$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa File: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (raw, json) Hash identifier: kD06hheJsfIetkOj5CjjTsbsfgxOAL2MCCsvRPoCV8Q= Subject key identifier: DE:9C:CA:A7:F5:FF:D3:45:2D:A9:5C:3B:00:89:BD:CB:23:69:50:7D Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Certificate serial: 0678 Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa Signing time: Thu 14 Mar 2024 23:12:43 +0000 ROA not before: Thu 14 Mar 2024 23:12:43 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 0 IP address blocks: 202.0.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 23:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283 Validity Not Before: Mar 14 23:12:43 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65f3846b-56dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9e:0b:3a:6e:f2:91:2c:7b:93:03:4c:13:e5: 99:b9:2b:51:95:24:24:cb:de:f9:8f:cf:1e:15:d7: 63:a6:c2:a6:c2:57:f7:3f:b2:fc:2c:d3:bc:7c:4c: 66:04:3f:1e:b3:c4:39:5d:e9:db:84:48:bb:70:a6: 47:15:32:71:f0:7d:0e:d9:62:c1:12:0b:98:d7:d7: e0:89:f2:65:18:89:f7:85:4c:71:a8:e0:16:59:92: e2:20:20:60:b2:f6:90:1d:57:f2:fd:dd:8b:b3:01: 52:87:ae:a9:d7:11:75:1b:e0:7a:f5:d4:04:5d:84: 6c:c7:bc:38:97:15:4d:44:d0:e1:07:50:02:d3:7d: 28:f3:a4:62:86:45:0c:5f:07:10:74:e3:dd:c4:a5: 91:8a:bd:dd:fb:0b:b4:0b:9e:a2:9d:88:a5:89:eb: 08:5d:00:65:32:15:f3:c1:1c:1c:87:17:72:22:39: 2f:4e:dc:62:03:14:ff:fd:5f:05:9d:dc:1e:68:91: d6:78:2c:b0:5b:fb:e9:6e:03:25:c6:29:3d:69:8c: 13:41:2d:9d:71:25:d5:2e:53:1c:c6:d3:d7:55:8b: 77:7d:51:fe:bc:d5:75:18:54:a5:3a:73:f9:56:84: dd:fa:08:6e:3f:59:b4:c2:d2:9a:4c:d8:05:7b:33: 4f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9C:CA:A7:F5:FF:D3:45:2D:A9:5C:3B:00:89:BD:CB:23:69:50:7D X509v3 Authority Key Identifier: keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.0.104.0/24 Signature Algorithm: sha256WithRSAEncryption c2:89:3c:59:f0:ce:ff:0a:2a:6d:5f:77:0c:25:5d:a8:64:1d: d6:37:6f:f9:7b:fa:5d:3b:a2:f8:d2:3b:10:f7:86:59:c2:4b: ee:1a:8a:68:38:6c:17:86:8a:be:bb:b1:b1:8b:8a:c9:6e:e5: 91:71:1c:a2:2f:b9:a6:79:5a:3a:51:05:c9:8c:f0:74:7e:00: e8:1c:6f:c4:8c:65:e2:f9:f6:95:05:cf:2e:31:96:ef:6a:0a: 25:67:6e:4f:8c:cb:36:9e:96:59:9b:59:0a:97:25:d2:0f:29: 97:42:3a:b3:02:8c:e5:79:f6:ff:77:9b:a3:c7:4e:fb:c9:94: d1:b0:5d:24:ca:19:34:1a:99:5d:0f:4c:34:6f:b3:b2:47:f6: de:a5:38:72:a3:26:60:58:c3:7c:27:8c:eb:ad:f8:c4:56:5e: f9:83:9e:b6:cc:ab:26:bd:f0:26:bf:3d:44:0a:54:57:4d:45: e7:51:37:a6:c7:af:c7:34:45:3e:50:40:e8:de:3d:43:25:4c: d3:97:6d:c9:e3:4f:31:16:39:6e:f7:61:c5:db:d2:c3:1b:5e: 8f:7d:e8:76:73:54:4f:83:49:f5:7e:c0:08:04:53:59:5e:79: 02:97:86:81:9a:a3:a7:de:30:97:cc:88:2a:8a:6b:31:40:44: c5:1d:e3:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQkYxMTAvBgNVBAUTKEJFNDYzRkMxOTE5QjQxNDJCMjM4MjgxMzgyN0ZCNzE2 RDZFRTkyODMwHhcNMjQwMzE0MjMxMjQzWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzODQ2Yi01NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy54LOm7ykSx7kwNME+WZuStRlSQky975j88eFddjpsKmwlf3P7L8LNO8fExm BD8es8Q5XenbhEi7cKZHFTJx8H0O2WLBEguY19fgifJlGIn3hUxxqOAWWZLiICBg svaQHVfy/d2LswFSh66p1xF1G+B69dQEXYRsx7w4lxVNRNDhB1AC030o86RihkUM XwcQdOPdxKWRir3d+wu0C56inYiliesIXQBlMhXzwRwchxdyIjkvTtxiAxT//V8F ndweaJHWeCywW/vpbgMlxik9aYwTQS2dcSXVLlMcxtPXVYt3fVH+vNV1GFSlOnP5 VoTd+ghuP1m0wtKaTNgFezNPNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN6cyqf1 /9NFLalcOwCJvcsjaVB9MB8GA1UdIwQYMBaAFL5GP8GRm0FCsjgoE4J/txbW7pKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBCRi8yN0I3QTI4NDI0 QzAxMUVCQjYyQjQzODdDNEY5QUUwMi92a1lfd1pHYlFVS3lPQ2dUZ24tM0Z0YnVr b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZrWV93WkdiUVVLeU9DZ1Rnbi0zRnRidWtvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQwQkYvMjdCN0EyODQyNEMwMTFFQkI2MkI0Mzg3QzRGOUFFMDIvQUNFQkMyOUND NUI5MTFFQkI0MUZBRjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKAGgwDQYJKoZIhvcNAQELBQADggEBAMKJPFnwzv8KKm1f dwwlXahkHdY3b/l7+l07ovjSOxD3hlnCS+4aimg4bBeGir67sbGLislu5ZFxHKIv uaZ5WjpRBcmM8HR+AOgcb8SMZeL59pUFzy4xlu9qCiVnbk+MyzaellmbWQqXJdIP KZdCOrMCjOV59v93m6PHTvvJlNGwXSTKGTQamV0PTDRvs7JH9t6lOHKjJmBYw3wn jOut+MRWXvmDnrbMqya98Ca/PUQKVFdNRedRN6bHr8c0RT5QQOjePUMlTNOXbcnj TzEWOW73YcXb0sMbXo996HZzVE+DSfV+wAgEU1leeQKXhoGao6feMJfMiCqKazFA RMUd4yI= -----END CERTIFICATE-----Generated at Fri May 3 00:28:40 2024 by rpki-client on console-fra.rpki-client.org