$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa File: E6F0F39214CE11EA9E740182C4F9AE02.roa (raw, json) Hash identifier: BVKfghQ7tAg6bhpCne7JUjhk+MWk1O2HwLOjb+QyPOc= Subject key identifier: BD:1B:33:24:64:94:25:9A:84:46:10:A9:99:97:5C:61:CB:9D:41:AD Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0C41 Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa Signing time: Thu 28 Dec 2023 18:56:35 +0000 ROA not before: Thu 28 Dec 2023 18:56:35 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 4637 IP address blocks: 134.159.0.0/16 maxlen: 24 192.154.16.0/24 maxlen: 24 192.154.24.0/23 maxlen: 23 192.154.24.0/24 maxlen: 24 192.154.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Dec 28 18:56:35 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=658dc4e2-b73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:23:f6:4b:51:ce:87:fd:8c:52:15:38:fb:83: 11:e2:fe:43:88:c3:03:02:29:b9:03:2e:45:fa:e2: 55:34:75:3f:52:92:32:c8:3e:97:7e:76:37:56:be: d6:a2:70:94:03:ac:54:7e:98:9d:a7:34:b7:34:a7: 93:3d:e2:cf:ad:e2:da:53:06:4d:06:b9:2b:2a:1f: f6:ea:ce:c8:60:a9:42:e6:15:1b:83:3e:ed:75:1b: 3d:07:ec:82:c2:4c:38:54:33:65:b9:4d:bd:5e:8c: 5f:a4:62:37:fb:b9:15:59:43:e8:2d:94:4f:9b:8f: 2c:fc:2e:ec:82:4b:51:bc:ae:cd:e3:81:5c:02:90: af:43:eb:1d:b5:43:df:0d:bd:13:b9:4c:69:5f:15: 45:cf:8a:80:48:8a:db:f2:37:16:25:1d:ee:75:56: 38:f2:ec:b7:35:a5:89:07:0d:eb:d1:a5:7f:c3:77: 0b:a8:27:6f:79:b9:c0:a0:0f:a4:9d:de:62:e0:60: 19:82:45:62:af:62:25:70:ef:c0:23:0f:c1:46:da: 6d:45:57:5b:93:c0:fc:da:78:e4:57:bb:e3:84:b1: e2:b1:71:2f:03:db:5e:05:93:c1:78:12:28:85:5c: 68:92:e1:39:97:c0:41:f4:89:23:12:32:70:74:1b: d2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1B:33:24:64:94:25:9A:84:46:10:A9:99:97:5C:61:CB:9D:41:AD X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/E6F0F39214CE11EA9E740182C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 134.159.0.0/16 192.154.16.0/24 192.154.24.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:6f:e9:a3:95:04:f9:5d:0c:4b:7c:bf:92:f2:0e:1f:26:52: 63:6a:21:46:b1:8e:59:28:bb:6a:41:80:1b:43:c8:97:11:25: a9:2c:03:0e:b8:46:2f:e2:18:57:ce:be:09:a0:8e:be:73:36: f6:2b:58:6d:6b:04:6d:3c:d4:93:66:5c:17:95:31:80:fa:f8: 12:aa:a6:3b:c5:5d:24:52:5b:bb:4a:85:67:aa:4e:6b:46:96: 38:bb:a8:c9:5b:29:44:1b:8c:ea:9b:b5:9e:a5:9b:cd:78:c8: da:ab:ed:27:2c:a3:82:3f:ac:d9:4c:b4:ae:35:ce:00:95:74: 5b:f3:27:27:c1:e9:90:c7:4e:53:5e:e6:0e:67:8c:ab:a2:06: f4:6f:8f:fd:f7:36:dd:24:ab:bd:8f:40:25:66:89:38:76:3a: 19:f3:6b:6e:22:31:d2:cf:62:f1:8c:d7:d0:b6:72:fa:0a:f8: c2:6c:17:e7:14:e5:66:bb:e2:72:6a:d0:4e:d6:60:96:b3:cf: d8:f8:6b:f3:3c:6e:87:01:b6:20:47:14:49:90:f0:4d:27:8c: 97:5c:95:97:57:e1:90:c4:18:cc:e0:f8:55:50:6e:9e:87:a9: b8:c8:fe:2b:e8:3c:f7:98:8e:f6:b7:fe:56:a3:51:d0:1d:2f: a2:7e:9f:a3 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjMxMjI4MTg1NjM1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkYzRlMi1iNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0CP2S1HOh/2MUhU4+4MR4v5DiMMDAim5Ay5F+uJVNHU/UpIyyD6XfnY3Vr7W onCUA6xUfpidpzS3NKeTPeLPreLaUwZNBrkrKh/26s7IYKlC5hUbgz7tdRs9B+yC wkw4VDNluU29XoxfpGI3+7kVWUPoLZRPm48s/C7sgktRvK7N44FcApCvQ+sdtUPf Db0TuUxpXxVFz4qASIrb8jcWJR3udVY48uy3NaWJBw3r0aV/w3cLqCdvebnAoA+k nd5i4GAZgkVir2IlcO/AIw/BRtptRVdbk8D82njkV7vjhLHisXEvA9teBZPBeBIo hVxokuE5l8BB9IkjEjJwdBvS9QIDAQABo4ICoDCCApwwHQYDVR0OBBYEFL0bMyRk lCWahEYQqZmXXGHLnUGtMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMTUwQkY2OTBEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvRTZGMEYzOTIx NENFMTFFQTlFNzQwMTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKgYIKwYBBQUHAQcBAf8E GzAZMBcEAgABMBEDAwCGnwMEAMCaEAMEAcCaGDANBgkqhkiG9w0BAQsFAAOCAQEA PG/po5UE+V0MS3y/kvIOHyZSY2ohRrGOWSi7akGAG0PIlxElqSwDDrhGL+IYV86+ CaCOvnM29itYbWsEbTzUk2ZcF5UxgPr4EqqmO8VdJFJbu0qFZ6pOa0aWOLuoyVsp RBuM6pu1nqWbzXjI2qvtJyyjgj+s2Uy0rjXOAJV0W/MnJ8HpkMdOU17mDmeMq6IG 9G+P/fc23SSrvY9AJWaJOHY6GfNrbiIx0s9i8YzX0LZy+gr4wmwX5xTlZrvicmrQ TtZglrPP2Phr8zxuhwG2IEcUSZDwTSeMl1yVl1fhkMQYzOD4VVBunoepuMj+K+g8 95iO9rf+VqNR0B0von6fow== -----END CERTIFICATE-----Generated at Mon May 6 20:19:20 2024 by rpki-client on console-fra.rpki-client.org