$ rpki-client -vvf rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa File: FEB0698C941C11EE89E27567C4F9AE02.roa (raw, json) Hash identifier: Is45ozchu807HN3ghPPdBfyquiZv3hvaQBbA7UKjIH0= Subject key identifier: 59:24:D4:FB:23:B3:34:4D:41:5A:1D:DC:A4:33:E5:DD:AD:C6:8A:80 Certificate issuer: /CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8 Certificate serial: 0E Authority key identifier: 53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa Signing time: Wed 06 Dec 2023 09:51:41 +0000 ROA not before: Wed 06 Dec 2023 09:51:41 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152180 IP address blocks: 210.79.184.0/23 maxlen: 23 210.79.184.0/24 maxlen: 24 210.79.185.0/24 maxlen: 24 2401:5660:100::/40 maxlen: 40 2401:5660:fc00::/40 maxlen: 40 2401:5660:fd00::/40 maxlen: 40 2401:5660:fe00::/40 maxlen: 40 2401:5660:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91109A3/serialNumber=53C0E7F068AA1EF003A0BEE2A5D52DBC89DCDFB8 Validity Not Before: Dec 6 09:51:41 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6570442d-a689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:82:3a:b1:43:08:33:07:68:34:e6:d7:4c:82: 02:51:ed:ad:c6:96:00:d8:f9:3e:36:17:25:a6:62: d7:6c:84:40:f0:db:41:5f:25:fa:fc:4e:6d:e6:a8: d8:17:03:e7:fb:c7:bc:75:50:ec:f9:f0:62:d0:a7: 81:e5:df:75:98:b6:f6:c1:71:b7:59:f2:dd:fd:1a: 9c:df:90:a0:4c:48:ff:2f:19:de:39:f9:d4:95:f7: 97:10:88:57:d8:ac:3d:b9:11:3b:f3:cc:67:e3:23: 9b:c4:ce:4f:7f:83:8b:80:a4:f6:1e:8a:6b:65:91: 6b:4c:2a:b4:29:7b:df:87:1f:60:91:67:08:37:94: 8c:0e:c8:08:b2:d2:c4:48:0d:a1:72:45:34:1d:6e: 67:e8:b6:e2:b3:5c:c4:d5:67:ea:8a:29:61:f7:0a: c8:60:dd:83:c5:ee:da:19:2a:8b:1a:89:9e:49:9b: 04:3e:f9:ea:89:ec:a3:fe:05:a3:33:63:da:0f:c0: ca:3e:75:fa:82:21:71:8d:cc:90:38:f0:2a:93:63: 16:69:d6:a5:69:ee:95:79:4f:d4:8f:bb:33:4e:ae: 77:a0:28:95:ef:a6:a5:fa:a4:71:e1:77:db:f7:aa: d0:50:4a:bd:38:cb:f2:9b:83:9c:9f:f9:82:ec:3d: ec:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:D4:FB:23:B3:34:4D:41:5A:1D:DC:A4:33:E5:DD:AD:C6:8A:80 X509v3 Authority Key Identifier: keyid:53:C0:E7:F0:68:AA:1E:F0:03:A0:BE:E2:A5:D5:2D:BC:89:DC:DF:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/U8Dn8GiqHvADoL7ipdUtvInc37g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8Dn8GiqHvADoL7ipdUtvInc37g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109A3/43FB62FA8FE811EE92F5C76AC4F9AE02/FEB0698C941C11EE89E27567C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.184.0/23 IPv6: 2401:5660:100::/40 2401:5660:fc00::/38 Signature Algorithm: sha256WithRSAEncryption 42:69:1d:12:84:34:4b:ae:96:71:65:32:7b:39:53:04:b3:fa: 87:f7:e6:14:ef:38:2b:05:38:75:ef:ca:53:5d:a6:a3:7c:de: 30:7c:d5:86:9a:a8:e5:c4:5e:50:d1:3b:be:49:b6:f2:76:e1: 70:19:a7:b6:df:c1:be:89:09:bf:aa:1c:53:4a:9c:95:3d:89: 3a:66:f3:55:5e:e9:51:17:c6:bb:bc:98:ef:16:76:88:aa:0f: 1b:e4:62:b0:8e:22:83:92:91:75:d7:09:1b:a0:f6:ec:73:d3: e3:8a:ea:3e:c4:c0:43:b0:87:7c:90:c1:82:b0:6c:f4:49:26: 87:ec:a3:43:b8:b1:e8:27:ad:67:1c:b2:6c:93:b1:58:8a:c6: b4:c2:4b:01:ff:f0:63:43:4c:b4:21:88:35:16:85:2e:11:b2: 01:df:64:31:36:f1:74:ac:34:32:f9:16:6b:d0:13:fa:12:78: 31:3e:69:52:b5:c6:5f:c6:01:a1:48:eb:77:8d:62:86:97:37: 80:3c:ae:a8:c2:8c:40:ce:fa:82:15:70:f9:5a:21:40:1c:24: 0c:90:f6:00:a8:51:a2:a2:af:b6:65:20:3a:de:8d:c8:e5:97: 65:dd:e7:29:83:59:f8:12:0d:12:b1:50:ca:f5:02:e2:94:19: 29:67:05:ae -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MDlBMzExMC8GA1UEBRMoNTNDMEU3RjA2OEFBMUVGMDAzQTBCRUUyQTVENTJEQkM4 OURDREZCODAeFw0yMzEyMDYwOTUxNDFaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NzA0NDJkLWE2ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3gjqxQwgzB2g05tdMggJR7a3GlgDY+T42FyWmYtdshEDw20FfJfr8Tm3mqNgX A+f7x7x1UOz58GLQp4Hl33WYtvbBcbdZ8t39GpzfkKBMSP8vGd45+dSV95cQiFfY rD25ETvzzGfjI5vEzk9/g4uApPYeimtlkWtMKrQpe9+HH2CRZwg3lIwOyAiy0sRI DaFyRTQdbmfotuKzXMTVZ+qKKWH3Cshg3YPF7toZKosaiZ5JmwQ++eqJ7KP+BaMz Y9oPwMo+dfqCIXGNzJA48CqTYxZp1qVp7pV5T9SPuzNOrnegKJXvpqX6pHHhd9v3 qtBQSr04y/Kbg5yf+YLsPewhAgMBAAGjggKtMIICqTAdBgNVHQ4EFgQUWSTU+yOz NE1BWh3cpDPl3a3GioAwHwYDVR0jBBgwFoAUU8Dn8GiqHvADoL7ipdUtvInc37gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwOUEzLzQzRkI2MkZBOEZF ODExRUU5MkY1Qzc2QUM0RjlBRTAyL1U4RG44R2lxSHZBRG9MN2lwZFV0dkluYzM3 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVThEbjhHaXFIdkFEb0w3aXBkVXR2SW5jMzdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDlBMy80M0ZCNjJGQThGRTgxMUVFOTJGNUM3NkFDNEY5QUUwMi9GRUIwNjk4Qzk0 MUMxMUVFODlFMjc1NjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA3BggrBgEFBQcBBwEB/wQo MCYwDAQCAAEwBgMEAdJPuDAWBAIAAjAQAwYAJAFWYAEDBgIkAVZg/DANBgkqhkiG 9w0BAQsFAAOCAQEAQmkdEoQ0S66WcWUyezlTBLP6h/fmFO84KwU4de/KU12mo3ze MHzVhpqo5cReUNE7vkm28nbhcBmntt/BvokJv6ocU0qclT2JOmbzVV7pURfGu7yY 7xZ2iKoPG+RisI4ig5KRddcJG6D27HPT44rqPsTAQ7CHfJDBgrBs9Ekmh+yjQ7ix 6CetZxyybJOxWIrGtMJLAf/wY0NMtCGINRaFLhGyAd9kMTbxdKw0MvkWa9AT+hJ4 MT5pUrXGX8YBoUjrd41ihpc3gDyuqMKMQM76ghVw+VohQBwkDJD2AKhRoqKvtmUg Ot6NyOWXZd3nKYNZ+BINErFQyvUC4pQZKWcFrg== -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:25 2024 by rpki-client on console-fra.rpki-client.org