$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/CD26CAC0431611EE80B53A75C4F9AE02.roa File: CD26CAC0431611EE80B53A75C4F9AE02.roa (raw, json) Hash identifier: PN8KDNG+lfB8OMD8c5W9WAaHU3MIVkDLw5J7GhvF+L4= Subject key identifier: 9B:55:1D:5A:FE:3E:3E:A6:0D:1D:AD:23:3B:A6:E4:73:CC:E1:6E:F0 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0929 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/CD26CAC0431611EE80B53A75C4F9AE02.roa Signing time: Fri 10 May 2024 21:30:37 +0000 ROA not before: Fri 10 May 2024 21:30:37 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 139006 IP address blocks: 165.173.160.0/22 maxlen: 24 165.173.190.0/23 maxlen: 23 165.173.190.0/24 maxlen: 24 165.173.191.0/24 maxlen: 24 199.67.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2345 (0x929) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: May 10 21:30:37 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=663e91fd-e62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:89:65:ae:66:ba:0e:a3:0f:37:46:96:8d: 07:ed:bf:dd:dc:d8:03:1e:96:65:60:7a:fb:e3:06: c6:6d:87:0a:62:65:1c:cd:b3:4c:0e:9b:44:0e:0e: 86:b6:7c:1b:c6:2a:8e:ee:38:37:20:16:35:04:80: 40:99:15:c7:cd:bb:0a:bb:29:73:b9:02:25:50:fc: 37:a7:0f:72:f0:bf:8e:e7:bf:fc:42:e4:22:b0:eb: 78:45:8a:fc:1a:e1:62:3c:a8:92:45:e2:7b:91:5d: 77:a9:b3:d0:3a:1c:c2:fc:cc:6f:09:02:51:39:0a: c4:50:ba:e2:d9:08:76:a7:80:b3:5b:08:e6:05:ca: 6e:06:bb:b8:d6:eb:72:a5:e7:92:e0:c7:80:c3:37: 4c:2f:4c:21:fb:fe:8e:2f:6d:43:4f:cb:94:71:74: f0:6a:18:1e:41:31:f9:ba:53:6d:f0:89:9c:f3:9d: b3:d3:e0:ea:f4:51:07:ea:b2:ca:9a:89:fb:45:82: a6:e0:fa:b2:8e:b4:5c:22:d2:1a:f8:ac:ac:d5:fc: c7:c4:0b:75:3c:fb:33:08:9c:0e:77:88:29:06:f9: 32:99:df:8c:bc:2f:52:1e:15:28:03:b8:72:ca:66: b3:3a:80:61:71:a9:18:f2:8a:d1:48:9f:08:0e:df: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:55:1D:5A:FE:3E:3E:A6:0D:1D:AD:23:3B:A6:E4:73:CC:E1:6E:F0 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/CD26CAC0431611EE80B53A75C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.173.160.0/22 165.173.190.0/23 199.67.70.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:f2:45:e5:b1:02:23:58:52:50:73:60:10:b1:8d:f7:aa:74: 47:c1:cf:27:ff:06:52:aa:75:53:e0:17:03:62:4f:40:14:fc: d8:5e:45:95:6b:7c:5e:56:47:33:66:73:0a:14:9d:70:7a:fe: 6a:10:06:8d:ce:ef:e5:80:4e:da:3f:f2:42:1a:1a:a1:1e:b5: d4:c1:11:2b:32:a0:ae:d8:8f:60:30:18:df:43:76:27:9e:44: 81:4b:e6:8a:37:8e:4e:5f:9a:82:bc:df:af:b8:96:b0:d7:8c: a4:5b:98:82:12:9c:03:5f:4d:35:fb:61:07:47:d7:46:97:a5: 86:06:27:87:5b:45:91:c6:5c:b5:fd:82:e1:a7:0d:94:5a:c4: 1d:54:34:52:b2:c3:35:49:40:de:3b:46:40:6f:62:75:6a:29: 40:c9:25:39:70:47:68:f0:bb:64:dc:68:62:6b:c2:23:63:c1: 8e:22:02:c7:72:58:a8:ce:ee:65:3c:9e:54:a7:0f:b6:52:a7: 44:00:51:36:9f:85:04:80:24:3b:7a:3b:fb:11:25:84:5a:67: 73:ba:43:36:d2:00:b9:e1:9a:12:5a:ae:22:e0:12:4f:ae:04: e2:55:db:5f:d5:70:2f:1c:3b:13:c1:f5:f0:01:3b:ed:cd:d7: 41:a4:9c:c0 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjQwNTEwMjEzMDM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlOTFmZC1lNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09qJZa5mug6jDzdGlo0H7b/d3NgDHpZlYHr74wbGbYcKYmUczbNMDptEDg6G tnwbxiqO7jg3IBY1BIBAmRXHzbsKuylzuQIlUPw3pw9y8L+O57/8QuQisOt4RYr8 GuFiPKiSReJ7kV13qbPQOhzC/MxvCQJROQrEULri2Qh2p4CzWwjmBcpuBru41uty peeS4MeAwzdML0wh+/6OL21DT8uUcXTwahgeQTH5ulNt8Imc852z0+Dq9FEH6rLK mon7RYKm4PqyjrRcItIa+Kys1fzHxAt1PPszCJwOd4gpBvkymd+MvC9SHhUoA7hy ymazOoBhcakY8orRSJ8IDt9qAQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFJtVHVr+ Pj6mDR2tIzum5HPM4W7wMB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAwRkMvNTVGMkM0QzY3RjJGMTFFQUFERjRCRjZBQzRGOUFFMDIvQ0QyNkNBQzA0 MzE2MTFFRTgwQjUzQTc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAKlraADBAGlrb4DBADHQ0YwDQYJKoZIhvcNAQELBQADggEB ACryReWxAiNYUlBzYBCxjfeqdEfBzyf/BlKqdVPgFwNiT0AU/NheRZVrfF5WRzNm cwoUnXB6/moQBo3O7+WATto/8kIaGqEetdTBESsyoK7Yj2AwGN9DdieeRIFL5oo3 jk5fmoK836+4lrDXjKRbmIISnANfTTX7YQdH10aXpYYGJ4dbRZHGXLX9guGnDZRa xB1UNFKywzVJQN47RkBvYnVqKUDJJTlwR2jwu2TcaGJrwiNjwY4iAsdyWKjO7mU8 nlSnD7ZSp0QAUTafhQSAJDt6O/sRJYRaZ3O6QzbSALnhmhJariLgEk+uBOJV21/V cC8cOxPB9fABO+3N10GknMA= -----END CERTIFICATE-----Generated at Thu May 16 22:23:38 2024 by rpki-client on console-fra.rpki-client.org