$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/242CD1DC95EB11EC9715DA5BC4F9AE02.roa File: 242CD1DC95EB11EC9715DA5BC4F9AE02.roa (raw, json) Hash identifier: uQ2jtBTM9Z78RAZqVUcoal6Ix2e6zlg7uOCydimofCk= Subject key identifier: 5C:B9:06:FA:A2:47:39:4E:F1:86:59:39:EF:0A:DD:8A:C4:91:B3:FD Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0888 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/242CD1DC95EB11EC9715DA5BC4F9AE02.roa Signing time: Wed 24 May 2023 23:24:57 +0000 ROA not before: Wed 24 May 2023 23:24:57 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 211936 IP address blocks: 139.190.224.0/21 maxlen: 24 139.190.232.0/24 maxlen: 24 139.190.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 21:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: May 24 23:24:57 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=646e9cc8-3bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:b2:5f:c6:a6:1d:3b:ce:66:09:80:a6:30: 72:fc:1e:c9:a0:e8:30:96:70:c5:68:ef:7f:f8:e7: d2:b8:61:c5:e4:20:c1:0f:8f:4f:03:c8:f3:69:50: 09:40:f4:ce:d1:da:57:4f:a5:ea:b7:84:0b:ee:0a: a8:20:7e:3c:8a:aa:bb:13:c2:32:29:95:10:25:2a: 51:6c:6e:db:1d:91:df:2a:bb:dc:cc:c5:ed:2c:77: f4:1a:53:f6:39:d8:4f:55:85:9f:1a:ef:4c:ad:1a: 5b:69:49:f9:da:ea:e7:f7:e4:41:5d:e1:fb:89:5e: 1b:45:ea:05:ca:61:78:9d:73:3e:7d:f2:72:81:73: 95:43:f6:68:1a:81:69:9d:b0:f5:45:29:65:2d:33: 67:bf:e9:97:96:f0:33:59:90:88:ac:0d:49:bc:90: b2:28:db:08:70:79:4e:38:43:eb:8b:65:2e:43:14: 00:37:0a:9a:e5:af:e0:4b:f8:ce:be:c5:90:53:89: 3e:20:67:06:0b:12:75:e5:e4:91:19:ad:68:b9:79: 8b:62:45:1b:03:2e:4c:8c:d1:f1:8e:69:6c:3e:6c: 6c:84:fd:e3:d5:59:55:bf:8f:d2:3c:2c:d6:d0:0f: 43:c9:cb:00:4c:b4:5d:cf:4f:b0:f0:5c:e9:c6:5b: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B9:06:FA:A2:47:39:4E:F1:86:59:39:EF:0A:DD:8A:C4:91:B3:FD X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/242CD1DC95EB11EC9715DA5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.224.0-139.190.233.255 Signature Algorithm: sha256WithRSAEncryption c3:e1:fc:36:a8:f8:13:bc:25:7e:3e:50:7e:01:e1:2c:2b:a8: 43:3c:20:24:a3:ce:ef:94:c9:9d:6b:39:89:22:ef:ea:d7:7a: e1:61:32:af:a5:2e:f4:08:a5:2c:77:6c:46:ed:79:d0:55:bb: 0f:1c:c1:6a:3c:8f:2c:24:3c:50:8b:5d:ed:19:36:6f:23:b4: 21:69:c2:c4:56:c6:ba:78:18:63:f5:12:30:51:f2:05:f5:12: 17:02:d9:80:39:d3:22:ab:44:2e:0d:92:ed:61:c9:e2:9d:25: e5:1f:8e:78:02:1e:e7:6f:07:54:72:d1:e9:24:5f:3a:82:81: 27:91:55:9a:42:71:67:a0:b5:17:bc:df:17:72:09:1d:ad:82: 62:be:98:80:88:c3:f9:0c:b3:5e:6e:03:bf:f4:f2:58:23:c6: 53:70:a5:8f:5c:fe:6e:ae:a4:21:72:1b:18:af:97:3a:78:a9: 06:be:64:5d:83:38:b0:24:57:70:8e:a4:67:8d:18:49:fa:35: fb:67:ca:c2:92:1b:db:ee:c1:a6:60:a8:4e:18:89:d7:d4:9d: d1:7d:3c:43:58:fc:db:db:8c:55:c9:fe:db:66:3e:aa:58:43: c7:99:4a:1f:5c:0a:2c:21:b6:7a:66:49:82:5a:17:34:c0:be: d9:71:af:11 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjMwNTI0MjMyNDU3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDZlOWNjOC0zYmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumiyX8amHTvOZgmApjBy/B7JoOgwlnDFaO9/+OfSuGHF5CDBD49PA8jzaVAJ QPTO0dpXT6Xqt4QL7gqoIH48iqq7E8IyKZUQJSpRbG7bHZHfKrvczMXtLHf0GlP2 OdhPVYWfGu9MrRpbaUn52urn9+RBXeH7iV4bReoFymF4nXM+ffJygXOVQ/ZoGoFp nbD1RSllLTNnv+mXlvAzWZCIrA1JvJCyKNsIcHlOOEPri2UuQxQANwqa5a/gS/jO vsWQU4k+IGcGCxJ15eSRGa1ouXmLYkUbAy5MjNHxjmlsPmxshP3j1VlVv4/SPCzW 0A9DycsATLRdz0+w8FzpxlvndQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFy5Bvqi RzlO8YZZOe8K3YrEkbP9MB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjQyQ0QxREM5 NUVCMTFFQzk3MTVEQTVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBYu+4AMEAYu+6DANBgkqhkiG9w0BAQsFAAOCAQEAw+H8 Nqj4E7wlfj5QfgHhLCuoQzwgJKPO75TJnWs5iSLv6td64WEyr6Uu9AilLHdsRu15 0FW7DxzBajyPLCQ8UItd7Rk2byO0IWnCxFbGungYY/USMFHyBfUSFwLZgDnTIqtE Lg2S7WHJ4p0l5R+OeAIe528HVHLR6SRfOoKBJ5FVmkJxZ6C1F7zfF3IJHa2CYr6Y gIjD+QyzXm4Dv/TyWCPGU3Clj1z+bq6kIXIbGK+XOnipBr5kXYM4sCRXcI6kZ40Y Sfo1+2fKwpIb2+7BpmCoThiJ19Sd0X08Q1j829uMVcn+22Y+qlhDx5lKH1wKLCG2 emZJgloXNMC+2XGvEQ== -----END CERTIFICATE-----Generated at Wed May 22 22:41:55 2024 by rpki-client on console-fra.rpki-client.org