$ rpki-client -vvf rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa File: 579FE34A0BF211EF8B0F9C81C4F9AE02.roa (raw, json) Hash identifier: OWvKVTifRt9Iu2tVWtoXO+U1lovVBowFKNMDPAP9PZY= Subject key identifier: 75:E1:B6:F3:E1:31:94:EA:17:06:57:C2:B8:45:30:00:EF:2C:72:59 Certificate issuer: /CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Certificate serial: 057E Authority key identifier: 2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa Signing time: Sat 11 May 2024 01:04:14 +0000 ROA not before: Sat 11 May 2024 01:04:14 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 396982 IP address blocks: 114.141.120.0/24 maxlen: 24 114.141.121.0/24 maxlen: 24 114.141.122.0/24 maxlen: 24 114.141.123.0/24 maxlen: 24 114.141.124.0/24 maxlen: 24 114.141.125.0/24 maxlen: 24 114.141.126.0/24 maxlen: 24 114.141.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91203EB/serialNumber=2F265B0C802473094926890A85124E21B109DA3C Validity Not Before: May 11 01:04:14 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=663ec40e-6743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:c3:58:25:ea:4e:43:d3:5b:cf:c8:8d:b4: e1:39:39:2a:28:e6:85:cc:af:9c:38:a3:f2:bf:90: 89:d5:06:ee:25:45:01:75:a4:be:7b:c5:fd:11:10: b4:23:f6:ee:29:9a:95:4b:9c:ca:1c:f9:c1:a5:fd: b3:7d:82:63:d1:92:36:15:c6:d1:13:da:44:fa:be: fb:81:08:ce:91:0b:40:bd:3b:fc:64:09:8b:ac:b5: 89:85:0a:9c:dc:6b:69:f0:9e:bc:d8:92:09:d1:52: ff:8f:5f:42:7d:5d:bf:b5:51:8e:8d:14:dc:1f:3c: 0e:7c:05:37:38:01:22:13:5c:3e:d2:6e:7d:3f:a6: 34:2a:c4:5c:75:0d:76:69:13:b1:a4:0c:d6:f9:8a: ab:8b:53:ad:f6:91:d4:ab:c9:85:a3:95:9c:14:f3: 5b:27:e3:cf:db:0c:1c:8d:e3:09:46:4c:65:dd:75: f2:60:40:a0:4d:12:df:4e:d2:a6:bb:93:d8:6c:36: 25:4b:83:77:b1:5e:d3:43:29:e3:c7:95:fa:12:d0: f8:c0:d5:71:76:a6:3e:da:64:5e:e8:43:49:9e:bb: 01:fb:e2:2b:23:73:19:71:6d:9c:1c:94:c2:37:93: 35:94:8a:31:06:94:48:5d:79:38:ce:cd:ca:36:77: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E1:B6:F3:E1:31:94:EA:17:06:57:C2:B8:45:30:00:EF:2C:72:59 X509v3 Authority Key Identifier: keyid:2F:26:5B:0C:80:24:73:09:49:26:89:0A:85:12:4E:21:B1:09:DA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/LyZbDIAkcwlJJokKhRJOIbEJ2jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyZbDIAkcwlJJokKhRJOIbEJ2jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203EB/F3622E74976911EBABC77486C4F9AE02/579FE34A0BF211EF8B0F9C81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.141.120.0/21 Signature Algorithm: sha256WithRSAEncryption 10:28:7a:77:3c:3b:db:8e:ce:1a:1a:9b:18:a3:24:e6:20:cf: 1c:45:bd:87:5f:f3:4a:bd:2e:99:b2:78:2b:b3:9e:5b:61:29: 80:e5:93:f9:33:e7:44:1a:20:ba:f7:c3:6e:3f:b6:cb:a8:6e: 0b:e8:16:90:d9:57:4e:72:7f:59:69:cf:21:30:8c:21:5a:ca: eb:ca:fc:7d:77:54:b5:e4:48:79:46:5b:53:c0:cb:d7:00:f1: 2f:14:ee:e5:74:1e:bc:a9:d6:dc:87:08:5a:23:18:e2:ab:fa: 35:14:96:0f:29:c4:22:f6:d7:53:3a:67:80:c1:20:fa:ae:80: 6d:09:15:ac:77:76:02:30:55:1b:cc:23:66:83:de:da:08:cb: a1:5a:ed:e6:e8:26:68:22:8d:7a:54:f2:b0:45:ea:e9:cf:f7: bf:7a:c8:cf:b5:9d:42:8a:6f:66:5a:02:21:3b:4f:cc:11:61: 3a:60:e5:27:00:fd:5e:af:5f:de:1a:df:9a:cd:95:46:3f:73: ff:8b:cc:d0:b6:1e:d0:2e:d1:93:e9:4e:28:1d:94:8b:34:f8: 70:97:c9:32:fb:d3:75:3a:2b:c6:46:96:17:95:11:fd:08:c4: 32:c3:2f:a8:d1:7a:67:10:dd:f1:8a:2a:e8:a1:50:51:ac:41: 8b:41:ba:9c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjAzRUIxMTAvBgNVBAUTKDJGMjY1QjBDODAyNDczMDk0OTI2ODkwQTg1MTI0RTIx QjEwOURBM0MwHhcNMjQwNTExMDEwNDE0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjNlYzQwZS02NzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxsTDWCXqTkPTW8/IjbThOTkqKOaFzK+cOKPyv5CJ1QbuJUUBdaS+e8X9ERC0 I/buKZqVS5zKHPnBpf2zfYJj0ZI2FcbRE9pE+r77gQjOkQtAvTv8ZAmLrLWJhQqc 3Gtp8J682JIJ0VL/j19CfV2/tVGOjRTcHzwOfAU3OAEiE1w+0m59P6Y0KsRcdQ12 aROxpAzW+Yqri1Ot9pHUq8mFo5WcFPNbJ+PP2wwcjeMJRkxl3XXyYECgTRLfTtKm u5PYbDYlS4N3sV7TQynjx5X6EtD4wNVxdqY+2mRe6ENJnrsB++IrI3MZcW2cHJTC N5M1lIoxBpRIXXk4zs3KNncqqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHXhtvPh MZTqFwZXwrhFMADvLHJZMB8GA1UdIwQYMBaAFC8mWwyAJHMJSSaJCoUSTiGxCdo8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNFQi9GMzYyMkU3NDk3 NjkxMUVCQUJDNzc0ODZDNEY5QUUwMi9MeVpiRElBa2N3bEpKb2tLaFJKT0liRUoy ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5WmJESUFrY3dsSkpva0toUkpPSWJFSjJqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjAzRUIvRjM2MjJFNzQ5NzY5MTFFQkFCQzc3NDg2QzRGOUFFMDIvNTc5RkUzNEEw QkYyMTFFRjhCMEY5QzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANyjXgwDQYJKoZIhvcNAQELBQADggEBABAoenc8O9uOzhoa mxijJOYgzxxFvYdf80q9LpmyeCuznlthKYDlk/kz50QaILr3w24/tsuobgvoFpDZ V05yf1lpzyEwjCFayuvK/H13VLXkSHlGW1PAy9cA8S8U7uV0Hryp1tyHCFojGOKr +jUUlg8pxCL211M6Z4DBIPqugG0JFax3dgIwVRvMI2aD3toIy6Fa7eboJmgijXpU 8rBF6unP9796yM+1nUKKb2ZaAiE7T8wRYTpg5ScA/V6vX94a35rNlUY/c/+LzNC2 HtAu0ZPpTigdlIs0+HCXyTL703U6K8ZGlheVEf0IxDLDL6jRemcQ3fGKKuihUFGs QYtBupw= -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org