$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa File: 038610FC2D1E11EFA25C6D16C4F9AE02.roa (raw, json) Hash identifier: nEx36xMYEspoRTHpBzsjyglWKve6HGzaUV9gJlWDtWQ= Subject key identifier: DB:09:B9:34:A6:DC:28:A5:D9:4A:94:24:27:A6:8F:53:23:C2:C7:C8 Certificate issuer: /CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Certificate serial: 22 Authority key identifier: 30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa Signing time: Tue 06 Aug 2024 16:12:43 +0000 ROA not before: Tue 06 Aug 2024 16:12:43 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38887 IP address blocks: 160.22.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC/serialNumber=30670F61B7E50E0B0B88E7251DE8784C03C9E462 Validity Not Before: Aug 6 16:12:43 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66b24b7b-54d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:47:07:6e:46:ad:b3:70:f8:c7:ef:f2:c4: 75:e3:59:e1:af:a4:a8:8b:10:af:5a:64:bd:bf:df: 30:f2:98:e7:9e:d9:87:95:de:ee:4d:20:14:88:39: 97:7c:bd:7f:f9:80:40:64:20:5a:6b:e5:06:e8:7d: 13:c9:70:5b:f5:b1:89:ec:fa:d0:30:e9:c0:64:91: 30:8c:39:6d:cd:28:48:75:c2:44:f4:e2:53:b4:82: d9:dc:40:3b:47:c6:1a:3e:24:45:df:1f:fd:15:38: 0f:68:43:07:18:b8:f3:ab:2b:4c:7b:9d:c8:c3:51: 73:dd:83:5b:fe:3f:d2:5b:ac:d7:f9:37:b6:12:54: c3:b6:40:b1:95:c4:9d:0f:d9:61:5d:fb:40:50:b8: b2:d4:43:db:f4:03:72:e0:1d:89:14:18:f4:c9:6b: 4b:1c:5a:fe:f6:08:16:68:e5:25:b1:44:ce:6a:e2: 90:dd:a4:92:de:9f:3f:53:14:64:8c:dc:1b:76:e8: dc:5e:f4:ee:bf:a7:0a:86:78:07:ac:cd:05:75:79: cb:1f:81:ff:4d:a4:6b:c6:12:f9:74:30:f9:5c:8b: a5:a2:f9:ae:4b:3d:a7:8d:c8:f4:c0:a0:d7:3e:18: f4:09:02:1a:cc:5a:d4:d7:42:76:b0:cf:5f:d7:e8: 3d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:09:B9:34:A6:DC:28:A5:D9:4A:94:24:27:A6:8F:53:23:C2:C7:C8 X509v3 Authority Key Identifier: keyid:30:67:0F:61:B7:E5:0E:0B:0B:88:E7:25:1D:E8:78:4C:03:C9:E4:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/MGcPYbflDgsLiOclHeh4TAPJ5GI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MGcPYbflDgsLiOclHeh4TAPJ5GI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/082A89F02A2911EF8895F11CC4F9AE02/038610FC2D1E11EFA25C6D16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.154.0/24 Signature Algorithm: sha256WithRSAEncryption 29:5b:11:42:19:e5:27:49:e7:a2:3f:d0:34:f9:4c:d9:15:58: 92:c7:96:d2:53:ba:15:41:8d:4d:89:43:21:58:41:9b:2b:f4: 9a:27:c8:36:3b:0d:7b:cc:18:41:b4:f0:80:fd:ce:4a:9b:c6: fc:c8:dd:9c:5e:5b:55:52:43:b3:40:52:b3:3c:90:98:19:5b: ba:6c:5d:ba:e1:53:e1:8d:cd:f8:06:e5:9b:bc:bd:48:c1:4e: 30:4a:1c:cb:4b:6a:15:af:08:09:21:f2:e1:2b:b6:a0:19:61: 53:1c:e0:d9:96:cb:59:dc:17:91:c3:01:74:d7:79:52:02:32: 95:a6:70:7b:50:07:bb:f9:00:10:1a:ce:2f:17:bb:f1:c0:05: a8:37:d3:c3:1c:c9:2a:51:91:1b:23:37:d0:34:b2:f0:23:7a: ab:8e:2d:9e:d0:d2:6c:07:8a:2e:b2:5d:3b:a9:25:94:2a:bf: 98:0c:a3:2a:a2:29:eb:3d:20:03:25:1a:cb:c9:e1:2c:96:f2: 14:a7:50:5e:b0:ac:51:ee:76:33:68:08:3e:4e:11:4d:a0:b3: 2a:79:ab:e8:2c:f4:94:57:0f:d7:bc:a6:ce:ec:a3:15:2d:5e: a4:f7:66:39:55:0a:3e:4a:6b:e3:fd:a2:1e:60:f1:00:a5:ba: 34:25:63:87 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTZFQzExMC8GA1UEBRMoMzA2NzBGNjFCN0U1MEUwQjBCODhFNzI1MURFODc4NEMw M0M5RTQ2MjAeFw0yNDA4MDYxNjEyNDNaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YjI0YjdiLTU0ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7VUcHbkats3D4x+/yxHXjWeGvpKiLEK9aZL2/3zDymOee2YeV3u5NIBSIOZd8 vX/5gEBkIFpr5QbofRPJcFv1sYns+tAw6cBkkTCMOW3NKEh1wkT04lO0gtncQDtH xho+JEXfH/0VOA9oQwcYuPOrK0x7ncjDUXPdg1v+P9JbrNf5N7YSVMO2QLGVxJ0P 2WFd+0BQuLLUQ9v0A3LgHYkUGPTJa0scWv72CBZo5SWxRM5q4pDdpJLenz9TFGSM 3Bt26Nxe9O6/pwqGeAeszQV1ecsfgf9NpGvGEvl0MPlci6Wi+a5LPaeNyPTAoNc+ GPQJAhrMWtTXQnawz1/X6D07AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU2wm5NKbc KKXZSpQkJ6aPUyPCx8gwHwYDVR0jBBgwFoAUMGcPYbflDgsLiOclHeh4TAPJ5GIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNkVDLzA4MkE4OUYwMkEy OTExRUY4ODk1RjExQ0M0RjlBRTAyL01HY1BZYmZsRGdzTGlPY2xIZWg0VEFQSjVH SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTUdjUFliZmxEZ3NMaU9jbEhlaDRUQVBKNUdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTZFQy8wODJBODlGMDJBMjkxMUVGODg5NUYxMUNDNEY5QUUwMi8wMzg2MTBGQzJE MUUxMUVGQTI1QzZEMTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAWmjANBgkqhkiG9w0BAQsFAAOCAQEAKVsRQhnlJ0nnoj/Q NPlM2RVYkseW0lO6FUGNTYlDIVhBmyv0mifINjsNe8wYQbTwgP3OSpvG/MjdnF5b VVJDs0BSszyQmBlbumxduuFT4Y3N+Ablm7y9SMFOMEocy0tqFa8ICSHy4Su2oBlh Uxzg2ZbLWdwXkcMBdNd5UgIylaZwe1AHu/kAEBrOLxe78cAFqDfTwxzJKlGRGyM3 0DSy8CN6q44tntDSbAeKLrJdO6kllCq/mAyjKqIp6z0gAyUay8nhLJbyFKdQXrCs Ue52M2gIPk4RTaCzKnmr6Cz0lFcP17ymzuyjFS1epPdmOVUKPkpr4/2iHmDxAKW6 NCVjhw== -----END CERTIFICATE-----Generated at Tue Oct 22 17:18:40 2024 by rpki-client on console-fra.rpki-client.org