$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa File: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (raw, json) Hash identifier: PiTVTvIJuPLIvmwmVwVs4FvNzmtMerrh6ie8+8E7/iQ= Subject key identifier: FF:7C:A4:E7:C9:C0:1C:82:C2:AD:E0:93:65:B7:6E:46:A0:AF:77:7E Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: 07 Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa Signing time: Tue 13 Aug 2024 02:07:47 +0000 ROA not before: Tue 13 Aug 2024 02:07:47 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 9484 IP address blocks: 192.82.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Oct 2024 15:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Aug 13 02:07:47 2024 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=66babff3-fe77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9a:e5:f7:b6:32:33:f2:3c:e0:54:96:8a:7b: b9:80:f9:07:08:73:95:85:84:c3:92:da:ed:d3:25: cb:ec:f8:39:09:e2:fd:7c:a6:48:b1:96:f5:7b:a9: be:bd:38:27:9e:24:eb:39:1d:73:7d:f1:f2:80:35: 52:a9:b3:32:df:cb:00:04:da:53:9e:12:0f:72:27: d0:78:de:53:b8:2a:08:56:80:e5:35:27:c5:ed:93: 04:24:5a:f9:32:85:9e:14:44:31:be:47:a7:f3:b7: 59:9b:20:ee:e0:c5:55:9a:05:88:58:8d:64:08:fa: 2a:1b:65:26:b9:05:83:97:a5:67:66:e7:74:b0:19: ca:09:d4:03:a5:60:c7:43:3f:5c:09:5f:a7:52:99: e8:f5:d8:43:69:30:10:5b:c3:3f:d0:a3:96:40:0d: 77:16:aa:79:48:a2:b1:5e:05:67:24:2d:cd:87:e6: fc:4e:62:6c:c9:f0:5f:ee:f0:25:7b:39:cc:eb:4b: d1:3f:e0:d6:a9:bf:70:7c:36:38:cc:5b:2b:06:59: cd:fc:f6:c7:48:49:e7:83:ab:cb:78:cd:f4:11:02: e0:d9:b9:69:ec:e3:bd:f0:22:cc:c6:62:d4:c5:71: f2:c8:c9:f3:7b:49:d4:dc:65:e4:3c:44:10:aa:3b: cb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:7C:A4:E7:C9:C0:1C:82:C2:AD:E0:93:65:B7:6E:46:A0:AF:77:7E X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.82.88.0/22 Signature Algorithm: sha256WithRSAEncryption 86:6a:97:61:bf:f7:f5:64:b2:be:dc:17:c8:ef:b9:f5:2a:b7: 91:2f:81:68:a9:e2:cf:75:e2:41:c8:7b:c6:99:24:b6:09:5c: 84:35:d4:13:71:ba:04:87:c3:c7:e2:ed:ae:e1:4b:b4:82:21: bd:c5:df:bf:6d:86:30:a0:8b:7b:58:dd:ce:9a:f5:82:37:c3: 15:4e:1a:11:3e:1c:89:0b:95:02:d3:3e:4b:16:b1:53:02:fd: af:fc:09:bf:f6:99:d3:74:d1:9c:47:0f:54:fc:11:1a:42:f8: a5:28:57:ea:8f:d7:80:84:8e:94:55:a1:a6:26:dc:3a:dc:47: 09:26:8e:4e:0a:11:06:84:10:17:01:86:c1:b0:4e:33:68:96: 5e:15:6e:6c:68:af:99:79:a8:42:b7:1f:c0:17:dc:a1:d6:23: 98:51:29:7a:92:ea:fe:ae:04:be:86:84:1e:f3:8e:bb:59:8f: 68:27:c9:ea:c9:01:5c:d9:f6:1a:e5:27:65:a4:ef:41:ce:c3: 5b:d8:c4:b8:52:2f:14:52:d3:e1:0c:20:e3:85:a9:47:7f:13: 0d:cf:d7:18:e8:3d:af:b6:4e:0c:cc:6c:6f:28:80:1c:18:e7: 88:da:bb:15:9d:a4:8e:a9:53:e3:f0:71:76:52:d1:90:1b:80: 16:0f:d0:23 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDYyQTExMC8GA1UEBRMoMERBRjRGMUFDNTgxOTg5MzFBRDVDMDAwN0Y1MjU1QTc5 REQwRTRDNzAeFw0yNDA4MTMwMjA3NDdaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmFiZmYzLWZlNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBmuX3tjIz8jzgVJaKe7mA+QcIc5WFhMOS2u3TJcvs+DkJ4v18pkixlvV7qb69 OCeeJOs5HXN98fKANVKpszLfywAE2lOeEg9yJ9B43lO4KghWgOU1J8XtkwQkWvky hZ4URDG+R6fzt1mbIO7gxVWaBYhYjWQI+iobZSa5BYOXpWdm53SwGcoJ1AOlYMdD P1wJX6dSmej12ENpMBBbwz/Qo5ZADXcWqnlIorFeBWckLc2H5vxOYmzJ8F/u8CV7 OczrS9E/4Napv3B8NjjMWysGWc389sdISeeDq8t4zfQRAuDZuWns473wIszGYtTF cfLIyfN7SdTcZeQ8RBCqO8uNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/3yk58nA HILCreCTZbduRqCvd34wHwYDVR0jBBgwFoAUDa9PGsWBmJMa1cAAf1JVp53Q5Mcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0NjJBLzRFQkE4NDZFNTg1 NjExRUY5NDE0NDU1RkM0RjlBRTAyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRGE5UEdzV0JtSk1hMWNBQWYxSlZwNTNRNU1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80RUJBODQ2RTU4NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9ENUJGQkU5RTU5 MTgxMUVGODBBQTlGMjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAsBSWDANBgkqhkiG9w0BAQsFAAOCAQEAhmqXYb/39WSyvtwX yO+59Sq3kS+BaKniz3XiQch7xpkktglchDXUE3G6BIfDx+LtruFLtIIhvcXfv22G MKCLe1jdzpr1gjfDFU4aET4ciQuVAtM+SxaxUwL9r/wJv/aZ03TRnEcPVPwRGkL4 pShX6o/XgISOlFWhpibcOtxHCSaOTgoRBoQQFwGGwbBOM2iWXhVubGivmXmoQrcf wBfcodYjmFEpepLq/q4EvoaEHvOOu1mPaCfJ6skBXNn2GuUnZaTvQc7DW9jEuFIv FFLT4Qwg44WpR38TDc/XGOg9r7ZODMxsbyiAHBjniNq7FZ2kjqlT4/BxdlLRkBuA Fg/QIw== -----END CERTIFICATE-----Generated at Tue Oct 22 17:18:41 2024 by rpki-client on console-fra.rpki-client.org