$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa File: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (raw, json) Hash identifier: PS+cNqIF54kPaI4om+gp58yFr0sx/dvjCXLPY9dgm5Y= Subject key identifier: 1F:02:9A:5D:A8:9B:ED:AA:CF:1B:0D:56:0D:B3:2D:3F:0B:0C:B1:53 Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Certificate serial: 2376 Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa Signing time: Tue 24 Oct 2023 16:02:55 +0000 ROA not before: Tue 24 Oct 2023 16:02:55 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 9930 IP address blocks: 119.110.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9078 (0x2376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Validity Not Before: Oct 24 16:02:55 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6537eaaf-da02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:b9:54:79:b0:25:8b:b6:18:44:f2:ba:6a: 23:43:cb:a0:d4:7a:0a:f2:79:e0:68:e8:9a:e8:cb: f6:fd:b0:3b:9f:94:33:c2:b6:76:e4:4e:6b:77:39: 5a:8a:1e:57:60:5b:80:3e:8a:20:4a:10:7e:67:3c: 5d:25:77:30:07:57:48:4b:1f:22:d1:dd:c3:1e:7d: 5f:07:89:bc:89:4a:ff:d1:d8:05:f7:6d:6c:6a:5b: 86:f4:01:0c:e7:be:dd:fb:7f:ee:90:e8:56:65:c5: cc:d4:d0:47:63:71:a0:dd:36:99:5f:c3:f0:cf:89: b1:f7:d7:15:01:0d:46:6b:cb:cb:1c:6f:6a:9b:15: 1d:fa:6e:1b:bf:e8:55:83:f0:02:5c:22:db:2d:ce: da:4c:58:b7:4b:73:24:c6:1f:3b:91:8a:11:5a:b1: 3b:a4:1e:17:a4:11:de:e1:ad:c7:ed:81:fe:15:89: 1a:f1:5d:18:70:39:19:c7:ae:32:c0:d3:fd:3a:64: 1c:7b:37:3f:11:03:e9:9b:d0:51:bd:b3:ea:d1:b1: 55:fd:1a:db:63:29:af:4c:ea:b2:fa:3f:2c:64:e5: 66:8a:ea:73:70:d7:7d:81:66:a1:30:7e:86:c3:8f: 8d:0a:31:3d:d9:16:66:85:5e:fd:eb:0e:c9:9b:81: ed:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:02:9A:5D:A8:9B:ED:AA:CF:1B:0D:56:0D:B3:2D:3F:0B:0C:B1:53 X509v3 Authority Key Identifier: keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/ABA9F4B8AF8411EABF9F844DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.110.128.0/18 Signature Algorithm: sha256WithRSAEncryption 59:78:81:44:3e:9f:64:3e:aa:43:56:90:6d:73:5a:dd:02:8b: 49:47:3d:dd:36:aa:ec:14:36:d7:08:a3:c9:5f:5f:60:74:d6: c7:21:6a:76:77:c7:58:66:78:f5:3a:f5:bf:8b:fe:85:31:99: 6f:b7:f9:40:95:7e:47:1a:27:5d:f5:50:4d:d8:99:5e:01:c3: ec:28:b1:be:97:1f:06:41:c5:9e:53:9d:6b:40:c2:c4:29:86: fd:20:bd:e1:6c:17:e6:ca:b0:25:5b:aa:d7:ef:15:c6:55:1a: 56:f5:cb:cc:e9:cc:75:cb:83:0e:aa:0d:07:fa:6b:6f:f2:46: 85:8d:24:98:dd:e0:7d:a0:97:c4:53:61:57:57:70:e4:9d:9a: b1:e5:c5:a9:cf:02:e2:de:16:14:6c:4e:50:63:fa:c5:f1:04: 0c:cf:28:5f:bd:a0:61:34:e4:98:a4:c3:b3:4f:98:30:23:81: 03:96:a2:c8:15:17:2f:52:19:87:4b:c0:34:8a:a5:92:77:ac: 5f:0b:5a:72:39:e5:5e:ed:4b:9e:0a:bc:05:e3:b1:33:ec:3d: 18:b1:a5:34:5b:17:7e:71:39:3b:67:62:b3:8c:61:a4:8a:a7: 7d:ce:88:ae:1a:de:4d:d8:ac:6a:46:6b:fd:31:68:db:2d:63: 84:12:ea:79 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICI3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz NEVCNTc5MUMwHhcNMjMxMDI0MTYwMjU1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTM3ZWFhZi1kYTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qi5VHmwJYu2GETyumojQ8ug1HoK8nngaOia6Mv2/bA7n5QzwrZ25E5rdzla ih5XYFuAPoogShB+ZzxdJXcwB1dISx8i0d3DHn1fB4m8iUr/0dgF921saluG9AEM 577d+3/ukOhWZcXM1NBHY3Gg3TaZX8Pwz4mx99cVAQ1Ga8vLHG9qmxUd+m4bv+hV g/ACXCLbLc7aTFi3S3Mkxh87kYoRWrE7pB4XpBHe4a3H7YH+FYka8V0YcDkZx64y wNP9OmQcezc/EQPpm9BRvbPq0bFV/RrbYymvTOqy+j8sZOVmiupzcNd9gWahMH6G w4+NCjE92RZmhV796w7Jm4HtRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB8Cml2o m+2qzxsNVg2zLT8LDLFTMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2 RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjUwQTUvMTdERkIzNUE0NkU2MTFFNUIwOERBMTdCQzRGOUFFMDIvQUJBOUY0QjhB Rjg0MTFFQUJGOUY4NDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAZ3boAwDQYJKoZIhvcNAQELBQADggEBAFl4gUQ+n2Q+qkNW kG1zWt0Ci0lHPd02quwUNtcIo8lfX2B01schanZ3x1hmePU69b+L/oUxmW+3+UCV fkcaJ131UE3YmV4Bw+wosb6XHwZBxZ5TnWtAwsQphv0gveFsF+bKsCVbqtfvFcZV Glb1y8zpzHXLgw6qDQf6a2/yRoWNJJjd4H2gl8RTYVdXcOSdmrHlxanPAuLeFhRs TlBj+sXxBAzPKF+9oGE05Jikw7NPmDAjgQOWosgVFy9SGYdLwDSKpZJ3rF8LWnI5 5V7tS54KvAXjsTPsPRixpTRbF35xOTtnYrOMYaSKp33OiK4a3k3YrGpGa/0xaNst Y4QS6nk= -----END CERTIFICATE-----Generated at Sat May 18 17:20:05 2024 by rpki-client on console-ams.rpki-client.org