$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D0C30AAED19011EFB9DDF30DC4F9AE02.roa File: D0C30AAED19011EFB9DDF30DC4F9AE02.roa (raw, json) Hash identifier: wtOuXEEJjUYTWpY0E5t1TiUGzbI8GDejma2rE9RJ+hE= Subject key identifier: F1:04:6D:A5:72:71:64:A5:6F:9F:70:60:C7:78:1A:B9:22:3D:97:D8 Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 0D7C Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D0C30AAED19011EFB9DDF30DC4F9AE02.roa Signing time: Fri 17 Jan 2025 12:43:00 +0000 ROA not before: Fri 17 Jan 2025 12:43:00 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 398704 IP address blocks: 139.190.0.0/21 maxlen: 24 139.190.40.0/21 maxlen: 24 139.190.56.0/21 maxlen: 24 139.190.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134 Validity Not Before: Jan 17 12:43:00 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=678a5053-af23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:50:b7:11:fe:02:60:86:e2:3b:21:cc:2a:5a: 60:4c:81:3b:b4:96:f5:5e:9f:66:14:d1:c3:54:8d: ce:b1:53:9c:a4:a5:09:5c:e7:49:ed:db:6e:cc:d2: 4b:89:40:da:63:e3:ed:05:cb:ff:70:68:6a:c6:25: 5a:95:47:bd:46:32:ae:07:22:d8:88:fc:36:d9:7f: e2:f2:5e:e2:dd:97:5b:d1:58:41:29:de:e1:62:1e: 39:43:60:1b:bf:5c:08:45:a6:b3:cf:9f:59:e9:2b: c4:bd:9f:69:8b:7e:52:f0:77:69:60:40:6e:43:52: 9e:85:b0:17:d0:62:54:1c:73:50:6a:7f:6c:0a:cc: 0f:63:27:22:de:29:9f:79:52:2e:eb:00:24:8f:be: 51:f8:fc:13:dd:ea:66:e8:fb:82:4d:7d:40:11:55: a2:a0:fa:1a:7e:48:e7:ce:6a:61:a8:5e:f9:2a:7c: d1:74:c5:9b:97:00:a7:0a:d2:7c:56:da:5a:05:5f: e6:55:2e:43:35:d2:98:f8:ce:e7:fa:f0:c5:80:53: e9:28:ba:39:52:f5:aa:25:85:f5:ef:3c:93:d0:0c: 1e:c1:b2:8a:11:aa:a4:26:bc:ce:77:93:b0:f0:de: 28:b7:a5:ee:80:3f:a5:84:2b:d3:5b:12:f9:a7:08: 2c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:04:6D:A5:72:71:64:A5:6F:9F:70:60:C7:78:1A:B9:22:3D:97:D8 X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/D0C30AAED19011EFB9DDF30DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.0.0/21 139.190.40.0/21 139.190.56.0/21 139.190.80.0/21 Signature Algorithm: sha256WithRSAEncryption 10:12:3d:87:d8:2a:5b:7f:4e:51:51:9d:3c:da:7f:3c:71:59: fb:c3:b6:e2:4d:7c:0f:06:9c:4e:85:cc:34:93:4c:42:55:e5: 28:77:51:4b:8b:12:a1:6e:8a:ff:fe:6b:9c:1f:33:c7:32:cd: b9:b9:87:16:03:bc:52:f3:40:75:82:a5:98:bd:9d:d9:26:67: 79:4d:46:43:54:b8:c3:95:bd:da:00:4a:08:18:ce:2e:a1:2a: 4f:14:46:cd:18:cd:95:fe:51:33:19:42:56:8d:6a:ba:16:4d: 7b:03:87:75:4a:9a:09:af:a0:d6:6b:e1:e4:66:84:9f:50:95: 11:5c:79:c1:38:95:11:9c:a4:7f:30:4a:78:54:53:36:eb:cd: 09:1b:30:37:d1:87:e4:bb:11:d6:c8:e7:61:6c:df:65:d4:ce: c6:0c:f9:5d:b6:af:7c:19:d6:d0:a0:7d:82:6d:cd:ce:9d:3e: db:c7:86:3c:aa:9b:1b:5b:fb:17:ef:c2:fc:2a:05:56:79:0c: a8:75:da:6d:04:25:bc:9f:7b:65:32:78:de:b2:4c:52:69:77: 20:e2:75:89:73:0a:bf:ce:ae:27:ad:92:e7:5a:9e:bd:ad:1b: 62:77:8c:3a:0a:95:48:6d:c3:dc:cc:cf:2a:67:22:58:ab:b8: e9:f7:ec:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwMTE3MTI0MzAwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhhNTA1My1hZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FC3Ef4CYIbiOyHMKlpgTIE7tJb1Xp9mFNHDVI3OsVOcpKUJXOdJ7dtuzNJL iUDaY+PtBcv/cGhqxiValUe9RjKuByLYiPw22X/i8l7i3Zdb0VhBKd7hYh45Q2Ab v1wIRaazz59Z6SvEvZ9pi35S8HdpYEBuQ1KehbAX0GJUHHNQan9sCswPYyci3imf eVIu6wAkj75R+PwT3epm6PuCTX1AEVWioPoafkjnzmphqF75KnzRdMWblwCnCtJ8 VtpaBV/mVS5DNdKY+M7n+vDFgFPpKLo5UvWqJYX17zyT0AwewbKKEaqkJrzOd5Ow 8N4ot6XugD+lhCvTWxL5pwgs/wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFPEEbaVy cWSlb59wYMd4GrkiPZfYMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRDBDMzBBQUVE MTkwMTFFRkI5RERGMzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAOLvgADBAOLvigDBAOLvjgDBAOLvlAwDQYJKoZIhvcNAQEL BQADggEBABASPYfYKlt/TlFRnTzafzxxWfvDtuJNfA8GnE6FzDSTTEJV5Sh3UUuL EqFuiv/+a5wfM8cyzbm5hxYDvFLzQHWCpZi9ndkmZ3lNRkNUuMOVvdoASggYzi6h Kk8URs0YzZX+UTMZQlaNaroWTXsDh3VKmgmvoNZr4eRmhJ9QlRFcecE4lRGcpH8w SnhUUzbrzQkbMDfRh+S7EdbI52Fs32XUzsYM+V22r3wZ1tCgfYJtzc6dPtvHhjyq mxtb+xfvwvwqBVZ5DKh12m0EJbyfe2UyeN6yTFJpdyDidYlzCr/Orietkudanr2t G2J3jDoKlUhtw9zMzypnIliruOn37Jk= -----END CERTIFICATE-----Generated at Wed Feb 19 20:39:29 2025 by rpki-client