$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/1A4E810A9C4711EFBCAF2961C4F9AE02.roa File: 1A4E810A9C4711EFBCAF2961C4F9AE02.roa (raw, json) Hash identifier: H/SNFy0blXHf51g3f4tDsQMfyr+dfN3zT3EjfHQV3so= Subject key identifier: B3:01:42:4E:12:9D:BC:FB:DD:6A:73:10:A5:DB:11:E7:31:EF:63:43 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 10 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/1A4E810A9C4711EFBCAF2961C4F9AE02.roa Signing time: Thu 07 Nov 2024 10:17:20 +0000 ROA not before: Thu 07 Nov 2024 10:17:20 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153379 IP address blocks: 160.191.114.0/23 maxlen: 23 160.191.114.0/24 maxlen: 24 160.191.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Nov 7 10:17:20 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672c93b0-b0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:b0:68:bf:69:3c:27:6f:b9:23:58:79:99: cd:11:6f:74:57:0f:37:05:06:73:62:fa:27:18:84: 19:45:16:36:a8:a7:0b:c7:69:d1:21:6d:48:22:61: 1e:ae:a3:44:4b:3e:c9:4e:2a:bb:40:95:0b:d2:bb: 60:fe:a4:ad:18:3d:c1:8f:74:05:07:e3:0f:92:ca: 43:ed:30:f9:72:4f:07:24:df:70:77:2b:20:5c:ae: 2c:be:db:2c:13:50:a7:bf:ea:bb:f2:d5:5b:fb:23: 8d:b6:9d:a5:a5:45:ce:99:3d:01:df:73:9e:b0:c6: d8:3f:35:33:82:32:4d:18:92:bf:86:db:63:32:0f: 03:2b:e3:65:cb:06:ca:2e:8a:e0:9f:10:84:58:ae: 38:96:2b:94:54:66:c6:ec:60:c4:9d:17:3f:8c:7c: a2:37:9c:ef:36:9b:69:66:09:3a:4c:be:83:a4:de: 69:5b:f4:d5:29:28:3a:a8:6f:41:0d:7e:26:e0:15: 39:2f:67:55:3e:bc:34:bc:74:ac:49:14:2f:9f:c7: ad:5c:a1:88:88:28:8e:f6:b6:85:07:e4:cf:59:28: 9e:5b:0c:c0:5a:71:9b:20:47:b3:16:9a:eb:eb:94: c9:29:3a:4b:02:ce:2f:ca:0b:5d:c1:04:47:67:b7: 89:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:01:42:4E:12:9D:BC:FB:DD:6A:73:10:A5:DB:11:E7:31:EF:63:43 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/1A4E810A9C4711EFBCAF2961C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.114.0/23 Signature Algorithm: sha256WithRSAEncryption 86:8a:e7:bc:4d:4f:cb:de:66:2d:69:ed:da:06:ce:b4:2d:8d: 51:95:dd:e6:3f:f5:aa:ba:6e:7e:eb:5a:c6:fe:19:82:54:1f: e2:09:7e:10:ec:ce:1e:af:fd:5b:f2:57:b6:d4:9c:3d:57:5b: f2:5d:c4:1b:ba:db:a7:8c:8e:77:0a:a7:ad:a5:9e:4e:72:f7: c9:fd:a4:6b:98:df:e5:93:8c:76:c6:35:99:6c:6d:56:44:78: 1b:cd:23:99:70:ed:4e:ff:1c:d6:73:fc:7b:58:02:10:74:fd: b8:bb:0d:4a:17:88:38:96:cf:10:55:24:62:30:c1:49:b2:41: bf:f2:87:0c:11:c4:da:0f:4c:e2:93:28:d4:de:95:86:c2:0b: c9:3e:18:60:3c:70:57:de:ea:c0:fb:d6:d0:cd:93:39:3f:bf: e0:22:c5:5f:fa:96:10:c8:b3:b8:25:ea:b5:d3:f1:f5:1f:5c: 9e:cc:5f:6b:82:bf:94:20:70:4b:69:46:c4:9c:0b:96:4a:9e: fd:25:85:92:4c:5d:a3:87:f5:84:20:14:27:f8:94:e3:4c:bc: f8:fb:bb:7c:70:15:13:d0:ef:8c:c8:db:2f:b6:27:d8:57:bc: 4f:21:0d:15:b0:a4:28:94:34:e3:44:c8:af:d3:bc:7b:4e:c0: 23:ee:dd:d0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkM5NDExMC8GA1UEBRMoNjUzQ0I4QTc1MTBEQjlCNkMxQTI3RDg3N0QyMTIxRTZE RjQyMTk4MjAeFw0yNDExMDcxMDE3MjBaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3MmM5M2IwLWIwZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbyLBov2k8J2+5I1h5mc0Rb3RXDzcFBnNi+icYhBlFFjaopwvHadEhbUgiYR6u o0RLPslOKrtAlQvSu2D+pK0YPcGPdAUH4w+SykPtMPlyTwck33B3KyBcriy+2ywT UKe/6rvy1Vv7I422naWlRc6ZPQHfc56wxtg/NTOCMk0Ykr+G22MyDwMr42XLBsou iuCfEIRYrjiWK5RUZsbsYMSdFz+MfKI3nO82m2lmCTpMvoOk3mlb9NUpKDqob0EN fibgFTkvZ1U+vDS8dKxJFC+fx61coYiIKI72toUH5M9ZKJ5bDMBacZsgR7MWmuvr lMkpOksCzi/KC13BBEdnt4mLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUswFCThKd vPvdanMQpdsR5zHvY0MwHwYDVR0jBBgwFoAUZTy4p1ENubbBon2HfSEh5t9CGYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQzk0L0E4Q0QwMTY0OTRE QTExRUY4OTA4NkQyMUM0RjlBRTAyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWlR5NHAxRU51YmJCb24ySGZTRWg1dDlDR1lJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi8xQTRFODEwQTlD NDcxMUVGQkNBRjI5NjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/cjANBgkqhkiG9w0BAQsFAAOCAQEAhornvE1Py95mLWnt 2gbOtC2NUZXd5j/1qrpufutaxv4ZglQf4gl+EOzOHq/9W/JXttScPVdb8l3EG7rb p4yOdwqnraWeTnL3yf2ka5jf5ZOMdsY1mWxtVkR4G80jmXDtTv8c1nP8e1gCEHT9 uLsNSheIOJbPEFUkYjDBSbJBv/KHDBHE2g9M4pMo1N6VhsILyT4YYDxwV97qwPvW 0M2TOT+/4CLFX/qWEMizuCXqtdPx9R9cnsxfa4K/lCBwS2lGxJwLlkqe/SWFkkxd o4f1hCAUJ/iU40y8+Pu7fHAVE9DvjMjbL7Yn2Fe8TyENFbCkKJQ040TIr9O8e07A I+7d0A== -----END CERTIFICATE-----Generated at Thu Nov 21 06:50:52 2024 by rpki-client on console-fra.rpki-client.org