$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/58CA0E62615111EFACF30C14C4F9AE02.roa File: 58CA0E62615111EFACF30C14C4F9AE02.roa (raw, json) Hash identifier: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA= Subject key identifier: 88:B5:AA:DB:3D:1F:9A:1B:F9:B0:06:E2:D2:DD:E9:2E:15:6A:AE:BE Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: 04 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/58CA0E62615111EFACF30C14C4F9AE02.roa Signing time: Fri 23 Aug 2024 13:14:29 +0000 ROA not before: Fri 23 Aug 2024 13:14:29 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139820 IP address blocks: 160.30.174.0/24 maxlen: 24 160.30.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Oct 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Aug 23 13:14:29 2024 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=66c88b34-0fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:58:1f:06:ad:70:40:f2:cf:88:48:59:a3: 59:9b:62:c4:44:89:31:af:d1:bb:8c:b7:f4:c2:27: b2:e0:b7:c2:50:39:73:b4:c2:3c:6d:2c:9c:d1:48: 35:4a:31:5a:fd:0a:39:9d:8b:8a:66:a6:d2:7c:aa: d0:ba:0c:30:74:60:55:44:14:5e:29:f2:f1:59:40: 83:d7:bc:d8:2a:cc:d6:0e:cc:c3:f1:24:7d:5d:90: b1:8a:d4:cd:c1:72:72:1d:12:80:0d:1d:e3:6d:37: fc:cf:09:76:86:2d:ee:39:23:15:de:82:60:9a:2f: 31:7b:84:c9:40:c1:3f:b0:f8:c5:c4:11:2c:fc:c0: e6:1d:3d:f1:ae:a9:da:ef:47:b4:7a:96:f7:32:5f: 71:d0:f4:42:51:62:c9:a0:24:cd:09:ba:98:e0:b2: a2:ca:c3:ec:dd:86:95:ba:77:81:af:4b:d6:c4:39: 1c:41:88:48:a3:34:13:82:30:01:1f:9f:74:56:99: 59:68:89:aa:22:ea:d4:4d:af:7c:f4:35:08:09:85: e7:b2:72:a2:f2:79:5f:12:46:8e:a8:cc:d8:e7:1c: e7:02:16:c9:fb:a6:64:9b:28:b7:16:06:e7:3e:05: 14:77:97:5d:eb:05:50:3d:cf:e8:df:4c:33:5d:05: 93:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B5:AA:DB:3D:1F:9A:1B:F9:B0:06:E2:D2:DD:E9:2E:15:6A:AE:BE X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/58CA0E62615111EFACF30C14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.174.0/23 Signature Algorithm: sha256WithRSAEncryption 61:9f:1b:c7:3b:c5:7e:56:ba:a2:bd:29:63:dd:8c:93:cc:ee: 90:48:77:32:5a:df:3a:7d:e4:a4:08:a8:3d:10:a4:a6:ab:56: 75:9e:3e:57:70:8b:12:0e:91:c1:78:bf:d7:a6:65:2e:02:77: ce:5a:3f:ed:06:db:a7:19:90:61:47:a0:c0:a4:4f:7b:2d:e4: 7d:74:32:88:41:74:a3:2f:b9:d5:47:90:54:ef:50:ca:2c:ec: a8:0d:ee:b9:a3:a8:63:d9:e2:21:1d:11:e2:44:c2:b0:7f:ab: 74:e4:2f:0d:78:86:17:35:27:0a:c7:6b:4c:9c:96:4c:be:6b: 87:58:f7:ac:1e:a6:01:f2:af:fa:38:c5:b1:3b:49:6e:ce:98: 06:aa:a7:a2:64:dc:be:17:df:f6:96:fe:0c:46:b2:90:93:0c: ee:cc:51:f6:46:11:47:74:2a:2b:be:5d:2d:7e:6c:55:45:85: ca:97:d9:77:db:fe:a7:3a:0e:52:ec:37:52:51:ad:3f:84:ab: 3b:a0:29:6b:81:32:09:a9:72:6b:ef:a7:6a:25:79:3a:b4:95: 4c:2d:a9:b6:c4:03:49:1a:9f:1d:f4:47:b5:6c:e9:f6:f8:a5: 25:14:f5:60:aa:58:aa:75:4f:22:eb:52:f2:2f:65:01:dc:1b: 26:a1:17:56 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkI5QTExMC8GA1UEBRMoRjlDNDQ0Q0ZDRjNCNkEzNzU0NzFFM0I1NDg3NEZDMkI0 OUIyQzcyNjAeFw0yNDA4MjMxMzE0MjlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2Yzg4YjM0LTBmYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCztVgfBq1wQPLPiEhZo1mbYsREiTGv0buMt/TCJ7Lgt8JQOXO0wjxtLJzRSDVK MVr9Cjmdi4pmptJ8qtC6DDB0YFVEFF4p8vFZQIPXvNgqzNYOzMPxJH1dkLGK1M3B cnIdEoANHeNtN/zPCXaGLe45IxXegmCaLzF7hMlAwT+w+MXEESz8wOYdPfGuqdrv R7R6lvcyX3HQ9EJRYsmgJM0JupjgsqLKw+zdhpW6d4GvS9bEORxBiEijNBOCMAEf n3RWmVloiaoi6tRNr3z0NQgJheeycqLyeV8SRo6ozNjnHOcCFsn7pmSbKLcWBuc+ BRR3l13rBVA9z+jfTDNdBZNBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiLWq2z0f mhv5sAbi0t3pLhVqrr4wHwYDVR0jBBgwFoAU+cREz887ajdUceO1SHT8K0myxyYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2QjlBLzExNjAxMjhFNjE1 MDExRUZBRTdBOEM3M0M0RjlBRTAyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLWNSRXo4ODdhamRVY2VPMVNIVDhLMG15eHlZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi81OENBMEU2MjYx NTExMUVGQUNGMzBDMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAerjANBgkqhkiG9w0BAQsFAAOCAQEAYZ8bxzvFfla6or0p Y92Mk8zukEh3MlrfOn3kpAioPRCkpqtWdZ4+V3CLEg6RwXi/16ZlLgJ3zlo/7Qbb pxmQYUegwKRPey3kfXQyiEF0oy+51UeQVO9QyizsqA3uuaOoY9niIR0R4kTCsH+r dOQvDXiGFzUnCsdrTJyWTL5rh1j3rB6mAfKv+jjFsTtJbs6YBqqnomTcvhff9pb+ DEaykJMM7sxR9kYRR3QqK75dLX5sVUWFypfZd9v+pzoOUuw3UlGtP4SrO6Apa4Ey Calya++naiV5OrSVTC2ptsQDSRqfHfRHtWzp9vilJRT1YKpYqnVPIutS8i9lAdwb JqEXVg== -----END CERTIFICATE-----Generated at Wed Oct 23 07:46:03 2024 by rpki-client on console-ams.rpki-client.org