$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/010E8732D43411EB8586EA31C4F9AE02.roa File: 010E8732D43411EB8586EA31C4F9AE02.roa (raw, json) Hash identifier: lhmAwDS/ueuyTAGYheVLKMhDi3MITfuL0lNRMF6yh0Q= Subject key identifier: F2:7D:2F:73:F1:D2:69:B0:20:41:FE:46:1F:84:D9:33:46:8F:25:67 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2946 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/010E8732D43411EB8586EA31C4F9AE02.roa Signing time: Thu 14 Mar 2024 07:28:10 +0000 ROA not before: Thu 14 Mar 2024 07:28:10 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 4913 IP address blocks: 202.80.161.0/24 maxlen: 24 202.80.162.0/24 maxlen: 24 202.80.163.0/24 maxlen: 24 202.80.164.0/24 maxlen: 24 202.80.165.0/24 maxlen: 24 202.80.168.0/24 maxlen: 24 202.80.169.0/24 maxlen: 24 202.80.170.0/24 maxlen: 24 202.80.171.0/24 maxlen: 24 202.80.172.0/24 maxlen: 24 202.80.173.0/24 maxlen: 24 202.80.174.0/24 maxlen: 24 202.80.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 15:54:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10566 (0x2946) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Mar 14 07:28:10 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65f2a70a-f4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c7:5d:8b:a7:84:6f:9f:50:77:d4:99:98:20: 0c:50:df:ed:59:12:a5:a2:57:76:8e:04:7d:2c:40: 95:52:8c:6b:79:c8:02:07:85:52:0e:27:3c:37:0c: d1:8b:d8:3a:3d:17:04:2c:8a:6d:70:a1:81:9e:6c: 82:0f:b3:df:b5:50:ac:f9:0f:9a:01:5f:94:da:77: 52:3e:c8:29:9d:81:8f:58:6a:0b:9e:de:36:cb:da: 34:c9:64:cb:f7:e2:da:66:6c:af:f9:36:25:bf:29: 41:b5:8e:74:0e:f2:78:4d:4b:37:8c:c8:91:8f:9a: 79:0e:fb:c7:38:25:75:a8:b6:f0:8c:be:1b:1d:2a: 4c:69:f3:46:a2:50:f4:2c:db:a9:e4:1e:c5:6e:76: 7f:9e:f6:95:df:3b:16:c2:e9:85:57:ad:e1:d9:39: be:33:5f:96:6e:c1:5c:76:52:59:cb:0a:75:b1:0f: 4e:b5:8c:b5:5a:fb:7b:85:48:95:04:df:3a:90:a8: 14:b5:2d:f5:93:24:45:7f:cd:16:d0:0f:db:62:32: 0a:d6:96:16:fb:72:5d:32:e6:4f:76:56:46:be:84: 19:fb:d0:62:94:e8:90:27:c0:e8:08:c9:c5:72:fc: 97:ec:81:26:3c:55:15:af:d8:28:16:05:d8:bf:10: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7D:2F:73:F1:D2:69:B0:20:41:FE:46:1F:84:D9:33:46:8F:25:67 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/010E8732D43411EB8586EA31C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.80.161.0-202.80.165.255 202.80.168.0/21 Signature Algorithm: sha256WithRSAEncryption 3d:d6:95:55:b9:d6:21:d6:98:4c:68:c1:22:e0:96:56:93:1c: 94:76:1e:cf:3a:d0:73:35:54:19:99:89:71:88:05:aa:10:c8: 19:54:10:3e:b5:d6:24:f0:23:14:91:4f:bb:5b:eb:89:49:84: 88:35:94:6e:6b:05:dc:f5:24:6c:91:22:c4:44:a7:f1:b4:13: 0e:e4:9a:a8:8a:80:e8:90:c8:4f:f6:f5:b1:e5:03:d5:27:c3: 20:18:50:10:ee:03:4d:86:95:4c:ce:a9:67:c1:40:28:ff:b8: 1e:02:cc:6f:6f:38:67:60:a5:76:72:92:7b:35:24:db:af:28: 07:20:71:53:59:ad:6b:f4:26:81:5e:55:a0:43:92:d8:a3:bf: ce:60:84:4f:73:22:2e:f3:6c:39:22:4b:db:b5:b5:b1:db:f3: 49:42:cd:ad:65:83:ed:02:c2:26:10:82:16:31:6b:60:1d:12: 2d:b4:50:56:f9:47:8f:bf:d2:a1:86:2b:33:59:b1:65:7d:da: bc:e1:13:51:37:c5:44:c8:b1:1d:86:a1:51:77:05:44:3f:9e: 29:c1:68:64:7b:e7:5b:9d:58:60:2c:c8:61:aa:b5:f0:58:53: 35:e4:4b:81:b1:f3:09:d9:c3:25:7e:9c:df:aa:38:66:ab:c8: 7e:16:9b:fc -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICKUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjQwMzE0MDcyODEwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYyYTcwYS1mNGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Mddi6eEb59Qd9SZmCAMUN/tWRKlold2jgR9LECVUoxrecgCB4VSDic8NwzR i9g6PRcELIptcKGBnmyCD7PftVCs+Q+aAV+U2ndSPsgpnYGPWGoLnt42y9o0yWTL 9+LaZmyv+TYlvylBtY50DvJ4TUs3jMiRj5p5DvvHOCV1qLbwjL4bHSpMafNGolD0 LNup5B7FbnZ/nvaV3zsWwumFV63h2Tm+M1+WbsFcdlJZywp1sQ9OtYy1Wvt7hUiV BN86kKgUtS31kyRFf80W0A/bYjIK1pYW+3JdMuZPdlZGvoQZ+9BilOiQJ8DoCMnF cvyX7IEmPFUVr9goFgXYvxBaCQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFPJ9L3Px 0mmwIEH+Rh+E2TNGjyVnMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjIwRUQvRTdFMjMxRTYzNzAwMTFFNEIzMkJEMDZCQzRGOUFFMDIvMDEwRTg3MzJE NDM0MTFFQjg1ODZFQTMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAMpQoQMEAcpQpAMEA8pQqDANBgkqhkiG9w0BAQsFAAOC AQEAPdaVVbnWIdaYTGjBIuCWVpMclHYezzrQczVUGZmJcYgFqhDIGVQQPrXWJPAj FJFPu1vriUmEiDWUbmsF3PUkbJEixESn8bQTDuSaqIqA6JDIT/b1seUD1SfDIBhQ EO4DTYaVTM6pZ8FAKP+4HgLMb284Z2CldnKSezUk268oByBxU1mta/QmgV5VoEOS 2KO/zmCET3MiLvNsOSJL27W1sdvzSULNrWWD7QLCJhCCFjFrYB0SLbRQVvlHj7/S oYYrM1mxZX3avOETUTfFRMixHYahUXcFRD+eKcFoZHvnW51YYCzIYaq18FhTNeRL gbHzCdnDJX6c36o4ZqvIfhab/A== -----END CERTIFICATE-----Generated at Fri May 24 17:56:33 2024 by rpki-client on console-fra.rpki-client.org