$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C1C58F44A7DE11EFB9558C21C4F9AE02.roa File: C1C58F44A7DE11EFB9558C21C4F9AE02.roa (raw, json) Hash identifier: qM5fD+7lmyQBPTjdQQ7AlSItZAux6uGTvGqORgpnRbU= Subject key identifier: 34:28:14:39:E6:1A:DE:FB:33:BE:F9:CE:96:EB:84:3C:0F:E6:66:0A Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0C27 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C1C58F44A7DE11EFB9558C21C4F9AE02.roa Signing time: Thu 21 Nov 2024 08:06:00 +0000 ROA not before: Thu 21 Nov 2024 08:06:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 16589 IP address blocks: 139.190.32.0/19 maxlen: 24 139.190.68.0/22 maxlen: 24 139.190.80.0/21 maxlen: 24 139.190.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 12:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Nov 21 08:06:00 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=673ee9e7-d66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:75:e7:e7:b4:93:9b:80:a2:ba:d0:59:5b: 9a:ac:ab:79:e2:96:cf:07:72:de:e6:d9:47:80:e6: c7:5b:00:ba:d2:c2:73:01:5e:ba:72:e1:01:ba:75: e0:85:33:29:24:a6:72:3d:c2:0b:fc:3b:af:a1:10: 92:4c:25:3d:ee:c8:d3:0a:3f:6a:53:56:0b:e8:36: 7c:93:47:f9:2e:17:b0:4a:aa:cc:a4:55:c8:08:1c: e9:86:7d:41:41:b2:40:81:57:e0:7e:b3:11:52:7d: e2:75:c0:b0:9d:14:ca:a4:66:cf:38:04:f9:dc:03: f9:4a:8d:7e:d5:c0:a6:5b:68:c7:33:17:b3:b1:58: 26:3e:8e:ef:7b:34:8a:c0:0d:5c:84:d7:55:ed:d3: 7c:9d:8c:59:f9:4b:6d:9e:cf:53:e2:7f:e8:84:d9: 45:8e:bb:07:93:83:fa:23:7d:01:2e:48:67:ec:fa: 1b:6d:ab:9c:1c:c4:09:8f:54:43:3f:fb:05:7e:17: 28:11:07:54:bb:53:13:59:0f:0d:35:9a:85:c5:27: ca:3b:b3:fc:13:f7:fc:5d:2d:e8:53:0f:8b:80:22: 21:06:c5:a1:1e:25:de:59:d2:14:34:0a:88:84:c6: 5b:a6:50:a6:4d:dc:c2:10:7b:a5:69:34:ed:84:00: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:14:39:E6:1A:DE:FB:33:BE:F9:CE:96:EB:84:3C:0F:E6:66:0A X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/C1C58F44A7DE11EFB9558C21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.32.0/19 139.190.68.0/22 139.190.80.0/20 Signature Algorithm: sha256WithRSAEncryption 06:31:6b:66:c2:04:49:ad:14:31:73:d0:f6:0c:f4:e9:45:5d: 59:5b:f1:93:92:de:f7:10:6b:7d:29:30:d4:a3:6e:6d:22:b0: 24:90:bb:73:9c:fb:d6:91:0d:e8:0c:76:5f:63:4c:8e:2e:69: f1:4c:59:5a:4c:db:52:ea:1f:90:2f:eb:39:51:54:ae:6e:ee: 83:0e:f5:5a:34:17:a1:28:aa:0c:d8:25:f2:fc:cc:86:74:7f: e7:a0:9e:de:00:a0:7b:09:f9:e8:33:b2:4d:93:31:2c:d2:d2: c6:06:f3:5f:0a:7c:f0:1a:2d:dd:6a:f5:04:20:26:85:01:0d: 93:4f:01:ed:8d:0c:b3:32:46:a4:88:58:3c:d8:ad:c9:f7:56: 7a:50:b7:e8:3a:4b:35:ce:7d:4e:a6:6c:a1:80:8c:ce:78:60: 2d:82:74:cb:c0:6c:1c:5c:e2:58:cd:57:f0:80:cb:fe:b8:7f: fb:7b:7a:d7:f0:9e:64:ce:55:bd:1c:49:5d:f6:77:56:e3:22: 28:49:4c:e6:fa:93:08:e8:9b:56:63:b3:14:ce:29:07:26:0f: 71:44:f1:43:ac:42:6b:ed:55:99:2f:1a:01:92:fe:fe:5e:66: f0:6e:7d:d9:cb:cd:79:2d:35:7a:c1:7a:0f:d5:5e:a4:bd:6a: ea:5b:d0:82 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjQxMTIxMDgwNjAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNlZTllNy1kNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYh15+e0k5uAorrQWVuarKt54pbPB3Le5tlHgObHWwC60sJzAV66cuEBunXg hTMpJKZyPcIL/DuvoRCSTCU97sjTCj9qU1YL6DZ8k0f5LhewSqrMpFXICBzphn1B QbJAgVfgfrMRUn3idcCwnRTKpGbPOAT53AP5So1+1cCmW2jHMxezsVgmPo7vezSK wA1chNdV7dN8nYxZ+Uttns9T4n/ohNlFjrsHk4P6I30BLkhn7PobbaucHMQJj1RD P/sFfhcoEQdUu1MTWQ8NNZqFxSfKO7P8E/f8XS3oUw+LgCIhBsWhHiXeWdIUNAqI hMZbplCmTdzCEHulaTTthAC1OwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDQoFDnm Gt77M775zpbrhDwP5mYKMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQzFDNThGNDRB N0RFMTFFRkI5NTU4QzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAWLviADBAKLvkQDBASLvlAwDQYJKoZIhvcNAQELBQADggEB AAYxa2bCBEmtFDFz0PYM9OlFXVlb8ZOS3vcQa30pMNSjbm0isCSQu3Oc+9aRDegM dl9jTI4uafFMWVpM21LqH5Av6zlRVK5u7oMO9Vo0F6EoqgzYJfL8zIZ0f+egnt4A oHsJ+egzsk2TMSzS0sYG818KfPAaLd1q9QQgJoUBDZNPAe2NDLMyRqSIWDzYrcn3 VnpQt+g6SzXOfU6mbKGAjM54YC2CdMvAbBxc4ljNV/CAy/64f/t7etfwnmTOVb0c SV32d1bjIihJTOb6kwjom1ZjsxTOKQcmD3FE8UOsQmvtVZkvGgGS/v5eZvBufdnL zXktNXrBeg/VXqS9aupb0II= -----END CERTIFICATE-----Generated at Thu Nov 21 13:40:15 2024 by rpki-client on console-ams.rpki-client.org