: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C4:74:8B:7B:BB:DC:09:E8:31:CF:53:C3:DF:6D:10:B7:D2:EE:41 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.150.138.0/23 Signature Algorithm: sha256WithRSAEncryption a5:5b:1a:11:08:70:69:f6:88:fc:89:7e:bd:42:c3:1e:6b:c9: 4a:da:68:00:f2:1e:10:a8:d6:72:d5:86:b3:3a:8f:fd:60:64: e1:2c:58:98:87:50:56:41:a8:9c:6c:0e:e1:44:c6:a5:f1:88: 19:23:e3:de:1b:fa:fe:6c:11:ff:df:50:63:62:21:36:af:51: 88:9b:46:d8:f5:99:d0:6c:f1:d4:39:13:c7:c9:54:88:3f:ed: ef:b3:90:fd:f8:a6:b7:c3:58:7f:e1:cb:52:ef:e8:ae:0d:7b: d3:f3:b6:b3:6b:8b:5a:d7:a5:f1:cb:83:bf:23:1a:aa:fc:b0: 1a:98:d5:90:25:47:32:bc:be:76:65:d7:bf:c4:c2:58:3c:f1: 2e:32:d7:dd:1a:ff:1a:b2:14:e1:c0:32:7e:8c:dd:0e:df:9b: 58:4f:53:34:ef:16:52:4b:4b:e1:ed:ee:ac:3f:79:6d:10:a3: 66:bc:29:3e:b4:03:00:e9:ac:b6:68:0c:46:c1:65:aa:fa:b4: 1a:cd:09:ca:14:96:4c:dd:ab:2f:ae:e8:b5:be:e3:f1:7d:99: 1c:6a:01:8f:d2:0a:e3:31:8c:2b:06:30:0a:52:67:12:70:0c: 9b:0a:3d:19:7a:54:ef:ab:0e:93:69:c5:31:64:c5:f4:d8:63: 36:78:e6:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc0QjUxMTAvBgNVBAUTKEUwRUNBN0JDNUIyNUEwQ0EzNzREOUE4M0NDNENGOTBE RDZDRjIyMDkwHhcNMjUwMTMxMDQyMDExWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzljNGY3Yi00NmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNClycp9ew/Ng7s/BmSA6GBZ6cAh7tsVaYVcGXeUS9YQ89ik7u+lkhh0cGQc 6Jk32A0UoYWY8ngimL9MULfv3oRFSvps9hnNXlICmao8LTpHCi1JuaihCjYACkKX Ypu3HbUsHZKWaNr8C87gpn5ANA7gVPk3yB73lrPvTDQAZY//G5t2GIJKVMPvwBPZ TxwlIViJziVyOt0arkOWjXsp6xR22VGvb7R6iOLGMNXENuxzDlRulRnEa5sg6ApP iiLsImLbga7sX5KiNk07OrhEr2p2t+D8dQcOULq0vQiHDxESKKIWdi0/98UeBcpq ZJ/YN0op7E80mrP9jo5rtPNRwQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDrEdIt7 u9wJ6DHPU8PfbRC30u5BMB8GA1UdIwQYMBaAFODsp7xbJaDKN02ag8xM+Q3WzyIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzRCNS85ODA0MzU2RTM0 QUExMUVFQTA2QUUxMzNDNEY5QUUwMi80T3ludkZzbG9NbzNUWnFEekV6NURkYlBJ Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUElnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzc0QjUvOTgwNDM1NkUzNEFBMTFFRUEwNkFFMTMzQzRGOUFFMDIvMjNFMDIwMzAz NEFGMTFFRTkwRTYyNjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHAloowDQYJKoZIhvcNAQELBQADggEBAKVbGhEIcGn2iPyJ fr1Cwx5ryUraaADyHhCo1nLVhrM6j/1gZOEsWJiHUFZBqJxsDuFExqXxiBkj494b +v5sEf/fUGNiITavUYibRtj1mdBs8dQ5E8fJVIg/7e+zkP34prfDWH/hy1Lv6K4N e9PztrNri1rXpfHLg78jGqr8sBqY1ZAlRzK8vnZl17/Ewlg88S4y190a/xqyFOHA Mn6M3Q7fm1hPUzTvFlJLS+Ht7qw/eW0Qo2a8KT60AwDprLZoDEbBZar6tBrNCcoU lkzdqy+u6LW+4/F9mRxqAY/SCuMxjCsGMApSZxJwDJsKPRl6VO+rDpNpxTFkxfTY YzZ45kI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:52 2025 by rpki-client