$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa File: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (raw, json) Hash identifier: 8XbL0HPru2wM23ZZCoVoS9QMZNPokbBL/zQZk5BXNh8= Subject key identifier: 89:9D:69:12:BF:16:AB:FF:66:8F:01:EA:3F:4B:63:8C:21:80:7A:98 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0762 Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa Signing time: Fri 22 Dec 2023 19:07:01 +0000 ROA not before: Fri 22 Dec 2023 19:07:01 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 14630 IP address blocks: 206.209.76.0/24 maxlen: 24 206.209.77.0/24 maxlen: 24 206.209.78.0/24 maxlen: 24 206.209.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1890 (0x762) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Dec 22 19:07:01 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6585de55-8c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:7f:78:5f:a3:fe:08:52:07:c4:c8:a8:04: 98:81:03:ad:c3:78:3c:f1:4c:ed:60:86:ea:07:9a: b8:8e:93:bc:d6:62:18:d5:59:81:5d:63:b3:d4:64: 51:14:23:d5:39:9b:fe:52:1a:72:ac:04:ac:f0:1c: 8d:41:9a:da:9d:21:88:e1:aa:c2:37:f7:0f:f3:cc: 43:8e:c1:a7:6d:0d:01:59:69:c3:43:14:92:c0:ec: 6a:af:76:5b:6d:e0:e7:2d:ea:1d:37:16:c5:92:f4: 1a:fa:7d:df:c2:60:d7:24:c7:d8:11:bd:62:3c:ee: 86:e4:86:a6:94:5b:a3:eb:3c:03:89:73:fb:30:08: 45:be:9f:ed:af:e3:20:7f:96:5e:60:e1:a6:5b:74: ca:b1:3b:47:0b:f6:e7:06:cf:5f:05:da:d2:df:c6: 9a:fe:e8:e2:af:59:34:a8:53:02:ae:d1:7b:95:0b: db:63:bc:9a:55:d8:21:e7:f0:c2:00:43:c1:11:62: 23:70:a0:ce:f8:ea:c2:f2:d8:8f:4e:9e:fc:9b:18: 9b:40:1c:64:5d:8e:cb:be:a7:5e:f6:6a:d5:ec:f6: ed:b5:fd:ce:d8:4e:8f:df:e6:bf:5a:88:d9:f0:d1: c6:d6:be:d4:25:6a:65:a4:c7:a1:73:9d:b5:d4:c5: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9D:69:12:BF:16:AB:FF:66:8F:01:EA:3F:4B:63:8C:21:80:7A:98 X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/19B0BAAE1CE611EBB543881CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.209.76.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:64:b1:17:d9:6e:45:4e:12:32:f2:35:0a:be:d1:a5:5c:14: 41:cf:f3:b8:f7:40:40:58:51:25:f8:22:e2:6f:cd:19:68:86: d0:0d:54:76:a6:fa:7c:f4:44:1c:82:de:7f:26:7d:f6:7f:ca: a1:25:ea:c1:bb:ed:a3:70:d2:05:3d:0c:27:6e:10:28:64:4b: 21:67:87:ac:30:bd:50:93:a1:7f:e6:f5:16:20:4a:9d:5b:15: d5:b6:1e:3f:b8:76:ab:0a:18:e1:52:20:36:ce:06:a6:cb:54: 19:7b:37:a6:47:ca:de:63:4f:05:c3:ae:60:2e:3a:7b:a4:39: 6e:ea:87:e3:df:f4:a5:86:29:f5:e7:14:48:9a:6f:93:26:29: 5f:4b:01:99:54:b0:77:1c:6d:47:90:4d:37:bd:e9:d6:a9:e2: 00:b1:1b:15:de:02:24:e9:17:c2:00:73:f5:40:97:e2:97:8f: c1:2f:7b:d1:f9:ac:1c:a0:78:6d:34:62:c2:90:35:78:1a:d8: f2:68:c2:43:67:4b:9d:f6:83:5b:91:bd:4b:e3:34:c6:3f:20: 1a:83:47:b8:87:18:3b:5e:a0:2e:ef:b4:06:1a:88:35:ac:46: 1f:26:05:98:84:51:9d:11:a6:a7:bf:c0:7b:fc:f8:fe:ad:96: 66:18:1c:6f -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjMxMjIyMTkwNzAxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTg1ZGU1NS04YzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvR/eF+j/ghSB8TIqASYgQOtw3g88UztYIbqB5q4jpO81mIY1VmBXWOz1GRR FCPVOZv+UhpyrASs8ByNQZranSGI4arCN/cP88xDjsGnbQ0BWWnDQxSSwOxqr3Zb beDnLeodNxbFkvQa+n3fwmDXJMfYEb1iPO6G5IamlFuj6zwDiXP7MAhFvp/tr+Mg f5ZeYOGmW3TKsTtHC/bnBs9fBdrS38aa/ujir1k0qFMCrtF7lQvbY7yaVdgh5/DC AEPBEWIjcKDO+OrC8tiPTp78mxibQBxkXY7Lvqde9mrV7Pbttf3O2E6P3+a/WojZ 8NHG1r7UJWplpMehc5211MWS8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFImdaRK/ Fqv/Zo8B6j9LY4whgHqYMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjU5QTYvRTRFREFDMThDQjFBMTFFQTg3Q0Q1NTQ0QzRGOUFFMDIvMTlCMEJBQUUx Q0U2MTFFQkI1NDM4ODFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALO0UwwDQYJKoZIhvcNAQELBQADggEBADtksRfZbkVOEjLy NQq+0aVcFEHP87j3QEBYUSX4IuJvzRlohtANVHam+nz0RByC3n8mffZ/yqEl6sG7 7aNw0gU9DCduEChkSyFnh6wwvVCToX/m9RYgSp1bFdW2Hj+4dqsKGOFSIDbOBqbL VBl7N6ZHyt5jTwXDrmAuOnukOW7qh+Pf9KWGKfXnFEiab5MmKV9LAZlUsHccbUeQ TTe96dap4gCxGxXeAiTpF8IAc/VAl+KXj8Eve9H5rBygeG00YsKQNXga2PJowkNn S532g1uRvUvjNMY/IBqDR7iHGDteoC7vtAYaiDWsRh8mBZiEUZ0Rpqe/wHv8+P6t lmYYHG8= -----END CERTIFICATE-----Generated at Mon May 6 20:19:23 2024 by rpki-client on console-fra.rpki-client.org