$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/F61502A4C0F511EA854EE45FC4F9AE02.roa File: F61502A4C0F511EA854EE45FC4F9AE02.roa (raw, json) Hash identifier: OVL2vodt/AeNcQ/VG7TDRoihubsFrVHE/91iyWU1qa8= Subject key identifier: 4B:A6:BC:77:D7:7A:82:51:AB:D3:1C:17:D3:A3:92:92:58:B9:B7:97 Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 07DD Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/F61502A4C0F511EA854EE45FC4F9AE02.roa Signing time: Thu 20 Jun 2024 21:34:42 +0000 ROA not before: Thu 20 Jun 2024 21:34:42 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 10098 IP address blocks: 49.213.0.0/21 maxlen: 21 49.213.0.0/24 maxlen: 24 49.213.1.0/24 maxlen: 24 49.213.2.0/24 maxlen: 24 49.213.3.0/24 maxlen: 24 49.213.4.0/24 maxlen: 24 49.213.5.0/24 maxlen: 24 49.213.6.0/24 maxlen: 24 49.213.7.0/24 maxlen: 24 202.123.64.0/19 maxlen: 19 202.123.64.0/24 maxlen: 24 202.123.65.0/24 maxlen: 24 202.123.66.0/24 maxlen: 24 202.123.68.0/24 maxlen: 24 202.123.69.0/24 maxlen: 24 202.123.70.0/24 maxlen: 24 202.123.72.0/24 maxlen: 24 202.123.74.0/24 maxlen: 24 202.123.75.0/24 maxlen: 24 202.123.76.0/24 maxlen: 24 202.123.77.0/24 maxlen: 24 202.123.80.0/24 maxlen: 24 202.123.81.0/24 maxlen: 24 202.123.84.0/24 maxlen: 24 202.123.85.0/24 maxlen: 24 202.123.87.0/24 maxlen: 24 202.123.89.0/24 maxlen: 24 202.123.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Jun 20 21:34:42 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=6674a071-f1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:69:43:11:37:8c:ce:3e:e8:17:a3:4a:bc: 3a:0a:d9:9f:04:eb:d7:76:30:f4:76:6d:99:b5:01: ce:ea:a2:3a:32:6f:62:2d:23:a7:bc:69:37:1d:2f: 09:e2:1a:24:7d:7d:ba:85:97:48:75:a3:4a:27:0b: 8d:3e:39:84:ac:47:a9:26:07:91:c7:ff:13:af:d7: 4c:48:a3:08:a1:6d:0c:8c:a2:6a:80:80:3e:86:6b: 8b:6d:39:57:2d:8c:52:61:ec:d5:42:2c:ed:bd:7a: f3:fc:f9:65:04:b4:d5:24:f6:5a:12:53:f9:55:88: 0c:b8:a4:df:85:8c:48:aa:66:0f:d7:90:e2:ee:a7: 4f:c5:a2:54:bf:de:67:cb:fb:8b:93:64:f3:3e:c9: f9:49:02:ad:73:47:f1:b0:69:7e:3d:84:13:39:0f: cc:16:f4:d8:45:e2:ca:c3:05:51:06:85:78:a2:e6: d2:1b:ea:c0:1c:51:b8:ef:5d:41:2f:8e:e7:a6:1a: 63:74:e5:22:88:e5:28:1c:ca:90:e1:35:55:3c:0a: 48:4a:95:64:e3:bb:68:48:05:1d:0e:dc:ed:bd:98: 9b:12:33:f4:b7:51:d8:cf:41:af:fd:b4:ea:a0:f4: 2b:10:9d:1a:eb:ab:77:a1:17:02:8c:54:83:c8:9d: f1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:BC:77:D7:7A:82:51:AB:D3:1C:17:D3:A3:92:92:58:B9:B7:97 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/F61502A4C0F511EA854EE45FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.213.0.0/21 202.123.64.0/19 Signature Algorithm: sha256WithRSAEncryption a9:37:3e:ce:70:81:ab:55:ba:62:a3:94:08:ee:2a:b0:9f:aa: 73:50:d0:2d:1a:45:e5:59:d1:f5:68:f9:7c:0f:f4:4d:31:ec: 8b:43:01:e5:0e:8f:34:29:03:40:aa:1f:e8:e5:7d:fc:09:1b: 68:f3:29:a1:09:4f:19:50:35:66:2e:c2:f5:36:4b:6e:f0:c5: d3:dd:01:66:06:8d:9e:a9:4c:9c:a9:c4:e3:c0:4b:db:28:b5: 13:f1:bb:e7:5c:d8:11:10:c2:e9:34:fd:a6:b7:2e:07:33:25: 0a:9d:1e:24:b3:2c:94:3c:7c:68:08:bd:f9:e1:c0:29:83:fc: a0:b1:33:07:20:a9:93:32:f4:48:4b:70:5c:cd:c9:19:03:90: 2e:b8:e2:b4:0d:42:84:bf:a9:a5:ee:83:2d:2f:fa:ea:af:e2: d2:4c:12:9a:c3:f0:46:97:5d:cd:64:ad:ee:e1:ef:ee:33:1d: d6:4b:f6:12:6c:e5:1f:9f:ff:cb:d8:0a:fa:fb:af:e8:03:a2: 35:9d:ee:19:9c:0c:7c:3e:20:a5:4a:d7:5f:f1:73:7a:69:42: c7:fd:bc:44:81:dc:cc:b4:4c:db:01:c1:99:f9:d4:26:cd:c9: 59:ae:eb:7f:b3:cc:b0:f4:81:c6:d2:d1:3b:fd:ff:34:e2:3e: e0:34:88:10 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjQwNjIwMjEzNDQyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc0YTA3MS1mMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujppQxE3jM4+6BejSrw6CtmfBOvXdjD0dm2ZtQHO6qI6Mm9iLSOnvGk3HS8J 4hokfX26hZdIdaNKJwuNPjmErEepJgeRx/8Tr9dMSKMIoW0MjKJqgIA+hmuLbTlX LYxSYezVQiztvXrz/PllBLTVJPZaElP5VYgMuKTfhYxIqmYP15Di7qdPxaJUv95n y/uLk2TzPsn5SQKtc0fxsGl+PYQTOQ/MFvTYReLKwwVRBoV4oubSG+rAHFG4711B L47nphpjdOUiiOUoHMqQ4TVVPApISpVk47toSAUdDtztvZibEjP0t1HYz0Gv/bTq oPQrEJ0a66t3oRcCjFSDyJ3xIQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEumvHfX eoJRq9McF9OjkpJYubeXMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkM2REQvRjNGQjkwNTZDMEY0MTFFQUIwNURGQzVFQzRGOUFFMDIvRjYxNTAyQTRD MEY1MTFFQTg1NEVFNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAMx1QADBAXKe0AwDQYJKoZIhvcNAQELBQADggEBAKk3Ps5w gatVumKjlAjuKrCfqnNQ0C0aReVZ0fVo+XwP9E0x7ItDAeUOjzQpA0CqH+jlffwJ G2jzKaEJTxlQNWYuwvU2S27wxdPdAWYGjZ6pTJypxOPAS9sotRPxu+dc2BEQwuk0 /aa3LgczJQqdHiSzLJQ8fGgIvfnhwCmD/KCxMwcgqZMy9EhLcFzNyRkDkC644rQN QoS/qaXugy0v+uqv4tJMEprD8EaXXc1kre7h7+4zHdZL9hJs5R+f/8vYCvr7r+gD ojWd7hmcDHw+IKVK11/xc3ppQsf9vESB3My0TNsBwZn51CbNyVmu63+zzLD0gcbS 0Tv9/zTiPuA0iBA= -----END CERTIFICATE-----Generated at Fri Nov 22 22:24:12 2024 by rpki-client on console-fra.rpki-client.org