$ rpki-client -vvf rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5F114FB2C28811EB8BB7245FC4F9AE02.roa File: 5F114FB2C28811EB8BB7245FC4F9AE02.roa (raw, json) Hash identifier: qcy3laoZQII0iS3exzYczWAFgtfOXN65l038Y79jM3A= Subject key identifier: FA:DA:A1:F6:AD:37:48:9D:87:B3:D2:A1:7E:1E:E6:FD:59:CF:4D:4C Certificate issuer: /CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Certificate serial: 33FB Authority key identifier: 33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5F114FB2C28811EB8BB7245FC4F9AE02.roa Signing time: Fri 31 May 2024 15:51:00 +0000 ROA not before: Fri 31 May 2024 15:51:00 +0000 ROA not after: Tue 01 Oct 2024 00:00:00 +0000 asID: 9731 IP address blocks: 119.252.225.0/24 maxlen: 24 119.252.226.0/24 maxlen: 24 119.252.227.0/24 maxlen: 24 119.252.229.0/24 maxlen: 24 119.252.230.0/24 maxlen: 24 119.252.231.0/24 maxlen: 24 119.252.232.0/24 maxlen: 24 119.252.233.0/24 maxlen: 24 119.252.234.0/24 maxlen: 24 119.252.235.0/24 maxlen: 24 119.252.236.0/24 maxlen: 24 119.252.237.0/24 maxlen: 24 119.252.238.0/24 maxlen: 24 119.252.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 15:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13307 (0x33fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E38C1/serialNumber=338BD781ED21E5DB14057B37B903A2A408E24202 Validity Not Before: May 31 15:51:00 2024 GMT Not After : Oct 1 00:00:00 2024 GMT Subject: CN=6659f1e4-de6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f6:11:fa:00:f2:d3:bb:0c:a8:7b:bc:66:6f: c7:ff:7c:97:4c:74:37:cd:f8:b0:0c:80:70:cc:18: 2d:1c:b5:4e:45:c1:9d:c7:c9:4e:0e:2c:c7:1b:d2: fd:12:c6:ae:06:4e:59:06:e2:93:da:0e:d3:d6:00: f4:8e:28:23:7c:4a:2d:54:ca:1a:e2:92:a5:5f:7a: 76:3d:58:e0:52:5b:69:c4:6b:94:2a:23:1c:54:4c: ea:21:13:d6:78:6a:9d:fa:d1:92:10:65:9b:ea:ae: f6:3f:81:88:8b:a0:5e:38:8f:07:0a:ef:cf:37:84: 82:17:7f:75:42:87:b8:83:5d:f4:14:2f:2f:38:9d: 55:42:70:3d:2d:9d:d1:04:e9:1b:62:a4:1f:0e:e5: 03:95:91:06:2a:c3:82:e5:27:1f:28:37:77:9f:46: d4:06:21:36:71:96:37:92:8c:f7:75:af:3f:91:d5: 4b:79:bc:5a:9a:95:40:51:04:e8:96:be:3d:9b:3a: 2b:7a:b2:19:ca:45:d5:21:6d:ca:e5:d0:bb:ee:80: 49:42:4f:41:e5:41:2b:25:00:97:b9:4b:6d:f4:24: a9:c6:24:29:2c:a3:d0:fb:00:15:aa:f5:7a:59:85: 8d:95:0a:f0:6e:9b:9e:8d:25:5e:c3:e1:b2:16:b5: 3e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:A1:F6:AD:37:48:9D:87:B3:D2:A1:7E:1E:E6:FD:59:CF:4D:4C X509v3 Authority Key Identifier: keyid:33:8B:D7:81:ED:21:E5:DB:14:05:7B:37:B9:03:A2:A4:08:E2:42:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/M4vXge0h5dsUBXs3uQOipAjiQgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M4vXge0h5dsUBXs3uQOipAjiQgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E38C1/E75AC2621D9711E28EF8928108B02CD2/5F114FB2C28811EB8BB7245FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.252.225.0-119.252.227.255 119.252.229.0-119.252.239.255 Signature Algorithm: sha256WithRSAEncryption a0:c8:e7:b9:ab:54:a6:98:aa:6a:be:9a:23:53:cc:0c:be:dd: 89:4e:70:b9:47:fa:01:08:55:1f:95:2d:2f:69:e0:98:68:7f: 99:43:f7:6e:e8:67:dd:a1:18:22:43:3a:be:11:2b:4e:8c:0b: 4d:00:ac:57:b6:c4:5d:ca:e1:d6:b5:ff:66:79:ff:81:1e:60: 4a:5e:d0:4c:2a:3b:c2:38:56:33:32:da:74:f9:d9:a2:35:78: 2d:4e:79:d0:78:4a:ef:75:d6:ff:4e:3d:d8:29:18:f9:4b:c8: 3a:75:78:56:51:3c:5e:e0:dd:df:8c:d5:e5:a1:29:20:4c:ee: 36:6a:4a:36:5e:96:cb:5e:60:99:51:c1:ad:fc:dd:90:79:e1: 98:ad:ba:bd:34:3f:84:7a:94:34:4c:3a:d5:21:72:7f:60:8a: f5:3b:96:58:ae:4a:ea:cc:88:66:c2:6e:d2:ad:46:bf:02:3f: 2b:eb:02:04:bd:b8:cb:c7:a4:ed:64:0f:a1:24:c7:94:05:63: 91:19:42:f6:83:c1:be:5b:3b:76:4b:7e:19:fc:d7:db:1d:cb: 43:87:79:9a:f6:03:e1:7c:fd:f0:e4:a8:44:45:5d:8b:74:54: 0d:19:ea:24:2a:bc:57:e8:60:f0:3a:a5:88:ed:6d:48:18:a1: ad:b8:4b:72 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICM/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM4QzExMTAvBgNVBAUTKDMzOEJENzgxRUQyMUU1REIxNDA1N0IzN0I5MDNBMkE0 MDhFMjQyMDIwHhcNMjQwNTMxMTU1MTAwWhcNMjQxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5ZjFlNC1kZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vYR+gDy07sMqHu8Zm/H/3yXTHQ3zfiwDIBwzBgtHLVORcGdx8lODizHG9L9 EsauBk5ZBuKT2g7T1gD0jigjfEotVMoa4pKlX3p2PVjgUltpxGuUKiMcVEzqIRPW eGqd+tGSEGWb6q72P4GIi6BeOI8HCu/PN4SCF391Qoe4g130FC8vOJ1VQnA9LZ3R BOkbYqQfDuUDlZEGKsOC5ScfKDd3n0bUBiE2cZY3koz3da8/kdVLebxampVAUQTo lr49mzorerIZykXVIW3K5dC77oBJQk9B5UErJQCXuUtt9CSpxiQpLKPQ+wAVqvV6 WYWNlQrwbpuejSVew+GyFrU+NwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPraofat N0idh7PSoX4e5v1Zz01MMB8GA1UdIwQYMBaAFDOL14HtIeXbFAV7N7kDoqQI4kIC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzhDMS9FNzVBQzI2MjFE OTcxMUUyOEVGODkyODEwOEIwMkNEMi9NNHZYZ2UwaDVkc1VCWHMzdVFPaXBBamlR Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL000dlhnZTBoNWRzVUJYczN1UU9pcEFqaVFnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTM4QzEvRTc1QUMyNjIxRDk3MTFFMjhFRjg5MjgxMDhCMDJDRDIvNUYxMTRGQjJD Mjg4MTFFQjhCQjcyNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAHf84QMEAnf84DAMAwQAd/zlAwQEd/zgMA0GCSqGSIb3 DQEBCwUAA4IBAQCgyOe5q1SmmKpqvpojU8wMvt2JTnC5R/oBCFUflS0vaeCYaH+Z Q/du6GfdoRgiQzq+EStOjAtNAKxXtsRdyuHWtf9mef+BHmBKXtBMKjvCOFYzMtp0 +dmiNXgtTnnQeErvddb/Tj3YKRj5S8g6dXhWUTxe4N3fjNXloSkgTO42ako2XpbL XmCZUcGt/N2QeeGYrbq9ND+EepQ0TDrVIXJ/YIr1O5ZYrkrqzIhmwm7SrUa/Aj8r 6wIEvbjLx6TtZA+hJMeUBWORGUL2g8G+Wzt2S34Z/NfbHctDh3ma9gPhfP3w5KhE RV2LdFQNGeokKrxX6GDwOqWI7W1IGKGtuEty -----END CERTIFICATE-----Generated at Fri May 31 17:44:52 2024 by rpki-client on console-fra.rpki-client.org