$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa File: 2F320256981611EB904AF150C4F9AE02.roa (raw, json) Hash identifier: gCiU8YlaJGLiEr5b4Nj+bWgj4KNBno5w8aPLsmGD5U4= Subject key identifier: 7F:DE:78:C4:31:26:F2:24:74:DD:C7:9A:90:BA:87:2F:09:C6:40:34 Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 0508 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa Signing time: Wed 01 Nov 2023 00:51:58 +0000 ROA not before: Wed 01 Nov 2023 00:51:58 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 141365 IP address blocks: 203.7.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 01:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Nov 1 00:51:58 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6541a12e-fa15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:58:8c:c9:60:7a:14:f1:9c:e8:56:11:25:8c: ce:87:2b:b7:9d:59:48:26:a8:6f:cb:92:a9:c9:1c: db:d4:57:f7:ef:4a:a0:8a:ee:dd:c6:8e:d3:a7:ec: 6d:60:09:da:47:53:91:24:80:f0:59:d5:8e:05:7a: 90:6e:37:f9:3a:86:18:c6:60:cf:02:89:89:04:5b: dd:20:28:82:b6:38:e6:d9:e7:86:cf:f0:0e:b0:95: d9:b8:3d:fd:93:14:42:b4:76:bb:4f:02:89:5d:96: 36:e5:36:ec:5d:40:e2:a1:bb:cd:2e:8f:62:68:97: 2d:fd:94:10:3e:c8:60:93:b4:09:ce:f6:18:16:84: 0d:2c:01:fc:87:3e:38:16:82:e1:38:a4:d9:80:87: 37:06:66:ab:40:48:34:79:a2:f2:11:e6:ba:0f:78: b8:13:1f:33:4f:19:7c:1b:6d:5e:8c:6b:d1:ed:12: 00:e1:37:1e:a9:65:c4:41:80:36:e0:8e:6c:cb:88: d5:d9:ea:e3:c2:05:0f:e0:7d:06:b2:cd:3a:7e:df: 2c:20:cc:f0:96:c3:88:16:bb:fa:7b:c4:c4:dd:68: a5:bb:72:9a:7d:3f:36:58:df:a3:a7:c0:e6:56:8d: e1:c0:6e:68:09:b4:36:fa:93:35:99:40:54:85:07: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DE:78:C4:31:26:F2:24:74:DD:C7:9A:90:BA:87:2F:09:C6:40:34 X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.7.172.0/23 Signature Algorithm: sha256WithRSAEncryption 33:41:e0:53:85:53:43:f4:33:80:38:72:de:ca:9f:dd:37:5c: 4f:f8:3d:08:ee:2f:6b:ca:2a:c1:50:e3:ca:ed:48:b8:89:07: 14:b5:b6:d9:26:fc:f7:49:99:4b:b8:5d:70:d1:ab:ec:e0:04: f9:49:dc:5e:b5:0e:28:f9:4b:a3:3b:f3:b4:59:bc:c5:45:af: 33:96:7f:55:e8:ba:6d:d7:2a:d8:15:ad:4f:2d:91:ab:b2:93: f7:57:f5:90:df:92:3a:b5:04:60:56:84:bd:7e:04:f5:09:ae: 5a:71:73:b7:52:a4:60:ad:a0:92:f6:18:ce:7a:8d:44:35:cc: 46:0f:e9:e3:dd:b8:c2:73:5c:f1:2a:09:fb:5f:bb:2a:a0:a2: 45:41:cb:e4:77:da:d7:fe:ed:d3:62:bf:2d:7e:8e:62:81:81: e0:f2:50:0d:17:14:49:b4:1f:e8:9a:7c:28:8b:62:7f:85:15: dc:bf:e1:cf:ef:3c:75:72:94:95:58:bb:d5:4b:38:72:bd:bd: 7a:77:34:89:06:a9:48:c0:24:7b:6d:a2:c1:bb:57:e9:28:11: 77:e7:7a:9c:eb:19:7e:90:cb:e0:c3:13:4a:61:30:08:32:0e: 2d:99:2e:2d:07:4c:66:70:d5:74:53:54:ad:b2:51:6c:4c:79: fd:77:d7:eb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjMxMTAxMDA1MTU4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQxYTEyZS1mYTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoliMyWB6FPGc6FYRJYzOhyu3nVlIJqhvy5KpyRzb1Ff370qgiu7dxo7Tp+xt YAnaR1ORJIDwWdWOBXqQbjf5OoYYxmDPAomJBFvdICiCtjjm2eeGz/AOsJXZuD39 kxRCtHa7TwKJXZY25TbsXUDiobvNLo9iaJct/ZQQPshgk7QJzvYYFoQNLAH8hz44 FoLhOKTZgIc3BmarQEg0eaLyEea6D3i4Ex8zTxl8G21ejGvR7RIA4TceqWXEQYA2 4I5sy4jV2erjwgUP4H0Gss06ft8sIMzwlsOIFrv6e8TE3Wilu3KafT82WN+jp8Dm Vo3hwG5oCbQ2+pM1mUBUhQdZZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH/eeMQx JvIkdN3HmpC6hy8JxkA0MB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY4NEYvREQ0ODdBNUM5ODE0MTFFQkE0QjMyMTUwQzRGOUFFMDIvMkYzMjAyNTY5 ODE2MTFFQjkwNEFGMTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLB6wwDQYJKoZIhvcNAQELBQADggEBADNB4FOFU0P0M4A4 ct7Kn903XE/4PQjuL2vKKsFQ48rtSLiJBxS1ttkm/PdJmUu4XXDRq+zgBPlJ3F61 Dij5S6M787RZvMVFrzOWf1Xoum3XKtgVrU8tkauyk/dX9ZDfkjq1BGBWhL1+BPUJ rlpxc7dSpGCtoJL2GM56jUQ1zEYP6ePduMJzXPEqCftfuyqgokVBy+R32tf+7dNi vy1+jmKBgeDyUA0XFEm0H+iafCiLYn+FFdy/4c/vPHVylJVYu9VLOHK9vXp3NIkG qUjAJHttosG7V+koEXfnepzrGX6Qy+DDE0phMAgyDi2ZLi0HTGZw1XRTVK2yUWxM ef131+s= -----END CERTIFICATE-----Generated at Sat Jun 1 02:55:19 2024 by rpki-client on console-fra.rpki-client.org