$ rpki-client -vvf rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/FAB5FE6E101811EA9A30176EC4F9AE02.roa File: FAB5FE6E101811EA9A30176EC4F9AE02.roa (raw, json) Hash identifier: dY/k1RoDFoYbxGUxW8Yd7Na7yKGxnF2Cj2HCzStkWDM= Subject key identifier: DE:AC:25:43:8A:6A:B7:43:AC:5C:71:A9:58:2E:C4:92:80:44:A4:37 Certificate issuer: /CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Certificate serial: 33C1 Authority key identifier: 75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/FAB5FE6E101811EA9A30176EC4F9AE02.roa Signing time: Wed 10 Apr 2024 14:20:09 +0000 ROA not before: Wed 10 Apr 2024 14:20:09 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38712 IP address blocks: 116.212.104.0/21 maxlen: 24 120.50.0.0/19 maxlen: 19 120.50.0.0/20 maxlen: 24 120.50.16.0/21 maxlen: 24 120.50.24.0/23 maxlen: 24 120.50.26.0/23 maxlen: 24 120.50.28.0/22 maxlen: 24 2400:5800::/32 maxlen: 32 2400:5800:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13249 (0x33c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915060F/serialNumber=75C0717740E9187DD535116139012F0F31D84097 Validity Not Before: Apr 10 14:20:09 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6616a018-3174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7b:44:c1:1a:58:15:49:2f:db:37:55:10:c6: 4b:83:18:9b:66:d5:1f:9e:71:c9:4c:90:a9:e4:23: 22:bb:27:1b:44:91:43:17:20:24:57:16:ec:11:21: c1:76:f7:6a:48:26:5a:e8:85:91:f1:ed:4c:43:36: df:f8:43:3c:43:40:bc:ec:92:55:b5:00:8b:27:1e: 91:12:67:81:b5:c1:af:1b:f2:19:3b:0b:d7:65:7e: df:24:77:ee:61:52:60:14:80:98:e1:ea:d8:74:f9: 95:09:ed:56:5c:ba:73:38:57:b5:24:0c:35:7e:ee: 86:b0:02:c7:1d:64:1f:24:e0:38:04:8c:a1:da:e8: 12:a5:ea:4c:2d:18:27:4a:e8:c2:35:00:d6:46:4b: 23:4c:da:0f:5c:0d:47:f8:a5:4e:07:55:57:c0:88: 14:a6:98:09:43:81:cd:ff:bd:1d:7d:93:0e:53:e4: 37:42:41:8e:03:0f:a6:b1:64:72:cb:8f:0b:ed:48: c3:fb:63:fe:6d:4e:3b:e8:f5:0e:20:ac:dc:58:f4: 44:db:6d:bf:b0:b4:ea:5b:b8:8f:80:4a:65:9c:1d: 3b:a8:fd:ae:ed:dc:dc:29:e6:a9:6e:d8:1f:3c:c6: 80:b3:0a:6f:bd:eb:eb:de:e0:93:e2:03:09:f5:d4: 29:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AC:25:43:8A:6A:B7:43:AC:5C:71:A9:58:2E:C4:92:80:44:A4:37 X509v3 Authority Key Identifier: keyid:75:C0:71:77:40:E9:18:7D:D5:35:11:61:39:01:2F:0F:31:D8:40:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dcBxd0DpGH3VNRFhOQEvDzHYQJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915060F/5E7ED5E41D6C11E28ACBD0AC08B02CD2/FAB5FE6E101811EA9A30176EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.212.104.0/21 120.50.0.0/19 IPv6: 2400:5800::/32 Signature Algorithm: sha256WithRSAEncryption 50:36:7d:3e:4b:4a:a8:84:1c:60:2c:7f:a8:dc:a5:42:04:3c: 0d:f5:32:e0:7a:9e:fb:da:ad:20:32:78:c8:b8:a1:3f:2b:fa: 4c:ee:f6:b2:f6:f9:6f:fd:85:a5:aa:f7:5d:ff:62:fd:9f:f8: 9c:3a:6e:71:47:ba:4e:7e:cf:b3:ac:df:3f:89:82:31:07:7a: 01:0d:48:63:41:97:77:b5:70:41:b8:5d:84:57:c0:10:e2:56: 7e:4d:d5:93:09:44:ee:77:f8:76:37:3b:19:0d:51:f1:d3:5c: fc:7f:b9:4d:f6:ea:cf:7f:3d:ca:77:37:9d:91:fe:cb:3c:03: 56:7d:98:ee:3f:9e:c6:dd:61:3b:cd:ac:6a:59:54:3f:7f:35: 8e:db:fe:64:fd:85:ba:05:58:ed:37:5b:dd:8a:b7:cc:9f:77: 64:24:f3:05:0c:07:a8:fd:e3:28:00:c4:47:05:a9:69:da:2d: 15:f8:05:20:f8:8d:ff:b5:ab:c9:90:d9:17:1c:22:23:5b:6d: 80:36:14:98:c1:39:41:29:cd:4d:31:66:b2:9b:cf:bb:22:1f: 6d:ae:67:14:b7:0a:bf:bf:49:e2:1b:2f:96:9d:20:8d:e5:31: 46:f2:39:1d:57:d9:5c:25:d0:6e:67:fe:02:7c:48:03:bf:b9: 44:fe:b6:21 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICM8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA2MEYxMTAvBgNVBAUTKDc1QzA3MTc3NDBFOTE4N0RENTM1MTE2MTM5MDEyRjBG MzFEODQwOTcwHhcNMjQwNDEwMTQyMDA5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2YTAxOC0zMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4XtEwRpYFUkv2zdVEMZLgxibZtUfnnHJTJCp5CMiuycbRJFDFyAkVxbsESHB dvdqSCZa6IWR8e1MQzbf+EM8Q0C87JJVtQCLJx6REmeBtcGvG/IZOwvXZX7fJHfu YVJgFICY4erYdPmVCe1WXLpzOFe1JAw1fu6GsALHHWQfJOA4BIyh2ugSpepMLRgn SujCNQDWRksjTNoPXA1H+KVOB1VXwIgUppgJQ4HN/70dfZMOU+Q3QkGOAw+msWRy y48L7UjD+2P+bU476PUOIKzcWPRE222/sLTqW7iPgEplnB07qP2u7dzcKeapbtgf PMaAswpvvevr3uCT4gMJ9dQpCwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN6sJUOK ardDrFxxqVguxJKARKQ3MB8GA1UdIwQYMBaAFHXAcXdA6Rh91TURYTkBLw8x2ECX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDYwRi81RTdFRDVFNDFE NkMxMUUyOEFDQkQwQUMwOEIwMkNEMi9kY0J4ZDBEcEdIM1ZOUkZoT1FFdkR6SFlR SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RjQnhkMERwR0gzVk5SRmhPUUV2RHpIWVFKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTA2MEYvNUU3RUQ1RTQxRDZDMTFFMjhBQ0JEMEFDMDhCMDJDRDIvRkFCNUZFNkUx MDE4MTFFQTlBMzAxNzZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAN01GgDBAV4MgAwDQQCAAIwBwMFACQAWAAwDQYJKoZIhvcN AQELBQADggEBAFA2fT5LSqiEHGAsf6jcpUIEPA31MuB6nvvarSAyeMi4oT8r+kzu 9rL2+W/9haWq913/Yv2f+Jw6bnFHuk5+z7Os3z+JgjEHegENSGNBl3e1cEG4XYRX wBDiVn5N1ZMJRO53+HY3OxkNUfHTXPx/uU326s9/Pcp3N52R/ss8A1Z9mO4/nsbd YTvNrGpZVD9/NY7b/mT9hboFWO03W92Kt8yfd2Qk8wUMB6j94ygAxEcFqWnaLRX4 BSD4jf+1q8mQ2RccIiNbbYA2FJjBOUEpzU0xZrKbz7siH22uZxS3Cr+/SeIbL5ad II3lMUbyOR1X2Vwl0G5n/gJ8SAO/uUT+tiE= -----END CERTIFICATE-----Generated at Fri May 31 16:40:56 2024 by rpki-client on console-ams.rpki-client.org