$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/40F0E4DC75AB11EFB897AF69C4F9AE02.roa File: 40F0E4DC75AB11EFB897AF69C4F9AE02.roa (raw, json) Hash identifier: 66mcnb1x9N203HeKzYtZYqy46nvM7OGyg282gr346uI= Subject key identifier: 60:5D:75:34:94:54:6D:37:EF:49:64:E5:27:CE:F7:21:CB:02:DB:68 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0B3D Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/40F0E4DC75AB11EFB897AF69C4F9AE02.roa Signing time: Wed 18 Sep 2024 10:46:26 +0000 ROA not before: Wed 18 Sep 2024 10:46:26 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 6830 IP address blocks: 139.190.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Dec 2024 06:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Sep 18 10:46:26 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66eaaf82-4559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:d9:7b:68:95:65:a6:49:a0:65:67:91:b5: 31:77:e3:68:c3:44:38:4a:eb:3e:34:b6:ea:60:57: 66:06:63:5a:23:87:89:32:33:c0:f3:5f:40:4b:07: c2:0a:2c:a3:3f:9b:c0:34:c6:e8:5c:d1:ff:ae:55: a9:24:36:86:85:d9:9d:c9:58:b2:16:9f:42:58:ad: b2:8d:19:18:d8:ce:33:73:45:57:d1:be:fe:38:52: 1f:2a:11:3a:ed:7e:e1:ab:20:7c:ab:10:ce:73:6e: 95:b6:8b:ed:04:43:de:31:61:a5:d8:83:b4:71:e4: ee:4a:c8:b0:72:df:48:c2:26:46:6d:4f:a8:b5:a3: e2:28:46:05:b8:ca:50:9b:6b:67:87:eb:46:49:58: 86:2c:84:7c:84:b1:8d:5a:4d:69:d5:e8:c5:4a:ca: 8a:5c:d5:b4:6b:45:da:28:01:ab:40:82:24:06:6e: 29:71:9a:7f:bd:fd:c5:de:25:0c:9a:b4:97:8f:e0: f3:00:51:91:f1:5f:7f:6b:6d:3f:b5:83:90:8a:bc: e6:e5:f3:4d:a2:a4:3e:49:19:59:67:95:c3:ef:a4: e2:9e:17:f6:33:aa:1e:d4:a1:39:6e:68:15:2a:fa: 54:3a:27:bd:4f:89:5e:b5:42:16:7b:8b:a7:1d:c3: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5D:75:34:94:54:6D:37:EF:49:64:E5:27:CE:F7:21:CB:02:DB:68 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/40F0E4DC75AB11EFB897AF69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.234.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0e:02:a2:41:18:87:3f:05:9c:be:e1:6d:f7:eb:f1:59:05: 22:a9:4e:a3:5b:39:3e:d9:97:2f:5b:7c:fd:fe:63:7e:4d:67: de:cc:e3:77:06:a0:4d:2d:3a:a1:d0:89:ba:ad:39:c2:df:b0: aa:74:8a:73:c8:0c:73:ac:21:6d:0c:32:36:7e:ce:51:1f:14: c7:02:a9:4d:58:33:93:56:28:6f:4d:fb:cb:53:67:22:48:5b: 31:14:7f:dc:0c:70:49:c6:16:06:07:f5:4d:cb:82:b4:19:93: 28:f8:52:09:af:ab:b5:dd:c5:d3:fe:a7:46:ef:63:6d:30:6d: 54:13:c2:4f:71:61:50:89:69:3b:0a:c6:71:f8:dc:c4:ad:3f: 86:d6:63:aa:8c:d0:09:fb:a8:aa:79:02:98:ef:79:94:64:b2: 59:52:cb:d0:a2:63:fe:a2:d0:e2:05:fa:ca:29:35:93:f3:1e: 60:7a:84:01:e4:9a:d6:57:75:c7:6a:d7:f4:e0:70:fd:c8:79: be:db:ac:2f:b8:aa:14:00:f7:11:07:f0:04:51:58:ab:98:b5: 62:88:0e:e6:b8:20:ea:bd:d5:b8:74:76:04:30:21:1a:fb:b5: 94:a4:54:c4:31:33:17:a4:2f:14:d3:44:a0:0a:84:d5:65:88: ae:66:60:90 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjQwOTE4MTA0NjI2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmVhYWY4Mi00NTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbrZe2iVZaZJoGVnkbUxd+Now0Q4Sus+NLbqYFdmBmNaI4eJMjPA819ASwfC CiyjP5vANMboXNH/rlWpJDaGhdmdyViyFp9CWK2yjRkY2M4zc0VX0b7+OFIfKhE6 7X7hqyB8qxDOc26VtovtBEPeMWGl2IO0ceTuSsiwct9IwiZGbU+otaPiKEYFuMpQ m2tnh+tGSViGLIR8hLGNWk1p1ejFSsqKXNW0a0XaKAGrQIIkBm4pcZp/vf3F3iUM mrSXj+DzAFGR8V9/a20/tYOQirzm5fNNoqQ+SRlZZ5XD76Tinhf2M6oe1KE5bmgV KvpUOie9T4letUIWe4unHcOM/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGBddTSU VG0370lk5SfO9yHLAttoMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDBGMEU0REM3 NUFCMTFFRkI4OTdBRjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACLvuowDQYJKoZIhvcNAQELBQADggEBAFwOAqJBGIc/BZy+ 4W336/FZBSKpTqNbOT7Zly9bfP3+Y35NZ97M43cGoE0tOqHQibqtOcLfsKp0inPI DHOsIW0MMjZ+zlEfFMcCqU1YM5NWKG9N+8tTZyJIWzEUf9wMcEnGFgYH9U3LgrQZ kyj4Ugmvq7XdxdP+p0bvY20wbVQTwk9xYVCJaTsKxnH43MStP4bWY6qM0An7qKp5 ApjveZRksllSy9CiY/6i0OIF+sopNZPzHmB6hAHkmtZXdcdq1/TgcP3Ieb7brC+4 qhQA9xEH8ARRWKuYtWKIDua4IOq91bh0dgQwIRr7tZSkVMQxMxekLxTTRKAKhNVl iK5mYJA= -----END CERTIFICATE-----Generated at Mon Nov 25 09:04:28 2024 by rpki-client on console-fra.rpki-client.org