$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa File: FBD80F88F92111EAABA5882BC4F9AE02.roa (raw, json) Hash identifier: egxIsRPVPwb7u+XM60U1FKVzWzmGVCY2CjPdVmSsIoo= Subject key identifier: 7D:60:18:1E:DA:04:90:11:29:0A:DC:F1:A3:52:B5:1F:9B:00:26:72 Certificate issuer: /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Certificate serial: 30F3 Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa Signing time: Tue 30 Apr 2024 15:52:32 +0000 ROA not before: Tue 30 Apr 2024 15:52:32 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 40009 IP address blocks: 121.244.74.0/23 maxlen: 23 121.244.136.0/24 maxlen: 24 121.244.137.0/24 maxlen: 24 121.244.172.0/24 maxlen: 24 121.244.173.0/24 maxlen: 24 121.244.190.0/23 maxlen: 23 121.244.204.0/24 maxlen: 24 121.244.205.0/24 maxlen: 24 203.200.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12531 (0x30f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85 Validity Not Before: Apr 30 15:52:32 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=663113c0-0ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:79:6c:72:28:63:38:c8:3a:42:30:da:e7:c7: ad:c6:44:4e:e8:4e:15:57:13:41:d4:79:fc:1e:9e: a9:8d:e9:51:fa:62:32:36:f0:93:48:23:8b:56:14: 52:29:71:f5:56:6c:dc:21:30:20:a6:4d:39:8f:9d: 1a:46:6d:04:74:0e:46:23:40:81:33:ba:b3:04:88: a6:87:13:6c:56:e4:ba:19:12:a2:e7:bb:9b:0d:bb: 4d:8e:26:69:3e:77:36:4c:bd:21:ee:47:61:b3:bd: ba:ca:48:c3:68:18:1d:07:3c:bb:54:b4:98:12:28: 26:1e:bd:fc:e3:7d:49:f8:58:c7:5b:5a:a1:bb:2b: 99:26:bf:f5:ac:86:5c:c8:1c:97:a7:38:56:00:cc: 09:40:40:5b:6c:b3:d6:d3:63:c3:75:ed:73:02:df: 26:77:e3:9c:d4:6d:af:1d:34:f0:7d:8d:b6:26:9d: 53:56:5b:cc:ff:a3:44:38:d5:3a:71:fd:c6:05:da: 44:2b:9f:f3:68:d2:28:a3:5a:dc:7a:ab:42:cb:bc: 81:ef:84:2a:e8:b0:51:1b:a5:d4:dd:70:70:f9:c2: f3:11:24:ee:6a:6c:ac:59:32:e6:c4:9b:b1:87:06: 45:61:92:68:e5:f0:39:57:2b:69:61:43:b9:3f:aa: 43:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:60:18:1E:DA:04:90:11:29:0A:DC:F1:A3:52:B5:1F:9B:00:26:72 X509v3 Authority Key Identifier: keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/FBD80F88F92111EAABA5882BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.244.74.0/23 121.244.136.0/23 121.244.172.0/23 121.244.190.0/23 121.244.204.0/23 203.200.108.0/24 Signature Algorithm: sha256WithRSAEncryption 57:99:93:1c:8a:07:af:a5:d2:6c:ce:21:db:0f:9e:e9:05:03: 97:40:09:ea:ce:7f:35:a8:a4:8b:51:d0:65:2f:08:4a:83:5e: 46:48:65:74:6b:2a:c4:73:49:08:90:13:91:4b:72:68:c6:b9: 53:2e:31:c7:83:82:c9:8a:41:a2:f8:f9:f1:cd:ab:d2:ea:2d: 03:a2:e4:68:b4:d8:04:25:4e:cd:3b:05:de:30:17:9a:8e:7b: 0b:db:9c:66:21:ec:1f:67:d9:41:a2:e4:b0:72:4d:bc:37:d9: ff:e6:54:7d:0d:07:2b:a2:57:2f:fc:4d:62:cf:e4:a7:3a:4b: eb:76:8b:dd:d6:4b:7a:9f:0c:62:70:68:05:86:8e:68:83:de: fa:84:e5:83:d8:8f:21:1a:41:b1:2e:4a:66:7e:bf:a5:91:7d: fb:f8:53:2c:5d:86:08:eb:87:46:1c:e5:76:32:05:27:77:41: 40:0f:70:b6:79:ef:06:2d:98:c6:b4:bd:12:76:61:ea:6e:bd: 2e:d4:04:76:f0:88:ac:de:97:15:95:6a:64:15:d9:79:6d:32: d9:26:fb:ec:e3:04:08:7f:b7:87:3b:b7:5f:69:34:4f:d8:21: ef:ad:af:09:77:8f:f4:7a:42:b6:b8:ae:d6:77:0d:f4:37:e8: be:31:ba:84 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICMPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3 OUJFQTZBODUwHhcNMjQwNDMwMTU1MjMyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxMTNjMC0wZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnlscihjOMg6QjDa58etxkRO6E4VVxNB1Hn8Hp6pjelR+mIyNvCTSCOLVhRS KXH1VmzcITAgpk05j50aRm0EdA5GI0CBM7qzBIimhxNsVuS6GRKi57ubDbtNjiZp Pnc2TL0h7kdhs726ykjDaBgdBzy7VLSYEigmHr38431J+FjHW1qhuyuZJr/1rIZc yByXpzhWAMwJQEBbbLPW02PDde1zAt8md+Oc1G2vHTTwfY22Jp1TVlvM/6NEONU6 cf3GBdpEK5/zaNIoo1rceqtCy7yB74Qq6LBRG6XU3XBw+cLzESTuamysWTLmxJux hwZFYZJo5fA5VytpYUO5P6pDuwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFH1gGB7a BJARKQrc8aNStR+bACZyMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvRkJEODBGODhG OTIxMTFFQUFCQTU4ODJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAF59EoDBAF59IgDBAF59KwDBAF59L4DBAF59MwDBADLyGww DQYJKoZIhvcNAQELBQADggEBAFeZkxyKB6+l0mzOIdsPnukFA5dACerOfzWopItR 0GUvCEqDXkZIZXRrKsRzSQiQE5FLcmjGuVMuMceDgsmKQaL4+fHNq9LqLQOi5Gi0 2AQlTs07Bd4wF5qOewvbnGYh7B9n2UGi5LByTbw32f/mVH0NByuiVy/8TWLP5Kc6 S+t2i93WS3qfDGJwaAWGjmiD3vqE5YPYjyEaQbEuSmZ+v6WRffv4Uyxdhgjrh0Yc 5XYyBSd3QUAPcLZ57wYtmMa0vRJ2YepuvS7UBHbwiKzelxWVamQV2XltMtkm++zj BAh/t4c7t19pNE/YIe+trwl3j/R6Qra4rtZ3DfQ36L4xuoQ= -----END CERTIFICATE-----Generated at Wed Nov 20 16:11:26 2024 by rpki-client on console-fra.rpki-client.org