$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/7206C9B0B9A911EE82CE6832C4F9AE02.roa File: 7206C9B0B9A911EE82CE6832C4F9AE02.roa (raw, json) Hash identifier: SBeXPgMmQjiiP5qVEJoxzpMN0JGDjTahzOO2tzyodtQ= Subject key identifier: 20:26:FB:F6:93:11:3D:89:04:EC:06:10:29:43:EA:75:E9:89:31:D7 Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Certificate serial: 07E4 Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/7206C9B0B9A911EE82CE6832C4F9AE02.roa Signing time: Tue 23 Jan 2024 04:39:51 +0000 ROA not before: Tue 23 Jan 2024 04:39:51 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 133174 IP address blocks: 117.55.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 21:17:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Validity Not Before: Jan 23 04:39:51 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65af4317-54e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3e:7f:ba:90:97:ab:f0:dc:0a:43:cf:b0:2d: db:75:50:b7:10:9f:a9:b8:a0:00:cf:ae:82:62:ed: 9e:9d:3d:89:d0:0a:31:b2:d9:ed:84:1a:01:02:b8: f2:cc:1e:df:f4:57:6a:7d:7e:e8:bc:86:d2:b3:7f: f2:55:ed:47:81:c7:8d:8e:b2:01:ec:6f:32:c1:35: 3d:b7:54:e0:65:bb:83:e9:f8:a3:5d:11:e2:fc:2c: 55:b8:3f:e9:f7:02:c3:cd:be:89:e0:40:ff:c7:6b: f8:9f:5a:60:eb:58:dd:11:65:ef:ac:3c:c3:a3:39: aa:e1:bc:a2:54:88:c8:6b:50:13:59:22:50:06:c4: ba:f3:47:75:a3:a7:c1:fd:7a:ea:2e:9e:49:f7:fc: 4d:75:3b:ca:8f:a1:fd:ed:8c:54:64:84:e7:ab:e5: a4:43:67:fe:6c:a5:ea:6b:66:1c:ea:d2:be:0b:a8: 72:ca:05:da:6c:ba:b0:5d:99:27:a0:fa:05:b6:36: 58:e9:33:4b:36:bb:58:9f:2d:62:78:78:09:99:33: 51:37:43:a5:f2:8d:d2:d8:34:84:9d:6e:58:27:6d: 10:b9:38:9b:00:77:36:36:48:b8:02:75:e8:a8:b9: a6:da:40:67:a9:06:ee:23:ed:45:3e:0d:17:64:15: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:26:FB:F6:93:11:3D:89:04:EC:06:10:29:43:EA:75:E9:89:31:D7 X509v3 Authority Key Identifier: keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/7206C9B0B9A911EE82CE6832C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.55.194.0/24 Signature Algorithm: sha256WithRSAEncryption bb:ac:f5:8a:ca:d5:7b:2f:9d:76:75:06:d5:77:7c:e5:a4:c5: d2:20:e5:f7:df:ef:34:1b:43:ae:8e:88:d8:b9:1b:98:47:41: fd:23:7f:c1:45:d3:f7:e3:1c:25:00:90:ae:84:ec:86:49:c3: a0:f5:45:3f:90:8d:51:c8:ca:53:7b:80:34:63:17:e8:e7:40: b0:0b:02:5d:fa:e4:7f:51:10:cb:ef:fa:2f:75:ea:1d:ca:a2: f3:f4:38:cf:ff:3f:59:10:85:51:6b:9c:ee:e2:05:86:e6:e5: ee:ff:aa:4f:ae:ef:4b:12:2a:94:3e:0e:27:62:4e:1c:28:84: 09:1e:e4:27:7d:55:06:28:0b:89:b8:19:14:3f:d9:a2:b0:6f: 84:b4:4f:9d:a3:a2:f2:f7:06:e9:78:e8:67:59:b9:97:5b:20: cb:7b:f1:7c:84:b6:f6:8a:95:be:48:8c:b2:36:23:e8:a9:7d: 1b:79:51:c5:b2:ed:90:e8:ed:ea:2b:dc:f3:91:64:00:a1:57: da:cc:f2:d1:d2:65:c4:c9:3c:42:08:15:02:dd:71:11:91:b0: 76:35:bf:47:ea:30:7f:33:60:64:b6:6a:06:00:bb:e3:dd:a5: a8:f3:58:35:8a:f8:17:82:78:30:6e:dd:82:a0:92:34:3c:24: 5d:47:6d:c8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3 QjMwNUVFRjEwHhcNMjQwMTIzMDQzOTUxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFmNDMxNy01NGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4j5/upCXq/DcCkPPsC3bdVC3EJ+puKAAz66CYu2enT2J0AoxstnthBoBArjy zB7f9FdqfX7ovIbSs3/yVe1HgceNjrIB7G8ywTU9t1TgZbuD6fijXRHi/CxVuD/p 9wLDzb6J4ED/x2v4n1pg61jdEWXvrDzDozmq4byiVIjIa1ATWSJQBsS680d1o6fB /XrqLp5J9/xNdTvKj6H97YxUZITnq+WkQ2f+bKXqa2Yc6tK+C6hyygXabLqwXZkn oPoFtjZY6TNLNrtYny1ieHgJmTNRN0Ol8o3S2DSEnW5YJ20QuTibAHc2Nki4AnXo qLmm2kBnqQbuI+1FPg0XZBWiWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCAm+/aT ET2JBOwGEClD6nXpiTHXMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0NBNEIvREMyRjA0MzJCRjgwMTFFQTk2RkU0QTY4QzRGOUFFMDIvNzIwNkM5QjBC OUE5MTFFRTgyQ0U2ODMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB1N8IwDQYJKoZIhvcNAQELBQADggEBALus9YrK1XsvnXZ1 BtV3fOWkxdIg5fff7zQbQ66OiNi5G5hHQf0jf8FF0/fjHCUAkK6E7IZJw6D1RT+Q jVHIylN7gDRjF+jnQLALAl365H9REMvv+i916h3KovP0OM//P1kQhVFrnO7iBYbm 5e7/qk+u70sSKpQ+DidiThwohAke5Cd9VQYoC4m4GRQ/2aKwb4S0T52jovL3Bul4 6GdZuZdbIMt78XyEtvaKlb5IjLI2I+ipfRt5UcWy7ZDo7eor3PORZAChV9rM8tHS ZcTJPEIIFQLdcRGRsHY1v0fqMH8zYGS2agYAu+PdpajzWDWK+BeCeDBu3YKgkjQ8 JF1Hbcg= -----END CERTIFICATE-----Generated at Sun May 26 23:05:25 2024 by rpki-client on console-ams.rpki-client.org