$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa File: F189CB86C81D11EBA4C0E321C4F9AE02.roa (raw, json) Hash identifier: bmMn0IWRpy37XK6k+WXVEF+nIujAMD8B3cc9TjWsaYg= Subject key identifier: AF:2F:C4:9C:8A:4E:5B:37:F5:53:1C:12:57:37:4A:FC:73:EC:A2:5E Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 054E Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa Signing time: Fri 08 Nov 2024 23:01:54 +0000 ROA not before: Fri 08 Nov 2024 23:01:54 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 137968 IP address blocks: 203.25.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Nov 8 23:01:54 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672e9861-ecd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:50:19:ad:95:67:29:19:a2:38:85:1d:1d: 7a:42:2b:9a:83:90:f7:1d:97:f8:84:0f:fe:f0:c2: c2:db:74:d1:c4:df:36:b8:60:5d:b1:a5:10:75:81: 21:02:17:39:db:78:ea:55:0b:4d:c3:b3:c7:89:cc: 7a:a1:4b:7a:59:94:3b:19:6c:6d:db:9a:d2:da:4b: a0:1d:fa:8b:87:c2:5c:85:71:59:98:e0:ac:d6:09: 74:a2:e2:fe:4e:fe:c8:2c:df:d5:d3:78:38:1a:7d: ad:a8:f1:33:a2:22:e4:f4:9a:96:ba:72:59:07:c0: 94:a3:ae:4c:35:52:c2:74:62:69:9b:3c:6d:d7:e3: 58:79:db:13:89:ce:94:cf:4a:db:d1:8f:22:d4:33: 86:ba:1a:2d:f6:f7:48:be:28:9b:c2:61:04:87:6a: bc:4f:a6:7a:e5:58:39:25:1d:26:e8:bf:fe:92:09: a7:f2:15:d9:09:53:33:c4:fd:48:8a:2b:f4:95:b8: 41:ab:1d:96:c8:82:3b:ae:2e:b8:7e:e7:32:14:5e: db:32:41:29:85:db:6c:fb:f2:08:09:ef:11:a5:dd: 21:f0:97:35:d6:30:3d:74:0b:03:9e:1f:fd:3c:41: fc:ad:14:1d:c9:dd:c2:4f:32:51:1a:c0:8b:a4:13: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2F:C4:9C:8A:4E:5B:37:F5:53:1C:12:57:37:4A:FC:73:EC:A2:5E X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/F189CB86C81D11EBA4C0E321C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.25.144.0/24 Signature Algorithm: sha256WithRSAEncryption 64:1c:0d:27:cd:dd:f9:7e:39:bd:6d:bb:a4:93:ef:f7:49:4d: 0f:4c:d5:8d:ee:bb:f8:f4:94:83:4c:c3:10:ec:4a:f8:4e:19: aa:8e:d2:4f:cd:2a:97:ee:69:01:21:0e:b2:d1:45:70:36:8c: c0:e1:0f:2d:0c:33:18:ff:ee:c6:7a:a5:b8:71:37:6d:b3:a8: 19:1d:cb:72:d5:5e:f0:c3:9c:fc:cf:90:2f:ef:68:8f:ae:a5: 63:26:9d:57:47:68:3d:20:33:f2:d8:4b:26:d0:1b:f0:56:20: 80:41:38:d1:b2:83:bb:b6:a8:85:db:c1:22:e8:a3:ef:58:98: ba:cb:8b:fa:94:a7:e7:12:32:69:d7:f1:b3:d4:f3:e8:2a:a9: d6:74:27:c3:a9:ff:05:78:8b:ca:87:52:3b:90:ad:ea:13:35: 6d:be:2a:2a:30:06:39:ca:cf:0b:b1:d8:31:75:30:57:09:cc: 9f:c9:e4:53:4a:52:2b:b2:38:21:18:8b:b3:25:78:48:34:4e: 9f:1d:ee:fd:84:1c:5e:88:e7:48:64:1b:c4:17:ce:35:5e:ef: 43:12:69:03:53:84:2f:fe:cc:0e:4f:d8:bf:48:80:3c:b4:8c: ab:d2:82:e1:14:40:ec:f1:00:03:0d:24:a4:b9:58:52:51:b6: 18:af:24:5a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjQxMTA4MjMwMTU0WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJlOTg2MS1lY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA045QGa2VZykZojiFHR16Qiuag5D3HZf4hA/+8MLC23TRxN82uGBdsaUQdYEh Ahc523jqVQtNw7PHicx6oUt6WZQ7GWxt25rS2kugHfqLh8JchXFZmOCs1gl0ouL+ Tv7ILN/V03g4Gn2tqPEzoiLk9JqWunJZB8CUo65MNVLCdGJpmzxt1+NYedsTic6U z0rb0Y8i1DOGuhot9vdIviibwmEEh2q8T6Z65Vg5JR0m6L/+kgmn8hXZCVMzxP1I iiv0lbhBqx2WyII7ri64fucyFF7bMkEphdts+/IICe8Rpd0h8Jc11jA9dAsDnh/9 PEH8rRQdyd3CTzJRGsCLpBOERQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK8vxJyK Tls39VMcElc3Svxz7KJeMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkI1Q0UvQjA5NkM1MDBDODFBMTFFQkIxMjVBNzNFQzRGOUFFMDIvRjE4OUNCODZD ODFEMTFFQkE0QzBFMzIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLGZAwDQYJKoZIhvcNAQELBQADggEBAGQcDSfN3fl+Ob1t u6ST7/dJTQ9M1Y3uu/j0lINMwxDsSvhOGaqO0k/NKpfuaQEhDrLRRXA2jMDhDy0M Mxj/7sZ6pbhxN22zqBkdy3LVXvDDnPzPkC/vaI+upWMmnVdHaD0gM/LYSybQG/BW IIBBONGyg7u2qIXbwSLoo+9YmLrLi/qUp+cSMmnX8bPU8+gqqdZ0J8Op/wV4i8qH UjuQreoTNW2+KiowBjnKzwux2DF1MFcJzJ/J5FNKUiuyOCEYi7MleEg0Tp8d7v2E HF6I50hkG8QXzjVe70MSaQNThC/+zA5P2L9IgDy0jKvSguEUQOzxAAMNJKS5WFJR thivJFo= -----END CERTIFICATE-----Generated at Fri Nov 22 23:39:38 2024 by rpki-client on console-fra.rpki-client.org