$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/B8BA4E603B5211EAA0D53F12C4F9AE02.roa File: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (raw, json) Hash identifier: 0bWEqN9ytQr36qR+WzvWjllXD57C8hkgYRTXHIhrysY= Subject key identifier: CC:20:FE:C9:B7:80:71:56:A6:27:D4:47:31:39:7A:A8:52:66:02:69 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1CCD Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/B8BA4E603B5211EAA0D53F12C4F9AE02.roa Signing time: Thu 28 Sep 2023 16:33:43 +0000 ROA not before: Thu 28 Sep 2023 16:33:43 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 45102 IP address blocks: 8.128.0.0/10 maxlen: 18 8.208.0.0/12 maxlen: 15 8.208.0.0/16 maxlen: 24 8.209.0.0/16 maxlen: 24 8.210.0.0/16 maxlen: 24 8.211.0.0/16 maxlen: 24 8.212.0.0/16 maxlen: 24 8.213.0.0/16 maxlen: 24 8.214.0.0/16 maxlen: 24 8.215.0.0/16 maxlen: 24 8.216.0.0/16 maxlen: 24 8.217.0.0/16 maxlen: 24 8.218.0.0/16 maxlen: 24 8.219.0.0/16 maxlen: 24 8.220.0.0/16 maxlen: 24 8.221.0.0/16 maxlen: 24 8.222.0.0/16 maxlen: 24 8.223.0.0/16 maxlen: 24 149.129.0.0/16 maxlen: 24 161.117.0.0/16 maxlen: 24 170.33.0.0/16 maxlen: 16 170.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7373 (0x1ccd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Sep 28 16:33:43 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6515aae6-2a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:da:db:76:e7:2a:da:4c:8f:af:a5:9d:97:e3: 76:ca:9e:cb:7b:7a:2a:43:c0:6f:a3:67:d4:89:e7: 9d:9a:ec:76:53:44:b9:17:94:52:84:d0:2f:5c:99: 97:44:73:aa:83:3b:5f:05:d0:f9:50:88:36:87:65: c1:4d:8c:ad:4f:e4:95:d8:38:2e:fa:1f:1d:3b:5a: 9e:e7:e0:ad:25:81:81:6c:6f:c2:2f:30:dc:40:ab: ea:82:91:75:f7:40:fc:1f:bb:38:18:4e:79:c3:10: 8c:88:d0:1a:da:8d:55:e1:d0:21:96:94:42:7d:de: dd:3e:0f:5a:9f:77:6c:d0:ca:4d:a9:cd:c1:ec:82: 40:83:39:6c:5e:9e:ee:f2:8c:56:a3:94:df:fd:5f: 18:9c:48:06:bd:db:5e:e9:96:7e:31:38:5b:2d:7c: fc:ea:16:60:1b:66:43:b4:27:21:07:1b:ce:05:ae: 38:0c:04:63:ac:8c:08:57:0b:ac:2e:da:d7:63:b0: 7f:2a:e1:a6:45:67:c5:59:3d:40:b5:25:db:68:e3: 29:6b:c2:5c:28:89:ea:f3:d4:80:42:7e:36:ff:ec: 53:8c:de:a3:7d:40:11:fa:c2:fc:87:d2:50:c1:ff: ea:e0:ed:47:bd:e3:5e:df:f1:40:5e:97:c9:ef:d5: 12:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:20:FE:C9:B7:80:71:56:A6:27:D4:47:31:39:7A:A8:52:66:02:69 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/B8BA4E603B5211EAA0D53F12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 8.128.0.0/10 8.208.0.0/12 149.129.0.0/16 161.117.0.0/16 170.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:a9:ac:b0:a1:a6:3f:8b:23:fc:c2:32:84:66:21:aa:5e:39: d4:e7:f2:e2:31:04:6e:9a:fc:fb:c6:68:a4:2f:ad:6c:94:34: a2:8f:49:e7:68:51:57:78:65:4f:5b:f0:d0:db:1b:4a:65:0a: df:39:1b:14:9c:17:6d:79:86:d4:57:b5:12:af:42:60:dc:72: 50:b9:c9:74:80:94:ff:bb:09:5b:65:36:3d:7f:69:e4:e8:b3: 48:c9:22:9a:70:d0:c3:9f:be:94:3f:a9:49:0b:da:dd:b7:f2: 03:1e:4a:fa:fc:37:c3:cf:dc:d6:63:fc:42:c7:d4:6f:f8:7b: a9:b1:03:02:ac:48:95:24:1b:f0:09:77:b9:e9:c2:fc:c9:08: 19:82:14:aa:41:eb:c5:4c:74:d5:9b:83:0e:d3:66:f0:08:9e: e6:72:5a:5c:59:23:90:79:65:e9:1e:1b:d1:cd:bc:1a:76:95: 93:99:a3:15:de:c1:e9:93:28:0a:d2:07:c9:47:ac:d4:9d:4b: 15:9d:35:b1:ee:9a:a4:4c:e7:01:3a:b2:dc:76:31:40:77:75: 8b:d6:87:ab:9e:10:6a:21:fa:e9:b4:1b:b6:6f:4a:db:6c:38: 84:4d:e6:c4:c9:7c:13:61:de:21:f6:35:6b:bd:65:97:c2:6b: a5:94:14:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjMwOTI4MTYzMzQzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1YWFlNi0yYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Nrbducq2kyPr6Wdl+N2yp7Le3oqQ8Bvo2fUieedmux2U0S5F5RShNAvXJmX RHOqgztfBdD5UIg2h2XBTYytT+SV2Dgu+h8dO1qe5+CtJYGBbG/CLzDcQKvqgpF1 90D8H7s4GE55wxCMiNAa2o1V4dAhlpRCfd7dPg9an3ds0MpNqc3B7IJAgzlsXp7u 8oxWo5Tf/V8YnEgGvdte6ZZ+MThbLXz86hZgG2ZDtCchBxvOBa44DARjrIwIVwus LtrXY7B/KuGmRWfFWT1AtSXbaOMpa8JcKInq89SAQn42/+xTjN6jfUAR+sL8h9JQ wf/q4O1HveNe3/FAXpfJ79USPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwg/sm3 gHFWpifURzE5eqhSZgJpMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvQUQ2MjkyMjJCNTI1MTFFNkFGNkM4OTVFQzRGOUFFMDIvQjhCQTRFNjAz QjUyMTFFQUEwRDUzRjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMgYIKwYBBQUHAQcBAf8E IzAhMB8EAgABMBkDAwYIgAMDBAjQAwMAlYEDAwChdQMDAKohMA0GCSqGSIb3DQEB CwUAA4IBAQCEqaywoaY/iyP8wjKEZiGqXjnU5/LiMQRumvz7xmikL61slDSij0nn aFFXeGVPW/DQ2xtKZQrfORsUnBdteYbUV7USr0Jg3HJQucl0gJT/uwlbZTY9f2nk 6LNIySKacNDDn76UP6lJC9rdt/IDHkr6/DfDz9zWY/xCx9Rv+HupsQMCrEiVJBvw CXe56cL8yQgZghSqQevFTHTVm4MO02bwCJ7mclpcWSOQeWXpHhvRzbwadpWTmaMV 3sHpkygK0gfJR6zUnUsVnTWx7pqkTOcBOrLcdjFAd3WL1oernhBqIfrptBu2b0rb bDiETebEyXwTYd4h9jVrvWWXwmullBS+ -----END CERTIFICATE-----Generated at Fri May 10 17:11:10 2024 by rpki-client on console-fra.rpki-client.org