$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/84770922A2A411EF812C7115C4F9AE02.roa File: 84770922A2A411EF812C7115C4F9AE02.roa (raw, json) Hash identifier: CWQVgjqS0hPL1Bt3Z7e0mf7NgxM6WYqh0QNbnOr9lcw= Subject key identifier: 0B:AF:A4:3C:72:E2:50:FC:38:49:CB:09:8B:68:67:14:E7:A4:7C:32 Certificate issuer: /CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Certificate serial: 0EEC Authority key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/84770922A2A411EF812C7115C4F9AE02.roa Signing time: Thu 14 Nov 2024 16:21:35 +0000 ROA not before: Thu 14 Nov 2024 16:21:35 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 134684 IP address blocks: 193.119.3.0/24 maxlen: 24 193.119.4.0/24 maxlen: 24 193.119.5.0/24 maxlen: 24 193.119.6.0/24 maxlen: 24 193.119.7.0/24 maxlen: 24 193.119.8.0/24 maxlen: 24 193.119.10.0/24 maxlen: 24 193.119.11.0/24 maxlen: 24 193.119.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3820 (0xeec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Validity Not Before: Nov 14 16:21:35 2024 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6736238f-842f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:9b:de:44:4c:ad:11:3a:7a:1a:6a:54:08: 58:f8:05:06:93:16:73:92:af:0c:ff:07:e4:c1:fe: dc:2a:13:6d:4c:5a:03:e1:a8:f1:d8:bf:d2:ad:7d: d6:7d:ef:22:0e:cf:14:57:72:2d:15:3e:fe:09:e4: 1d:ae:36:2b:f7:38:cf:9d:52:45:8a:c6:0d:36:09: 06:82:7e:73:68:7b:6c:26:af:f1:1f:1a:5f:42:94: dd:e7:98:26:d3:34:eb:2d:6b:c2:5a:d7:8c:25:e8: da:9c:bd:62:2f:b8:f6:32:5d:6d:3b:62:e8:fe:5a: 93:cc:34:f3:29:3c:09:88:73:0f:97:e7:61:f4:d4: 3f:c8:d8:41:6d:03:28:e2:40:5c:df:5e:a5:5e:03: 9b:7e:44:81:8a:a8:6a:04:4f:a3:b8:c6:32:e1:ab: af:65:5a:64:f4:02:f1:2b:ef:30:29:73:c6:c1:4b: e9:2a:45:95:d7:62:e8:c2:41:e7:5b:91:ea:b2:49: 48:9e:cd:fa:a2:37:a2:df:a7:27:26:ef:7e:b4:03: a1:c5:5e:b2:f0:c5:ec:bc:ac:af:01:59:fd:54:e6: 55:08:4e:80:e5:22:ad:54:fe:f5:a9:bf:bd:0d:eb: 4d:9a:5d:9d:bf:36:d0:dd:bf:06:af:8d:15:e6:db: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AF:A4:3C:72:E2:50:FC:38:49:CB:09:8B:68:67:14:E7:A4:7C:32 X509v3 Authority Key Identifier: keyid:CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/84770922A2A411EF812C7115C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.119.3.0-193.119.8.255 193.119.10.0-193.119.12.255 Signature Algorithm: sha256WithRSAEncryption 1f:12:6b:e9:15:4a:81:47:81:0e:f3:70:60:8b:bb:65:d8:0f: 1c:7b:8f:c4:f8:28:d3:3a:55:49:97:37:e3:b2:9d:50:13:73: 1f:26:07:db:8f:e7:89:31:0d:3f:e4:9a:a8:f8:7a:88:fa:26: 64:6b:8f:55:0c:f4:02:c8:a1:0b:7d:4b:d3:80:d2:1a:5f:1d: 36:09:7f:5a:ba:28:73:96:25:0c:3f:93:97:42:e0:97:0b:e6: 81:23:e0:29:3a:e5:37:71:7f:6d:df:47:69:ce:f7:d7:8a:9a: 4b:41:63:2a:2b:8f:8b:3b:43:71:c2:f7:04:a4:32:96:90:0a: 61:7a:b8:d3:59:18:c1:26:03:51:6a:92:fa:d4:98:9d:f4:6a: a4:12:15:a7:5c:a2:e7:00:be:31:67:90:9f:f2:d8:62:5e:55: cb:38:0e:94:39:ff:b0:a9:fb:3a:c7:19:2c:34:95:54:1b:ac: 76:c4:87:42:21:9a:f0:46:69:da:fc:dc:b5:22:46:9b:cb:7d: 00:24:4b:29:17:59:b7:1f:62:0a:c9:09:3a:d9:7f:dd:a7:a0: ce:58:1a:75:82:55:b3:b2:c1:23:06:92:74:7c:87:3e:3e:f4: 73:64:03:22:33:54:f3:47:3e:af:e4:73:be:c7:44:03:01:81: f3:1b:dc:4f -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICDuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKENDQ0U1NEVFQUZCRjkzMjEzQ0Q5OTJCQ0ExRTUyNjdE NTA1MkIzQzcwHhcNMjQxMTE0MTYyMTM1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM2MjM4Zi04NDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq62b3kRMrRE6ehpqVAhY+AUGkxZzkq8M/wfkwf7cKhNtTFoD4ajx2L/SrX3W fe8iDs8UV3ItFT7+CeQdrjYr9zjPnVJFisYNNgkGgn5zaHtsJq/xHxpfQpTd55gm 0zTrLWvCWteMJejanL1iL7j2Ml1tO2Lo/lqTzDTzKTwJiHMPl+dh9NQ/yNhBbQMo 4kBc316lXgObfkSBiqhqBE+juMYy4auvZVpk9ALxK+8wKXPGwUvpKkWV12LowkHn W5HqsklIns36ojei36cnJu9+tAOhxV6y8MXsvKyvAVn9VOZVCE6A5SKtVP71qb+9 DetNml2dvzbQ3b8Gr40V5tvIhQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAuvpDxy 4lD8OEnLCYtoZxTnpHwyMB8GA1UdIwQYMBaAFMzOVO6vv5MhPNmSvKHlJn1QUrPH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS85QkE5NzFBMjZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi96TTVVN3EtX2t5RTgyWks4b2VVbWZWQlNz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3pNNVU3cS1fa3lFODJaSzhvZVVtZlZCU3M4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVDREEvOUJBOTcxQTI2RjlDMTFFOUE1MDc0QjJGQzRGOUFFMDIvODQ3NzA5MjJB MkE0MTFFRjgxMkM3MTE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAMF3AwMEAMF3CDAMAwQBwXcKAwQAwXcMMA0GCSqGSIb3 DQEBCwUAA4IBAQAfEmvpFUqBR4EO83Bgi7tl2A8ce4/E+CjTOlVJlzfjsp1QE3Mf Jgfbj+eJMQ0/5Jqo+HqI+iZka49VDPQCyKELfUvTgNIaXx02CX9auihzliUMP5OX QuCXC+aBI+ApOuU3cX9t30dpzvfXippLQWMqK4+LO0NxwvcEpDKWkApherjTWRjB JgNRapL61Jid9GqkEhWnXKLnAL4xZ5Cf8thiXlXLOA6UOf+wqfs6xxksNJVUG6x2 xIdCIZrwRmna/Ny1Ikaby30AJEspF1m3H2IKyQk62X/dp6DOWBp1glWzssEjBpJ0 fIc+PvRzZAMiM1TzRz6v5HO+x0QDAYHzG9xP -----END CERTIFICATE-----Generated at Fri Nov 22 19:50:23 2024 by rpki-client on console-ams.rpki-client.org