$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa File: 84DBC93004CF11E9BA917C34C4F9AE02.roa (raw, json) Hash identifier: QwI10eruuMp2z3YVa5XOKur5PT/NM/t5pg3qzf3Bbqo= Subject key identifier: E2:D3:76:D1:AC:77:32:09:68:27:77:A5:4F:3C:B0:9E:F0:A0:71:A4 Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Certificate serial: 1D1F Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa Signing time: Tue 02 Jan 2024 16:54:15 +0000 ROA not before: Tue 02 Jan 2024 16:54:15 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134763 IP address blocks: 121.12.104.0/21 maxlen: 21 121.12.112.0/20 maxlen: 20 121.12.168.0/21 maxlen: 21 121.14.128.0/21 maxlen: 21 121.14.136.0/22 maxlen: 22 121.14.140.0/22 maxlen: 22 121.14.144.0/22 maxlen: 22 121.14.148.0/22 maxlen: 22 121.14.152.0/21 maxlen: 21 218.16.117.0/24 maxlen: 24 218.16.118.0/23 maxlen: 23 218.16.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7455 (0x1d1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA Validity Not Before: Jan 2 16:54:15 2024 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65943fb7-4f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ed:76:8f:66:39:36:36:50:ae:8f:17:d3:f5: 1a:af:ef:ab:da:8f:5c:38:4f:c3:fc:fe:87:03:b5: f3:e2:77:61:24:bf:ad:f7:9e:59:45:1f:17:4b:00: 23:67:95:1f:ad:cb:d4:ee:8b:f7:e5:0f:f1:5f:b7: 6b:5c:97:1c:28:f4:8e:0c:4f:1c:d1:f0:e9:50:5d: 1d:2b:d0:1b:8a:63:1a:ad:19:de:70:1d:c7:ff:d6: 4b:62:a2:bc:87:29:29:b8:53:77:55:44:eb:64:f8: ec:2d:7b:3d:3d:4b:18:e3:c5:0e:4e:7e:66:d0:92: 2c:41:93:13:9f:3a:b2:8b:13:02:6b:5e:b8:6c:92: 7e:a7:30:23:1a:42:91:38:51:54:5b:24:a2:0a:a8: 32:27:a7:bd:9d:22:b5:c0:43:eb:7e:d9:c2:56:8f: 6d:f8:97:b0:a4:5f:d5:85:9a:8c:99:fe:cc:fc:be: c5:22:28:67:82:4b:27:b2:19:62:a3:24:b5:3c:8b: a5:52:c0:1e:a3:74:ff:46:b0:7b:bd:4c:56:b8:e4: 61:02:3c:f3:56:2e:d4:e0:0c:bd:ad:fd:08:8d:75: 77:05:96:99:54:37:e1:8b:af:00:b3:f2:00:fd:85: a5:13:9b:6c:34:30:2b:9a:12:de:ec:7b:29:ff:60: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D3:76:D1:AC:77:32:09:68:27:77:A5:4F:3C:B0:9E:F0:A0:71:A4 X509v3 Authority Key Identifier: keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/84DBC93004CF11E9BA917C34C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.12.104.0-121.12.127.255 121.12.168.0/21 121.14.128.0/19 218.16.117.0-218.16.127.255 Signature Algorithm: sha256WithRSAEncryption 08:9f:50:58:e2:31:9f:96:21:b2:50:10:1b:9f:cd:ec:d5:eb: f0:56:cc:9b:6d:f7:09:11:be:10:50:97:68:3f:26:73:dc:67: 49:c7:94:47:5a:fa:e8:e7:02:c6:fc:61:23:0f:9d:58:60:d6: dd:a4:15:26:72:0d:65:c6:df:b0:4c:72:49:7e:21:63:39:85: 01:66:7f:42:bb:64:0d:16:22:16:14:d8:7b:4d:f9:77:14:c0: 03:d6:24:ce:9f:4f:a2:7d:da:70:f8:9b:e6:ec:7f:7f:b0:2d: 63:33:87:c4:88:ca:4b:97:15:17:ca:fe:32:56:03:ef:e7:b7: bd:29:46:67:f4:fb:fb:d3:f1:26:fb:17:71:8a:40:5f:b7:eb: 49:4a:06:95:5c:bb:74:32:d5:96:ac:71:25:60:ba:9b:5c:32: bf:a6:07:ba:51:e3:28:2e:3f:ab:75:43:6b:df:44:dd:ab:da: 9a:20:6e:21:19:16:08:d3:c5:78:04:74:1a:b9:42:b4:c3:ae: 40:9b:30:8f:fb:9a:96:67:d4:89:d8:3a:4a:d4:c2:9f:d1:a1: da:a2:48:71:83:56:a5:da:c8:60:e5:88:c7:33:0d:d1:50:27: 09:51:d4:ae:18:aa:7a:12:67:04:40:76:3e:f9:f2:c5:b7:7a: 34:89:b9:03 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICHR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1 NkU4QUM4QkEwHhcNMjQwMTAyMTY1NDE1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk0M2ZiNy00Zjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmO12j2Y5NjZQro8X0/Uar++r2o9cOE/D/P6HA7Xz4ndhJL+t955ZRR8XSwAj Z5UfrcvU7ov35Q/xX7drXJccKPSODE8c0fDpUF0dK9AbimMarRnecB3H/9ZLYqK8 hykpuFN3VUTrZPjsLXs9PUsY48UOTn5m0JIsQZMTnzqyixMCa164bJJ+pzAjGkKR OFFUWySiCqgyJ6e9nSK1wEPrftnCVo9t+JewpF/VhZqMmf7M/L7FIihngksnshli oyS1PIulUsAeo3T/RrB7vUxWuORhAjzzVi7U4Ay9rf0IjXV3BZaZVDfhi68As/IA /YWlE5tsNDArmhLe7Hsp/2ASSwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFOLTdtGs dzIJaCd3pU88sJ7woHGkMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5 TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvODREQkM5MzAw NENGMTFFOUJBOTE3QzM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgwDAMEA3kMaAMEB3kMAAMEA3kMqAMEBXkOgDAMAwQA2hB1AwQH 2hAAMA0GCSqGSIb3DQEBCwUAA4IBAQAIn1BY4jGfliGyUBAbn83s1evwVsybbfcJ Eb4QUJdoPyZz3GdJx5RHWvro5wLG/GEjD51YYNbdpBUmcg1lxt+wTHJJfiFjOYUB Zn9Cu2QNFiIWFNh7Tfl3FMAD1iTOn0+ifdpw+Jvm7H9/sC1jM4fEiMpLlxUXyv4y VgPv57e9KUZn9Pv70/Em+xdxikBft+tJSgaVXLt0MtWWrHElYLqbXDK/pge6UeMo Lj+rdUNr30Tdq9qaIG4hGRYI08V4BHQauUK0w65AmzCP+5qWZ9SJ2DpK1MKf0aHa okhxg1al2shg5YjHMw3RUCcJUdSuGKp6EmcEQHY++fLFt3o0ibkD -----END CERTIFICATE-----Generated at Sat May 18 17:37:32 2024 by rpki-client on console-fra.rpki-client.org