$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4107DF748DB811E98ACC9F7EC4F9AE02.roa File: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (raw, json) Hash identifier: RVCEZphh0VY6G4aQXCKb47TtLr7Pklp8Ny0XUXYyqkg= Subject key identifier: 70:0A:88:A6:5A:1F:BB:63:AC:BD:EE:2E:FB:B9:01:A9:63:FC:3D:87 Certificate issuer: /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Certificate serial: 33DF Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4107DF748DB811E98ACC9F7EC4F9AE02.roa Signing time: Tue 20 Jun 2023 14:50:21 +0000 ROA not before: Tue 20 Jun 2023 14:50:21 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 17427 IP address blocks: 58.181.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13279 (0x33df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A Validity Not Before: Jun 20 14:50:21 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6491bcac-229e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:3c:64:2a:17:86:6f:77:dc:b1:87:02:01: 8a:ff:bb:61:ef:30:dc:06:e7:0e:1d:94:dc:30:84: 81:ee:68:55:73:07:f3:53:d7:a9:09:34:3f:01:7b: 4e:b2:ef:9b:15:45:7a:c7:ac:45:1e:c6:28:1e:f4: 5f:45:9d:5e:43:f1:8d:52:09:e4:f9:96:99:03:fb: 3b:61:c7:d4:3b:08:ea:45:a3:ef:c2:a3:48:cf:bb: c2:e0:aa:98:2e:44:92:f9:77:b5:99:03:c1:29:c8: 78:c5:a5:a0:ed:d4:5d:b0:7d:ac:8f:9a:bc:25:b6: 73:63:17:c6:ea:60:74:a3:0a:88:5b:5e:0b:85:25: e1:7f:a9:51:55:55:98:ed:0a:ea:3d:89:c9:ac:e1: 94:d5:07:ee:f4:ff:14:33:76:1f:c3:21:57:e2:6d: 4d:29:16:ca:b0:9d:4c:b8:ea:50:b0:56:fd:ef:c2: 13:14:42:d9:97:99:20:15:8a:72:bf:ae:30:1d:6a: d6:01:a9:db:58:a2:cc:66:45:50:6d:24:62:40:1f: 52:98:d1:1b:3b:f3:e9:af:98:3d:fa:4a:20:4b:2b: 9f:22:fa:ec:ae:d5:1a:3b:3c:d3:31:12:0a:f3:6a: 55:9b:9a:40:cd:62:67:ca:0e:25:1e:6e:a2:62:b8: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0A:88:A6:5A:1F:BB:63:AC:BD:EE:2E:FB:B9:01:A9:63:FC:3D:87 X509v3 Authority Key Identifier: keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/4107DF748DB811E98ACC9F7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.141.0/24 Signature Algorithm: sha256WithRSAEncryption b3:5f:d1:fa:d6:69:6c:cc:30:ea:78:56:c4:4f:c2:3c:90:22: 70:20:47:36:9c:db:65:44:68:3a:46:53:80:3b:cc:73:8b:fd: e0:45:f2:b6:c9:aa:fe:15:23:ca:d4:a7:cc:01:b3:45:f7:44: d6:d8:95:5e:c8:8e:d9:6b:82:c9:a6:4b:80:fb:e7:38:5f:ab: 72:f1:4a:f7:c7:d8:06:24:51:63:b5:55:7c:e4:25:da:27:47: 28:ae:ff:80:fd:74:a5:4e:ac:e9:24:c8:c4:e8:54:ae:74:90: b9:34:c2:31:05:17:d3:f8:e7:b9:31:e9:4e:ea:5d:60:b6:8a: 1b:51:0a:cc:ff:ae:16:85:b5:c2:71:6f:49:9d:6c:7f:f6:9b: 3e:b7:57:88:72:36:c8:88:4d:6e:d3:92:3c:35:a5:fa:92:3a: 64:77:db:0f:13:73:5b:e9:ff:74:31:87:44:53:9f:f4:6b:0a: 2e:ea:57:3e:77:10:ad:b4:a7:0d:f5:ba:1a:85:f6:bf:da:49: b7:c9:5b:73:25:ae:b4:95:2c:0f:ca:24:14:95:9e:d2:a1:36: 94:50:e0:ff:dc:2b:07:88:a8:c6:2c:7b:43:c4:2f:70:51:56: f5:55:89:8a:33:ca:11:75:79:af:5d:05:17:62:27:dd:89:bd: 04:f2:f5:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk3RkExMTAvBgNVBAUTKDlGODJEQkM5NDY2MzEyQzVCQTJFOTIxMjc5MzAyNDAw OTU2QTk4MkEwHhcNMjMwNjIwMTQ1MDIxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDkxYmNhYy0yMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLc8ZCoXhm933LGHAgGK/7th7zDcBucOHZTcMISB7mhVcwfzU9epCTQ/AXtO su+bFUV6x6xFHsYoHvRfRZ1eQ/GNUgnk+ZaZA/s7YcfUOwjqRaPvwqNIz7vC4KqY LkSS+Xe1mQPBKch4xaWg7dRdsH2sj5q8JbZzYxfG6mB0owqIW14LhSXhf6lRVVWY 7QrqPYnJrOGU1Qfu9P8UM3YfwyFX4m1NKRbKsJ1MuOpQsFb978ITFELZl5kgFYpy v64wHWrWAanbWKLMZkVQbSRiQB9SmNEbO/Ppr5g9+kogSyufIvrsrtUaOzzTMRIK 82pVm5pAzWJnyg4lHm6iYriqZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHAKiKZa H7tjrL3uLvu5Aalj/D2HMB8GA1UdIwQYMBaAFJ+C28lGYxLFui6SEnkwJACVapgq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTdGQS8yN0Y4M0I3MDFE ODMxMUUyOTMyOTIxRDgwOEIwMkNEMi9uNExieVVaakVzVzZMcElTZVRBa0FKVnFt Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL240TGJ5VVpqRXNXNkxwSVNlVEFrQUpWcW1Dby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njk3RkEvMjdGODNCNzAxRDgzMTFFMjkzMjkyMUQ4MDhCMDJDRDIvNDEwN0RGNzQ4 REI4MTFFOThBQ0M5RjdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6tY0wDQYJKoZIhvcNAQELBQADggEBALNf0frWaWzMMOp4 VsRPwjyQInAgRzac22VEaDpGU4A7zHOL/eBF8rbJqv4VI8rUp8wBs0X3RNbYlV7I jtlrgsmmS4D75zhfq3LxSvfH2AYkUWO1VXzkJdonRyiu/4D9dKVOrOkkyMToVK50 kLk0wjEFF9P457kx6U7qXWC2ihtRCsz/rhaFtcJxb0mdbH/2mz63V4hyNsiITW7T kjw1pfqSOmR32w8Tc1vp/3Qxh0RTn/RrCi7qVz53EK20pw31uhqF9r/aSbfJW3Ml rrSVLA/KJBSVntKhNpRQ4P/cKweIqMYse0PEL3BRVvVViYozyhF1ea9dBRdiJ92J vQTy9fE= -----END CERTIFICATE-----Generated at Fri May 31 15:08:09 2024 by rpki-client on console-fra.rpki-client.org