$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa File: 2732E7CE940C11EE9B034255C4F9AE02.roa (raw, json) Hash identifier: OCW5pcvUAU8JAXjdZKOmENQCXIcoeff+ExAgbdgfAjQ= Subject key identifier: 95:96:34:20:AC:36:AF:C7:C1:27:CD:40:23:B4:B7:70:A1:29:08:EE Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 42 Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa Signing time: Wed 06 Dec 2023 07:50:41 +0000 ROA not before: Wed 06 Dec 2023 07:50:41 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 139076 IP address blocks: 116.204.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Dec 6 07:50:41 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=657027d1-3595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:7a:43:1a:6b:f6:76:d9:51:aa:6c:d7:16: 5c:f0:85:fd:69:f8:6f:3a:ff:72:69:a4:8f:23:2d: 48:05:51:ac:bd:5b:d5:61:60:3e:05:4e:50:ca:32: 44:a8:be:64:60:47:c8:8b:85:b3:24:2b:74:65:82: 40:a0:5b:01:a4:0b:30:7e:4e:cd:1b:52:a4:3a:c1: 38:aa:8f:79:19:49:4d:70:f3:c0:3a:db:14:8f:6e: 41:9e:a3:85:62:05:b9:8e:eb:f2:bb:e3:c7:46:a4: 40:ed:02:37:bc:19:8a:a9:53:ab:41:9e:a2:fb:80: 23:e3:2c:4f:99:c0:ab:ac:17:75:64:21:7e:e7:18: a1:af:f4:f9:da:d3:2d:e7:fd:8d:48:b6:b7:0e:e6: db:da:9b:b8:3a:fa:cf:1b:d6:f5:57:70:cf:ff:c2: 69:87:1f:8a:b1:da:e5:8e:8e:ca:b6:fa:79:50:dd: a0:17:db:3e:48:7a:21:9c:6b:1a:bd:7d:71:ee:2d: 9b:8d:80:08:fe:a9:a9:58:e4:f7:6f:ad:92:4d:91: 33:b8:29:1e:e1:e7:4a:f1:ce:c6:b2:56:f6:34:61: 9e:14:8f:cd:d3:57:f1:84:2c:58:ad:91:ca:8f:e3: e7:06:82:ab:76:c4:2a:b9:e8:e0:b2:66:f2:67:99: ac:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:96:34:20:AC:36:AF:C7:C1:27:CD:40:23:B4:B7:70:A1:29:08:EE X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/2732E7CE940C11EE9B034255C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.204.235.0/24 Signature Algorithm: sha256WithRSAEncryption 61:3b:3b:4d:7d:cf:7c:9b:54:54:f0:77:3a:66:41:b7:ea:fb: 67:92:ce:7f:bd:a0:55:d4:75:66:ef:85:ec:0b:77:38:44:b4: 7d:42:d1:82:34:b6:64:81:f4:81:c3:2c:90:af:68:af:1d:47: e3:fe:2e:14:7e:86:b6:ce:47:2f:a3:08:2f:c7:35:05:b9:ac: df:54:27:9f:b3:29:44:33:cd:0b:5f:cf:d3:d9:7b:bf:ad:92: d6:37:39:47:58:7e:6f:62:3c:1d:1e:bd:2d:61:93:66:1e:a8: ce:d3:23:e8:1c:30:1c:d7:55:fc:bc:45:91:98:cb:76:db:07: c1:27:48:2a:db:5a:14:56:e9:bd:c4:0b:e4:a5:26:aa:3e:6a: b4:59:00:0f:ea:8e:a1:cb:db:9c:5e:b4:74:75:c7:9a:fa:6d: fe:ae:c6:0a:d7:83:92:35:4d:c6:1d:49:e3:77:be:a9:f0:c0: 58:c1:94:c5:66:b1:24:42:21:aa:85:5d:d1:b3:0b:eb:e9:1f: e2:b2:b7:3d:e1:d7:21:66:88:10:88:54:b0:a4:36:2c:d0:3d: 84:8d:8a:df:e3:24:f5:4c:72:6d:d6:e5:23:5e:19:11:15:3b: 2c:53:d8:27:64:b2:db:0f:bd:5f:b7:e8:fd:34:ed:82:6e:fd: e9:58:b2:e3 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0I5NDExMC8GA1UEBRMoMzEyNkY0RUYwNUUzQUU3NUEwOTE0NEI2NjdEMzkzNDdE NERBQTg5MDAeFw0yMzEyMDYwNzUwNDFaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NzAyN2QxLTM1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOtXpDGmv2dtlRqmzXFlzwhf1p+G86/3JppI8jLUgFUay9W9VhYD4FTlDKMkSo vmRgR8iLhbMkK3RlgkCgWwGkCzB+Ts0bUqQ6wTiqj3kZSU1w88A62xSPbkGeo4Vi BbmO6/K748dGpEDtAje8GYqpU6tBnqL7gCPjLE+ZwKusF3VkIX7nGKGv9Pna0y3n /Y1ItrcO5tvam7g6+s8b1vVXcM//wmmHH4qx2uWOjsq2+nlQ3aAX2z5IeiGcaxq9 fXHuLZuNgAj+qalY5PdvrZJNkTO4KR7h50rxzsayVvY0YZ4Uj83TV/GELFitkcqP 4+cGgqt2xCq56OCyZvJnmazxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlZY0IKw2 r8fBJ81AI7S3cKEpCO4wHwYDVR0jBBgwFoAUMSb07wXjrnWgkUS2Z9OTR9TaqJAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3Qjk0L0NDNzQxQkI2Mzc3 MDExRUU4REM4QkIzNEM0RjlBRTAyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFK QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVNiMDd3WGpybldna1VTMlo5T1RSOVRhcUpBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi8yNzMyRTdDRTk0 MEMxMUVFOUIwMzQyNTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHTM6zANBgkqhkiG9w0BAQsFAAOCAQEAYTs7TX3PfJtUVPB3 OmZBt+r7Z5LOf72gVdR1Zu+F7At3OES0fULRgjS2ZIH0gcMskK9orx1H4/4uFH6G ts5HL6MIL8c1Bbms31Qnn7MpRDPNC1/P09l7v62S1jc5R1h+b2I8HR69LWGTZh6o ztMj6BwwHNdV/LxFkZjLdtsHwSdIKttaFFbpvcQL5KUmqj5qtFkAD+qOocvbnF60 dHXHmvpt/q7GCteDkjVNxh1J43e+qfDAWMGUxWaxJEIhqoVd0bML6+kf4rK3PeHX IWaIEIhUsKQ2LNA9hI2K3+Mk9UxybdblI14ZERU7LFPYJ2Sy2w+9X7fo/TTtgm79 6Viy4w== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:29 2024 by rpki-client on console-ams.rpki-client.org