$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa File: 05054224D8E411E9BEB7986DC4F9AE02.roa (raw, json) Hash identifier: r4Nn4V4I8uu965S2bp9gePUlDuw+WitBghKmVxEd5Oo= Subject key identifier: 27:59:6F:80:7D:2E:A8:B0:92:F1:B0:27:9F:5D:9E:A9:1B:93:FB:7A Certificate issuer: /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Certificate serial: 0C43 Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa Signing time: Wed 24 Jan 2024 19:07:01 +0000 ROA not before: Wed 24 Jan 2024 19:07:01 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9930 IP address blocks: 161.142.0.0/16 maxlen: 19 192.228.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3139 (0xc43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627 Validity Not Before: Jan 24 19:07:01 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b15fd5-c771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:3f:41:1d:6b:b7:b2:b3:2d:5b:98:da:30: f1:3e:cd:3e:53:64:f4:d9:7c:ed:f8:17:a2:e9:be: cb:95:9a:d4:a1:0b:5e:c8:f9:9c:59:2c:49:22:ef: e4:49:7e:f4:ec:b4:d8:ed:a6:80:bd:68:bb:94:7f: 09:af:40:9c:6f:20:0d:89:4f:a0:05:9e:c4:54:43: b4:90:61:c8:f6:05:c4:8c:49:30:c9:a8:01:d9:fa: b5:12:ac:e6:04:1d:69:26:f2:2c:e4:16:4f:43:86: 7f:cc:df:00:0b:f4:b9:1f:71:29:49:93:df:1e:0d: 4a:67:ed:a0:c0:28:b0:00:fe:d9:98:21:7b:4a:9c: be:28:9b:71:87:be:80:60:32:e4:32:2f:88:dd:b9: ad:f3:1c:e1:25:ad:aa:f6:e4:14:62:a0:9e:ec:bf: ce:0d:aa:76:5b:02:40:3f:4a:34:72:df:7a:2f:44: bf:f2:2e:89:e3:7e:80:d0:12:b5:a2:17:25:27:b1: 5b:34:44:84:3f:f8:59:0a:29:2a:4b:99:77:5f:11: 6e:d3:15:32:56:3b:79:a0:6f:25:cd:58:96:c6:49: d2:be:31:9e:ae:dc:38:8e:f8:32:a5:80:08:e7:ab: 5b:e9:bb:a4:bd:b5:57:85:1b:63:21:26:05:93:03: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:59:6F:80:7D:2E:A8:B0:92:F1:B0:27:9F:5D:9E:A9:1B:93:FB:7A X509v3 Authority Key Identifier: keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.142.0.0/16 192.228.128.0/17 Signature Algorithm: sha256WithRSAEncryption 21:5c:36:7e:81:63:b1:f9:5a:17:a4:4c:da:9c:a5:76:76:f2: 54:0f:00:f2:86:61:b7:5e:2d:07:06:bb:c3:9e:b6:96:5b:be: 2d:04:3e:14:b3:e4:b1:c9:a1:ca:87:92:bf:bb:76:be:56:ff: d9:2f:42:18:9c:f3:14:6e:31:98:b3:de:3e:0e:20:9e:ee:16: f6:f7:19:b5:86:99:29:5c:b5:f4:55:0d:d3:16:5f:19:64:7a: 0b:48:73:68:e6:53:9b:03:60:73:4e:03:fa:3a:4a:a7:cb:e1: 4a:cd:a7:ad:1e:8b:33:21:5d:99:66:76:0f:bd:11:ca:33:2d: 00:f9:c5:b4:b2:14:e3:37:1e:ab:c9:57:cb:0d:30:07:41:24: 59:3c:9d:20:c4:8c:4d:50:2d:5f:05:1d:01:9d:13:33:1f:8f: 64:d1:36:5f:8f:45:ac:99:9e:d2:a1:30:9b:00:80:ac:e0:de: a6:37:b3:5b:e3:04:da:86:33:56:e6:13:d8:70:59:51:9a:95: 50:1e:79:be:64:d0:22:19:2b:0b:f1:d5:48:80:e0:3f:b1:a9: 7c:cd:2a:f8:b8:4c:51:bb:52:6b:20:80:20:f4:a7:ef:db:af: a8:83:b0:bc:b3:87:86:40:30:87:ed:a4:5b:76:dd:da:59:57: c2:88:4a:dd -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgICDEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEEyRjZGNjYxMzEyQzk1QkYwNUEwQjUyMzBCMTM3MUQ0 NjIyRkQ2MjcwHhcNMjQwMTI0MTkwNzAxWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWIxNWZkNS1jNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0o/QR1rt7KzLVuY2jDxPs0+U2T02Xzt+Bei6b7LlZrUoQteyPmcWSxJIu/k SX707LTY7aaAvWi7lH8Jr0CcbyANiU+gBZ7EVEO0kGHI9gXEjEkwyagB2fq1Eqzm BB1pJvIs5BZPQ4Z/zN8AC/S5H3EpSZPfHg1KZ+2gwCiwAP7ZmCF7Spy+KJtxh76A YDLkMi+I3bmt8xzhJa2q9uQUYqCe7L/ODap2WwJAP0o0ct96L0S/8i6J436A0BK1 ohclJ7FbNESEP/hZCikqS5l3XxFu0xUyVjt5oG8lzViWxknSvjGertw4jvgypYAI 56tb6bukvbVXhRtjISYFkwNWLQIDAQABo4ICmjCCApYwHQYDVR0OBBYEFCdZb4B9 LqiwkvGwJ59dnqkbk/t6MB8GA1UdIwQYMBaAFKL29mExLJW/BaC1IwsTcdRiL9Yn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yNjFEMjgzMEQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi9vdmIyWVRFc2xiOEZvTFVqQ3hOeDFHSXYx aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL292YjJZVEVzbGI4Rm9MVWpDeE54MUdJdjFpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdCQzQvMjYxRDI4MzBENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvMDUwNTQyMjRE OEU0MTFFOUJFQjc5ODZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJAYIKwYBBQUHAQcBAf8E FTATMBEEAgABMAsDAwChjgMEB8DkgDANBgkqhkiG9w0BAQsFAAOCAQEAIVw2foFj sflaF6RM2pyldnbyVA8A8oZht14tBwa7w562llu+LQQ+FLPkscmhyoeSv7t2vlb/ 2S9CGJzzFG4xmLPePg4gnu4W9vcZtYaZKVy19FUN0xZfGWR6C0hzaOZTmwNgc04D +jpKp8vhSs2nrR6LMyFdmWZ2D70RyjMtAPnFtLIU4zceq8lXyw0wB0EkWTydIMSM TVAtXwUdAZ0TMx+PZNE2X49FrJme0qEwmwCArODepjezW+ME2oYzVuYT2HBZUZqV UB55vmTQIhkrC/HVSIDgP7GpfM0q+LhMUbtSayCAIPSn79uvqIOwvLOHhkAwh+2k W3bd2llXwohK3Q== -----END CERTIFICATE-----Generated at Fri May 10 20:45:26 2024 by rpki-client on console-ams.rpki-client.org