$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/4CD3C8DC14D011EA93366A85C4F9AE02.roa File: 4CD3C8DC14D011EA93366A85C4F9AE02.roa (raw, json) Hash identifier: XB2QXLLzdZtLLUf24MhxFCrf2t9zzRGffOxjlSP+z00= Subject key identifier: D6:1E:C1:C0:35:52:FC:FE:E1:CB:BB:A9:DD:DA:C2:66:5D:C6:F3:ED Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0C3D Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/4CD3C8DC14D011EA93366A85C4F9AE02.roa Signing time: Thu 28 Dec 2023 18:56:31 +0000 ROA not before: Thu 28 Dec 2023 18:56:31 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 10455 IP address blocks: 134.159.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3133 (0xc3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Dec 28 18:56:31 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658dc4de-bfb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:04:e4:3a:28:5b:f5:5e:41:ae:ea:dc:68: 2e:e3:f7:97:67:52:b3:8e:3c:1b:70:da:91:eb:97: 54:6a:26:23:3a:11:02:f7:99:36:5f:22:43:ce:3c: 85:f0:c9:b7:af:0f:45:4c:38:0d:31:6c:b6:d8:32: 6b:26:06:f9:a7:51:af:2e:0d:0c:6b:d3:1f:e2:dd: da:6e:8f:cb:28:23:ac:da:a9:5a:e7:4a:85:f3:71: 16:bf:50:38:49:d4:43:2b:92:7f:2a:d6:33:50:df: 14:19:84:74:2d:26:32:7c:9e:59:4b:10:20:23:58: da:d9:28:f7:f5:13:4f:04:0a:d5:0a:5d:6a:16:2d: c1:04:a0:77:8c:04:c9:a3:48:d2:0f:e4:03:b4:07: e4:28:e9:d4:07:38:47:94:c3:5f:31:83:43:bb:4c: 3e:1d:20:44:e8:9c:73:ed:22:1f:ea:7c:9e:c5:bb: 4e:8e:42:1d:5c:1a:f8:c5:e8:67:b0:28:b9:8e:ef: 60:93:d1:8b:a5:6b:73:81:0c:b1:7f:3e:08:69:e5: 5e:49:64:e8:40:b1:20:4e:eb:63:06:e5:92:97:96: d6:d4:75:1f:16:a4:b1:fb:fa:c6:81:aa:81:75:1f: 59:4e:ea:7c:8c:5e:96:a9:55:31:85:87:04:3c:c1: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1E:C1:C0:35:52:FC:FE:E1:CB:BB:A9:DD:DA:C2:66:5D:C6:F3:ED X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/4CD3C8DC14D011EA93366A85C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.159.99.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:80:07:2a:10:02:d8:30:92:28:c8:a6:e2:c4:02:aa:26:cc: 95:1f:e1:54:c1:c3:05:a8:37:35:5f:97:17:ab:7a:e0:69:d8: 00:48:7e:ea:b5:26:59:81:39:f7:f0:21:05:82:8e:61:63:f9: 75:0f:c5:8f:a0:0f:f2:28:08:10:c9:65:6b:c8:3d:46:7c:84: cb:bb:9e:b3:fb:a9:cb:e2:91:29:e2:b6:29:b6:9c:a4:00:ea: 47:0c:e5:9d:74:51:75:5e:ec:e7:15:97:1a:63:54:49:14:b8: 97:1d:6b:b6:4e:15:b0:08:4b:ff:1c:3b:b7:28:a3:7e:3b:10: 27:4f:7f:42:6c:0d:b2:8d:df:73:b1:85:b4:18:c2:98:79:29: f6:12:19:fb:94:f3:e4:df:49:80:2e:cb:7d:4e:7d:3f:f6:01: 8f:34:ae:95:31:bf:10:39:5d:9b:2f:75:b8:77:51:69:41:b9: b8:82:af:c3:82:f4:19:f2:70:dc:b5:6d:9e:b1:55:6a:a8:62: 6e:7b:7b:3a:87:ae:f7:ec:d8:53:31:a4:dc:18:2a:df:45:ed: 4f:58:cd:38:89:89:8e:9e:dc:54:75:6d:3a:7f:87:44:6b:76: 79:4f:75:ba:be:a9:b5:cc:70:84:fb:45:f3:c7:d7:43:51:5c: aa:d5:3c:26 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjMxMjI4MTg1NjMxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzRkZS1iZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIoE5DooW/VeQa7q3Ggu4/eXZ1KzjjwbcNqR65dUaiYjOhEC95k2XyJDzjyF 8Mm3rw9FTDgNMWy22DJrJgb5p1GvLg0Ma9Mf4t3abo/LKCOs2qla50qF83EWv1A4 SdRDK5J/KtYzUN8UGYR0LSYyfJ5ZSxAgI1ja2Sj39RNPBArVCl1qFi3BBKB3jATJ o0jSD+QDtAfkKOnUBzhHlMNfMYNDu0w+HSBE6Jxz7SIf6nyexbtOjkIdXBr4xehn sCi5ju9gk9GLpWtzgQyxfz4IaeVeSWToQLEgTutjBuWSl5bW1HUfFqSx+/rGgaqB dR9ZTup8jF6WqVUxhYcEPMGeQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNYewcA1 Uvz+4cu7qd3awmZdxvPtMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMTUwQkY2OTBEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvNENEM0M4REMx NEQwMTFFQTkzMzY2QTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACGn2MwDQYJKoZIhvcNAQELBQADggEBAF6AByoQAtgwkijI puLEAqomzJUf4VTBwwWoNzVflxereuBp2ABIfuq1JlmBOffwIQWCjmFj+XUPxY+g D/IoCBDJZWvIPUZ8hMu7nrP7qcvikSnitim2nKQA6kcM5Z10UXVe7OcVlxpjVEkU uJcda7ZOFbAIS/8cO7coo347ECdPf0JsDbKN33OxhbQYwph5KfYSGfuU8+TfSYAu y31OfT/2AY80rpUxvxA5XZsvdbh3UWlBubiCr8OC9BnycNy1bZ6xVWqoYm57ezqH rvfs2FMxpNwYKt9F7U9YzTiJiY6e3FR1bTp/h0RrdnlPdbq+qbXMcIT7RfPH10NR XKrVPCY= -----END CERTIFICATE-----Generated at Thu May 16 19:50:00 2024 by rpki-client on console-fra.rpki-client.org