$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/14A59A26E15B11ECA05C9236C4F9AE02.roa File: 14A59A26E15B11ECA05C9236C4F9AE02.roa (raw, json) Hash identifier: tCsPFlQbHjPtdKo2By1Yv1A/CwgH+Wy/z7j32R4zxhU= Subject key identifier: C9:F1:10:DD:96:11:D1:AA:52:E1:88:F1:01:50:61:86:91:A4:CF:1D Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 047C Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/14A59A26E15B11ECA05C9236C4F9AE02.roa Signing time: Thu 23 May 2024 02:05:53 +0000 ROA not before: Thu 23 May 2024 02:05:53 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 2697 IP address blocks: 202.41.64.0/18 maxlen: 24 202.141.0.0/17 maxlen: 24 202.141.128.0/19 maxlen: 24 2001:e30:1100::/40 maxlen: 40 2001:e30:1200::/40 maxlen: 40 2001:e30:1300::/40 maxlen: 40 2001:e30:1400::/40 maxlen: 40 2001:e30:1500::/40 maxlen: 40 2001:e30:1600::/40 maxlen: 40 2001:e30:1800::/40 maxlen: 40 2001:e30:187c::/48 maxlen: 48 2001:e30:1a00::/40 maxlen: 40 2001:e30:1b00::/40 maxlen: 40 2001:e30:1b06::/48 maxlen: 48 2001:e30:1c1e::/48 maxlen: 48 2001:e30:1e00::/40 maxlen: 40 2001:e30:1f00::/40 maxlen: 40 2001:e30:2000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3 Validity Not Before: May 23 02:05:53 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=664ea480-1381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0d:76:40:df:bc:03:17:78:3a:98:7a:7b:55: 7e:af:c7:ba:05:66:4f:2c:23:45:81:fa:73:a7:92: 10:6c:ca:8e:c1:e3:12:64:37:41:24:5f:13:e3:44: e3:90:2b:64:5b:b7:2c:2f:f1:f5:26:16:ca:1d:b9: 13:29:ea:a4:9b:66:3f:c6:88:d8:cd:95:56:e2:27: 82:cd:bd:aa:68:4b:fa:b3:17:11:a9:6f:01:95:95: 13:3f:6b:1e:e2:99:a3:ec:fa:87:78:12:e2:63:11: f6:c3:b3:a8:37:3e:f7:43:0a:f1:d5:fb:86:a9:05: 68:4a:7d:00:6b:95:72:c2:29:0f:2d:ff:5a:03:02: e3:19:76:69:52:70:65:aa:6b:14:4b:67:9d:44:53: 42:93:ed:54:85:4f:33:b1:6c:96:d9:d8:02:b2:bf: 8f:d5:d5:f2:1b:26:71:c2:bd:a9:a5:10:38:9a:4c: 28:dd:db:da:d4:51:cd:77:55:be:6a:e5:16:ed:6a: ca:71:3b:30:9e:c8:83:8e:0a:c4:9d:7b:3d:5b:ea: eb:b4:4d:b3:6a:1f:5a:18:ef:1c:45:f7:a4:9d:ad: 2e:52:4c:9d:55:9d:70:16:d9:ba:38:10:d0:4f:e2: a4:fe:e6:f5:fe:ce:cd:ee:cf:39:d5:30:c6:20:e7: bf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F1:10:DD:96:11:D1:AA:52:E1:88:F1:01:50:61:86:91:A4:CF:1D X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/14A59A26E15B11ECA05C9236C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.41.64.0/18 202.141.0.0-202.141.159.255 IPv6: 2001:e30:1100::-2001:e30:16ff:ffff:ffff:ffff:ffff:ffff 2001:e30:1800::/40 2001:e30:1a00::/39 2001:e30:1c1e::/48 2001:e30:1e00::-2001:e30:20ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 60:c3:a1:da:f6:52:23:50:0a:92:0a:3f:a8:b5:a1:2d:db:6a: 5e:c2:21:8b:8e:0f:65:d9:85:c6:79:67:c7:1f:16:7e:45:ec: f4:e7:99:b2:cb:b1:4d:e0:dd:09:af:24:c4:d3:9d:c2:b9:c6: 39:82:17:56:ac:0e:1a:a4:81:be:4c:40:bd:29:1f:0a:84:65: c9:9a:31:21:32:ba:45:5f:f9:e9:bb:19:27:a4:66:e5:30:0b: 06:5b:6d:e9:3b:94:80:59:62:df:39:6e:13:54:d1:52:23:04: 15:9d:ad:5b:d4:58:e3:ee:12:51:74:87:33:c8:82:7d:5e:c3: e9:94:6e:48:84:18:73:15:02:5c:09:4e:59:fc:78:93:93:c8: 0c:c0:26:12:f6:87:f4:cb:44:86:04:a6:b3:09:2e:f0:c1:3b: d1:25:31:b4:d4:5d:55:2c:67:14:79:74:c8:1a:ef:5d:db:ea: dd:d5:26:28:05:b7:dc:8b:c7:d3:d5:aa:0c:b7:1b:30:41:82: bb:e4:97:db:9a:fd:f3:79:dd:6c:ac:52:d9:87:c1:09:e0:8a: 5c:06:5d:81:fa:04:d0:73:a4:c7:82:2a:29:5b:f8:6d:51:b9: 5b:29:1b:f5:5c:d5:3c:d6:87:cb:cf:ab:4c:99:a1:f0:83:bf: af:7f:a6:0a -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjQwNTIzMDIwNTUzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjRlYTQ4MC0xMzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoQ12QN+8Axd4Oph6e1V+r8e6BWZPLCNFgfpzp5IQbMqOweMSZDdBJF8T40Tj kCtkW7csL/H1JhbKHbkTKeqkm2Y/xojYzZVW4ieCzb2qaEv6sxcRqW8BlZUTP2se 4pmj7PqHeBLiYxH2w7OoNz73Qwrx1fuGqQVoSn0Aa5VywikPLf9aAwLjGXZpUnBl qmsUS2edRFNCk+1UhU8zsWyW2dgCsr+P1dXyGyZxwr2ppRA4mkwo3dva1FHNd1W+ auUW7WrKcTswnsiDjgrEnXs9W+rrtE2zah9aGO8cRfekna0uUkydVZ1wFtm6OBDQ T+Kk/ub1/s7N7s851TDGIOe/fwIDAQABo4IC5zCCAuMwHQYDVR0OBBYEFMnxEN2W EdGqUuGI8QFQYYaRpM8dMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUzRDMvNkVDMEUzNjgwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvMTRBNTlBMjZF MTVCMTFFQ0EwNUM5MjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcQYIKwYBBQUHAQcBAf8E YjBgMBkEAgABMBMDBAbKKUAwCwMDAMqNAwQFyo2AMEMEAgACMD0wEAMGACABDjAR AwYAIAEOMBYDBgAgAQ4wGAMGASABDjAaAwcAIAEOMBweMBADBgEgAQ4wHgMGACAB DjAgMA0GCSqGSIb3DQEBCwUAA4IBAQBgw6Ha9lIjUAqSCj+otaEt22pewiGLjg9l 2YXGeWfHHxZ+Rez055myy7FN4N0JryTE053CucY5ghdWrA4apIG+TEC9KR8KhGXJ mjEhMrpFX/npuxknpGblMAsGW23pO5SAWWLfOW4TVNFSIwQVna1b1Fjj7hJRdIcz yIJ9XsPplG5IhBhzFQJcCU5Z/HiTk8gMwCYS9of0y0SGBKazCS7wwTvRJTG01F1V LGcUeXTIGu9d2+rd1SYoBbfci8fT1aoMtxswQYK75Jfbmv3zed1srFLZh8EJ4Ipc Bl2B+gTQc6THgiopW/htUblbKRv1XNU81ofLz6tMmaHwg7+vf6YK -----END CERTIFICATE-----Generated at Sat Apr 5 19:48:43 2025 by rpki-client