$ rpki-client -vvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/AAFB89C25B8E11EF8774691FC4F9AE02.roa File: AAFB89C25B8E11EF8774691FC4F9AE02.roa (raw, json) Hash identifier: NJQC0pcrHh/JBVTRfv/b6T3EEDKwTW5kx/DQtkXyO1o= Subject key identifier: 97:4D:F0:E9:7B:81:86:BE:4F:AF:6A:2A:A2:BC:FF:34:B4:78:C9:E5 Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Certificate serial: 02 Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/AAFB89C25B8E11EF8774691FC4F9AE02.roa Signing time: Fri 16 Aug 2024 05:16:18 +0000 ROA not before: Fri 16 Aug 2024 05:16:18 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 136557 IP address blocks: 160.30.138.0/24 maxlen: 24 160.30.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Validity Not Before: Aug 16 05:16:18 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66bee0a2-78cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:81:59:c7:0a:f2:a9:da:01:82:71:6a:03: 1c:f0:13:5b:92:c3:55:16:30:4c:b1:87:13:5f:9a: 85:c9:4c:e5:a4:08:27:89:3a:b8:2e:15:8b:ce:20: 44:8c:0d:67:cf:9d:8f:f9:ee:42:0d:f9:fa:8d:2b: 69:09:e8:cc:0b:dd:43:04:44:d6:e4:eb:36:66:4d: 09:2a:f4:ef:bb:c1:10:9f:d5:95:19:ce:e4:d0:1a: 8e:dd:26:42:8d:e9:9a:b8:74:0b:26:ae:18:8a:40: 4c:b1:ea:58:45:8d:f2:20:fd:6b:ba:0b:df:9b:0e: f7:4c:9d:2f:7a:85:b3:ef:2b:52:6c:32:49:7c:57: f0:9d:fb:5d:bb:df:1a:e4:01:66:38:b3:9a:d8:8c: c3:cd:a8:6c:75:95:aa:2f:e0:a5:9e:3d:d2:ac:cb: cb:b0:45:97:18:39:1b:e1:26:46:15:64:52:2e:a7: 01:d6:f6:09:76:e9:c5:40:23:bd:91:57:36:c6:44: 04:76:91:a3:fd:fe:f1:1e:a4:31:a4:21:d3:fb:cd: cc:77:d0:c4:3e:b3:6e:ca:29:3a:d6:23:df:66:74: 3a:c5:ce:a1:93:92:18:f3:dc:59:d7:61:04:89:c9: 3c:1c:d2:ab:b1:c6:4f:56:ff:fa:4b:c1:6c:c3:19: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4D:F0:E9:7B:81:86:BE:4F:AF:6A:2A:A2:BC:FF:34:B4:78:C9:E5 X509v3 Authority Key Identifier: keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/AAFB89C25B8E11EF8774691FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.138.0/23 Signature Algorithm: sha256WithRSAEncryption 47:9c:75:98:1c:b5:35:ed:10:25:a8:68:25:71:22:c3:67:44: f2:8d:5d:56:3d:42:65:cf:1a:5f:1a:44:66:48:07:33:cc:91: a9:13:c4:eb:c8:0a:15:1b:9a:cf:98:4e:dd:15:05:f4:d9:d6: 95:f9:77:1b:d3:94:1b:47:b4:26:3d:9f:78:a5:11:7c:77:79: 4a:f5:de:38:61:70:62:3f:e7:3c:3b:a0:4a:05:80:e2:7f:7c: 62:43:9f:f2:71:fb:38:57:4c:39:ff:db:45:25:40:e8:21:61: 3f:56:61:43:5c:93:93:c7:57:93:11:93:5e:23:40:9c:7f:99: dd:db:40:de:93:0f:b4:4b:00:0f:2b:18:c2:65:46:b3:25:e4: 6a:0a:c0:08:d9:2c:8f:2c:b2:85:ae:f5:bb:3e:5b:e1:c3:40: e9:a0:73:7b:4e:0d:98:14:ca:e1:51:e6:10:94:c7:3a:43:f4: 2f:36:0f:b3:be:3b:f2:bb:ff:91:30:e4:77:a4:09:97:a4:52: 93:83:2d:bd:69:e2:81:7b:eb:ee:9f:7b:a5:00:61:d4:7e:a7: 7e:b6:b4:f9:dc:37:d8:7a:1b:b2:e3:74:22:3a:13:6a:08:7e: 0a:0f:20:5c:77:a0:fa:5e:f9:df:dd:97:65:9f:14:d6:7d:11: 52:dd:a9:5b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODRGNzExMC8GA1UEBRMoMkNEMTA4MkVCNDc3NzFEMjFEQTkwMDU4MkYzRUM4N0M2 OURENUNDQzAeFw0yNDA4MTYwNTE2MThaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YmVlMGEyLTc4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC934FZxwryqdoBgnFqAxzwE1uSw1UWMEyxhxNfmoXJTOWkCCeJOrguFYvOIESM DWfPnY/57kIN+fqNK2kJ6MwL3UMERNbk6zZmTQkq9O+7wRCf1ZUZzuTQGo7dJkKN 6Zq4dAsmrhiKQEyx6lhFjfIg/Wu6C9+bDvdMnS96hbPvK1JsMkl8V/Cd+1273xrk AWY4s5rYjMPNqGx1laov4KWePdKsy8uwRZcYORvhJkYVZFIupwHW9gl26cVAI72R VzbGRAR2kaP9/vEepDGkIdP7zcx30MQ+s27KKTrWI99mdDrFzqGTkhjz3FnXYQSJ yTwc0quxxk9W//pLwWzDGT59AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUl03w6XuB hr5Pr2oqorz/NLR4yeUwHwYDVR0jBBgwFoAULNEILrR3cdIdqQBYLz7IfGndXMww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4NEY3Lzc5Q0FGQjI2NUI4 RTExRUY5MTc3RTkxRUM0RjlBRTAyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhN dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTE5FSUxyUjNjZElkcVFCWUx6N0lmR25kWE13LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODRGNy83OUNBRkIyNjVCOEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9BQUZCODlDMjVC OEUxMUVGODc3NDY5MUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAeijANBgkqhkiG9w0BAQsFAAOCAQEAR5x1mBy1Ne0QJaho JXEiw2dE8o1dVj1CZc8aXxpEZkgHM8yRqRPE68gKFRuaz5hO3RUF9NnWlfl3G9OU G0e0Jj2feKURfHd5SvXeOGFwYj/nPDugSgWA4n98YkOf8nH7OFdMOf/bRSVA6CFh P1ZhQ1yTk8dXkxGTXiNAnH+Z3dtA3pMPtEsADysYwmVGsyXkagrACNksjyyyha71 uz5b4cNA6aBze04NmBTK4VHmEJTHOkP0LzYPs7478rv/kTDkd6QJl6RSk4MtvWni gXvr7p97pQBh1H6nfra0+dw32HobsuN0IjoTagh+Cg8gXHeg+l75392XZZ8U1n0R Ut2pWw== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:26 2024 by rpki-client on console-fra.rpki-client.org