$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa File: 71D21A40A05E11EDAC005F21C4F9AE02.roa (raw, json) Hash identifier: q3tLrUCkN5xPjShrVqT12ra3zyskFiwjYjcI+j+B4kw= Subject key identifier: 1A:CE:22:5B:25:BE:5E:0B:C2:DE:4C:00:1A:BC:9D:92:13:23:B4:1C Certificate issuer: /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Certificate serial: 240B Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa Signing time: Thu 28 Dec 2023 16:03:41 +0000 ROA not before: Thu 28 Dec 2023 16:03:41 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 37932 IP address blocks: 147.50.197.0/24 maxlen: 24 147.50.198.0/24 maxlen: 24 147.50.199.0/24 maxlen: 24 147.50.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 15:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9227 (0x240b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA Validity Not Before: Dec 28 16:03:41 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658d9c5d-ba6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:49:87:3c:96:5f:78:85:b5:a0:cb:b8:dd:7f: 15:6c:d3:73:4a:9a:e1:9a:6d:3c:07:6d:7a:19:be: 4a:37:fc:27:6c:10:ec:ac:66:f4:8b:ed:9a:34:bd: 10:87:32:f1:3a:9d:70:1e:30:d2:d2:03:48:ad:bf: 16:4f:66:f9:4e:31:b8:73:2b:94:27:44:d1:80:36: b4:75:2c:d3:20:a0:38:73:7b:cb:2d:5a:fb:6a:5c: 11:54:ef:5c:10:87:b5:a4:55:99:3f:29:14:2b:be: ed:c2:df:f4:d8:0a:54:00:44:ae:17:11:2c:62:78: 7c:20:0c:b7:e4:b0:6d:ab:94:67:d8:e6:20:d7:03: ab:dc:26:73:78:6b:26:79:8e:18:97:ee:c2:49:9e: d3:4f:6c:2c:8d:b5:04:8a:0c:b3:99:e0:1c:e0:0f: f4:4d:ef:24:d2:be:b8:18:0f:3a:f3:0c:f7:8f:87: 67:c4:26:0f:d7:58:7a:4b:0a:52:88:a5:65:5d:dd: 44:ce:1e:e7:8d:a0:c5:ab:60:a5:b6:20:09:8c:2b: 45:91:3d:73:d0:5b:aa:56:1a:92:7a:45:5b:0a:84: 9e:7f:7a:a5:8c:2a:10:e3:86:a6:24:56:9c:c9:71: 13:bb:22:03:25:17:38:47:fb:d9:48:02:a8:00:92: 63:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CE:22:5B:25:BE:5E:0B:C2:DE:4C:00:1A:BC:9D:92:13:23:B4:1C X509v3 Authority Key Identifier: keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/71D21A40A05E11EDAC005F21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 147.50.197.0-147.50.200.255 Signature Algorithm: sha256WithRSAEncryption 9b:64:6f:9e:bd:39:4e:35:18:3f:01:80:68:c8:8b:66:fa:25: 20:34:9f:fd:3c:dc:80:60:74:76:80:a9:ae:23:d2:65:21:85: 81:7b:1a:76:ee:49:3a:04:b6:2d:e1:35:98:a9:89:b9:40:f6: 24:d3:97:fd:a5:94:ba:ba:c7:64:a7:e2:3e:5a:90:dc:16:c2: ae:b8:2a:bd:86:94:1d:8f:04:f1:0c:2d:f8:83:4e:e0:9f:67: 41:a8:d7:0b:ba:03:a6:57:e1:4f:6b:01:6f:55:a5:e0:cd:69: 76:5e:43:e0:d5:9e:c3:8b:56:19:36:6f:f0:61:1c:70:3b:44: 80:c8:0d:6a:1f:eb:66:71:c8:a8:bd:c3:83:cc:69:1c:1d:b3: 77:e0:51:fe:3c:94:a5:6f:77:13:4a:7f:4b:dc:28:ff:de:1e: dd:ff:7b:de:62:97:7f:a8:06:e5:48:4f:f7:7f:1b:38:e0:00: 02:05:36:62:66:da:82:0d:59:7b:d7:ef:fc:1f:cb:20:06:63: 2e:7a:68:39:7d:2d:2c:95:38:d1:0b:95:38:c3:65:98:0f:3c: 58:de:62:00:d6:c8:d3:76:4c:3d:8e:7d:d8:5d:e6:3d:00:c2: 1c:3a:0b:4c:1d:cf:2a:14:95:62:9c:59:e3:74:e4:53:41:b6: ae:eb:ab:3f -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICJAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx NDhDNkI0RkEwHhcNMjMxMjI4MTYwMzQxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkOWM1ZC1iYTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUmHPJZfeIW1oMu43X8VbNNzSprhmm08B216Gb5KN/wnbBDsrGb0i+2aNL0Q hzLxOp1wHjDS0gNIrb8WT2b5TjG4cyuUJ0TRgDa0dSzTIKA4c3vLLVr7alwRVO9c EIe1pFWZPykUK77twt/02ApUAESuFxEsYnh8IAy35LBtq5Rn2OYg1wOr3CZzeGsm eY4Yl+7CSZ7TT2wsjbUEigyzmeAc4A/0Te8k0r64GA868wz3j4dnxCYP11h6SwpS iKVlXd1Ezh7njaDFq2CltiAJjCtFkT1z0FuqVhqSekVbCoSef3qljCoQ44amJFac yXETuyIDJRc4R/vZSAKoAJJjEwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFBrOIlsl vl4Lwt5MABq8nZITI7QcMB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0 UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJENTQvRDkwMTEyODQzRjRGMTFFNTk1MTJFMDRDQzRGOUFFMDIvNzFEMjFBNDBB MDVFMTFFREFDMDA1RjIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAJMyxQMEAJMyyDANBgkqhkiG9w0BAQsFAAOCAQEAm2Rv nr05TjUYPwGAaMiLZvolIDSf/TzcgGB0doCpriPSZSGFgXsadu5JOgS2LeE1mKmJ uUD2JNOX/aWUurrHZKfiPlqQ3BbCrrgqvYaUHY8E8Qwt+INO4J9nQajXC7oDplfh T2sBb1Wl4M1pdl5D4NWew4tWGTZv8GEccDtEgMgNah/rZnHIqL3Dg8xpHB2zd+BR /jyUpW93E0p/S9wo/94e3f973mKXf6gG5UhP938bOOAAAgU2Ymbagg1Ze9fv/B/L IAZjLnpoOX0tLJU40QuVOMNlmA88WN5iANbI03ZMPY592F3mPQDCHDoLTB3PKhSV YpxZ43TkU0G2ruurPw== -----END CERTIFICATE-----Generated at Mon May 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org