$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa File: 0BB29428314511EF9B1F4B46C4F9AE02.roa (raw, json) Hash identifier: zTFd6R54T3NlCmkGgnrlEJM5la1RNIWxE66Q49nYSZ0= Subject key identifier: 8B:C0:94:58:BA:55:53:02:48:E8:ED:0C:9A:25:94:20:13:E7:D1:B1 Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Certificate serial: 96 Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa Signing time: Thu 04 Jul 2024 08:05:41 +0000 ROA not before: Thu 04 Jul 2024 08:05:41 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134823 IP address blocks: 123.253.110.0/23 maxlen: 23 123.253.110.0/24 maxlen: 24 123.253.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 03:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA Validity Not Before: Jul 4 08:05:41 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=668657d5-362f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:7c:5d:3b:09:55:36:5c:f5:64:9e:c9:80: eb:0d:5b:76:91:a9:d3:33:71:fb:63:35:31:09:8c: 58:ba:de:9d:76:bc:31:4e:a1:fc:ca:f8:d6:0c:69: 90:f9:b9:41:1f:70:eb:d7:9e:33:d8:7a:0a:06:cf: 5e:8d:f3:2c:67:70:e5:69:15:db:dc:5b:27:f9:46: 7e:ec:66:8b:15:57:a1:73:c3:1d:5f:d8:1a:be:28: 12:b8:97:a6:45:17:b0:77:32:53:ee:a2:5a:2e:ad: 49:36:ab:ea:1c:7e:56:28:dc:d9:0e:d2:ea:3f:00: 9c:2c:2f:66:e6:1a:e6:2a:e0:8a:c0:68:f1:28:ca: a0:bb:dd:8d:d9:2d:a0:d6:6d:1a:45:5f:68:4a:90: 6c:82:4b:2f:0a:29:e4:24:06:4e:70:25:1b:de:27: c8:41:f6:b8:6a:e9:f8:c5:cc:56:57:8a:40:5a:fe: de:0f:8a:9a:01:2e:3c:58:0e:7f:b7:e8:d2:1a:df: 47:c1:26:54:e7:19:2f:5b:b2:9f:b3:df:10:12:5c: 2c:b6:ab:51:93:7e:28:27:f4:b4:df:e3:69:ba:9f: cb:77:99:ed:02:6e:97:61:d8:57:d2:c3:9b:fb:97: 94:b3:d0:d0:2c:28:9e:05:48:1b:76:bd:ef:26:45: 18:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C0:94:58:BA:55:53:02:48:E8:ED:0C:9A:25:94:20:13:E7:D1:B1 X509v3 Authority Key Identifier: keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/0BB29428314511EF9B1F4B46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.253.110.0/23 Signature Algorithm: sha256WithRSAEncryption 47:cd:bb:a7:a6:af:a2:61:df:e6:4f:a9:4c:6b:fc:b1:2f:05: 2b:27:d0:a3:35:ea:c3:1c:8d:98:54:fe:03:99:11:b6:e1:b1: c7:56:41:39:e4:3c:00:4b:96:2f:46:d4:bd:10:ea:00:6d:44: 0d:53:da:37:73:bc:57:35:42:4d:25:5e:ca:6d:b1:4a:36:60: 21:97:cc:3d:ef:3d:f6:9a:c9:f6:40:86:d5:ae:a0:ac:cd:53: 81:a4:a5:79:e8:54:b2:6a:50:4f:6f:56:05:c0:d5:6d:4f:b4: 4d:f2:d3:d7:fc:cc:98:21:39:19:ec:31:dc:4e:af:c9:b0:3a: ad:21:29:77:6b:35:b8:1e:7d:08:6b:40:cd:6a:da:09:68:84: 8e:84:c3:f2:7a:39:60:a9:64:23:30:5c:bc:1e:af:fb:1e:4c: b6:74:d5:3e:b0:99:0e:c0:e8:14:75:82:92:11:20:7a:22:07: bd:f0:36:5d:c5:45:d3:0b:52:bb:b3:97:70:96:3b:4b:71:67: df:31:0d:d3:eb:2d:2c:83:43:b0:ad:21:60:36:42:c6:87:4e: 44:5a:54:b3:5f:24:e8:16:93:59:b7:e2:87:9a:ce:cd:47:2a: ed:e8:bf:96:49:b2:39:d4:4d:47:57:ac:21:6a:51:24:10:8f: 89:b8:f9:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5QTUxMTAvBgNVBAUTKDU2RjkyOEM3MkE1NzI4QzE3QTk4MjUxMDlCQkJCNzIx MDMxM0JCQ0EwHhcNMjQwNzA0MDgwNTQxWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njg2NTdkNS0zNjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vV8XTsJVTZc9WSeyYDrDVt2kanTM3H7YzUxCYxYut6ddrwxTqH8yvjWDGmQ +blBH3Dr154z2HoKBs9ejfMsZ3DlaRXb3Fsn+UZ+7GaLFVehc8MdX9gavigSuJem RRewdzJT7qJaLq1JNqvqHH5WKNzZDtLqPwCcLC9m5hrmKuCKwGjxKMqgu92N2S2g 1m0aRV9oSpBsgksvCinkJAZOcCUb3ifIQfa4aun4xcxWV4pAWv7eD4qaAS48WA5/ t+jSGt9HwSZU5xkvW7Kfs98QElwstqtRk34oJ/S03+Npup/Ld5ntAm6XYdhX0sOb +5eUs9DQLCieBUgbdr3vJkUYxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFIvAlFi6 VVMCSOjtDJollCAT59GxMB8GA1UdIwQYMBaAFFb5KMcqVyjBepglEJu7tyEDE7vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjlBNS9FMjlFNzM2MDdB MTMxMUVFQUJBMTUwNjlDNEY5QUUwMi9WdmtveHlwWEtNRjZtQ1VRbTd1M0lRTVR1 OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z2a294eXBYS01GNm1DVVFtN3UzSVFNVHU4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjI5QTUvRTI5RTczNjA3QTEzMTFFRUFCQTE1MDY5QzRGOUFFMDIvMEJCMjk0Mjgz MTQ1MTFFRjlCMUY0QjQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAF7/W4wDQYJKoZIhvcNAQELBQADggEBAEfNu6emr6Jh3+ZP qUxr/LEvBSsn0KM16sMcjZhU/gOZEbbhscdWQTnkPABLli9G1L0Q6gBtRA1T2jdz vFc1Qk0lXsptsUo2YCGXzD3vPfaayfZAhtWuoKzNU4GkpXnoVLJqUE9vVgXA1W1P tE3y09f8zJghORnsMdxOr8mwOq0hKXdrNbgefQhrQM1q2glohI6Ew/J6OWCpZCMw XLwer/seTLZ01T6wmQ7A6BR1gpIRIHoiB73wNl3FRdMLUruzl3CWO0txZ98xDdPr LSyDQ7CtIWA2QsaHTkRaVLNfJOgWk1m34oeazs1HKu3ov5ZJsjnUTUdXrCFqUSQQ j4m4+bs= -----END CERTIFICATE-----Generated at Thu Nov 21 05:05:54 2024 by rpki-client on console-fra.rpki-client.org