$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/30857DB6CBA211ECAE233133C4F9AE02.roa File: 30857DB6CBA211ECAE233133C4F9AE02.roa (raw, json) Hash identifier: pliS+rwU3LbaprEyjV5mUgwfJirBs3RzVR6whO1ItwI= Subject key identifier: D1:8E:98:69:E3:05:F8:BD:AF:74:1C:C8:44:97:20:5F:B4:AE:FB:88 Certificate issuer: /CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Certificate serial: 0558 Authority key identifier: 90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/30857DB6CBA211ECAE233133C4F9AE02.roa Signing time: Fri 12 Jul 2024 16:53:37 +0000 ROA not before: Fri 12 Jul 2024 16:53:37 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 149812 IP address blocks: 72.9.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F731E/serialNumber=90603E354DB568B3CA42900E703011E79662892E Validity Not Before: Jul 12 16:53:37 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66915f90-d63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e1:12:2b:77:98:bb:29:69:03:20:f2:bc:19: 7f:c9:c9:1e:1d:77:1b:7c:0e:b4:a6:3d:fe:35:93: f3:6e:b0:8a:f4:74:08:44:6a:d3:22:06:d5:79:de: 92:ff:64:f0:b1:c5:a2:cb:7b:45:18:29:66:10:6e: cb:a0:cd:06:aa:42:21:f3:51:cc:ee:5a:95:f7:73: ee:25:2b:38:20:0f:a2:46:94:fa:2a:54:30:e5:12: 2f:05:7d:e3:7e:2a:d9:b5:98:5e:fc:83:66:b6:75: 67:1d:dd:31:d4:72:f2:57:cd:15:42:83:ef:75:81: a2:30:08:85:1c:05:ac:d5:bf:24:83:e5:58:ad:ef: b9:af:3b:9d:b5:5f:32:fc:a1:93:a9:b0:2c:5b:a3: 33:24:a7:5d:ce:58:52:61:98:1a:d6:b8:87:14:fe: 00:c3:e3:1e:84:fb:11:79:24:36:85:35:ff:27:03: 0d:71:6e:ae:7e:d9:22:33:17:65:cd:22:ff:ae:90: b9:f9:ac:93:82:80:94:19:fa:c9:d1:26:9a:6a:c8: 1e:25:5e:bb:03:78:bb:f0:3b:e4:83:92:3b:01:a5: 5c:af:fc:ad:95:ab:51:26:85:7d:0c:89:6b:1c:b8: d9:b7:69:32:71:cb:1d:4e:3e:9d:31:3f:79:7e:37: 7a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8E:98:69:E3:05:F8:BD:AF:74:1C:C8:44:97:20:5F:B4:AE:FB:88 X509v3 Authority Key Identifier: keyid:90:60:3E:35:4D:B5:68:B3:CA:42:90:0E:70:30:11:E7:96:62:89:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/kGA-NU21aLPKQpAOcDAR55ZiiS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kGA-NU21aLPKQpAOcDAR55ZiiS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/EAA19CB4B2DC11EB8621CB56C4F9AE02/30857DB6CBA211ECAE233133C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.9.143.0/24 Signature Algorithm: sha256WithRSAEncryption 24:7d:4b:57:70:f5:4c:e9:31:eb:f6:de:84:a5:43:61:53:a2: 77:06:84:8f:20:1d:dd:75:66:ee:15:53:ea:18:c8:0a:e5:fd: ea:eb:ce:0a:cc:a9:59:73:0f:84:5d:54:9f:38:4e:99:fc:4f: 91:4a:9c:c3:06:f2:7e:41:ce:91:ce:7f:ce:10:09:ed:7a:37: 8a:66:f9:5b:23:db:79:c9:2b:2f:08:cb:ba:c2:e7:4f:f7:9c: 1e:4c:30:0d:c4:1c:5d:d7:31:b7:c9:a0:91:e2:66:2a:ab:6b: ac:fb:c7:b1:4b:57:1f:a4:03:04:32:d0:8e:15:40:65:7f:51: 5e:25:4d:45:06:84:ce:69:7d:c5:6e:6c:41:8a:aa:f4:7f:b1: 0b:e1:ce:69:95:ea:bf:18:9e:8e:b9:a3:b5:fe:bc:32:61:6c: ac:5b:fc:34:ae:61:f2:90:67:e2:07:17:6f:7f:dc:9c:b4:74: 9b:24:41:2b:5c:d3:5b:ac:3b:4b:c2:2b:2d:95:0b:98:3c:99: c2:0d:bc:a8:47:9e:4e:ad:cc:4c:a9:56:83:3b:87:25:4c:39: 93:74:b7:84:c4:28:3f:23:82:c3:6e:6e:78:9f:37:2a:b7:2d: 0d:54:e8:91:f8:5c:1d:00:96:02:97:ae:92:32:b8:73:32:94: 6c:63:3a:3e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMUUxMTAvBgNVBAUTKDkwNjAzRTM1NERCNTY4QjNDQTQyOTAwRTcwMzAxMUU3 OTY2Mjg5MkUwHhcNMjQwNzEyMTY1MzM3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjkxNWY5MC1kNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeESK3eYuylpAyDyvBl/yckeHXcbfA60pj3+NZPzbrCK9HQIRGrTIgbVed6S /2TwscWiy3tFGClmEG7LoM0GqkIh81HM7lqV93PuJSs4IA+iRpT6KlQw5RIvBX3j firZtZhe/INmtnVnHd0x1HLyV80VQoPvdYGiMAiFHAWs1b8kg+VYre+5rzudtV8y /KGTqbAsW6MzJKddzlhSYZga1riHFP4Aw+MehPsReSQ2hTX/JwMNcW6uftkiMxdl zSL/rpC5+ayTgoCUGfrJ0SaaasgeJV67A3i78Dvkg5I7AaVcr/ytlatRJoV9DIlr HLjZt2kyccsdTj6dMT95fjd6xwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNGOmGnj Bfi9r3QcyESXIF+0rvuIMB8GA1UdIwQYMBaAFJBgPjVNtWizykKQDnAwEeeWYoku MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMxRS9FQUExOUNCNEIy REMxMUVCODYyMUNCNTZDNEY5QUUwMi9rR0EtTlUyMWFMUEtRcEFPY0RBUjU1Wmlp UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tHQS1OVTIxYUxQS1FwQU9jREFSNTVaaWlTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjczMUUvRUFBMTlDQjRCMkRDMTFFQjg2MjFDQjU2QzRGOUFFMDIvMzA4NTdEQjZD QkEyMTFFQ0FFMjMzMTMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABICY8wDQYJKoZIhvcNAQELBQADggEBACR9S1dw9UzpMev2 3oSlQ2FToncGhI8gHd11Zu4VU+oYyArl/errzgrMqVlzD4RdVJ84Tpn8T5FKnMMG 8n5BzpHOf84QCe16N4pm+Vsj23nJKy8Iy7rC50/3nB5MMA3EHF3XMbfJoJHiZiqr a6z7x7FLVx+kAwQy0I4VQGV/UV4lTUUGhM5pfcVubEGKqvR/sQvhzmmV6r8Yno65 o7X+vDJhbKxb/DSuYfKQZ+IHF29/3Jy0dJskQStc01usO0vCKy2VC5g8mcINvKhH nk6tzEypVoM7hyVMOZN0t4TEKD8jgsNubnifNyq3LQ1U6JH4XB0AlgKXrpIyuHMy lGxjOj4= -----END CERTIFICATE-----Generated at Wed Nov 20 19:06:12 2024 by rpki-client on console-ams.rpki-client.org