$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa File: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (raw, json) Hash identifier: s3Af68TNCkvJmIaaAZIqx3F3CV/1jXfTLZY7Q/GCjCM= Subject key identifier: 20:90:CE:40:B6:42:00:06:88:A2:B9:66:24:A9:E1:16:B6:D5:FC:60 Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Certificate serial: 1B88 Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa Signing time: Fri 20 Oct 2023 14:40:35 +0000 ROA not before: Fri 20 Oct 2023 14:40:35 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 38710 IP address blocks: 119.30.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 14:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7048 (0x1b88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8 Validity Not Before: Oct 20 14:40:35 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65329163-e9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:10:69:2b:5e:7a:59:ea:2a:54:51:56:0a: 3a:53:93:08:bc:e2:28:63:20:1a:5b:0f:85:ec:35: 3e:40:f7:1d:87:89:b1:28:ec:86:e0:a9:17:f3:16: 6b:fa:3a:10:aa:5f:17:0b:f7:09:4a:02:e3:05:48: f1:68:4e:1f:69:aa:b1:49:96:1a:72:16:28:23:c8: 0d:dc:84:a1:50:b0:ab:eb:99:10:06:63:57:b6:78: f6:d0:87:12:29:26:26:1a:3a:35:d8:57:b7:fd:e3: a8:09:75:7e:e1:e5:1a:eb:92:71:f8:69:83:03:9f: 2c:76:d7:43:34:5f:7d:dd:5b:cc:01:96:2a:cb:d3: 83:d7:74:a5:03:13:c1:84:b2:28:3e:28:06:69:b9: 93:8e:a4:53:16:15:f9:fe:4d:bc:ec:8c:d6:b4:77: 3f:12:3f:2a:5d:c0:dc:71:c8:18:bf:8a:c1:69:c9: 64:fd:bb:f0:c1:b3:e9:48:cb:a8:ce:8d:af:18:90: 95:10:0a:07:6f:1f:d2:03:47:84:a0:77:cb:2c:51: 2e:77:87:9f:4f:a4:06:b3:a3:fb:49:9a:79:63:60: 2c:43:98:06:d2:5f:91:78:15:dc:2d:61:bb:fe:ab: d6:01:54:4c:d3:d3:de:16:77:d8:58:20:77:11:eb: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:90:CE:40:B6:42:00:06:88:A2:B9:66:24:A9:E1:16:B6:D5:FC:60 X509v3 Authority Key Identifier: keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/5D24529CAB0C11EA8D5ADE09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.30.88.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:61:e8:d1:21:2a:1e:e1:3e:fb:69:ef:fa:f4:d5:85:c3:b2: 21:8b:85:73:fb:60:92:3e:3d:82:25:d3:78:f9:e8:98:22:c5: 93:0f:6e:a3:7a:3c:97:46:d0:e6:ad:c8:ee:7f:f1:51:0d:77: 0b:29:f3:f5:01:5b:f2:36:cf:88:1d:f8:46:8e:27:65:9d:98: a2:dd:a1:29:1a:53:f2:fa:19:4b:3e:1a:3e:a9:66:34:8c:ef: c3:34:db:b8:48:fb:6c:08:9b:9b:b1:c0:68:93:0c:ed:52:ed: f9:86:b6:a8:b3:b6:6e:c0:da:d8:12:89:91:24:6b:40:4a:ec: 39:25:2b:f9:ea:b5:72:33:85:5a:f4:d2:73:de:2f:ae:42:6c: 3a:be:fe:ae:79:fd:ea:a9:7b:e2:76:40:71:04:6b:5f:df:95: 04:27:2d:23:1f:3b:9e:96:9e:8a:c0:37:bc:30:bd:6c:06:55: 6a:d1:58:d6:a4:c0:b8:fc:bd:14:b1:96:a1:e0:2e:16:15:2d: b2:ba:4e:a9:85:a1:7d:92:25:92:47:1c:5f:90:fa:11:1a:5f: 57:f6:7f:6c:6c:7d:10:6c:8d:44:87:e8:ee:61:ae:c2:37:7f: d6:59:bd:14:11:69:44:ec:f2:30:17:26:f2:8d:29:93:bc:ee: c7:5e:4f:59 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICG4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1NjgxMTAvBgNVBAUTKDY3MDk3RTQ5MkY3M0Q2REJEMzFGQTAxNkEyRDVCNUI4 NkE5QjNGRDgwHhcNMjMxMDIwMTQ0MDM1WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyOTE2My1lOWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5UQaSteelnqKlRRVgo6U5MIvOIoYyAaWw+F7DU+QPcdh4mxKOyG4KkX8xZr +joQql8XC/cJSgLjBUjxaE4faaqxSZYachYoI8gN3IShULCr65kQBmNXtnj20IcS KSYmGjo12Fe3/eOoCXV+4eUa65Jx+GmDA58sdtdDNF993VvMAZYqy9OD13SlAxPB hLIoPigGabmTjqRTFhX5/k287IzWtHc/Ej8qXcDcccgYv4rBaclk/bvwwbPpSMuo zo2vGJCVEAoHbx/SA0eEoHfLLFEud4efT6QGs6P7SZp5Y2AsQ5gG0l+ReBXcLWG7 /qvWAVRM09PeFnfYWCB3EesBkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCCQzkC2 QgAGiKK5ZiSp4Ra21fxgMB8GA1UdIwQYMBaAFGcJfkkvc9bb0x+gFqLVtbhqmz/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU2OC9CRDFBOTVEMjFE ODcxMUUyOUJFM0U2REYwOEIwMkNEMi9ad2wtU1M5ejF0dlRINkFXb3RXMXVHcWJQ OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3bC1TUzl6MXR2VEg2QVdvdFcxdUdxYlA5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjU1NjgvQkQxQTk1RDIxRDg3MTFFMjlCRTNFNkRGMDhCMDJDRDIvNUQyNDUyOUNB QjBDMTFFQThENUFERTA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB3HlgwDQYJKoZIhvcNAQELBQADggEBAIth6NEhKh7hPvtp 7/r01YXDsiGLhXP7YJI+PYIl03j56JgixZMPbqN6PJdG0OatyO5/8VENdwsp8/UB W/I2z4gd+EaOJ2WdmKLdoSkaU/L6GUs+Gj6pZjSM78M027hI+2wIm5uxwGiTDO1S 7fmGtqiztm7A2tgSiZEka0BK7DklK/nqtXIzhVr00nPeL65CbDq+/q55/eqpe+J2 QHEEa1/flQQnLSMfO56WnorAN7wwvWwGVWrRWNakwLj8vRSxlqHgLhYVLbK6TqmF oX2SJZJHHF+Q+hEaX1f2f2xsfRBsjUSH6O5hrsI3f9ZZvRQRaUTs8jAXJvKNKZO8 7sdeT1k= -----END CERTIFICATE-----Generated at Tue May 28 15:25:25 2024 by rpki-client on console-fra.rpki-client.org