$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B74426C88AA711EB876EF84BC4F9AE02.roa File: B74426C88AA711EB876EF84BC4F9AE02.roa (raw, json) Hash identifier: PM+7yjNUW+0HCriKrnBjjl10/XxF9A80OLBaAQvg4eE= Subject key identifier: 84:B2:E5:70:6A:EC:B7:A8:3C:2D:36:41:4B:E4:D9:A1:8D:22:C2:86 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0B68 Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B74426C88AA711EB876EF84BC4F9AE02.roa Signing time: Thu 18 Apr 2024 19:57:44 +0000 ROA not before: Thu 18 Apr 2024 19:57:44 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 16509 IP address blocks: 203.2.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2920 (0xb68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Apr 18 19:57:44 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66217b38-d3bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:57:32:7d:35:aa:4d:d2:8a:cd:32:6a:14: a3:1d:2e:86:df:f9:b7:e6:20:4b:19:83:cb:32:0b: b9:ca:09:33:db:b2:af:79:51:ac:47:aa:23:45:5f: 4f:2d:10:b0:b3:92:ff:16:2d:77:0d:d6:7f:16:c8: 28:cd:ad:33:8b:b8:e1:2f:f4:25:46:87:5d:44:ad: 88:3c:c7:c7:d6:2c:13:91:75:e2:2e:c1:df:fa:83: 1c:26:8c:e6:f3:80:67:f3:53:ab:0c:cf:d5:1b:7a: 86:29:c3:79:0b:00:23:27:a0:fd:3e:6f:89:5f:b2: 87:d4:23:43:0a:62:31:15:3c:59:89:09:86:ca:84: 04:f2:4b:c1:c6:da:fa:b1:c9:a8:ee:67:17:a5:b6: 0a:de:36:9d:be:81:eb:c8:8c:45:a5:34:ed:2c:d1: 2f:e7:3f:74:f0:c5:be:ba:a3:e2:b4:4b:9f:83:8b: 2e:3f:82:98:b5:48:7c:69:34:ca:54:f9:6c:c7:fb: 64:f8:e8:fa:c9:06:46:0a:24:5a:00:e9:d4:78:7b: d0:5d:ad:56:a7:20:83:00:85:bb:d8:36:0c:09:09: 36:3f:50:cf:84:3f:e5:68:f8:77:74:33:3d:1e:ee: f1:75:e8:23:a2:39:2a:ed:bc:8c:f6:e8:42:c2:8c: 4b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B2:E5:70:6A:EC:B7:A8:3C:2D:36:41:4B:E4:D9:A1:8D:22:C2:86 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B74426C88AA711EB876EF84BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.2.170.0/24 Signature Algorithm: sha256WithRSAEncryption 24:77:65:a9:10:5c:6f:84:c2:40:52:39:0f:12:9d:54:b9:4a: da:f7:8c:06:33:bc:44:98:31:9a:b2:eb:a3:8a:ed:35:30:1b: 28:8f:ca:e9:a1:80:70:db:0f:f5:57:b4:3d:f9:75:d8:d5:79: d2:2a:a6:48:35:f4:2b:c7:8c:92:21:27:9c:83:e3:76:65:c1: 25:8c:9c:30:b2:d4:1e:11:68:63:8e:f8:e2:2e:e2:3f:30:e7: 90:8f:fe:89:08:6e:9f:5a:0b:b5:d7:ac:2d:8d:64:1a:ea:54: f9:00:29:2b:cb:be:3a:2e:be:31:61:f9:38:10:1a:d3:55:47: f8:ac:8a:8d:ed:a3:f0:14:fd:8e:50:d6:c0:ac:67:49:92:d8: d6:09:27:ae:37:f0:0c:49:f2:bf:79:c5:6e:14:37:c5:34:85: 7d:2d:2f:1e:4b:72:9b:3f:c4:a9:13:e6:bc:bc:e2:74:ff:e6: 59:01:6b:f8:21:f6:b7:18:0c:ff:3c:5d:c5:ba:d3:f7:5f:4c: 6b:60:a5:cb:25:9b:da:72:8c:d5:bb:6b:e4:e9:e7:5c:ae:a8: cd:44:97:8d:7d:64:cf:cb:6b:0a:44:e1:6f:ef:57:6e:5e:55: 34:29:b0:73:ba:ec:21:42:af:03:15:d8:dd:d4:53:84:db:48: 7a:60:15:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjQwNDE4MTk1NzQ0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxN2IzOC1kM2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrZXMn01qk3Sis0yahSjHS6G3/m35iBLGYPLMgu5ygkz27KveVGsR6ojRV9P LRCws5L/Fi13DdZ/Fsgoza0zi7jhL/QlRoddRK2IPMfH1iwTkXXiLsHf+oMcJozm 84Bn81OrDM/VG3qGKcN5CwAjJ6D9Pm+JX7KH1CNDCmIxFTxZiQmGyoQE8kvBxtr6 scmo7mcXpbYK3jadvoHryIxFpTTtLNEv5z908MW+uqPitEufg4suP4KYtUh8aTTK VPlsx/tk+Oj6yQZGCiRaAOnUeHvQXa1WpyCDAIW72DYMCQk2P1DPhD/laPh3dDM9 Hu7xdegjojkq7byM9uhCwoxLnQIDAQABo4IClTCCApEwHQYDVR0OBBYEFISy5XBq 7LeoPC02QUvk2aGNIsKGMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVFNzAvMDkxMEQxQTAwOUU4MTFFQUE2MzAxNjRGQzRGOUFFMDIvQjc0NDI2Qzg4 QUE3MTFFQjg3NkVGODRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLAqowDQYJKoZIhvcNAQELBQADggEBACR3ZakQXG+EwkBS OQ8SnVS5Str3jAYzvESYMZqy66OK7TUwGyiPyumhgHDbD/VXtD35ddjVedIqpkg1 9CvHjJIhJ5yD43ZlwSWMnDCy1B4RaGOO+OIu4j8w55CP/okIbp9aC7XXrC2NZBrq VPkAKSvLvjouvjFh+TgQGtNVR/isio3to/AU/Y5Q1sCsZ0mS2NYJJ6438AxJ8r95 xW4UN8U0hX0tLx5Lcps/xKkT5ry84nT/5lkBa/gh9rcYDP88XcW60/dfTGtgpcsl m9pyjNW7a+Tp51yuqM1El419ZM/LawpE4W/vV25eVTQpsHO67CFCrwMV2N3UU4Tb SHpgFfs= -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:55 2024 by rpki-client on console-fra.rpki-client.org