$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa File: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (raw, json) Hash identifier: ukXVPSpZE2S3ReUuqRyKgZq1lemkqT2tn0yJ5Ntranw= Subject key identifier: AD:FB:53:50:6F:A7:F3:E9:27:12:6B:B3:54:AD:DA:AB:F1:A7:6A:66 Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Certificate serial: 2502 Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa Signing time: Thu 18 Apr 2024 16:22:57 +0000 ROA not before: Thu 18 Apr 2024 16:22:57 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 38468 IP address blocks: 123.136.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 15:22:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9474 (0x2502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7 Validity Not Before: Apr 18 16:22:57 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=662148e1-33ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:6a:f3:61:60:b0:ef:36:21:5a:f7:5b:e4: be:bf:d2:cd:80:17:c0:f7:53:1f:4a:aa:cc:0d:0a: ae:a8:4f:6b:47:43:58:f2:d1:74:11:2c:33:db:78: 29:8f:54:28:46:d8:7d:ba:ed:09:0c:1e:47:1c:57: 57:ff:4d:a8:a0:d4:81:31:3a:2b:e9:22:d0:e2:64: 23:75:92:65:c9:27:ef:4c:3e:cc:1b:5a:c4:84:69: ad:46:0e:79:e4:8c:39:42:b4:4d:f5:db:5e:6d:b4: ca:e8:7e:bc:37:43:22:29:8f:b5:21:1f:9d:e7:84: bc:f4:19:65:e4:d6:35:7d:79:d0:45:79:a9:d1:e8: 52:4f:80:6a:b3:d7:d5:94:82:8f:a1:95:e3:13:ca: f4:69:e5:38:60:c5:2a:7a:09:2d:46:03:c3:d7:26: d9:2c:81:6d:ac:b1:ab:87:7e:54:77:ad:39:46:9f: c4:4a:ac:0f:e3:2d:95:86:a3:32:b9:1f:69:bb:ba: b6:e3:7b:07:9e:72:87:40:73:f1:7a:95:67:d3:ea: e3:cf:af:0b:c1:0e:53:8d:9e:23:41:a5:e0:40:1b: 2d:4d:80:03:bc:2b:ef:5b:77:36:89:c3:3c:d3:6f: 47:c6:d5:09:72:db:df:7b:58:aa:90:db:09:30:d2: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:53:50:6F:A7:F3:E9:27:12:6B:B3:54:AD:DA:AB:F1:A7:6A:66 X509v3 Authority Key Identifier: keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/E14BDC8EF3EE11ECBAE10054C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.136.16.0/21 Signature Algorithm: sha256WithRSAEncryption 46:4d:04:df:a2:55:c8:13:7c:b3:c3:d1:16:6e:37:8e:e1:ea: 81:35:14:4f:33:67:1f:d2:4b:fb:82:17:08:92:13:91:1d:5d: bd:2c:e4:40:da:11:df:66:a5:88:2a:4e:c2:25:69:8c:4b:85: bb:2c:ab:55:42:00:3e:79:e5:ca:10:e2:db:4d:6a:15:6e:90: c4:e9:29:44:c1:76:74:74:b2:bc:38:47:b5:67:eb:c5:08:ae: 7f:b8:95:83:17:9e:a0:8c:08:ac:c0:80:33:9b:d5:2b:0c:d0: 31:83:2c:a5:86:c6:34:3e:4e:0a:70:85:0c:d8:35:58:31:e3: 05:d9:f6:e6:29:21:77:8f:65:9e:7a:7f:20:2a:53:73:92:8e: be:70:5e:2f:f1:10:d5:df:d2:6e:21:2c:64:ff:ee:3b:f2:a0: 48:da:49:35:fa:bc:a1:44:18:b5:c8:d4:27:e1:4d:a1:fd:ac: 6a:68:f4:ec:f1:8b:88:e6:e4:8e:ab:db:ae:04:58:87:cd:f2: b8:71:cf:1b:9d:62:07:c0:48:e5:98:e3:46:eb:36:37:07:56: bc:1d:ba:27:fd:62:4e:77:99:d6:03:92:a9:d5:e0:ed:8c:35: e7:ff:be:8b:50:1c:d3:1f:ae:15:e3:9e:8c:b4:5c:39:25:a1: 92:dd:9f:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz QUJCOUM2RjcwHhcNMjQwNDE4MTYyMjU3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxNDhlMS0zM2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGZq82FgsO82IVr3W+S+v9LNgBfA91MfSqrMDQquqE9rR0NY8tF0ESwz23gp j1QoRth9uu0JDB5HHFdX/02ooNSBMTor6SLQ4mQjdZJlySfvTD7MG1rEhGmtRg55 5Iw5QrRN9dtebbTK6H68N0MiKY+1IR+d54S89Bll5NY1fXnQRXmp0ehST4Bqs9fV lIKPoZXjE8r0aeU4YMUqegktRgPD1ybZLIFtrLGrh35Ud605Rp/ESqwP4y2VhqMy uR9pu7q243sHnnKHQHPxepVn0+rjz68LwQ5TjZ4jQaXgQBstTYADvCvvW3c2icM8 029HxtUJctvfe1iqkNsJMNJdXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK37U1Bv p/PpJxJrs1St2qvxp2pmMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzVCNDYvQkEwQjg0MzAwMjg4MTFFNUFFMUU0NzYxQzRGOUFFMDIvRTE0QkRDOEVG M0VFMTFFQ0JBRTEwMDU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN7iBAwDQYJKoZIhvcNAQELBQADggEBAEZNBN+iVcgTfLPD 0RZuN47h6oE1FE8zZx/SS/uCFwiSE5EdXb0s5EDaEd9mpYgqTsIlaYxLhbssq1VC AD555coQ4ttNahVukMTpKUTBdnR0srw4R7Vn68UIrn+4lYMXnqCMCKzAgDOb1SsM 0DGDLKWGxjQ+TgpwhQzYNVgx4wXZ9uYpIXePZZ56fyAqU3OSjr5wXi/xENXf0m4h LGT/7jvyoEjaSTX6vKFEGLXI1CfhTaH9rGpo9Ozxi4jm5I6r264EWIfN8rhxzxud YgfASOWY40brNjcHVrwduif9Yk53mdYDkqnV4O2MNef/votQHNMfrhXjnoy0XDkl oZLdn6E= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:04 2024 by rpki-client on console-ams.rpki-client.org