$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa File: F305F43270E711EF8573CF71C4F9AE02.roa (raw, json) Hash identifier: aci5Spv/e6z609EwzRrCe3VebaHTH23V/kyd6t5TMtw= Subject key identifier: A7:D6:74:59:96:32:6A:D7:D6:2A:D5:BF:F1:97:FD:2A:CA:B2:56:4C Certificate issuer: /CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A Certificate serial: 02 Authority key identifier: 8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa Signing time: Thu 12 Sep 2024 09:18:19 +0000 ROA not before: Thu 12 Sep 2024 09:18:19 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 133453 IP address blocks: 160.187.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B/serialNumber=8B486ACCAF12A67A95688E8D11BD658C041C125A Validity Not Before: Sep 12 09:18:19 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=66e2b1db-fc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:34:78:95:0c:46:3c:f6:b9:d1:27:fa:60:28: 9a:e8:81:89:00:f4:79:13:ff:e9:57:0f:01:08:14: 3f:c8:73:22:96:4a:f9:de:59:80:f0:9e:4d:d1:c3: d8:e8:8e:66:3f:11:e4:00:53:f7:a8:17:50:88:35: 50:c4:a8:3e:f0:fd:dd:af:9b:99:1b:fe:93:e6:c8: f2:b6:a9:53:cf:4d:05:9c:2c:2e:a8:10:53:5d:1f: c1:78:cd:d2:7d:51:19:7c:b6:54:43:01:3d:88:5d: d4:80:f5:fc:d2:28:f0:bd:62:63:c5:98:a7:55:52: 20:84:79:e0:ff:45:be:3d:33:48:24:60:d0:be:85: 9a:52:fd:6b:f1:90:4c:9c:ee:a9:6b:bd:df:4b:bc: fb:d6:ae:3e:bb:a1:0d:87:94:8b:dd:fc:5e:ac:74: 81:a5:6b:b6:14:b4:7e:5f:42:b0:7a:af:e0:f7:5f: 32:99:09:37:f8:ca:43:6d:1d:c3:d8:24:b6:b1:1b: e0:7d:ed:60:fa:8d:54:04:dc:27:5f:5f:e6:c1:12: 18:44:58:e1:89:f5:06:37:3b:cb:32:03:b4:ce:c0: 84:83:d8:a6:e4:0d:56:70:ce:90:24:1e:ae:56:79: 7d:e1:a8:69:fd:87:02:a4:83:99:8e:b6:13:97:0a: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:74:59:96:32:6A:D7:D6:2A:D5:BF:F1:97:FD:2A:CA:B2:56:4C X509v3 Authority Key Identifier: keyid:8B:48:6A:CC:AF:12:A6:7A:95:68:8E:8D:11:BD:65:8C:04:1C:12:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/i0hqzK8SpnqVaI6NEb1ljAQcElo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i0hqzK8SpnqVaI6NEb1ljAQcElo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/4D7CE66A70E711EFB444AF70C4F9AE02/F305F43270E711EF8573CF71C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.40.0/23 Signature Algorithm: sha256WithRSAEncryption 16:43:41:78:39:53:48:b7:e1:f5:ac:88:e8:2e:13:93:63:c3: 26:fd:4c:35:69:2f:81:1c:53:b4:59:a7:c3:60:7a:10:1c:72: be:2a:1e:7c:52:a6:aa:0a:d1:55:9d:2b:ba:2d:12:33:8d:b7: 21:fd:af:35:be:6c:ef:68:b4:67:fd:c2:5e:17:e5:dd:fa:88: 2c:07:a4:9c:8e:78:5d:34:e8:5d:9c:ee:c1:c2:4a:19:81:6f: 70:91:22:c3:da:99:37:1b:df:b6:ae:e2:62:44:79:b7:c0:07: f2:0d:38:fa:69:ed:79:e1:43:38:99:4d:73:d5:0d:76:34:30: 38:b3:0b:2c:4c:68:e9:bd:1e:80:ac:26:f6:2d:d3:f0:e2:d8: 69:34:20:d0:e5:dd:1c:14:b9:3e:3a:c9:25:bb:b3:90:d8:3c: 70:57:42:09:01:1c:f1:5a:98:b7:ef:09:19:c1:0c:a3:84:d7: 79:b6:51:3a:73:bc:a7:a8:8d:7f:79:1f:a7:61:eb:73:8e:e2: 08:ca:d8:40:1a:c4:3c:bd:e6:fe:36:94:34:82:d8:d0:de:d3: 30:2b:c4:9d:75:a1:ff:ed:80:14:f4:65:1c:28:31:e0:f5:8d: b1:f4:db:39:b9:61:fb:d9:e7:0c:42:2f:e2:2c:18:43:2d:75: 1e:05:93:03 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkE1QjExMC8GA1UEBRMoOEI0ODZBQ0NBRjEyQTY3QTk1Njg4RThEMTFCRDY1OEMw NDFDMTI1QTAeFw0yNDA5MTIwOTE4MTlaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZTJiMWRiLWZjMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFNHiVDEY89rnRJ/pgKJrogYkA9HkT/+lXDwEIFD/IcyKWSvneWYDwnk3Rw9jo jmY/EeQAU/eoF1CINVDEqD7w/d2vm5kb/pPmyPK2qVPPTQWcLC6oEFNdH8F4zdJ9 URl8tlRDAT2IXdSA9fzSKPC9YmPFmKdVUiCEeeD/Rb49M0gkYNC+hZpS/WvxkEyc 7qlrvd9LvPvWrj67oQ2HlIvd/F6sdIGla7YUtH5fQrB6r+D3XzKZCTf4ykNtHcPY JLaxG+B97WD6jVQE3CdfX+bBEhhEWOGJ9QY3O8syA7TOwISD2KbkDVZwzpAkHq5W eX3hqGn9hwKkg5mOthOXCvi9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUp9Z0WZYy atfWKtW/8Zf9KsqyVkwwHwYDVR0jBBgwFoAUi0hqzK8SpnqVaI6NEb1ljAQcElow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQTVCLzREN0NFNjZBNzBF NzExRUZCNDQ0QUY3MEM0RjlBRTAyL2kwaHF6SzhTcG5xVmFJNk5FYjFsakFRY0Vs by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaTBocXpLOFNwbnFWYUk2TkViMWxqQVFjRWxvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi80RDdDRTY2QTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi9GMzA1RjQzMjcw RTcxMUVGODU3M0NGNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC7KDANBgkqhkiG9w0BAQsFAAOCAQEAFkNBeDlTSLfh9ayI 6C4Tk2PDJv1MNWkvgRxTtFmnw2B6EBxyvioefFKmqgrRVZ0rui0SM423If2vNb5s 72i0Z/3CXhfl3fqILAeknI54XTToXZzuwcJKGYFvcJEiw9qZNxvftq7iYkR5t8AH 8g04+mnteeFDOJlNc9UNdjQwOLMLLExo6b0egKwm9i3T8OLYaTQg0OXdHBS5PjrJ JbuzkNg8cFdCCQEc8VqYt+8JGcEMo4TXebZROnO8p6iNf3kfp2Hrc47iCMrYQBrE PL3m/jaUNILY0N7TMCvEnXWh/+2AFPRlHCgx4PWNsfTbOblh+9nnDEIv4iwYQy11 HgWTAw== -----END CERTIFICATE-----Generated at Wed Oct 23 07:33:26 2024 by rpki-client on console-fra.rpki-client.org