$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa File: A40873CE7FB811EB82018D29C4F9AE02.roa (raw, json) Hash identifier: GKP5taJaLT0/BVslpBvisPkis2pdFhShqf+TdK4IIA0= Subject key identifier: 96:74:4D:F4:9B:BB:63:E2:BE:2F:BF:A0:B0:1A:70:21:7D:C3:E3:0E Certificate issuer: /CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Certificate serial: 05A5 Authority key identifier: B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa Signing time: Mon 15 Apr 2024 00:32:30 +0000 ROA not before: Mon 15 Apr 2024 00:32:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 140637 IP address blocks: 194.193.16.0/22 maxlen: 24 194.193.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3C4/serialNumber=B6FD6F4B4FB7C3247C599299B2E8BAFB5A8BBA72 Validity Not Before: Apr 15 00:32:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=661c759d-0d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fb:ee:ee:31:09:1a:ba:28:ae:65:52:52:44: fe:98:d3:d9:02:3e:7c:fe:66:79:aa:64:ea:1d:4b: 2f:f4:7a:fc:57:a8:f5:5a:c3:5d:36:71:6c:37:8c: 61:7d:fd:0a:f0:65:08:90:bd:c5:7d:63:bf:e4:3f: e0:25:46:f3:dc:b0:d0:61:e9:7e:f9:36:a1:45:ab: 39:ca:d7:07:f6:2b:fc:33:9f:a7:1b:1e:de:1e:0d: b8:20:27:ce:f5:0e:eb:f3:50:05:b1:81:ff:5c:1a: 8a:06:72:f0:f9:f5:56:60:f5:c1:1b:8c:69:f0:bd: 36:d0:2c:09:46:e3:e9:29:82:9d:37:de:07:b9:14: e4:4a:19:fd:14:db:f3:68:26:42:a7:5a:53:a8:cc: b5:27:95:55:5b:7c:e8:c3:e8:13:aa:8e:46:a0:b9: 03:68:84:f3:c3:aa:8e:6b:21:17:3d:76:48:6e:b6: d9:f0:8d:b0:78:73:0d:b0:2a:18:17:d1:08:91:6a: 95:28:19:f8:ba:17:26:72:ee:ad:94:29:e3:8a:7e: 3e:e6:da:9e:30:7b:58:46:26:b1:f2:97:38:f7:6d: fe:ca:70:a6:82:c1:be:06:69:ff:13:57:ba:af:b7: 6b:75:84:16:57:86:12:95:d2:a9:db:6e:eb:07:55: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:74:4D:F4:9B:BB:63:E2:BE:2F:BF:A0:B0:1A:70:21:7D:C3:E3:0E X509v3 Authority Key Identifier: keyid:B6:FD:6F:4B:4F:B7:C3:24:7C:59:92:99:B2:E8:BA:FB:5A:8B:BA:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/tv1vS0-3wyR8WZKZsui6-1qLunI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/tv1vS0-3wyR8WZKZsui6-1qLunI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/6DD9F3347F9711EBADDC5F15C4F9AE02/A40873CE7FB811EB82018D29C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 194.193.16.0/22 194.193.28.0/22 Signature Algorithm: sha256WithRSAEncryption 15:cb:23:91:90:cd:89:15:c3:f1:06:03:18:f3:5c:6a:d7:91: 93:70:6a:cf:94:65:d3:69:a7:5b:b6:e1:21:a7:80:00:da:4d: 38:ef:49:d2:a6:ee:ea:82:12:83:d5:e5:c0:3a:a1:47:2a:e5: b8:0e:cb:cd:3c:d0:f2:4b:5c:94:29:2a:5e:af:06:21:1d:39: 7d:9d:23:6c:b8:b4:66:c6:4a:8f:ec:f5:7a:d4:af:99:7f:3b: 68:44:ee:2e:fc:32:f0:8d:f9:9d:25:a5:7a:1f:21:88:30:62: a5:93:d7:04:01:2c:ae:69:74:c3:2e:d6:68:f0:3c:8c:d1:6a: ff:14:db:3d:f7:82:be:d8:e0:82:e5:e8:3c:84:69:42:0d:80: de:9d:55:09:02:f9:40:8a:32:ae:94:f9:9e:30:70:b1:19:24: 33:1b:ef:9d:48:11:6a:43:f6:7a:7b:24:b8:0a:fc:08:58:eb: 8f:be:dd:b9:8c:87:c9:41:c4:7e:0d:c9:97:1a:a7:ee:42:e1: 4a:44:88:28:d1:3c:98:43:3a:cc:18:9c:a2:cb:a6:38:c8:29: d7:68:5a:d5:9d:4a:0c:11:78:47:9e:f6:08:d2:08:0a:09:43: c0:75:2e:11:ce:40:9e:5e:31:19:36:ce:43:c5:ac:2c:90:2d: 2f:41:ca:97 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQzQxMTAvBgNVBAUTKEI2RkQ2RjRCNEZCN0MzMjQ3QzU5OTI5OUIyRThCQUZC NUE4QkJBNzIwHhcNMjQwNDE1MDAzMjMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFjNzU5ZC0wZDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fvu7jEJGroormVSUkT+mNPZAj58/mZ5qmTqHUsv9Hr8V6j1WsNdNnFsN4xh ff0K8GUIkL3FfWO/5D/gJUbz3LDQYel++TahRas5ytcH9iv8M5+nGx7eHg24ICfO 9Q7r81AFsYH/XBqKBnLw+fVWYPXBG4xp8L020CwJRuPpKYKdN94HuRTkShn9FNvz aCZCp1pTqMy1J5VVW3zow+gTqo5GoLkDaITzw6qOayEXPXZIbrbZ8I2weHMNsCoY F9EIkWqVKBn4uhcmcu6tlCnjin4+5tqeMHtYRiax8pc4923+ynCmgsG+Bmn/E1e6 r7drdYQWV4YSldKp227rB1USCwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJZ0TfSb u2Pivi+/oLAacCF9w+MOMB8GA1UdIwQYMBaAFLb9b0tPt8MkfFmSmbLouvtai7py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC82REQ5RjMzNDdG OTcxMUVCQUREQzVGMTVDNEY5QUUwMi90djF2UzAtM3d5UjhXWktac3VpNi0xcUx1 bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3R2MXZTMC0zd3lSOFdaS1pzdWk2LTFxTHVuSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UzQzQvNkREOUYzMzQ3Rjk3MTFFQkFEREM1RjE1QzRGOUFFMDIvQTQwODczQ0U3 RkI4MTFFQjgyMDE4RDI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBALCwRADBALCwRwwDQYJKoZIhvcNAQELBQADggEBABXLI5GQ zYkVw/EGAxjzXGrXkZNwas+UZdNpp1u24SGngADaTTjvSdKm7uqCEoPV5cA6oUcq 5bgOy8080PJLXJQpKl6vBiEdOX2dI2y4tGbGSo/s9XrUr5l/O2hE7i78MvCN+Z0l pXofIYgwYqWT1wQBLK5pdMMu1mjwPIzRav8U2z33gr7Y4ILl6DyEaUINgN6dVQkC +UCKMq6U+Z4wcLEZJDMb751IEWpD9np7JLgK/AhY64++3bmMh8lBxH4NyZcap+5C 4UpEiCjRPJhDOswYnKLLpjjIKddoWtWdSgwReEee9gjSCAoJQ8B1LhHOQJ5eMRk2 zkPFrCyQLS9Bypc= -----END CERTIFICATE-----Generated at Sat Nov 23 00:08:50 2024 by rpki-client on console-ams.rpki-client.org