$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa File: 9AD1EA98626311EE8EE2D260C4F9AE02.roa (raw, json) Hash identifier: 0GmwzEvjQkpIQOKVrUCegjL2exFdSiExkQmTbC5jqtM= Subject key identifier: C5:9C:33:CC:6C:7A:F4:9D:72:F2:9D:79:A3:78:A1:AB:7F:87:80:A1 Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 5B Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa Signing time: Wed 13 Mar 2024 06:39:19 +0000 ROA not before: Wed 13 Mar 2024 06:39:19 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 16509 IP address blocks: 192.245.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 03:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Mar 13 06:39:19 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f14a17-0661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:c5:09:a4:9a:2c:29:9a:10:2b:8d:04:e8: 00:34:e3:a4:9c:fd:ff:4c:88:ba:72:06:65:b0:90: 57:38:aa:21:49:7d:1a:1c:a2:d4:34:cf:9b:21:6d: c8:fe:25:bf:c2:3b:a0:a7:63:c5:60:b4:c1:30:9e: 18:13:ab:ed:fb:04:14:10:f1:8b:d1:33:85:0a:7f: 9f:56:a3:4d:b6:48:ab:7e:3a:f5:07:ca:25:f2:1b: 03:90:b4:05:39:50:24:18:f6:c8:15:90:cf:d3:9c: 6a:76:ad:3a:8d:fa:19:f0:92:00:bb:ac:ae:2d:20: b0:5a:de:10:ed:31:5c:d1:94:b5:fa:40:8c:c4:5c: 23:1a:35:b6:00:1d:53:7a:cb:f0:37:a5:83:f1:84: 34:81:b9:c7:5b:30:c6:74:55:29:0c:1a:45:c7:f3: 1d:5b:84:3b:3d:2a:79:33:7e:55:26:e8:6d:cb:76: fe:e8:a9:64:06:d3:2d:89:96:bd:20:39:6a:2d:af: d7:f7:49:10:52:b9:94:3c:87:38:02:51:d7:d8:97: f4:21:51:07:77:f0:39:06:81:c6:93:c4:72:56:dd: 92:92:ff:01:56:89:1a:67:f9:8d:3b:5c:c1:bc:b0: 0e:8e:01:03:5c:1e:5e:5f:a9:22:db:b3:b4:7c:f9: 2a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:33:CC:6C:7A:F4:9D:72:F2:9D:79:A3:78:A1:AB:7F:87:80:A1 X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/9AD1EA98626311EE8EE2D260C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.245.106.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:c9:25:7b:18:75:9a:12:ce:aa:35:e1:d2:4f:19:93:d4:7e: e2:11:f7:38:ef:f3:e1:32:d9:92:67:5d:71:71:9e:a2:fa:d7: b2:e9:e9:b1:11:06:7c:c7:9f:76:fc:44:53:30:f9:38:67:62: d9:81:bd:0d:66:b2:b6:ef:89:75:7b:a9:ed:5b:d2:5b:2a:dd: 9d:2f:4d:74:09:15:6b:11:7f:a6:5b:c7:12:b9:97:1a:65:f9: 57:5f:ff:bb:32:2c:0c:e1:5c:9d:d9:e0:d6:e9:d8:65:3a:72: e1:4c:06:36:00:4c:2a:ae:63:49:3c:8e:9d:62:31:b5:46:dd: 13:af:8c:53:69:60:91:28:5b:43:97:8a:a4:4f:67:39:85:c0: 70:56:9e:fe:e3:9f:59:f1:e6:f5:60:4b:e9:b9:ae:0c:60:d2: 95:dd:55:9f:06:6b:74:60:8d:e7:bb:d2:aa:39:e2:90:9c:6c: 27:71:80:4d:c2:f1:db:f7:7a:67:f8:f2:ea:2c:dc:c3:06:6a: fa:73:80:b8:ae:52:70:01:03:60:3c:00:b9:dd:ef:e4:1b:04: 18:ea:57:30:c1:22:cd:c8:ec:60:6e:61:b6:6c:b2:2c:c3:0d: ff:96:be:49:f8:e3:2c:4f:3e:13:14:1d:d5:e4:fc:f8:50:96: 71:43:26:73 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RkY2MjExMC8GA1UEBRMoNTgzQ0JDN0JDOTY2MTQ1NzkwQzlGNkYyMjM2ODhBREFG RTVBRDNCODAeFw0yNDAzMTMwNjM5MTlaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjE0YTE3LTA2NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxJ8UJpJosKZoQK40E6AA046Sc/f9MiLpyBmWwkFc4qiFJfRocotQ0z5shbcj+ Jb/CO6CnY8VgtMEwnhgTq+37BBQQ8YvRM4UKf59Wo022SKt+OvUHyiXyGwOQtAU5 UCQY9sgVkM/TnGp2rTqN+hnwkgC7rK4tILBa3hDtMVzRlLX6QIzEXCMaNbYAHVN6 y/A3pYPxhDSBucdbMMZ0VSkMGkXH8x1bhDs9KnkzflUm6G3Ldv7oqWQG0y2Jlr0g OWotr9f3SRBSuZQ8hzgCUdfYl/QhUQd38DkGgcaTxHJW3ZKS/wFWiRpn+Y07XMG8 sA6OAQNcHl5fqSLbs7R8+Sr/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUxZwzzGx6 9J1y8p15o3ihq3+HgKEwHwYDVR0jBBgwFoAUWDy8e8lmFFeQyfbyI2iK2v5a07gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGRjYyLzExRjREOEQwNjI2 MjExRUU4MEJDODU1REM0RjlBRTAyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0R5OGU4bG1GRmVReWZieUkyaUsydjVhMDdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xMUY0RDhEMDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi85QUQxRUE5ODYy NjMxMUVFOEVFMkQyNjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMD1ajANBgkqhkiG9w0BAQsFAAOCAQEAb8klexh1mhLOqjXh 0k8Zk9R+4hH3OO/z4TLZkmddcXGeovrXsunpsREGfMefdvxEUzD5OGdi2YG9DWay tu+JdXup7VvSWyrdnS9NdAkVaxF/plvHErmXGmX5V1//uzIsDOFcndng1unYZTpy 4UwGNgBMKq5jSTyOnWIxtUbdE6+MU2lgkShbQ5eKpE9nOYXAcFae/uOfWfHm9WBL 6bmuDGDSld1VnwZrdGCN57vSqjnikJxsJ3GATcLx2/d6Z/jy6izcwwZq+nOAuK5S cAEDYDwAud3v5BsEGOpXMMEizcjsYG5htmyyLMMN/5a+SfjjLE8+ExQd1eT8+FCW cUMmcw== -----END CERTIFICATE-----Generated at Wed May 1 10:10:58 2024 by rpki-client on console-ams.rpki-client.org