$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa File: E7695EC6A53411EFB98AFE51C4F9AE02.roa (raw, json) Hash identifier: Lu7YmWMIdl1OwrJtUhBGFe6+OAHwy7pjCKEXO1Xq/dY= Subject key identifier: 41:9E:69:7B:66:16:07:CD:B9:31:32:F2:55:AA:F6:31:52:2E:78:BE Certificate issuer: /CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Certificate serial: 03 Authority key identifier: A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa Signing time: Sun 17 Nov 2024 22:40:11 +0000 ROA not before: Sun 17 Nov 2024 22:40:11 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 132238 IP address blocks: 160.191.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDEFE/serialNumber=A8292F6204C8213D791FA6CCAAF5785194EF81A0 Validity Not Before: Nov 17 22:40:11 2024 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=673a70cb-6897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:6c:94:f3:ef:0c:f1:cb:43:1f:6c:67:16: 4b:0e:9f:5d:25:9a:90:f4:2e:f4:e9:cc:20:1f:4b: 67:4d:a9:bb:9c:2d:d5:20:11:bb:1b:57:d7:5e:25: 4a:f0:d5:8b:ee:ae:72:eb:aa:c8:b0:71:88:73:73: 3d:05:87:0c:88:f3:1e:7d:41:bf:57:a4:12:96:80: 7e:13:cd:ea:6b:f2:e0:d5:8b:19:3e:d0:3f:89:9a: b5:ed:61:78:cb:dc:2c:57:85:7a:82:39:42:b2:86: da:23:85:1a:71:39:50:eb:2a:98:fc:dd:a1:d0:4a: e9:8b:2e:16:dd:b5:ee:50:e8:fb:20:96:ce:6c:7f: b5:2d:6c:fb:07:77:9c:2d:58:db:fd:d5:73:89:80: da:76:12:bf:9e:29:e4:77:f1:75:45:1a:4e:58:ed: 01:10:c5:db:a4:b3:90:9a:df:a2:09:07:66:cf:dc: 96:f9:ad:eb:e5:ba:e8:a4:16:9b:9a:9d:3d:05:41: 58:a0:8b:f5:7a:81:bb:bf:db:0c:24:65:45:93:6c: d8:11:44:48:24:f5:a4:21:09:63:ff:c9:43:e7:94: e1:1a:ac:af:18:0c:9d:db:24:f1:80:3a:1c:79:49: bd:59:c5:90:2d:a7:16:8b:4e:52:a8:ff:b4:e8:b1: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9E:69:7B:66:16:07:CD:B9:31:32:F2:55:AA:F6:31:52:2E:78:BE X509v3 Authority Key Identifier: keyid:A8:29:2F:62:04:C8:21:3D:79:1F:A6:CC:AA:F5:78:51:94:EF:81:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/qCkvYgTIIT15H6bMqvV4UZTvgaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qCkvYgTIIT15H6bMqvV4UZTvgaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDEFE/1164CAE0A51611EF890ECD3EC4F9AE02/E7695EC6A53411EFB98AFE51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.247.0/24 Signature Algorithm: sha256WithRSAEncryption 35:30:47:7e:83:bb:fc:e9:82:37:e2:3b:1d:3d:cc:90:9c:4b: 54:94:f7:04:96:99:22:49:1a:d0:e5:3f:ee:41:20:0f:8d:0b: 1c:f8:b4:68:0d:8e:0b:b4:b6:d8:82:8d:de:9c:6c:85:c9:48: 16:8f:0a:ae:3b:61:61:bc:ca:cc:40:cf:cf:0d:68:c9:e3:94: a0:d1:08:2f:2c:a9:db:b4:fe:74:79:d4:55:88:dc:e4:83:25: 41:46:28:18:62:36:70:1a:40:75:16:4c:36:e1:e6:ab:ab:65: 61:a3:2c:af:b9:42:45:01:6c:e1:68:18:78:3b:e3:c9:04:b3: fa:2f:c6:76:f3:29:b5:77:a4:7d:bc:13:2d:89:a7:5c:c7:2e: 86:49:34:f8:53:d6:69:2d:98:06:6e:82:5c:66:95:4f:35:ad: 54:c5:26:37:28:0b:9c:e4:a1:c8:f2:05:4a:de:95:ac:f0:98: 4b:09:1c:a1:92:57:36:38:eb:d9:b7:57:05:6c:14:2f:fc:37: 8b:dd:3d:3a:b6:5f:ea:1f:dd:9c:1e:e6:f1:34:ce:c8:7c:56: 2e:a2:10:a9:3b:3f:48:94:92:59:55:18:d8:6e:6e:23:9c:fe: 0a:bd:e6:5f:37:ec:ce:13:ee:12:7e:70:65:ed:ae:8c:84:cf: d9:45:5f:fd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REVGRTExMC8GA1UEBRMoQTgyOTJGNjIwNEM4MjEzRDc5MUZBNkNDQUFGNTc4NTE5 NEVGODFBMDAeFw0yNDExMTcyMjQwMTFaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY3M2E3MGNiLTY4OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkA2yU8+8M8ctDH2xnFksOn10lmpD0LvTpzCAfS2dNqbucLdUgEbsbV9deJUrw 1YvurnLrqsiwcYhzcz0FhwyI8x59Qb9XpBKWgH4Tzepr8uDVixk+0D+JmrXtYXjL 3CxXhXqCOUKyhtojhRpxOVDrKpj83aHQSumLLhbdte5Q6Psgls5sf7UtbPsHd5wt WNv91XOJgNp2Er+eKeR38XVFGk5Y7QEQxduks5Ca36IJB2bP3Jb5revluuikFpua nT0FQVigi/V6gbu/2wwkZUWTbNgRREgk9aQhCWP/yUPnlOEarK8YDJ3bJPGAOhx5 Sb1ZxZAtpxaLTlKo/7TosQjPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQZ5pe2YW B825MTLyVar2MVIueL4wHwYDVR0jBBgwFoAUqCkvYgTIIT15H6bMqvV4UZTvgaAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERUZFLzExNjRDQUUwQTUx NjExRUY4OTBFQ0QzRUM0RjlBRTAyL3FDa3ZZZ1RJSVQxNUg2Yk1xdlY0VVpUdmdh QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcUNrdllnVElJVDE1SDZiTXF2VjRVWlR2Z2FBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REVGRS8xMTY0Q0FFMEE1MTYxMUVGODkwRUNEM0VDNEY5QUUwMi9FNzY5NUVDNkE1 MzQxMUVGQjk4QUZFNTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKC/9zANBgkqhkiG9w0BAQsFAAOCAQEANTBHfoO7/OmCN+I7 HT3MkJxLVJT3BJaZIkka0OU/7kEgD40LHPi0aA2OC7S22IKN3pxshclIFo8Krjth YbzKzEDPzw1oyeOUoNEILyyp27T+dHnUVYjc5IMlQUYoGGI2cBpAdRZMNuHmq6tl YaMsr7lCRQFs4WgYeDvjyQSz+i/GdvMptXekfbwTLYmnXMcuhkk0+FPWaS2YBm6C XGaVTzWtVMUmNygLnOShyPIFSt6VrPCYSwkcoZJXNjjr2bdXBWwUL/w3i909OrZf 6h/dnB7m8TTOyHxWLqIQqTs/SJSSWVUY2G5uI5z+Cr3mXzfszhPuEn5wZe2ujITP 2UVf/Q== -----END CERTIFICATE-----Generated at Sat Nov 23 07:31:32 2024 by rpki-client on console-fra.rpki-client.org