$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa File: 0D118DDEBD0D11EA84F7547CC4F9AE02.roa (raw, json) Hash identifier: NctznYW59zz0wNMgwX+WIqt4ooFB6yjq/+SlSBBYAMQ= Subject key identifier: 25:E7:B5:F6:28:5C:81:F2:87:DA:BE:47:84:DE:98:81:AA:65:14:E7 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 341F Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa Signing time: Wed 29 May 2024 05:15:56 +0000 ROA not before: Wed 29 May 2024 05:15:56 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38174 IP address blocks: 120.29.234.0/24 maxlen: 24 123.242.244.0/22 maxlen: 24 123.242.252.0/24 maxlen: 24 123.242.254.0/23 maxlen: 23 202.60.60.0/23 maxlen: 23 202.60.60.0/24 maxlen: 24 202.60.61.0/24 maxlen: 24 202.60.62.0/24 maxlen: 24 202.60.63.0/24 maxlen: 24 202.61.10.0/23 maxlen: 23 202.61.10.0/24 maxlen: 24 202.61.11.0/24 maxlen: 24 202.91.136.0/22 maxlen: 22 203.189.180.0/22 maxlen: 22 203.189.180.0/24 maxlen: 24 203.189.181.0/24 maxlen: 24 203.189.182.0/24 maxlen: 24 203.189.183.0/24 maxlen: 24 203.191.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Jun 2024 14:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13343 (0x341f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: May 29 05:15:56 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6656ba0c-8d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:cc:26:04:b5:39:94:9c:ac:1c:76:5e:19: db:01:1b:5a:20:2a:fd:97:07:e7:35:56:7c:07:c9: dc:73:0b:d7:d1:c7:17:6c:9b:61:0f:60:69:7b:61: d4:58:5e:d7:4c:8a:fa:0e:d1:69:45:53:28:cf:65: e9:08:7e:9d:ca:e1:b8:2e:40:18:6b:7a:48:cd:ea: a6:fb:32:b4:97:ab:47:6f:5d:92:12:39:67:70:67: ec:fa:4a:cb:1b:d2:8c:e9:c9:6d:d8:1e:f5:1d:26: a9:ed:9a:69:c4:c5:c8:1b:5c:06:88:90:f8:be:91: a8:47:f5:df:c7:86:17:16:da:ea:5d:95:0b:aa:a8: 82:ed:ca:e4:49:ac:ea:3f:47:fd:42:f4:cd:54:f2: a6:6c:85:22:d1:d6:64:38:66:3f:a6:95:21:77:b2: 97:29:14:79:fe:27:9d:c0:f1:59:b4:46:e2:bc:fa: 4f:dc:ee:a9:09:b5:dd:89:56:45:a3:e3:05:dc:a5: 60:3d:b1:13:30:37:88:30:7e:0d:9e:a1:de:7c:c6: 2b:dc:d4:1e:dc:1f:c3:b0:cf:d1:5c:1d:69:d4:c9: 74:dc:7d:cf:bb:72:18:ec:e2:e0:53:f7:af:c2:d1: 11:28:3d:91:0e:68:65:28:9a:a5:0f:7d:c9:93:05: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E7:B5:F6:28:5C:81:F2:87:DA:BE:47:84:DE:98:81:AA:65:14:E7 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.234.0/24 123.242.244.0/22 123.242.252.0/24 123.242.254.0/23 202.60.60.0/22 202.61.10.0/23 202.91.136.0/22 203.189.180.0/22 203.191.34.0/23 Signature Algorithm: sha256WithRSAEncryption 31:b0:da:e4:30:20:b8:7d:8b:0c:9e:c7:ab:77:be:e7:13:3c: 29:0b:8c:d8:2e:62:5f:48:c9:f9:84:80:f7:18:8c:fd:1c:f0: 54:e9:83:a2:b7:d1:18:91:b1:e0:e3:a4:77:49:c6:24:76:27: 59:1b:7b:bf:60:9b:99:9d:a1:4c:2e:a0:3e:c4:90:3e:6b:d2: ed:d6:a1:86:8c:fc:34:34:61:ef:d7:6f:97:d7:30:f1:2e:a9: dd:f5:3a:9f:af:c3:1b:91:a6:ab:e1:52:27:85:85:0e:4a:2c: 46:f5:d8:64:a5:33:f2:db:8e:48:94:30:a8:d1:b5:f7:a8:16: 0a:0b:83:1f:cc:8c:e1:a8:92:f3:55:03:4e:09:bd:16:6b:d6: b7:b9:0f:24:12:c5:35:9a:d0:fb:9e:25:fe:61:4f:84:06:f8: dd:f7:f8:66:a8:38:1d:e4:e9:09:c1:6e:4b:ce:be:29:56:bb: 7a:49:d4:44:15:c7:21:9c:01:4f:c0:fa:6b:ef:a2:10:1b:20: 86:41:c1:ee:6f:5d:fc:b3:be:fa:b2:0d:b1:d9:79:43:14:67: 9a:8d:34:c8:25:40:4b:4c:9e:72:f7:2f:14:34:58:45:89:ca: 94:f6:3b:cf:66:40:36:f6:13:06:8b:17:f1:97:e8:8c:8d:82: a8:71:30:87 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQwNTI5MDUxNTU2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2YmEwYy04ZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwB7MJgS1OZScrBx2XhnbARtaICr9lwfnNVZ8B8nccwvX0ccXbJthD2Bpe2HU WF7XTIr6DtFpRVMoz2XpCH6dyuG4LkAYa3pIzeqm+zK0l6tHb12SEjlncGfs+krL G9KM6clt2B71HSap7ZppxMXIG1wGiJD4vpGoR/Xfx4YXFtrqXZULqqiC7crkSazq P0f9QvTNVPKmbIUi0dZkOGY/ppUhd7KXKRR5/iedwPFZtEbivPpP3O6pCbXdiVZF o+MF3KVgPbETMDeIMH4NnqHefMYr3NQe3B/DsM/RXB1p1Ml03H3Pu3IY7OLgU/ev wtERKD2RDmhlKJqlD33JkwWl7wIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFCXntfYo XIHyh9q+R4TemIGqZRTnMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMEQxMThEREVC RDBEMTFFQTg0Rjc1NDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E QDA+MDwEAgABMDYDBAB4HeoDBAJ78vQDBAB78vwDBAF78v4DBALKPDwDBAHKPQoD BALKW4gDBALLvbQDBAHLvyIwDQYJKoZIhvcNAQELBQADggEBADGw2uQwILh9iwye x6t3vucTPCkLjNguYl9IyfmEgPcYjP0c8FTpg6K30RiRseDjpHdJxiR2J1kbe79g m5mdoUwuoD7EkD5r0u3WoYaM/DQ0Ye/Xb5fXMPEuqd31Op+vwxuRpqvhUieFhQ5K LEb12GSlM/LbjkiUMKjRtfeoFgoLgx/MjOGokvNVA04JvRZr1re5DyQSxTWa0Pue Jf5hT4QG+N33+GaoOB3k6QnBbkvOvilWu3pJ1EQVxyGcAU/A+mvvohAbIIZBwe5v XfyzvvqyDbHZeUMUZ5qNNMglQEtMnnL3LxQ0WEWJypT2O89mQDb2EwaLF/GX6IyN gqhxMIc= -----END CERTIFICATE-----Generated at Sun Jun 2 16:37:45 2024 by rpki-client on console-fra.rpki-client.org