$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/50AF9F1E9D9611EE9CA1F335C4F9AE02.roa File: 50AF9F1E9D9611EE9CA1F335C4F9AE02.roa (raw, json) Hash identifier: NV96w4VrkiKBU8OTzFGPVJC8p8UB2vcNyUNcQZNomGk= Subject key identifier: 10:2C:31:17:60:7A:0B:9B:A6:7B:2D:0A:94:66:E4:7F:42:6B:F4:CB Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0957 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/50AF9F1E9D9611EE9CA1F335C4F9AE02.roa Signing time: Mon 18 Dec 2023 11:12:22 +0000 ROA not before: Mon 18 Dec 2023 11:12:22 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 7922 IP address blocks: 139.190.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 09:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Dec 18 11:12:22 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65802916-6134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:fa:26:ee:0d:ab:31:44:1c:ce:78:ed:f8: 8d:6d:35:7a:44:25:1d:de:fc:b9:25:84:e8:87:b4: d9:79:a3:10:37:17:16:60:a7:90:2b:ff:bc:7e:2c: 2b:24:4e:12:1c:2c:4f:a6:81:ca:10:89:c9:52:f3: 30:dc:b4:96:d3:d5:50:2e:33:3c:09:22:c3:10:5c: f0:09:9a:10:a3:7d:0c:9f:e2:73:22:95:c1:cb:92: 7d:0f:32:62:1c:46:38:26:61:82:80:27:d0:f4:a8: d0:bc:c3:ff:53:6c:0b:37:3d:fc:b7:e7:b4:e3:ec: f2:68:bb:ad:52:39:0c:91:2c:e6:e6:79:42:47:9b: 25:9b:c4:f2:a4:4d:18:a2:e9:3f:a9:42:6c:5b:55: 89:41:f3:19:be:9f:1a:d3:30:d6:cc:b0:ae:a9:38: e6:35:91:ba:99:4a:f6:45:81:5a:2b:39:e3:91:f7: 5b:57:5a:09:0f:41:3b:96:13:2f:17:11:59:eb:f1: a8:92:1b:f6:0a:d7:2c:29:af:d4:58:65:d5:43:19: 6b:e8:5f:0b:c5:ea:f1:4e:5b:43:5d:87:b3:98:2f: 59:39:59:b6:5b:76:32:c4:15:20:a3:af:bb:82:9e: 9a:71:cb:7d:7b:70:53:8b:9c:34:45:38:ce:fa:76: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2C:31:17:60:7A:0B:9B:A6:7B:2D:0A:94:66:E4:7F:42:6B:F4:CB X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/50AF9F1E9D9611EE9CA1F335C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.32.0/22 Signature Algorithm: sha256WithRSAEncryption 86:0a:3e:0c:3f:d3:78:a1:bc:8a:33:8c:f9:09:02:47:da:8f: 11:51:9c:40:8f:0e:5a:ba:e9:54:d4:02:85:64:a3:65:d6:4d: d6:a6:a7:b9:cb:0c:64:cc:34:36:20:02:af:9f:f9:95:50:e2: 4b:5d:09:38:a1:f3:e8:54:f4:26:94:77:77:27:65:76:ee:41: 2d:df:fe:e9:c4:c5:2f:3c:16:96:2e:fb:1f:04:17:cc:d5:05: 83:20:45:55:8a:43:47:95:de:84:8c:61:12:43:15:e7:12:c6: 04:a0:37:2d:d2:52:e6:90:36:a2:7b:3a:d0:6f:49:7e:79:d4: 88:f3:3a:d2:a1:4b:50:b7:b3:dc:88:c5:ee:f9:73:8a:e6:c9: b8:08:21:f6:94:17:fc:a3:26:f1:be:13:dd:af:3e:de:55:83: 36:05:12:0c:fa:9a:d9:61:c5:f2:94:2d:9d:b3:90:e6:42:fa: a0:41:c5:95:c5:03:b3:54:8f:7a:2f:66:1d:d8:11:cc:ea:98: 00:df:7c:5d:5a:fe:2f:a8:4f:f1:a7:4b:e3:4d:fe:2e:e6:7e: 10:c4:80:7a:08:d0:84:e2:1e:57:80:b1:9a:2c:af:26:d0:63: f4:6a:a1:aa:14:89:ac:72:61:b3:d0:ac:7f:d5:60:d9:06:a9: ca:c9:a3:a4 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjMxMjE4MTExMjIyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTgwMjkxNi02MTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWD6Ju4NqzFEHM547fiNbTV6RCUd3vy5JYToh7TZeaMQNxcWYKeQK/+8fiwr JE4SHCxPpoHKEInJUvMw3LSW09VQLjM8CSLDEFzwCZoQo30Mn+JzIpXBy5J9DzJi HEY4JmGCgCfQ9KjQvMP/U2wLNz38t+e04+zyaLutUjkMkSzm5nlCR5slm8TypE0Y ouk/qUJsW1WJQfMZvp8a0zDWzLCuqTjmNZG6mUr2RYFaKznjkfdbV1oJD0E7lhMv FxFZ6/Gokhv2CtcsKa/UWGXVQxlr6F8LxerxTltDXYezmC9ZOVm2W3YyxBUgo6+7 gp6acct9e3BTi5w0RTjO+naoTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBAsMRdg egubpnstCpRm5H9Ca/TLMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNTBBRjlGMUU5 RDk2MTFFRTlDQTFGMzM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKLviAwDQYJKoZIhvcNAQELBQADggEBAIYKPgw/03ihvIoz jPkJAkfajxFRnECPDlq66VTUAoVko2XWTdamp7nLDGTMNDYgAq+f+ZVQ4ktdCTih 8+hU9CaUd3cnZXbuQS3f/unExS88FpYu+x8EF8zVBYMgRVWKQ0eV3oSMYRJDFecS xgSgNy3SUuaQNqJ7OtBvSX551IjzOtKhS1C3s9yIxe75c4rmybgIIfaUF/yjJvG+ E92vPt5VgzYFEgz6mtlhxfKULZ2zkOZC+qBBxZXFA7NUj3ovZh3YEczqmADffF1a /i+oT/GnS+NN/i7mfhDEgHoI0ITiHleAsZosrybQY/RqoaoUiaxyYbPQrH/VYNkG qcrJo6Q= -----END CERTIFICATE-----Generated at Fri May 3 11:56:48 2024 by rpki-client on console-fra.rpki-client.org