$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/CEF8F2768AAD11EF9133DE6EC4F9AE02.roa File: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (raw, json) Hash identifier: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo= Subject key identifier: F2:BA:E7:DA:39:5A:30:C1:9C:D9:EC:F3:41:19:D2:EB:0F:B4:D0:40 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 02 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/CEF8F2768AAD11EF9133DE6EC4F9AE02.roa Signing time: Tue 15 Oct 2024 04:27:38 +0000 ROA not before: Tue 15 Oct 2024 04:27:38 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 45248 IP address blocks: 160.187.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Oct 15 04:27:38 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=670def3a-0648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:3e:7e:2d:4a:62:a3:be:df:1d:45:a3:74:47: cc:dc:10:2b:46:0d:b1:89:f6:7c:08:64:a0:05:1d: 2b:0a:29:87:99:cc:3b:dd:b9:da:10:4d:ac:3d:d4: 25:03:bd:27:4e:c8:c2:9a:9e:1b:4c:80:91:9f:d0: ed:ea:c6:74:8f:d8:ab:ad:0a:cf:4f:de:59:89:12: 69:54:39:7f:90:ef:b9:20:82:b0:56:9b:f8:cc:46: 6b:51:c1:81:00:e9:80:9d:99:37:2e:54:cb:ef:ca: a5:c4:21:24:37:4b:05:be:76:cd:2e:e5:cf:36:e9: 5c:b6:c8:a5:32:35:d9:dc:97:8d:a4:7c:3a:0d:15: ea:33:f9:1c:ad:01:51:de:70:2e:48:2b:47:84:b4: 53:f0:9f:28:59:ee:62:32:99:a8:be:d8:2b:d5:4e: 26:d3:71:f7:06:a1:76:60:7b:09:7b:87:2b:ed:c3: bb:dc:eb:4c:bc:ea:35:9c:1b:f1:08:5a:06:74:8f: aa:80:e3:6c:4b:b3:41:03:99:1f:d8:b9:ab:bd:59: 40:ea:80:8d:f6:c9:3b:b7:ca:68:bf:43:b2:f9:4d: 1a:1d:9d:dc:1b:de:63:90:2e:d9:ae:3b:4d:57:ab: 4e:0e:03:2a:14:9e:12:7a:f0:ab:3c:79:3d:2c:62: ae:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BA:E7:DA:39:5A:30:C1:9C:D9:EC:F3:41:19:D2:EB:0F:B4:D0:40 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/CEF8F2768AAD11EF9133DE6EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.248.0/24 Signature Algorithm: sha256WithRSAEncryption 02:0c:6d:2e:65:60:7d:38:22:37:a6:f0:1c:1f:ce:47:29:0b: 0c:f1:8e:b6:22:5c:7f:b5:90:f4:db:48:82:53:45:eb:38:42: 39:95:4e:4b:00:86:a3:b5:ec:3a:25:c7:41:0d:d2:2e:1a:0f: df:11:d0:83:c2:db:85:e3:a4:07:40:4a:51:77:c3:c1:2a:3b: 06:4f:22:03:dd:cf:5b:62:67:0b:9f:c2:e0:ac:c8:48:97:63: b3:99:b8:07:dc:89:e7:dd:bb:4d:04:39:4e:8a:94:2f:85:bc: 8d:41:81:d3:15:87:45:db:24:f4:b0:78:16:63:9c:47:27:01: 50:19:69:b1:3b:73:50:60:1a:4e:01:65:75:c8:b3:ee:db:ab: 6a:74:00:c2:ce:bd:ae:0e:51:b8:21:05:7a:3f:e9:8c:7a:6c: fa:03:d7:5c:ca:e6:8c:65:82:16:70:82:a0:98:07:e1:97:5b: 71:f0:e6:8c:67:d3:ce:d4:50:86:c2:30:50:42:2a:a0:f9:ae: bb:93:fc:06:36:79:e2:d9:b7:ef:37:76:4d:a4:ce:be:3e:0d: 30:8e:1b:b8:5a:89:2f:2d:d9:dc:a0:d7:d5:ab:51:e3:04:ca: bc:1c:89:bd:09:07:67:b0:a8:62:c7:d8:e6:79:d2:6d:b8:94: c9:0c:10:4e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FGMTExMC8GA1UEBRMoNjY5NDFEQTdFQUYzMEU5MzQ0RTAzMjFGMEI3NTRFN0FF RkZDMzUyOTAeFw0yNDEwMTUwNDI3MzhaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MGRlZjNhLTA2NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD6Pn4tSmKjvt8dRaN0R8zcECtGDbGJ9nwIZKAFHSsKKYeZzDvdudoQTaw91CUD vSdOyMKanhtMgJGf0O3qxnSP2KutCs9P3lmJEmlUOX+Q77kggrBWm/jMRmtRwYEA 6YCdmTcuVMvvyqXEISQ3SwW+ds0u5c826Vy2yKUyNdncl42kfDoNFeoz+RytAVHe cC5IK0eEtFPwnyhZ7mIymai+2CvVTibTcfcGoXZgewl7hyvtw7vc60y86jWcG/EI WgZ0j6qA42xLs0EDmR/Yuau9WUDqgI32yTu3ymi/Q7L5TRodndwb3mOQLtmuO01X q04OAyoUnhJ68Ks8eT0sYq4FAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU8rrn2jla MMGc2ezzQRnS6w+00EAwHwYDVR0jBBgwFoAUZpQdp+rzDpNE4DIfC3VOeu/8NSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUYxLzAwMzEzQzMyOEFB RDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5T ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnBRZHAtcnpEcE5FNERJZkMzVk9ldV84TlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9DRUY4RjI3NjhB QUQxMUVGOTEzM0RFNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC7+DANBgkqhkiG9w0BAQsFAAOCAQEAAgxtLmVgfTgiN6bw HB/ORykLDPGOtiJcf7WQ9NtIglNF6zhCOZVOSwCGo7XsOiXHQQ3SLhoP3xHQg8Lb heOkB0BKUXfDwSo7Bk8iA93PW2JnC5/C4KzISJdjs5m4B9yJ5927TQQ5ToqUL4W8 jUGB0xWHRdsk9LB4FmOcRycBUBlpsTtzUGAaTgFldciz7turanQAws69rg5RuCEF ej/pjHps+gPXXMrmjGWCFnCCoJgH4ZdbcfDmjGfTztRQhsIwUEIqoPmuu5P8BjZ5 4tm37zd2TaTOvj4NMI4buFqJLy3Z3KDX1atR4wTKvByJvQkHZ7CoYsfY5nnSbbiU yQwQTg== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:25 2024 by rpki-client on console-fra.rpki-client.org