$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa File: 23E0203034AF11EE90E6263DC4F9AE02.roa (raw, json) Hash identifier: 99Zxb7vaD5skm/Wji+NgKYTp+kFQviV/tRwO1/z8ZWo= Subject key identifier: ED:3B:B2:8B:F6:AA:F5:F1:A1:D4:02:7E:41:66:3E:33:A8:61:9C:77 Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 67 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa Signing time: Mon 29 Jan 2024 06:48:21 +0000 ROA not before: Mon 29 Jan 2024 06:48:21 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 16509 IP address blocks: 192.150.138.0/24 maxlen: 24 192.150.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jan 29 06:48:21 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b74a35-a58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:65:97:02:b5:f4:cd:25:92:20:f5:92:3d:db: f4:8f:f1:5a:81:a0:88:1a:cd:47:15:45:26:07:35: 32:49:f4:e8:15:eb:29:79:8a:88:45:9d:3c:e7:02: bc:b0:ea:21:9d:ce:7a:d7:68:ec:97:50:be:f4:1f: d8:00:d8:1b:80:42:8d:a2:08:0d:f5:67:16:b3:cc: ec:eb:37:cb:05:e6:83:d2:92:b6:61:0f:a9:20:1c: ca:05:52:a5:72:48:90:70:1e:a2:e4:b7:13:84:33: 44:48:a8:25:f2:b7:61:56:24:cd:ad:f6:0d:41:ef: b4:37:94:9f:dd:40:cb:a2:24:ef:8b:0c:36:ef:49: 43:0f:0e:4f:4b:64:4a:65:5a:83:48:4e:42:64:f7: 59:3e:d6:6c:c6:c2:fe:d4:23:af:b2:43:d8:5a:06: 9d:17:04:18:19:41:63:be:71:e0:fb:98:5f:99:5c: 7d:d7:ad:85:b3:44:10:b7:32:79:47:05:2e:bd:0a: bb:53:85:13:35:df:83:00:fe:9a:0a:b3:09:ce:15: de:bd:84:43:ea:e7:9d:99:82:87:d3:b9:35:03:5b: e9:0d:87:ab:9f:97:44:72:f8:7e:73:e5:0a:83:7a: ee:22:40:60:df:a0:ee:9b:ef:d2:29:36:8b:4e:37: f1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:3B:B2:8B:F6:AA:F5:F1:A1:D4:02:7E:41:66:3E:33:A8:61:9C:77 X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/23E0203034AF11EE90E6263DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.150.138.0/23 Signature Algorithm: sha256WithRSAEncryption 31:57:33:b4:45:e8:68:f0:58:ce:a3:dd:b7:02:02:e6:72:01: 32:52:35:23:9a:0a:bc:4c:6f:2c:0f:2f:64:7b:4c:5d:4b:21: ce:c2:3a:c1:94:3d:e8:03:59:e2:67:78:94:e1:a8:99:9e:fb: f9:98:66:0a:83:d7:6b:ed:17:7a:5d:e5:41:1e:3c:bf:7d:2e: 26:b9:22:3d:5e:07:03:b2:b3:17:7c:df:ea:3e:64:48:13:ee: 9d:58:2a:a4:ff:3e:fd:3e:7b:4a:be:07:fb:9e:a5:7b:a7:0a: 15:f0:e2:9c:31:e9:e4:2d:37:7f:2f:25:90:fd:d6:09:86:78: b7:fc:9a:d6:e1:fa:13:e4:7f:e2:bd:65:76:ce:57:38:2a:82: 09:9f:7e:0f:6c:28:56:61:ca:e9:43:c2:2d:7b:68:eb:3a:16: e2:69:89:9e:eb:6d:33:8d:d7:a0:0a:83:76:05:44:a2:61:a3: f1:38:1f:40:9f:d3:75:87:08:f3:da:cc:ee:73:35:62:fd:70: ad:d3:e4:df:1d:4d:91:39:ae:25:b0:b3:a6:8b:e0:9e:d3:9a: 1e:57:99:50:96:8f:c9:2f:1a:cc:62:57:c3:b4:6a:51:df:f4: 2d:3a:11:44:1f:31:90:ce:f0:d0:16:2b:20:93:7a:cc:13:58: 0e:d1:e0:be -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzRCNTExMC8GA1UEBRMoRTBFQ0E3QkM1QjI1QTBDQTM3NEQ5QTgzQ0M0Q0Y5MERE NkNGMjIwOTAeFw0yNDAxMjkwNjQ4MjFaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Yjc0YTM1LWE1OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkZZcCtfTNJZIg9ZI92/SP8VqBoIgazUcVRSYHNTJJ9OgV6yl5iohFnTznAryw 6iGdznrXaOyXUL70H9gA2BuAQo2iCA31ZxazzOzrN8sF5oPSkrZhD6kgHMoFUqVy SJBwHqLktxOEM0RIqCXyt2FWJM2t9g1B77Q3lJ/dQMuiJO+LDDbvSUMPDk9LZEpl WoNITkJk91k+1mzGwv7UI6+yQ9haBp0XBBgZQWO+ceD7mF+ZXH3XrYWzRBC3MnlH BS69CrtThRM134MA/poKswnOFd69hEPq552ZgofTuTUDW+kNh6ufl0Ry+H5z5QqD eu4iQGDfoO6b79IpNotON/HtAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU7Tuyi/aq 9fGh1AJ+QWY+M6hhnHcwHwYDVR0jBBgwFoAU4OynvFsloMo3TZqDzEz5DdbPIgkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NEI1Lzk4MDQzNTZFMzRB QTExRUVBMDZBRTEzM0M0RjlBRTAyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUEln ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNE95bnZGc2xvTW8zVFpxRHpFejVEZGJQSWdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi8yM0UwMjAzMDM0 QUYxMUVFOTBFNjI2M0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcCWijANBgkqhkiG9w0BAQsFAAOCAQEAMVcztEXoaPBYzqPd twIC5nIBMlI1I5oKvExvLA8vZHtMXUshzsI6wZQ96ANZ4md4lOGomZ77+ZhmCoPX a+0Xel3lQR48v30uJrkiPV4HA7KzF3zf6j5kSBPunVgqpP8+/T57Sr4H+56le6cK FfDinDHp5C03fy8lkP3WCYZ4t/ya1uH6E+R/4r1lds5XOCqCCZ9+D2woVmHK6UPC LXto6zoW4mmJnuttM43XoAqDdgVEomGj8TgfQJ/TdYcI89rM7nM1Yv1wrdPk3x1N kTmuJbCzpovgntOaHleZUJaPyS8azGJXw7RqUd/0LToRRB8xkM7w0BYrIJN6zBNY DtHgvg== -----END CERTIFICATE-----Generated at Wed May 1 07:55:43 2024 by rpki-client on console-fra.rpki-client.org