$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/F5A311DAE21611EEB7B0D361C4F9AE02.roa File: F5A311DAE21611EEB7B0D361C4F9AE02.roa (raw, json) Hash identifier: 7eg8s3nshujJWlMFILJG4nxViOoj4GxAMrDMLj0daAk= Subject key identifier: D5:6C:C6:D0:E3:F9:FB:08:DC:10:60:E6:4B:04:9A:F9:8D:A7:0C:3C Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: 04 Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/F5A311DAE21611EEB7B0D361C4F9AE02.roa Signing time: Thu 14 Mar 2024 15:24:34 +0000 ROA not before: Thu 14 Mar 2024 15:24:34 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 152642 IP address blocks: 202.37.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 09:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Mar 14 15:24:34 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65f316b1-a649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:7d:c9:99:a5:bd:6f:f1:77:d2:9c:b3:87: 89:fe:c2:0c:b7:7d:cf:48:87:25:fa:d6:5c:d7:1a: 63:98:73:36:95:f1:8e:e6:cc:79:28:61:2d:6d:64: 5e:ba:9f:c1:04:8f:9b:12:f1:f9:11:ab:4e:02:57: 4e:ec:7b:d5:8b:06:ee:12:36:df:18:a3:fa:01:9b: 02:71:c5:d9:7d:70:74:87:cc:3d:41:9b:eb:2c:99: 24:bd:85:5a:de:20:f2:38:6c:0b:00:1b:ae:02:c8: 2a:ba:3f:99:6e:c9:43:52:38:60:74:57:d1:34:cd: 07:c0:26:ec:3a:6a:c0:cb:fa:0b:ed:af:46:aa:19: 9b:c2:de:c6:68:50:b7:37:41:5c:db:bc:61:76:a7: 1e:ed:d7:28:e3:2a:48:20:52:a1:26:bb:e2:aa:83: 59:e5:db:19:60:e9:6b:26:39:5e:09:0d:79:07:ec: 95:ce:51:be:42:bd:25:86:ff:bb:41:83:21:16:93: 22:f4:56:15:5d:c5:86:86:97:bc:8a:b8:0e:4a:b2: 9a:c5:11:4a:d8:71:bb:6a:58:69:bb:01:84:97:d4: a9:1f:39:4a:ef:16:58:5a:ab:3f:b7:da:90:ed:12: 90:5b:bd:5f:c7:58:27:cb:be:d3:3b:ee:d7:0f:85: d2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:C6:D0:E3:F9:FB:08:DC:10:60:E6:4B:04:9A:F9:8D:A7:0C:3C X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/F5A311DAE21611EEB7B0D361C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.37.217.0/24 Signature Algorithm: sha256WithRSAEncryption 65:26:2e:d8:74:45:e9:be:e1:79:73:34:93:90:a0:00:4d:76: 12:4c:4e:42:3e:28:8a:e8:2b:44:48:fd:eb:b3:4c:67:87:a8: 56:e2:0f:dc:d6:e8:75:d5:ec:52:6e:f3:51:32:43:2d:fb:53: 25:a2:64:bc:36:3a:a8:ac:18:98:4d:89:a7:7a:b9:f6:46:30: 38:05:34:31:39:cc:91:18:64:fa:b5:c7:e8:95:a4:6e:d6:71: 56:fc:9b:38:3a:62:20:04:99:27:5a:21:b6:99:90:d5:19:92: 1c:93:fb:e3:0e:58:79:b0:54:52:01:46:3d:7c:b1:50:8c:5e: 74:fb:7f:d4:54:03:fd:ce:8d:87:a3:86:e4:98:8f:6e:f1:49: 08:47:13:83:f5:4d:22:59:87:22:d1:02:57:5d:4a:55:f0:75: 13:b6:d1:73:94:21:6e:a0:1c:02:bc:d7:18:5b:e3:a0:fd:3f: 13:d8:66:db:de:4e:75:3e:35:22:e1:7c:82:10:5d:3f:34:5a: 4d:17:52:0b:01:bb:32:40:c0:ec:a7:3e:20:34:2c:95:0e:d4: 38:72:62:53:8d:f2:68:12:35:6d:24:89:1d:61:a5:d7:d7:10: a0:6a:f7:02:7f:41:ec:22:77:ae:bf:d6:02:70:cc:82:17:57: 53:60:d9:f6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjJGRDExMC8GA1UEBRMoNUYyQjU4MjFERDQzQzI5NDM5RDJCQUVFNUJEQzA0MzI5 MUM0N0JBRjAeFw0yNDAzMTQxNTI0MzRaFw0yNTA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZjMxNmIxLWE2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0033JmaW9b/F30pyzh4n+wgy3fc9IhyX61lzXGmOYczaV8Y7mzHkoYS1tZF66 n8EEj5sS8fkRq04CV07se9WLBu4SNt8Yo/oBmwJxxdl9cHSHzD1Bm+ssmSS9hVre IPI4bAsAG64CyCq6P5luyUNSOGB0V9E0zQfAJuw6asDL+gvtr0aqGZvC3sZoULc3 QVzbvGF2px7t1yjjKkggUqEmu+Kqg1nl2xlg6WsmOV4JDXkH7JXOUb5CvSWG/7tB gyEWkyL0VhVdxYaGl7yKuA5KsprFEUrYcbtqWGm7AYSX1KkfOUrvFlhaqz+32pDt EpBbvV/HWCfLvtM77tcPhdIpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1WzG0OP5 +wjcEGDmSwSa+Y2nDDwwHwYDVR0jBBgwFoAUXytYId1DwpQ50rruW9wEMpHEe68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGMkZELzYzOEQ2MkEwRTEx MjExRUVBQzc4NjEzOEM0RjlBRTAyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWHl0WUlkMUR3cFE1MHJydVc5d0VNcEhFZTY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9GNUEzMTFEQUUy MTYxMUVFQjdCMEQzNjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMol2TANBgkqhkiG9w0BAQsFAAOCAQEAZSYu2HRF6b7heXM0 k5CgAE12EkxOQj4oiugrREj967NMZ4eoVuIP3NboddXsUm7zUTJDLftTJaJkvDY6 qKwYmE2Jp3q59kYwOAU0MTnMkRhk+rXH6JWkbtZxVvybODpiIASZJ1ohtpmQ1RmS HJP74w5YebBUUgFGPXyxUIxedPt/1FQD/c6Nh6OG5JiPbvFJCEcTg/VNIlmHItEC V11KVfB1E7bRc5QhbqAcArzXGFvjoP0/E9hm295OdT41IuF8ghBdPzRaTRdSCwG7 MkDA7Kc+IDQslQ7UOHJiU43yaBI1bSSJHWGl19cQoGr3An9B7CJ3rr/WAnDMghdX U2DZ9g== -----END CERTIFICATE-----Generated at Fri May 31 13:04:58 2024 by rpki-client on console-ams.rpki-client.org