$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa File: 78123422B0CD11E58B55FC73C4F9AE02.roa (raw, json) Hash identifier: tQqDan24vaXVZ/JHfmO5h2VgPFM+vGEwPOlOViAHg/U= Subject key identifier: 4F:54:6E:18:F3:CE:44:18:EC:E5:A3:DB:21:D6:95:74:2C:4F:EE:1B Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 34A8 Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa Signing time: Fri 08 Dec 2023 14:40:29 +0000 ROA not before: Fri 08 Dec 2023 14:40:29 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 132844 IP address blocks: 121.58.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Dec 8 14:40:29 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65732add-88e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:22:75:82:1a:08:d2:91:c7:6c:6f:77:4b: 81:ba:41:53:93:0f:74:39:60:71:f8:4e:02:da:e3: b3:c3:68:ec:7b:a7:b2:1b:40:2f:a5:7a:24:6a:ea: dd:8c:19:44:d4:5f:d1:a4:d6:df:d2:e7:ed:d8:30: 49:36:66:de:d3:a1:04:c5:7b:58:e9:88:d7:97:8a: 10:68:80:17:61:6a:64:90:d9:ad:4f:7d:de:c7:3f: 0d:02:f8:7a:55:f4:84:41:ec:58:59:ce:30:3f:95: f4:8b:56:00:af:de:3c:a6:08:be:53:53:bb:a5:f9: 05:7b:2e:39:81:69:1b:79:e2:03:11:17:e4:97:f6: 0a:68:de:49:5d:90:8e:2e:7f:cd:49:85:b2:10:10: 59:91:f1:5c:d5:41:70:0f:98:71:be:2b:c3:6f:fc: b0:4c:a1:3e:00:dd:01:83:d5:92:a0:b3:66:4d:3d: e6:19:7d:7f:ec:54:af:26:dc:f1:15:15:9a:9e:8d: 68:a9:07:73:65:db:23:7f:df:c9:1b:9c:57:51:7b: 0d:f8:dc:fa:10:1c:a3:4f:59:2b:e2:07:6a:f6:49: 80:cd:63:15:ef:26:06:cd:4c:b8:9d:16:26:c5:7c: 33:08:57:dc:c9:b2:05:f1:26:ea:73:c9:fc:96:4f: 34:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:54:6E:18:F3:CE:44:18:EC:E5:A3:DB:21:D6:95:74:2C:4F:EE:1B X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/78123422B0CD11E58B55FC73C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.58.241.0/24 Signature Algorithm: sha256WithRSAEncryption 33:65:ec:53:55:0d:b0:ed:a3:cc:0e:da:b8:57:e0:e5:a2:d5: 6d:33:83:c1:a4:f0:77:b8:80:9c:ec:72:ed:35:7e:a6:c3:77: 8e:56:0e:10:70:2f:93:5e:ab:98:52:51:38:d4:ac:b0:fd:1f: b6:95:05:40:bc:e7:4f:e8:86:48:a4:68:1e:5c:a8:c9:04:8a: 69:f8:93:f3:59:51:c0:94:37:b9:f9:d2:e5:94:e3:2c:f5:73: 80:4e:25:e8:59:1a:23:2d:08:71:6b:60:82:b8:e3:fd:f8:6d: 5c:bf:3f:9d:bf:8d:42:5c:9b:5d:e1:22:e9:80:fd:f0:c1:ff: 8a:9c:e1:4a:1d:6d:a5:9d:03:a0:4c:3e:52:e9:8f:5d:2e:19: 3d:eb:7b:2c:de:15:82:f3:b6:20:3d:29:85:8f:c3:55:76:27: 0d:c6:3b:9b:c5:48:df:02:f3:98:d7:93:70:bd:9f:71:d9:d6: 7a:72:f4:b3:0d:30:37:b0:e8:fd:95:8f:8a:fe:43:45:c5:94: 38:30:d5:a1:36:af:00:28:b3:a0:33:02:f1:83:55:69:ae:c1: d3:bf:f5:27:71:c5:5d:79:35:9d:a6:dc:fb:9e:4d:5f:5d:a1: f0:93:fd:3d:3c:b7:65:61:4a:6d:6a:d7:9d:75:70:c2:ff:ad: 98:ad:32:29 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjMxMjA4MTQ0MDI5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczMmFkZC04OGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwkidYIaCNKRx2xvd0uBukFTkw90OWBx+E4C2uOzw2jse6eyG0AvpXokaurd jBlE1F/RpNbf0uft2DBJNmbe06EExXtY6YjXl4oQaIAXYWpkkNmtT33exz8NAvh6 VfSEQexYWc4wP5X0i1YAr948pgi+U1O7pfkFey45gWkbeeIDERfkl/YKaN5JXZCO Ln/NSYWyEBBZkfFc1UFwD5hxvivDb/ywTKE+AN0Bg9WSoLNmTT3mGX1/7FSvJtzx FRWano1oqQdzZdsjf9/JG5xXUXsN+Nz6EByjT1kr4gdq9kmAzWMV7yYGzUy4nRYm xXwzCFfcybIF8Sbqc8n8lk80QwIDAQABo4IClTCCApEwHQYDVR0OBBYEFE9Ubhjz zkQY7OWj2yHWlXQsT+4bMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvNzgxMjM0MjJC MENEMTFFNThCNTVGQzczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB5OvEwDQYJKoZIhvcNAQELBQADggEBADNl7FNVDbDto8wO 2rhX4OWi1W0zg8Gk8He4gJzscu01fqbDd45WDhBwL5Neq5hSUTjUrLD9H7aVBUC8 50/ohkikaB5cqMkEimn4k/NZUcCUN7n50uWU4yz1c4BOJehZGiMtCHFrYIK44/34 bVy/P52/jUJcm13hIumA/fDB/4qc4UodbaWdA6BMPlLpj10uGT3reyzeFYLztiA9 KYWPw1V2Jw3GO5vFSN8C85jXk3C9n3HZ1npy9LMNMDew6P2Vj4r+Q0XFlDgw1aE2 rwAos6AzAvGDVWmuwdO/9SdxxV15NZ2m3PueTV9dofCT/T08t2VhSm1q1511cML/ rZitMik= -----END CERTIFICATE-----Generated at Fri May 31 15:08:34 2024 by rpki-client on console-fra.rpki-client.org