$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa File: B4F165084F1F11EFA3B1F709C4F9AE02.roa (raw, json) Hash identifier: Opc7LOJ46e70z/QSejyn173p++8Jd/mWqo5v6tc2Z4E= Subject key identifier: 7B:AC:69:92:DE:6C:21:E9:1D:DC:98:5C:EA:86:D1:59:52:1B:5C:BF Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: 23 Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa Signing time: Wed 31 Jul 2024 09:32:50 +0000 ROA not before: Wed 31 Jul 2024 09:32:50 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 63526 IP address blocks: 160.22.20.0/23 maxlen: 23 160.22.20.0/24 maxlen: 24 160.22.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 06:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Jul 31 09:32:50 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66aa04c2-6c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:2e:9f:38:e8:07:17:e8:3b:e0:e1:f9:ab: 8a:86:a4:94:89:90:cb:17:bf:2e:70:48:4b:03:ee: 60:66:1e:69:82:f3:8b:fa:a4:27:f6:fc:00:aa:77: ff:df:c4:1a:33:2a:68:dc:b6:9a:58:90:47:4d:f4: ad:ac:d9:dd:d8:66:a9:1e:f7:ed:59:5d:3b:e1:8e: a4:87:72:25:e9:03:ce:86:37:a1:a4:61:bd:fe:fe: 89:30:57:57:ef:8d:45:73:31:8d:84:bb:b9:78:31: 57:57:c0:03:3b:d3:8e:a8:b4:f9:05:30:e7:4b:ba: 97:cc:96:f4:54:8b:55:a9:25:12:aa:52:87:8b:90: 66:3b:48:ca:c4:b0:27:67:e8:59:00:6d:5f:9c:76: 09:6e:d7:41:bd:98:32:a8:05:79:67:42:4d:ce:4c: 9d:12:53:9a:76:d7:cb:05:08:e5:18:4c:e5:f9:80: b2:95:63:cb:d2:e4:60:11:18:64:c7:0e:a5:76:68: 32:0a:37:12:2e:e7:0b:68:ca:79:20:2c:f3:2a:1c: 57:c8:46:50:a4:ad:2b:cc:8b:b5:5c:77:7d:9f:15: d2:1d:19:24:9b:f9:a9:6a:26:05:8c:4e:c5:51:1f: 69:a2:79:65:b1:f7:1f:1a:16:7b:84:af:7d:98:c8: 78:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AC:69:92:DE:6C:21:E9:1D:DC:98:5C:EA:86:D1:59:52:1B:5C:BF X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.20.0/23 Signature Algorithm: sha256WithRSAEncryption 44:91:07:4c:4a:66:b1:e4:07:cc:4e:4d:bb:a5:5c:05:82:a8: 96:bf:f1:db:91:6f:5a:c0:63:94:61:24:f5:3a:d8:e9:bf:ff: 0f:f2:0d:24:e3:2b:5d:cc:13:8a:c7:48:9d:d9:e9:8d:99:22: 12:54:b2:e2:2b:f2:f0:4b:7b:83:70:ee:27:69:9b:ff:76:a4: 1f:79:68:60:e8:9e:0b:8c:e7:0c:e5:d2:a6:57:b8:bd:66:90: 18:9f:e4:3b:88:de:ef:c9:9d:04:1d:16:9f:6d:40:bf:08:c7: 90:10:b4:cd:c1:23:fc:f1:2b:ba:1c:83:87:3c:0a:7d:34:4e: c0:4d:78:65:34:ac:5e:da:36:df:2b:7e:8e:1d:0d:14:d2:23: 86:b9:56:6e:bf:2c:1b:54:52:f1:fd:9d:af:bc:b6:00:92:eb: 18:3f:fe:4b:b8:44:a7:eb:1d:e2:88:bf:33:0b:8a:dd:39:36: 2b:95:17:06:1a:50:72:7b:f0:d1:cb:90:8f:d4:3f:3e:4a:be: 71:01:2d:1f:45:66:3c:6a:c6:c4:28:f7:e0:c9:02:5b:c4:e5: 76:9f:95:bd:87:26:4b:a6:ba:03:56:20:55:4b:c1:49:1e:0a: e3:35:a6:87:7e:a2:01:ce:92:74:2c:a7:97:03:38:17:b5:cc: c4:2f:25:29 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3QTExMC8GA1UEBRMoQjNFRkE3RDZBRTE5OUQxNDU4MkRENEVDQjkxNjNBM0M5 RDg0MTc1OTAeFw0yNDA3MzEwOTMyNTBaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2YWEwNGMyLTZjMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/5S6fOOgHF+g74OH5q4qGpJSJkMsXvy5wSEsD7mBmHmmC84v6pCf2/ACqd//f xBozKmjctppYkEdN9K2s2d3YZqke9+1ZXTvhjqSHciXpA86GN6GkYb3+/okwV1fv jUVzMY2Eu7l4MVdXwAM7046otPkFMOdLupfMlvRUi1WpJRKqUoeLkGY7SMrEsCdn 6FkAbV+cdglu10G9mDKoBXlnQk3OTJ0SU5p218sFCOUYTOX5gLKVY8vS5GARGGTH DqV2aDIKNxIu5wtoynkgLPMqHFfIRlCkrSvMi7Vcd32fFdIdGSSb+alqJgWMTsVR H2mieWWx9x8aFnuEr32YyHiNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUe6xpkt5s Iekd3Jhc6obRWVIbXL8wHwYDVR0jBBgwFoAUs++n1q4ZnRRYLdTsuRY6PJ2EF1kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTdBLzc0QkIyNEQyM0Y1 RDExRUY4QkY3ODYwRUM0RjlBRTAyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYx ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcy0tbjFxNFpuUlJZTGRUc3VSWTZQSjJFRjFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83NEJCMjREMjNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9CNEYxNjUwODRG MUYxMUVGQTNCMUY3MDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAWFDANBgkqhkiG9w0BAQsFAAOCAQEARJEHTEpmseQHzE5N u6VcBYKolr/x25FvWsBjlGEk9TrY6b//D/INJOMrXcwTisdIndnpjZkiElSy4ivy 8Et7g3DuJ2mb/3akH3loYOieC4znDOXSple4vWaQGJ/kO4je78mdBB0Wn21AvwjH kBC0zcEj/PEruhyDhzwKfTROwE14ZTSsXto23yt+jh0NFNIjhrlWbr8sG1RS8f2d r7y2AJLrGD/+S7hEp+sd4oi/MwuK3Tk2K5UXBhpQcnvw0cuQj9Q/Pkq+cQEtH0Vm PGrGxCj34MkCW8Tldp+VvYcmS6a6A1YgVUvBSR4K4zWmh36iAc6SdCynlwM4F7XM xC8lKQ== -----END CERTIFICATE-----Generated at Thu Sep 19 08:57:58 2024 by rpki-client on console-ams.rpki-client.org