$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/AEFB1B262FB111EB89A04D37C4F9AE02.roa File: AEFB1B262FB111EB89A04D37C4F9AE02.roa (raw, json) Hash identifier: Wg8lhii6fS+ISW5JHYHpOa6pzoQlnpj7gMJiQaNStNA= Subject key identifier: FD:BD:E7:5D:E5:B8:BD:AE:EE:35:FC:22:1D:F4:E0:39:63:73:BF:E5 Certificate issuer: /CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Certificate serial: 067D Authority key identifier: 70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/AEFB1B262FB111EB89A04D37C4F9AE02.roa Signing time: Thu 02 May 2024 23:42:58 +0000 ROA not before: Thu 02 May 2024 23:42:58 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55489 IP address blocks: 202.128.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 23:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE1C4/serialNumber=70BD1E495E250B22E2798296969785A2D77D737F Validity Not Before: May 2 23:42:58 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66342501-e950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a8:43:35:32:ef:a8:31:d9:b7:f4:f5:e3:ae: f3:1a:bc:54:dc:03:57:68:69:ab:b6:8f:e8:7b:10: 67:ac:c9:18:b0:55:a9:bf:f2:f8:84:0c:6b:52:8a: 5a:a1:e5:c6:48:b1:ad:84:31:60:c1:9e:fd:c8:96: c7:5e:e7:b3:6f:0b:87:f1:6f:51:f2:8b:a1:4e:40: 93:c5:46:24:6a:74:db:5b:e9:3e:43:d8:7a:c3:de: 67:5e:b7:11:ca:37:26:98:1a:f2:39:ef:0f:09:58: d7:a3:fc:cd:71:e3:53:61:57:26:ff:66:58:00:25: 6a:b6:6a:3d:01:1d:c0:92:8c:4b:53:b8:af:60:53: 73:f5:f8:2b:56:7c:e7:33:9f:64:c0:96:31:a5:bf: 8f:9f:f9:38:a0:57:6a:cc:d9:c8:02:0b:6e:49:81: 72:71:00:81:80:72:a4:67:8b:d1:8a:a6:77:38:f8: 12:ef:82:a3:66:ef:fd:fa:95:67:10:87:ce:e9:11: 31:b3:ce:aa:bb:ad:b5:92:d3:f9:c9:2f:b0:d2:04: 00:44:7d:ee:06:8b:15:be:e3:c4:cc:10:b9:18:62: 16:f7:62:fe:4a:9c:47:da:40:6c:43:49:84:7f:ec: 82:ca:f1:06:71:e7:99:cd:ec:32:3b:fc:57:1d:81: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BD:E7:5D:E5:B8:BD:AE:EE:35:FC:22:1D:F4:E0:39:63:73:BF:E5 X509v3 Authority Key Identifier: keyid:70:BD:1E:49:5E:25:0B:22:E2:79:82:96:96:97:85:A2:D7:7D:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/cL0eSV4lCyLieYKWlpeFotd9c38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0eSV4lCyLieYKWlpeFotd9c38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE1C4/FC672B722FAF11EB94155F33C4F9AE02/AEFB1B262FB111EB89A04D37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.128.99.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:30:86:c0:f5:62:c6:30:ee:c3:21:02:d3:91:c8:d8:44:eb: cc:4c:a4:f3:28:d3:68:67:6f:82:40:05:29:1d:f0:be:c1:3f: 56:fc:2b:9c:46:13:1d:e5:4c:5b:c1:50:00:3b:47:a3:02:bc: 9d:9d:5c:2f:30:ac:2d:a2:69:51:96:54:b6:a8:3e:e8:86:a4: 9f:63:bc:33:9c:a1:b2:1a:cf:d9:45:e3:09:a1:d0:ea:30:b2: a2:d5:5e:e2:ec:34:7d:af:69:d8:0f:4b:eb:b7:1b:1b:9c:f9: 5d:2a:b0:ad:31:f6:e6:22:1d:f8:bf:fe:87:b5:0e:9b:2b:8d: 13:74:91:e0:96:1e:4f:c0:cd:f3:3f:8b:11:7c:54:56:9a:14: d1:42:3c:e7:9f:86:ee:7e:ed:7e:91:91:5d:4b:eb:b8:67:e2: 81:36:54:cc:82:55:34:0a:ab:06:05:ec:0f:1d:8e:57:c6:34: 2d:ae:46:da:67:8c:1a:ee:64:c4:f0:39:fe:a0:cc:06:32:26: 94:3c:91:78:a0:d7:a4:94:75:bb:5a:7e:b6:ab:c0:45:7a:9c: 2c:ed:e8:47:2c:0c:4c:56:81:db:d1:fc:87:18:b9:c5:1c:74: c2:d1:f7:23:8d:29:c7:d2:77:45:cf:a1:54:fb:3d:f2:b9:2b: 7c:3a:e4:84 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUUxQzQxMTAvBgNVBAUTKDcwQkQxRTQ5NUUyNTBCMjJFMjc5ODI5Njk2OTc4NUEy RDc3RDczN0YwHhcNMjQwNTAyMjM0MjU4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0MjUwMS1lOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKhDNTLvqDHZt/T1467zGrxU3ANXaGmrto/oexBnrMkYsFWpv/L4hAxrUopa oeXGSLGthDFgwZ79yJbHXuezbwuH8W9R8ouhTkCTxUYkanTbW+k+Q9h6w95nXrcR yjcmmBryOe8PCVjXo/zNceNTYVcm/2ZYACVqtmo9AR3AkoxLU7ivYFNz9fgrVnzn M59kwJYxpb+Pn/k4oFdqzNnIAgtuSYFycQCBgHKkZ4vRiqZ3OPgS74KjZu/9+pVn EIfO6RExs86qu621ktP5yS+w0gQARH3uBosVvuPEzBC5GGIW92L+SpxH2kBsQ0mE f+yCyvEGceeZzewyO/xXHYEMpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP29513l uL2u7jX8Ih304Dljc7/lMB8GA1UdIwQYMBaAFHC9HkleJQsi4nmClpaXhaLXfXN/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTFDNC9GQzY3MkI3MjJG QUYxMUVCOTQxNTVGMzNDNEY5QUUwMi9jTDBlU1Y0bEN5TGllWUtXbHBlRm90ZDlj MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGVTVjRsQ3lMaWVZS1dscGVGb3RkOWMzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUUxQzQvRkM2NzJCNzIyRkFGMTFFQjk0MTU1RjMzQzRGOUFFMDIvQUVGQjFCMjYy RkIxMTFFQjg5QTA0RDM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKgGMwDQYJKoZIhvcNAQELBQADggEBAB4whsD1YsYw7sMh AtORyNhE68xMpPMo02hnb4JABSkd8L7BP1b8K5xGEx3lTFvBUAA7R6MCvJ2dXC8w rC2iaVGWVLaoPuiGpJ9jvDOcobIaz9lF4wmh0OowsqLVXuLsNH2vadgPS+u3Gxuc +V0qsK0x9uYiHfi//oe1DpsrjRN0keCWHk/AzfM/ixF8VFaaFNFCPOefhu5+7X6R kV1L67hn4oE2VMyCVTQKqwYF7A8djlfGNC2uRtpnjBruZMTwOf6gzAYyJpQ8kXig 16SUdbtafrarwEV6nCzt6EcsDExWgdvR/IcYucUcdMLR9yONKcfSd0XPoVT7PfK5 K3w65IQ= -----END CERTIFICATE-----Generated at Tue May 21 01:50:56 2024 by rpki-client on console-ams.rpki-client.org