$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/DAAFB93452D811ECB51CE973C4F9AE02.roa File: DAAFB93452D811ECB51CE973C4F9AE02.roa (raw, json) Hash identifier: vyGxkKLLnhbY49olKecp8DRN/sycq8gt4uYO+E595LY= Subject key identifier: DE:EA:AA:57:BE:FE:B7:E8:70:A0:07:81:05:8C:29:9A:E4:A9:FA:4B Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 05B4 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/DAAFB93452D811ECB51CE973C4F9AE02.roa Signing time: Wed 04 Oct 2023 23:41:28 +0000 ROA not before: Wed 04 Oct 2023 23:41:27 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 38084 IP address blocks: 123.255.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 00:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 4 23:41:27 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651df827-19c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2b:50:a9:7e:ad:34:2c:6b:88:fa:c1:8a:35: cb:d8:38:61:87:17:ba:06:4e:b0:9f:23:1e:8f:a0: 33:91:90:93:d8:00:eb:6f:ed:be:8e:64:30:65:df: 8a:41:9e:4c:a8:31:b5:c3:80:8f:5d:06:ef:37:ae: bd:c1:aa:25:66:12:72:4f:77:52:c1:1a:ba:8e:58: 91:3f:6c:3f:ad:c7:4c:0b:b2:63:e7:8a:92:52:42: c9:7f:07:d1:d9:e2:6b:30:9c:b3:25:0d:8c:d9:72: 6e:45:60:8b:a1:19:2d:c5:52:32:bf:02:69:63:ee: 17:9a:81:1a:69:e9:66:cc:5e:89:0c:5d:12:4e:67: 2b:90:d0:c5:ef:33:5c:20:a0:4e:a9:46:c8:3f:82: 36:7c:5e:07:7c:d1:5b:e0:35:05:35:9f:57:6e:b7: 63:25:f9:90:76:24:25:41:e1:f6:0b:56:1e:03:40: 07:a9:de:62:91:1b:8d:28:69:25:f9:ff:0a:83:fd: d9:0a:a9:79:75:5c:f1:08:d4:ad:ac:23:99:20:67: 78:75:3b:a1:a5:fe:42:42:7b:c6:7b:16:c1:c9:ef: 30:ae:cd:16:37:66:2a:7d:56:e7:8e:38:56:0d:70: e2:3d:38:b4:2d:d1:e9:b4:3a:a0:b3:a7:6a:63:ac: c2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:AA:57:BE:FE:B7:E8:70:A0:07:81:05:8C:29:9A:E4:A9:FA:4B X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/DAAFB93452D811ECB51CE973C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.255.13.0/24 Signature Algorithm: sha256WithRSAEncryption 61:39:e5:7b:e3:42:35:4c:ba:21:ac:af:cb:33:ca:d5:f1:3b: 30:0e:06:d0:09:cf:bc:71:32:5c:e6:c2:64:79:52:d3:c2:71: 5c:79:1c:bd:2e:4f:cd:95:cc:e8:20:1f:ab:9b:d6:b6:1c:3c: 7d:4c:89:a5:c5:a2:b7:76:7c:ec:62:89:bc:7a:b0:d8:a5:48: 83:9d:3a:54:8c:67:18:98:83:1e:40:86:b0:ab:1c:0b:6f:86: f7:2a:b4:c4:e7:5b:23:1a:e4:43:d1:7c:b1:05:1c:73:83:57: ed:e4:4f:de:c6:46:34:d7:79:b1:1f:1e:d3:b3:90:45:26:bc: 6f:9e:7b:7e:9c:e5:ca:59:44:59:43:15:46:d6:2c:5d:35:4e: d7:57:56:46:f2:65:bf:24:45:16:46:8c:2a:91:36:59:b5:43: 51:29:31:bf:cb:08:ea:64:61:be:16:ab:f5:48:d5:a5:6f:8d: 7a:0e:90:cd:da:f4:cd:7c:b5:78:bb:69:e5:fd:de:35:f4:bc: f1:13:cc:3f:2b:2b:42:59:f8:df:7d:1d:ec:96:0d:cb:f5:14: 4f:e8:e1:aa:84:bd:dd:ae:f3:93:b3:8b:04:45:44:f1:28:7b: 4a:c6:80:5d:d6:3a:5a:f4:a9:28:2b:c3:63:10:7a:f6:33:0e: 76:91:ee:d1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjMxMDA0MjM0MTI3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTFkZjgyNy0xOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ytQqX6tNCxriPrBijXL2Dhhhxe6Bk6wnyMej6AzkZCT2ADrb+2+jmQwZd+K QZ5MqDG1w4CPXQbvN669waolZhJyT3dSwRq6jliRP2w/rcdMC7Jj54qSUkLJfwfR 2eJrMJyzJQ2M2XJuRWCLoRktxVIyvwJpY+4XmoEaaelmzF6JDF0STmcrkNDF7zNc IKBOqUbIP4I2fF4HfNFb4DUFNZ9XbrdjJfmQdiQlQeH2C1YeA0AHqd5ikRuNKGkl +f8Kg/3ZCql5dVzxCNStrCOZIGd4dTuhpf5CQnvGexbBye8wrs0WN2YqfVbnjjhW DXDiPTi0LdHptDqgs6dqY6zCmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN7qqle+ /rfocKAHgQWMKZrkqfpLMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvREFBRkI5MzQ1 MkQ4MTFFQ0I1MUNFOTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB7/w0wDQYJKoZIhvcNAQELBQADggEBAGE55XvjQjVMuiGs r8szytXxOzAOBtAJz7xxMlzmwmR5UtPCcVx5HL0uT82VzOggH6ub1rYcPH1MiaXF ord2fOxiibx6sNilSIOdOlSMZxiYgx5AhrCrHAtvhvcqtMTnWyMa5EPRfLEFHHOD V+3kT97GRjTXebEfHtOzkEUmvG+ee36c5cpZRFlDFUbWLF01TtdXVkbyZb8kRRZG jCqRNlm1Q1EpMb/LCOpkYb4Wq/VI1aVvjXoOkM3a9M18tXi7aeX93jX0vPETzD8r K0JZ+N99HeyWDcv1FE/o4aqEvd2u85OziwRFRPEoe0rGgF3WOlr0qSgrw2MQevYz DnaR7tE= -----END CERTIFICATE-----Generated at Fri May 17 02:01:40 2024 by rpki-client on console-ams.rpki-client.org