$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/BA1752AE176B11EF9ADED980C4F9AE02.roa File: BA1752AE176B11EF9ADED980C4F9AE02.roa (raw, json) Hash identifier: gNhMiv6IOJKkeLTLwPi9wU4oN+h+wv5IF758wi0C6FI= Subject key identifier: 3F:CB:F1:47:BE:62:7F:13:90:0F:04:48:F7:07:9E:15:5D:76:FB:B8 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 07EF Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/BA1752AE176B11EF9ADED980C4F9AE02.roa Signing time: Tue 28 May 2024 23:03:13 +0000 ROA not before: Tue 28 May 2024 23:03:13 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 21859 IP address blocks: 164.90.70.0/24 maxlen: 24 164.90.73.0/24 maxlen: 24 164.90.75.0/24 maxlen: 24 164.90.97.0/24 maxlen: 24 164.90.104.0/24 maxlen: 24 164.90.112.0/24 maxlen: 24 164.90.123.0/24 maxlen: 24 164.90.124.0/24 maxlen: 24 202.63.36.0/24 maxlen: 24 202.63.39.0/24 maxlen: 24 202.63.40.0/24 maxlen: 24 202.168.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: May 28 23:03:13 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665662b1-985f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:c2:a5:04:1c:e8:fc:5e:72:42:d9:74:03: db:4f:8b:d0:a5:e5:2b:86:73:20:bc:bc:f3:56:af: a4:df:7d:74:ff:c5:48:76:c0:70:08:d8:81:d4:cb: 22:d0:d2:7e:a5:ad:ec:d5:55:ba:7c:e9:9c:04:8b: a6:a4:10:40:48:c3:88:a6:b3:4d:f1:fc:0b:68:ea: a2:84:74:2a:90:69:8d:1a:1a:a1:df:91:9d:1d:d1: 9d:20:47:f3:60:b5:60:22:52:ae:c1:73:a2:83:e4: 13:cc:f1:d0:f1:09:7d:3c:34:70:0a:2b:da:91:ad: 74:fe:ba:b1:dd:bf:eb:3a:92:ec:2f:dd:8d:a3:ad: db:1d:5a:ac:d6:f4:cf:1d:08:c7:60:b4:8f:2c:aa: a8:f2:3a:df:16:f3:33:69:4a:bd:55:5c:2f:7c:d4: 00:9f:c2:15:d9:a1:cd:d5:e8:f5:84:8b:90:88:37: fc:b9:06:ae:f8:ae:de:61:3c:47:8b:ae:ea:a0:28: d2:59:72:d0:c1:76:36:7c:88:e9:88:f2:c1:16:47: 70:eb:aa:c6:92:d2:5d:d7:fb:68:b3:6a:b1:71:4b: 0f:ac:4b:fc:b2:f4:e4:e6:7a:78:cd:5a:c1:38:d2: 29:9f:11:20:43:3d:32:e6:42:cb:e3:be:c4:07:4a: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CB:F1:47:BE:62:7F:13:90:0F:04:48:F7:07:9E:15:5D:76:FB:B8 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/BA1752AE176B11EF9ADED980C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.90.70.0/24 164.90.73.0/24 164.90.75.0/24 164.90.97.0/24 164.90.104.0/24 164.90.112.0/24 164.90.123.0-164.90.124.255 202.63.36.0/24 202.63.39.0-202.63.40.255 202.168.111.0/24 Signature Algorithm: sha256WithRSAEncryption b8:a6:16:31:ff:b0:7f:63:06:f5:c6:15:c0:1a:e1:33:7c:a3: 69:a6:72:3f:d6:74:e8:2b:b3:67:01:61:d6:ec:f9:53:a8:87: ad:48:3f:64:d0:34:ea:c6:96:c0:a1:7d:d2:99:61:60:9b:80: 52:d8:8f:e2:7e:03:4c:13:6f:22:82:e9:72:61:a6:b9:12:dd: f6:81:8f:b7:63:fe:6d:6f:02:f4:04:c8:03:98:72:95:80:1a: 6e:b3:b5:cc:6b:9c:f3:c1:c1:8d:25:9a:bd:96:52:4d:81:48: 2a:8c:90:16:c0:80:e1:4a:15:f3:be:1f:b0:6c:59:6c:2a:b7: 03:51:6b:ad:a7:f7:8f:1f:66:e9:5e:9e:bd:63:cd:bb:f2:1d: 2e:9c:ba:2d:1d:c7:00:d5:a4:cc:85:46:40:4e:da:d2:fc:5e: ec:98:7b:23:39:c4:9c:3a:f1:d0:90:dc:b7:07:0d:c9:43:e6: 29:78:9a:51:77:a8:ef:88:59:3f:50:5c:e9:21:d0:e9:d9:0c: 8f:db:6d:a6:42:e6:89:bd:00:eb:61:07:5b:a6:b8:35:2a:e1: e7:a7:9c:3a:fc:16:7f:48:5a:57:d2:9c:bc:5f:22:17:29:a0: 06:89:e2:2f:8c:22:da:7a:80:f1:64:90:dd:97:7c:15:f5:74: a2:01:f7:2f -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjQwNTI4MjMwMzEzWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2NjJiMS05ODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCPCpQQc6PxeckLZdAPbT4vQpeUrhnMgvLzzVq+k3310/8VIdsBwCNiB1Msi 0NJ+pa3s1VW6fOmcBIumpBBASMOIprNN8fwLaOqihHQqkGmNGhqh35GdHdGdIEfz YLVgIlKuwXOig+QTzPHQ8Ql9PDRwCivaka10/rqx3b/rOpLsL92No63bHVqs1vTP HQjHYLSPLKqo8jrfFvMzaUq9VVwvfNQAn8IV2aHN1ej1hIuQiDf8uQau+K7eYTxH i67qoCjSWXLQwXY2fIjpiPLBFkdw66rGktJd1/tos2qxcUsPrEv8svTk5np4zVrB ONIpnxEgQz0y5kLL477EB0rlDQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFD/L8Ue+ Yn8TkA8ESPcHnhVddvu4MB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvQkExNzUyQUUx NzZCMTFFRjlBREVEOTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMFIEAgABMEwDBACkWkYDBACkWkkDBACkWksDBACkWmEDBACkWmgDBACkWnAw DAMEAKRaewMEAKRafAMEAMo/JDAMAwQAyj8nAwQAyj8oAwQAyqhvMA0GCSqGSIb3 DQEBCwUAA4IBAQC4phYx/7B/Ywb1xhXAGuEzfKNppnI/1nToK7NnAWHW7PlTqIet SD9k0DTqxpbAoX3SmWFgm4BS2I/ifgNME28igulyYaa5Et32gY+3Y/5tbwL0BMgD mHKVgBpus7XMa5zzwcGNJZq9llJNgUgqjJAWwIDhShXzvh+wbFlsKrcDUWutp/eP H2bpXp69Y8278h0unLotHccA1aTMhUZATtrS/F7smHsjOcScOvHQkNy3Bw3JQ+Yp eJpRd6jviFk/UFzpIdDp2QyP222mQuaJvQDrYQdbprg1KuHnp5w6/BZ/SFpX0py8 XyIXKaAGieIvjCLaeoDxZJDdl3wV9XSiAfcv -----END CERTIFICATE-----Generated at Wed Nov 20 23:56:01 2024 by rpki-client on console-ams.rpki-client.org