$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa File: 0D38E31833A411EF82E92524C4F9AE02.roa (raw, json) Hash identifier: lY5HgP2b+DiZvOALHw+tr2ZxBjEGaK357GqXMmb0Brk= Subject key identifier: C7:A8:EE:E7:2A:8F:91:55:D4:D1:68:E3:F4:70:FD:09:AC:70:3B:CA Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: 02 Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa Signing time: Wed 26 Jun 2024 10:08:36 +0000 ROA not before: Wed 26 Jun 2024 10:08:36 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 134371 IP address blocks: 160.25.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Sep 2024 05:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Jun 26 10:08:36 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=667be8a4-4eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:72:e8:80:13:6c:0f:a0:12:8c:c4:63:3b: be:c6:20:bb:0c:d7:f3:9d:78:8d:83:a7:c1:f3:70: 5f:e8:e4:18:6b:f0:04:cd:c0:65:57:b3:92:2c:69: af:4a:c2:36:d4:9c:c4:c5:5b:ae:5a:62:09:cc:c6: 45:21:f7:57:3e:c9:b1:1e:9d:38:17:3a:0f:ff:bc: d3:03:54:31:67:9f:81:51:d6:28:2f:32:2e:dd:5c: fe:e4:0a:2f:09:70:d3:c0:16:00:32:7d:fc:41:14: a0:dd:bf:0e:45:07:5a:91:ef:9d:26:f9:83:c0:6d: 25:29:ab:cc:1b:08:c2:51:63:b3:2c:e5:d9:ec:b0: 78:41:b6:dc:04:a3:77:84:94:69:70:1f:3e:6d:61: 23:5c:bd:52:fa:69:34:53:e0:7c:cf:35:51:e9:f8: 76:0d:1b:bf:0c:db:65:63:78:97:13:03:5a:2a:56: e7:d5:0f:62:c5:1e:5e:34:6e:e8:3e:1c:95:7d:18: ce:cb:43:c8:c1:65:55:4d:f6:92:a1:3c:2f:49:6c: aa:6d:73:e5:01:07:b9:5e:0d:6f:5b:a8:fa:53:8d: a0:84:e5:65:34:ad:12:93:c2:0c:9b:12:e1:98:0d: c9:f1:f7:1f:47:77:01:4e:5c:e8:86:92:6e:fd:3d: 76:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A8:EE:E7:2A:8F:91:55:D4:D1:68:E3:F4:70:FD:09:AC:70:3B:CA X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.8.0/23 Signature Algorithm: sha256WithRSAEncryption 58:a6:a3:a1:a8:7d:e1:0b:5f:d0:f0:da:42:1d:9f:15:35:11: a9:f6:54:41:d9:a4:13:59:14:1b:71:fd:de:d5:e4:5f:69:a6: e4:3b:8e:4e:36:31:fb:2f:57:44:8f:00:21:ad:4d:1a:53:16: e3:2f:d3:21:41:8a:69:f6:47:79:c8:6a:ac:0f:5e:c5:f5:10: 87:89:f9:9a:06:d5:c5:e6:33:19:d3:11:cc:77:21:ec:7f:1d: 7b:d8:87:96:7f:84:0d:7f:69:fd:ee:3c:83:62:2b:9e:2c:fa: 0b:0e:45:b6:96:1c:d4:a1:5b:f2:eb:b6:95:d6:93:e6:66:bd: d0:d3:bd:ee:73:54:e2:c6:ab:e7:a2:b6:9d:85:18:ef:6d:5e: bc:9f:4b:05:22:fa:8e:96:78:4c:38:bb:e6:a2:25:3e:ea:db: ab:71:b3:81:73:5e:dd:5c:5f:79:f3:b4:03:a7:ab:b4:0d:e6: cf:b6:3b:8d:ec:a7:29:30:27:75:0d:24:9c:f1:dc:64:09:a6: 74:d6:4e:a0:59:53:d8:d0:f1:07:ed:5d:6f:58:8b:6a:85:88: 96:b7:c4:4b:16:fd:fa:b2:45:2e:0e:2a:40:0d:62:12:89:83: ce:54:12:da:16:63:50:79:0d:5b:f0:fb:9d:b1:db:d1:87:e1: ae:45:a2:b1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QTY5RjExMC8GA1UEBRMoQjJFODhFREQzNjFCQ0M2MTk0Qzk3RjY4QzQ3MjUxODBG RjAyRjcyNDAeFw0yNDA2MjYxMDA4MzZaFw0yNTA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2N2JlOGE0LTRlZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw/XLogBNsD6ASjMRjO77GILsM1/OdeI2Dp8HzcF/o5Bhr8ATNwGVXs5Isaa9K wjbUnMTFW65aYgnMxkUh91c+ybEenTgXOg//vNMDVDFnn4FR1igvMi7dXP7kCi8J cNPAFgAyffxBFKDdvw5FB1qR750m+YPAbSUpq8wbCMJRY7Ms5dnssHhBttwEo3eE lGlwHz5tYSNcvVL6aTRT4HzPNVHp+HYNG78M22VjeJcTA1oqVufVD2LFHl40bug+ HJV9GM7LQ8jBZVVN9pKhPC9JbKptc+UBB7leDW9bqPpTjaCE5WU0rRKTwgybEuGY Dcnx9x9HdwFOXOiGkm79PXZ5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUx6ju5yqP kVXU0Wjj9HD9CaxwO8owHwYDVR0jBBgwFoAUsuiO3TYbzGGUyX9oxHJRgP8C9yQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZBNjlGL0JEODU5Rjk2MzNB MzExRUZBNUI0OUIyM0M0RjlBRTAyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3VpTzNUWWJ6R0dVeVg5b3hISlJnUDhDOXlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTY5Ri9CRDg1OUY5NjMzQTMxMUVGQTVCNDlCMjNDNEY5QUUwMi8wRDM4RTMxODMz QTQxMUVGODJFOTI1MjRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAZCDANBgkqhkiG9w0BAQsFAAOCAQEAWKajoah94Qtf0PDa Qh2fFTURqfZUQdmkE1kUG3H93tXkX2mm5DuOTjYx+y9XRI8AIa1NGlMW4y/TIUGK afZHechqrA9exfUQh4n5mgbVxeYzGdMRzHch7H8de9iHln+EDX9p/e48g2Irniz6 Cw5FtpYc1KFb8uu2ldaT5ma90NO97nNU4sar56K2nYUY721evJ9LBSL6jpZ4TDi7 5qIlPurbq3GzgXNe3VxfefO0A6ertA3mz7Y7jeynKTAndQ0knPHcZAmmdNZOoFlT 2NDxB+1db1iLaoWIlrfESxb9+rJFLg4qQA1iEomDzlQS2hZjUHkNW/D7nbHb0Yfh rkWisQ== -----END CERTIFICATE-----Generated at Thu Sep 19 07:14:28 2024 by rpki-client on console-fra.rpki-client.org