$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/DDA167929E5111EF94F71013C4F9AE02.roa File: DDA167929E5111EF94F71013C4F9AE02.roa (raw, json) Hash identifier: ayuReQbwZQyyFifWvSerspyTPQuIIk708kpChRAJhtk= Subject key identifier: 0B:5F:90:EC:56:2C:C3:98:51:26:FA:80:78:D0:A9:4D:AF:14:9D:56 Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 07 Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/DDA167929E5111EF94F71013C4F9AE02.roa Signing time: Sat 09 Nov 2024 04:59:41 +0000 ROA not before: Sat 09 Nov 2024 04:59:41 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 153394 IP address blocks: 160.191.190.0/23 maxlen: 23 160.191.190.0/24 maxlen: 24 160.191.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: Nov 9 04:59:41 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=672eec3c-2af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:83:72:74:1d:d1:01:95:86:f9:df:1f:ca: bc:b3:4d:c7:e7:b9:7c:fb:47:f6:79:b5:48:72:5d: cb:4e:0d:78:9b:cf:7b:8a:02:de:42:9b:93:1e:00: 68:fd:60:0b:47:61:74:7d:b7:08:7e:8c:1c:3e:ef: 46:d9:5a:04:50:ad:0e:67:03:1c:6a:90:ce:4b:2d: 81:b5:5e:ed:cd:ee:4a:f5:1c:89:7f:d4:d3:7c:29: 1b:5d:64:7f:49:e2:14:9d:e3:70:0a:6b:58:2a:be: dd:72:bb:bd:1e:e6:f3:09:49:37:b4:04:fe:7e:c7: dd:c1:e2:0d:31:12:8c:94:96:41:b3:38:b7:41:3d: 37:e1:60:a7:5d:1f:2a:b3:8c:f9:4e:3b:71:80:0e: 21:4e:ef:a2:b4:06:64:15:4e:03:67:33:71:0b:f2: 16:00:31:52:1c:42:0b:98:19:96:fd:6d:06:c5:d9: 97:75:56:7d:c2:2d:3a:fc:aa:54:df:47:79:c6:53: 84:c4:1c:26:b5:c5:fb:97:0e:e2:f9:c4:ad:21:88: 5e:6a:81:b3:24:23:45:81:d3:a6:76:33:a1:03:70: 53:a5:d5:73:30:1d:df:c5:89:96:91:65:0b:52:76: fd:0d:f6:ca:72:8b:9c:0e:fe:ff:7a:08:b8:a1:9c: d1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:90:EC:56:2C:C3:98:51:26:FA:80:78:D0:A9:4D:AF:14:9D:56 X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/DDA167929E5111EF94F71013C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.190.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:01:95:f9:73:00:91:56:5c:8a:79:cb:55:90:52:c7:f9:df: 1f:ad:d1:19:98:89:55:02:97:33:09:c0:2b:68:16:65:8a:c7: 5f:be:41:bd:e5:94:b9:a1:67:2f:df:97:12:0a:a4:e1:9f:5f: a3:7f:af:b9:d7:da:b2:55:c3:1a:ef:d6:66:a1:aa:b2:d0:5d: fb:b0:bc:89:aa:33:b3:be:0e:7c:16:8e:20:80:c8:29:5a:0b: 7b:b7:2a:89:86:33:35:bc:ec:1a:77:cb:6e:d3:31:c1:ba:b7: eb:fc:76:54:f0:2d:e5:a1:53:13:ce:7d:2e:46:ce:ff:45:47: 04:92:93:62:83:07:be:2d:e9:dc:8f:87:6b:89:d4:e6:5c:60: 42:af:42:b7:af:e9:f9:f5:12:91:98:a4:03:27:5c:96:9c:c4: e9:40:18:dd:5b:ff:61:6f:12:03:e2:c1:7b:0d:39:e6:5b:42: 6c:b4:e7:87:e8:a1:f4:7d:e0:0d:8c:89:50:f0:b7:d0:50:59: 9e:11:3c:bd:47:45:4a:d7:20:4e:ad:d5:29:e0:37:0f:87:5a: a9:d6:92:72:f2:54:a6:e7:f3:2f:42:d3:5f:2b:5a:ad:83:73: 6d:25:13:f3:0f:77:6e:20:83:a2:07:67:fa:c2:f5:b4:b3:86: 38:86:b8:b2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkE0NjExMC8GA1UEBRMoRkQ4QzVGNDg3NzQyQ0IyMDUxQjI4Njk3MjlCNDY2MTI0 Q0RGNUU2QjAeFw0yNDExMDkwNDU5NDFaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmVlYzNjLTJhZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtBINydB3RAZWG+d8fyryzTcfnuXz7R/Z5tUhyXctODXibz3uKAt5Cm5MeAGj9 YAtHYXR9twh+jBw+70bZWgRQrQ5nAxxqkM5LLYG1Xu3N7kr1HIl/1NN8KRtdZH9J 4hSd43AKa1gqvt1yu70e5vMJSTe0BP5+x93B4g0xEoyUlkGzOLdBPTfhYKddHyqz jPlOO3GADiFO76K0BmQVTgNnM3EL8hYAMVIcQguYGZb9bQbF2Zd1Vn3CLTr8qlTf R3nGU4TEHCa1xfuXDuL5xK0hiF5qgbMkI0WB06Z2M6EDcFOl1XMwHd/FiZaRZQtS dv0N9spyi5wO/v96CLihnNHLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUC1+Q7FYs w5hRJvqAeNCpTa8UnVYwHwYDVR0jBBgwFoAU/YxfSHdCyyBRsoaXKbRmEkzfXmsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCQTQ2L0ZGOEFBMjRBOUNG NTExRUY4QTZDODU4MUM0RjlBRTAyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlht cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX1l4ZlNIZEN5eUJSc29hWEtiUm1Fa3pmWG1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkE0Ni9GRjhBQTI0QTlDRjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9EREExNjc5MjlF NTExMUVGOTRGNzEwMTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/vjANBgkqhkiG9w0BAQsFAAOCAQEAjgGV+XMAkVZcinnL VZBSx/nfH63RGZiJVQKXMwnAK2gWZYrHX75BveWUuaFnL9+XEgqk4Z9fo3+vudfa slXDGu/WZqGqstBd+7C8iaozs74OfBaOIIDIKVoLe7cqiYYzNbzsGnfLbtMxwbq3 6/x2VPAt5aFTE859LkbO/0VHBJKTYoMHvi3p3I+Ha4nU5lxgQq9Ct6/p+fUSkZik AydclpzE6UAY3Vv/YW8SA+LBew055ltCbLTnh+ih9H3gDYyJUPC30FBZnhE8vUdF StcgTq3VKeA3D4daqdaScvJUpufzL0LTXytarYNzbSUT8w93biCDogdn+sL1tLOG OIa4sg== -----END CERTIFICATE-----Generated at Thu Nov 21 07:40:39 2024 by rpki-client on console-ams.rpki-client.org