$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa File: A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa (raw, json) Hash identifier: p+JIQBFEOgYXDXUyhadg34/LgK5/3/gHTYuz5O7OCcg= Subject key identifier: A1:03:19:26:D5:06:9F:7C:E1:F4:0F:BC:4E:2B:09:55:35:EC:72:B4 Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Certificate serial: 08DB Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa Signing time: Wed 02 Aug 2023 20:37:52 +0000 ROA not before: Wed 02 Aug 2023 20:37:52 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 16509 IP address blocks: 58.181.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Apr 2024 21:15:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2267 (0x8db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Validity Not Before: Aug 2 20:37:52 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64cabea0-a040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:1c:35:72:d5:fb:86:08:b4:7a:c0:6c:61: 12:b5:3a:cb:8a:56:f7:b0:d0:97:85:99:9d:a8:bb: a9:73:c4:f0:b2:66:e4:39:95:c8:a9:69:4b:79:42: 98:6a:38:84:1d:4b:b0:5b:3c:ff:54:97:7a:81:cf: 1b:94:6c:b3:73:08:20:8a:61:da:fc:79:89:f2:3b: 75:d3:cd:83:64:4b:d0:84:bd:21:a6:4d:48:ff:ef: 9f:d8:ab:e6:1b:62:d0:06:68:06:90:56:ba:55:20: 42:95:20:64:d5:d5:30:53:13:53:ca:d0:e6:1a:dd: 6b:e4:0f:7b:b4:a6:e9:b3:4a:ea:05:c7:a1:44:37: ba:7e:90:47:2c:fd:57:5c:8b:f3:52:f9:cd:06:b1: 56:24:53:c2:bc:af:dc:d5:ed:74:3d:00:6a:c0:9f: 8e:6d:fe:de:bb:86:b0:21:38:82:bc:09:ac:f3:67: 15:d9:b4:11:00:f7:ac:79:aa:8d:1a:9c:18:4e:73: d1:76:03:f4:fc:51:53:66:4c:4e:03:6b:ff:3a:a5: d1:ce:fc:35:40:d7:2d:36:d2:05:94:b2:e4:6b:0c: bc:d1:98:5c:52:85:38:b8:23:18:3d:78:d0:99:4e: 5e:2e:7b:43:ea:89:e1:c9:7d:60:06:de:b2:3a:47: f0:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:03:19:26:D5:06:9F:7C:E1:F4:0F:BC:4E:2B:09:55:35:EC:72:B4 X509v3 Authority Key Identifier: keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/A3D50B2EA3DB11EA98BC5D48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.95.0/24 Signature Algorithm: sha256WithRSAEncryption a5:c3:1d:85:d4:f1:2d:07:56:e4:cb:27:26:86:d0:c6:68:82: 72:5a:e2:96:2e:32:75:75:af:88:51:52:08:59:b9:cc:31:9d: 88:b5:23:d4:d0:30:47:3f:06:c0:25:f2:c9:73:67:93:d7:5b: ca:ba:e5:73:c3:df:60:7b:b4:39:87:fb:e2:d0:fd:38:ed:c6: 19:ca:d1:40:dd:7c:f8:e9:9d:56:e8:61:26:52:80:0b:03:e2: 60:e7:6a:f5:8f:9c:e7:4d:76:2d:07:89:9b:47:d2:8d:e6:e2: ab:e5:26:d2:2c:2b:e0:c5:ac:e1:61:49:9a:79:f2:38:e8:a4: 6f:75:cf:a7:06:20:bc:94:0e:05:52:48:c1:85:3d:34:85:d2: 52:c4:c2:0b:b4:ab:21:bb:d6:8b:aa:29:d5:d4:d8:b9:1a:76: 4a:4d:e6:96:12:79:b1:8c:61:dd:cd:83:4c:eb:be:0d:57:0c: 8c:27:e1:39:48:2c:bd:44:44:ac:62:d5:08:3e:b0:34:55:66: 4d:64:35:de:55:30:17:0e:3d:d1:cc:70:d6:94:b5:77:66:7f: 18:7d:7a:2f:55:b1:38:b6:d1:e7:87:44:19:dc:0b:fa:54:e5: 7e:41:02:57:da:3c:11:c6:b3:16:33:10:2a:14:ff:e8:4d:47: b7:cb:9e:85 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4 MkNGNkE1QjMwHhcNMjMwODAyMjAzNzUyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGNhYmVhMC1hMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3JQcNXLV+4YItHrAbGEStTrLilb3sNCXhZmdqLupc8TwsmbkOZXIqWlLeUKY ajiEHUuwWzz/VJd6gc8blGyzcwggimHa/HmJ8jt1082DZEvQhL0hpk1I/++f2Kvm G2LQBmgGkFa6VSBClSBk1dUwUxNTytDmGt1r5A97tKbps0rqBcehRDe6fpBHLP1X XIvzUvnNBrFWJFPCvK/c1e10PQBqwJ+Obf7eu4awITiCvAms82cV2bQRAPeseaqN GpwYTnPRdgP0/FFTZkxOA2v/OqXRzvw1QNctNtIFlLLkawy80ZhcUoU4uCMYPXjQ mU5eLntD6onhyX1gBt6yOkfwbQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKEDGSbV Bp984fQPvE4rCVU17HK0MB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNEMvQTczMjM1RUM3M0MyMTFFQTlENDBCODg1QzRGOUFFMDIvQTNENTBCMkVB M0RCMTFFQTk4QkM1RDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6tV8wDQYJKoZIhvcNAQELBQADggEBAKXDHYXU8S0HVuTL JyaG0MZognJa4pYuMnV1r4hRUghZucwxnYi1I9TQMEc/BsAl8slzZ5PXW8q65XPD 32B7tDmH++LQ/TjtxhnK0UDdfPjpnVboYSZSgAsD4mDnavWPnOdNdi0HiZtH0o3m 4qvlJtIsK+DFrOFhSZp58jjopG91z6cGILyUDgVSSMGFPTSF0lLEwgu0qyG71ouq KdXU2LkadkpN5pYSebGMYd3Ng0zrvg1XDIwn4TlILL1ERKxi1Qg+sDRVZk1kNd5V MBcOPdHMcNaUtXdmfxh9ei9VsTi20eeHRBncC/pU5X5BAlfaPBHGsxYzECoU/+hN R7fLnoU= -----END CERTIFICATE-----Generated at Tue Apr 23 18:33:57 2024 by rpki-client on console-fra.rpki-client.org