$ rpki-client -vvf rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/E0C47044E18D11EE82E6CE22C4F9AE02.roa File: E0C47044E18D11EE82E6CE22C4F9AE02.roa (raw, json) Hash identifier: oHYJEFfD1Lon7ikYLeo6m1Hr1wIXkseOcXKkDnJ3sdE= Subject key identifier: AA:CE:F6:B1:1C:2E:37:04:D7:FC:B7:E3:CC:38:51:67:7B:BE:84:D9 Certificate issuer: /CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Certificate serial: 4D Authority key identifier: 93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/E0C47044E18D11EE82E6CE22C4F9AE02.roa Signing time: Thu 25 Jul 2024 07:08:42 +0000 ROA not before: Thu 25 Jul 2024 07:08:42 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 133045 IP address blocks: 148.195.230.0/24 maxlen: 24 159.73.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 04:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D73BB/serialNumber=937A1B5FEB0A293360EA4E8847352E7FD36CC7A5 Validity Not Before: Jul 25 07:08:42 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66a1f9fa-807d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:e8:bc:b3:15:96:8b:48:58:7c:10:c0:79: 79:e9:90:9a:09:6e:e9:e1:63:4b:bf:ad:e5:85:2b: dd:cc:cb:59:18:dd:20:03:a9:8c:78:34:db:03:33: 06:56:1e:c9:05:ae:0b:40:78:0c:d3:a3:cb:2e:c7: ba:b7:4b:4f:61:6d:fb:54:a8:95:b8:a4:94:2f:e6: 52:04:e5:13:4b:94:75:b1:4f:ed:4e:36:27:2a:37: 39:d9:aa:0b:bc:1f:99:9c:b8:16:a2:ee:0e:9a:5e: f6:d9:d6:56:f1:ad:26:6a:cf:b4:1e:7c:97:dc:5d: e7:dc:a9:52:48:77:95:a7:6e:44:14:91:f8:57:9f: 50:62:e6:a5:91:3d:7d:39:af:61:3d:97:6c:da:c8: e8:bc:9a:2a:67:ea:e3:c2:8d:de:f5:6e:c0:3d:bb: 0d:90:b8:99:82:bc:77:0d:19:ee:e0:10:9e:b8:be: bd:35:47:1a:d9:9a:78:23:ef:7e:a5:1f:d3:38:a2: f8:b2:84:52:0a:83:a4:13:f3:c0:5c:c7:c1:49:37: 60:aa:e5:46:3c:0a:58:d6:46:43:89:8c:34:31:47: 9d:ac:ac:d2:b6:bb:79:26:c8:30:47:f2:ac:8a:80: 64:99:01:9d:1c:bc:6d:b9:12:c9:16:01:52:41:5e: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CE:F6:B1:1C:2E:37:04:D7:FC:B7:E3:CC:38:51:67:7B:BE:84:D9 X509v3 Authority Key Identifier: keyid:93:7A:1B:5F:EB:0A:29:33:60:EA:4E:88:47:35:2E:7F:D3:6C:C7:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/k3obX-sKKTNg6k6IRzUuf9Nsx6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/k3obX-sKKTNg6k6IRzUuf9Nsx6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D73BB/7ED57586E18D11EE990FEC4FC4F9AE02/E0C47044E18D11EE82E6CE22C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 148.195.230.0/24 159.73.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:56:ad:27:14:43:b7:8c:d7:27:60:03:89:b6:e5:ec:35:d6: 36:83:a2:54:34:b0:d5:ce:fd:98:d8:e1:3d:bd:40:31:e9:b7: 8d:ff:3c:4d:92:64:20:ff:61:52:c8:5d:c5:90:e6:c8:31:0e: e8:00:97:d4:15:2c:0c:c9:be:44:4c:5d:66:de:98:88:e1:f7: 83:0b:7f:2e:88:10:73:de:2a:11:e4:fd:bf:34:c3:b9:61:cc: a1:6c:ed:a7:9a:63:90:e6:a9:ab:86:93:91:39:41:21:45:0b: 7f:a9:2d:97:56:4b:42:81:e2:ed:a7:fc:26:5f:14:61:d3:0a: e9:cb:d4:a7:28:b3:7b:c7:02:04:2c:9c:26:6d:d1:4b:69:6e: 0d:cd:85:f9:56:98:59:f9:96:78:16:28:b8:14:66:c8:aa:85: 4f:b9:ba:a9:e0:7c:72:a2:82:92:ee:16:52:a3:af:49:e4:dc: aa:bb:18:f6:7c:a0:74:04:9f:be:18:a2:20:3b:fd:7d:4c:f4: 37:44:22:88:d6:3d:c8:15:84:9f:78:5e:94:70:de:9b:33:0d: 89:75:8c:7c:4c:12:1f:1a:de:b6:5e:74:9f:54:e8:32:ae:3c: 33:b9:a2:9e:66:e7:59:f7:81:a0:f7:14:58:9a:d1:f8:3d:52: a0:91:ca:77 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzNCQjExMC8GA1UEBRMoOTM3QTFCNUZFQjBBMjkzMzYwRUE0RTg4NDczNTJFN0ZE MzZDQzdBNTAeFw0yNDA3MjUwNzA4NDJaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YTFmOWZhLTgwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9x+i8sxWWi0hYfBDAeXnpkJoJbunhY0u/reWFK93My1kY3SADqYx4NNsDMwZW HskFrgtAeAzTo8sux7q3S09hbftUqJW4pJQv5lIE5RNLlHWxT+1ONicqNznZqgu8 H5mcuBai7g6aXvbZ1lbxrSZqz7QefJfcXefcqVJId5WnbkQUkfhXn1Bi5qWRPX05 r2E9l2zayOi8mipn6uPCjd71bsA9uw2QuJmCvHcNGe7gEJ64vr01RxrZmngj736l H9M4oviyhFIKg6QT88Bcx8FJN2Cq5UY8CljWRkOJjDQxR52srNK2u3kmyDBH8qyK gGSZAZ0cvG25EskWAVJBXtOtAgMBAAGjggKaMIICljAdBgNVHQ4EFgQUqs72sRwu NwTX/LfjzDhRZ3u+hNkwHwYDVR0jBBgwFoAUk3obX+sKKTNg6k6IRzUuf9Nsx6Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3M0JCLzdFRDU3NTg2RTE4 RDExRUU5OTBGRUM0RkM0RjlBRTAyL2szb2JYLXNLS1ROZzZrNklSelV1ZjlOc3g2 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvazNvYlgtc0tLVE5nNms2SVJ6VXVmOU5zeDZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzNCQi83RUQ1NzU4NkUxOEQxMUVFOTkwRkVDNEZDNEY5QUUwMi9FMEM0NzA0NEUx OEQxMUVFODJFNkNFMjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAkBggrBgEFBQcBBwEB/wQV MBMwEQQCAAEwCwMEAJTD5gMDAJ9JMA0GCSqGSIb3DQEBCwUAA4IBAQB4Vq0nFEO3 jNcnYAOJtuXsNdY2g6JUNLDVzv2Y2OE9vUAx6beN/zxNkmQg/2FSyF3FkObIMQ7o AJfUFSwMyb5ETF1m3piI4feDC38uiBBz3ioR5P2/NMO5YcyhbO2nmmOQ5qmrhpOR OUEhRQt/qS2XVktCgeLtp/wmXxRh0wrpy9SnKLN7xwIELJwmbdFLaW4NzYX5VphZ +ZZ4Fii4FGbIqoVPubqp4HxyooKS7hZSo69J5Nyquxj2fKB0BJ++GKIgO/19TPQ3 RCKI1j3IFYSfeF6UcN6bMw2JdYx8TBIfGt62XnSfVOgyrjwzuaKeZudZ94Gg9xRY mtH4PVKgkcp3 -----END CERTIFICATE-----Generated at Mon Nov 25 06:05:11 2024 by rpki-client on console-fra.rpki-client.org