$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa File: AC1CD860039511EBBE8C7F47C4F9AE02.roa (raw, json) Hash identifier: bI2YzmE5abFv+G4p73f/qs8eUR6pecodR9lCynJZEoI= Subject key identifier: C4:CD:50:29:17:64:65:DC:28:A4:E2:B7:A0:A1:6A:3C:DC:A6:4B:78 Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 06ED Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa Signing time: Fri 31 May 2024 00:01:19 +0000 ROA not before: Fri 31 May 2024 00:01:19 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 4850 IP address blocks: 203.169.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 20:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1773 (0x6ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: May 31 00:01:19 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6659134f-eed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:7d:67:61:3b:71:24:c2:9e:69:76:bb:02:5c: 21:fb:dd:6d:84:31:f8:03:ba:bc:ce:77:e7:db:5a: 6a:7b:37:68:8b:b8:f3:43:c2:d2:8e:4a:5b:c1:53: fc:02:84:81:aa:a9:51:9a:4c:27:5d:e0:fc:1c:4f: 1b:ca:dc:94:87:79:86:2e:c7:f7:ad:3c:f1:99:cb: d8:cf:f6:d4:5d:9d:22:48:47:bf:e7:6f:fb:80:47: 1f:09:1c:95:19:91:6c:95:80:d7:28:bd:79:26:b2: 38:b8:7c:dd:44:f9:a4:31:1b:d4:c5:a2:ed:d6:89: 32:a6:11:33:5b:93:fe:fa:c8:fb:47:83:1f:1d:de: 8c:d0:dd:e9:d4:12:c4:fd:1f:f8:f9:b1:c8:fc:15: a9:ac:df:f7:42:79:85:61:91:1e:29:9d:23:f0:89: 41:3d:12:99:96:9c:2b:e8:5b:d0:c0:f9:9f:d1:1b: a4:03:15:92:72:2b:70:db:3c:d4:12:57:82:f9:ab: 04:5f:ac:05:83:05:da:3e:60:60:7e:86:5c:ac:fe: a3:9b:51:09:8c:8d:a7:fb:d9:ed:6d:3d:cf:9f:77: 27:21:77:dd:ce:44:d2:aa:a8:cd:26:cf:f7:ed:a2: 6c:d8:f9:dc:87:e3:dc:54:4e:1f:ed:b8:19:56:75: fe:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CD:50:29:17:64:65:DC:28:A4:E2:B7:A0:A1:6A:3C:DC:A6:4B:78 X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.169.48.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:31:e8:36:8a:75:20:32:f1:6b:b3:3b:0d:71:02:d1:cc:ba: a8:cf:0d:02:37:12:94:f1:97:1d:c0:89:d6:0d:63:60:97:25: de:8c:fa:dd:b7:bd:49:f7:e2:31:64:46:3a:48:ca:97:d7:6f: f4:8c:e8:1d:ff:53:51:70:a4:b2:e2:28:e1:cd:c3:8e:8f:52: d7:69:a5:be:f6:70:7f:bd:21:37:97:e3:35:e6:81:a8:ca:ac: ee:00:b9:cf:e5:84:b8:27:35:dd:7d:6c:f4:c5:1f:d1:d9:3e: cd:3f:f1:cc:e4:eb:51:3b:b7:a3:3e:c7:c6:37:02:40:95:af: c5:88:eb:d3:3e:b9:3b:88:46:83:e5:21:b3:0f:ab:46:93:b6: 82:e3:ec:a9:55:18:69:9a:37:cb:5f:25:4a:04:bc:84:bd:4a: 4b:92:7d:8d:ab:e7:4b:1c:e5:bc:47:6f:9b:2d:14:7d:d9:e3: e2:96:75:2e:b2:22:d0:af:f6:a0:03:ee:f3:1f:ec:83:4c:b6: fc:9a:8d:5a:86:39:f1:87:47:14:67:02:ca:67:06:14:96:b1: 9e:b9:08:bb:44:f3:8b:f5:14:d5:7a:9b:1c:fa:95:71:63:6a: c8:e0:a0:cd:00:44:bb:56:52:db:0b:ba:5b:db:b0:bc:8d:70: 94:4b:51:ed -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjQwNTMxMDAwMTE5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5MTM0Zi1lZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8H1nYTtxJMKeaXa7Alwh+91thDH4A7q8znfn21pqezdoi7jzQ8LSjkpbwVP8 AoSBqqlRmkwnXeD8HE8bytyUh3mGLsf3rTzxmcvYz/bUXZ0iSEe/52/7gEcfCRyV GZFslYDXKL15JrI4uHzdRPmkMRvUxaLt1okyphEzW5P++sj7R4MfHd6M0N3p1BLE /R/4+bHI/BWprN/3QnmFYZEeKZ0j8IlBPRKZlpwr6FvQwPmf0RukAxWScitw2zzU EleC+asEX6wFgwXaPmBgfoZcrP6jm1EJjI2n+9ntbT3Pn3cnIXfdzkTSqqjNJs/3 7aJs2Pnch+PcVE4f7bgZVnX+OwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMTNUCkX ZGXcKKTit6Chajzcpkt4MB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM2N0QvOTlEQTdBQkUwMzk0MTFFQkI2NjQ4NDQ2QzRGOUFFMDIvQUMxQ0Q4NjAw Mzk1MTFFQkJFOEM3RjQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLqTAwDQYJKoZIhvcNAQELBQADggEBACwx6DaKdSAy8Wuz Ow1xAtHMuqjPDQI3EpTxlx3AidYNY2CXJd6M+t23vUn34jFkRjpIypfXb/SM6B3/ U1FwpLLiKOHNw46PUtdppb72cH+9ITeX4zXmgajKrO4Auc/lhLgnNd19bPTFH9HZ Ps0/8czk61E7t6M+x8Y3AkCVr8WI69M+uTuIRoPlIbMPq0aTtoLj7KlVGGmaN8tf JUoEvIS9SkuSfY2r50sc5bxHb5stFH3Z4+KWdS6yItCv9qAD7vMf7INMtvyajVqG OfGHRxRnAspnBhSWsZ65CLtE84v1FNV6mxz6lXFjasjgoM0ARLtWUtsLulvbsLyN cJRLUe0= -----END CERTIFICATE-----Generated at Fri Nov 22 22:14:49 2024 by rpki-client on console-ams.rpki-client.org