$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/0BD5724C3A3211EDA1B7D863C4F9AE02.roa File: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (raw, json) Hash identifier: Afzfu7RMonv5lZts2gX3BGISubiNL2unW/sXbDGedTs= Subject key identifier: 75:70:A4:29:62:D0:78:B3:F7:FF:E6:31:C5:0C:2A:4D:94:61:2E:13 Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Certificate serial: 34D9 Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/0BD5724C3A3211EDA1B7D863C4F9AE02.roa Signing time: Tue 26 Sep 2023 14:30:19 +0000 ROA not before: Tue 26 Sep 2023 14:30:19 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 139648 IP address blocks: 119.59.0.0/20 maxlen: 20 119.59.0.0/24 maxlen: 24 119.59.1.0/24 maxlen: 24 119.59.2.0/24 maxlen: 24 119.59.3.0/24 maxlen: 24 119.59.4.0/24 maxlen: 24 119.59.5.0/24 maxlen: 24 119.59.6.0/24 maxlen: 24 119.59.7.0/24 maxlen: 24 119.59.8.0/24 maxlen: 24 119.59.9.0/24 maxlen: 24 119.59.10.0/24 maxlen: 24 119.59.11.0/24 maxlen: 24 119.59.12.0/24 maxlen: 24 119.59.13.0/24 maxlen: 24 119.59.14.0/24 maxlen: 24 119.59.15.0/24 maxlen: 24 119.59.16.0/24 maxlen: 24 119.59.17.0/24 maxlen: 24 119.59.18.0/24 maxlen: 24 119.59.19.0/24 maxlen: 24 119.59.20.0/24 maxlen: 24 119.59.21.0/24 maxlen: 24 119.59.22.0/24 maxlen: 24 119.59.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B Validity Not Before: Sep 26 14:30:19 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=6512eafb-30e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e6:21:90:95:e0:62:8c:43:25:c8:d6:d3:35: 17:b4:26:37:92:7b:ac:18:55:a1:d6:99:76:24:df: fa:d8:79:86:bf:1c:4c:80:38:ba:2c:6a:1b:15:a8: bb:65:ef:af:da:c8:b3:39:75:e8:4b:65:21:9c:41: 17:3e:85:15:6b:0c:70:9f:95:a3:c2:ba:a2:81:93: 29:8c:b7:10:e1:43:2e:2d:88:72:64:1c:4e:ed:3d: b6:85:d9:4f:7f:b1:e8:4a:f1:d0:c6:fc:4a:98:c8: 0e:9a:79:3e:fb:55:a2:e2:be:c7:9b:db:78:66:21: 48:68:73:3e:ea:f2:9f:a7:ad:8a:32:25:58:6a:92: 04:d7:e8:b3:c7:c7:14:95:d0:28:c2:fa:0d:ca:69: f7:5f:fc:90:c9:53:ac:e5:75:79:fa:9c:ed:cc:8d: 89:1f:ea:75:2c:1d:a0:8a:ea:cd:b1:79:7c:93:cc: 7c:cc:e5:b4:24:49:2c:ce:93:81:8c:bb:3c:8e:c6: 7b:8d:68:ad:cb:e5:f9:50:61:42:12:93:cc:4f:39: 5f:9a:e2:e5:bb:e6:91:14:5d:49:a8:b2:ab:1d:ab: 76:1b:7c:11:fb:d2:5f:37:f8:9d:bf:74:8f:fe:ca: 45:96:fe:f8:92:af:43:b0:8e:60:1a:07:9b:c5:84: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:A4:29:62:D0:78:B3:F7:FF:E6:31:C5:0C:2A:4D:94:61:2E:13 X509v3 Authority Key Identifier: keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/0BD5724C3A3211EDA1B7D863C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.59.0.0-119.59.23.255 Signature Algorithm: sha256WithRSAEncryption 33:6e:59:0f:30:8e:a2:19:63:8a:60:2d:29:3c:d2:f6:f4:e0: 9a:0c:d8:f0:39:71:a9:6c:83:3a:45:a5:81:60:37:4e:d6:79: a1:01:47:7f:2f:56:06:bc:56:65:f6:31:da:00:fb:81:54:65: 42:43:2e:14:de:da:c2:27:f6:3a:70:e6:d5:cc:4a:cb:63:a7: 3b:ab:d0:21:c1:d4:73:1e:19:57:a9:fa:b6:36:bc:0b:71:b1: f7:99:74:68:b2:7e:45:f4:04:4d:30:c9:db:71:ac:50:c5:ec: 52:03:b3:c5:6b:6c:7c:b3:53:ac:f2:62:ed:92:63:83:86:d2: ff:89:fc:da:7d:28:b0:47:14:65:ec:38:e2:09:b6:0b:4d:39: 2a:3b:7c:51:82:df:07:4b:b5:10:89:b5:54:3a:5e:22:e2:b0: 68:17:f8:fc:fe:70:9e:1e:b1:35:77:1b:4f:b2:cb:b7:68:38: 0e:cf:1d:1d:33:a1:99:85:0f:e4:ff:6e:5c:e5:81:2a:79:7f: 1b:8b:74:26:cc:7c:a1:1e:84:dd:7b:26:55:2c:6a:fb:c9:39: 07:b6:87:66:bb:6e:04:ba:5c:9b:18:f2:4a:97:87:16:1a:0b: 20:15:c5:50:a9:a0:c2:d6:6f:50:5f:0d:79:5b:c7:04:45:d8: 2d:01:9d:e5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG OURGN0M1NEIwHhcNMjMwOTI2MTQzMDE5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEyZWFmYi0zMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseYhkJXgYoxDJcjW0zUXtCY3knusGFWh1pl2JN/62HmGvxxMgDi6LGobFai7 Ze+v2sizOXXoS2UhnEEXPoUVawxwn5WjwrqigZMpjLcQ4UMuLYhyZBxO7T22hdlP f7HoSvHQxvxKmMgOmnk++1Wi4r7Hm9t4ZiFIaHM+6vKfp62KMiVYapIE1+izx8cU ldAowvoNymn3X/yQyVOs5XV5+pztzI2JH+p1LB2giurNsXl8k8x8zOW0JEkszpOB jLs8jsZ7jWity+X5UGFCEpPMTzlfmuLlu+aRFF1JqLKrHat2G3wR+9JfN/idv3SP /spFlv74kq9DsI5gGgebxYRc+wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFHVwpCli 0Hiz9//mMcUMKk2UYS4TMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4 VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDlGM0UvQUM1MkI3NDgxRDgyMTFFMkJDNjQxN0Q3MDhCMDJDRDIvMEJENTcyNEMz QTMyMTFFREExQjdEODYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJgYIKwYBBQUHAQcBAf8E FzAVMBMEAgABMA0wCwMDAHc7AwQDdzsQMA0GCSqGSIb3DQEBCwUAA4IBAQAzblkP MI6iGWOKYC0pPNL29OCaDNjwOXGpbIM6RaWBYDdO1nmhAUd/L1YGvFZl9jHaAPuB VGVCQy4U3trCJ/Y6cObVzErLY6c7q9AhwdRzHhlXqfq2NrwLcbH3mXRosn5F9ARN MMnbcaxQxexSA7PFa2x8s1Os8mLtkmODhtL/ifzafSiwRxRl7DjiCbYLTTkqO3xR gt8HS7UQibVUOl4i4rBoF/j8/nCeHrE1dxtPssu3aDgOzx0dM6GZhQ/k/25c5YEq eX8bi3QmzHyhHoTdeyZVLGr7yTkHtodmu24EulybGPJKl4cWGgsgFcVQqaDC1m9Q Xw15W8cERdgtAZ3l -----END CERTIFICATE-----Generated at Sat May 18 15:58:22 2024 by rpki-client on console-ams.rpki-client.org