$ rpki-client -vvf rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa File: 91FAB1ECDA6011ED9BC6175FC4F9AE02.roa (raw, json) Hash identifier: CqW1hlz94OPhJLdVFAuZObFGW/52L113z6akbmZDQp4= Subject key identifier: C7:5C:5D:E5:9A:91:20:A9:FD:8F:C5:DE:F0:F4:84:5D:9C:62:4E:99 Certificate issuer: /CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Certificate serial: B5 Authority key identifier: E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa Signing time: Fri 15 Mar 2024 06:08:25 +0000 ROA not before: Fri 15 Mar 2024 06:08:25 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 38079 IP address blocks: 210.48.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170C53/serialNumber=E1D143D9D8EA02224C1CB0C915ECB84EE28B5AAA Validity Not Before: Mar 15 06:08:25 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f3e5d9-4a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:6e:e8:fe:6e:d8:38:5e:e2:e2:d1:24:39: dc:a4:e6:b5:0c:ed:ee:fd:52:26:a7:af:db:ce:fe: 2b:71:11:97:b0:34:c5:e5:47:57:86:71:06:3b:4b: cf:9a:ac:e0:bf:45:ad:da:8c:28:5b:3c:c0:f8:27: 31:bf:26:2d:84:6f:2c:a7:b4:40:8f:f0:09:bb:da: df:10:48:30:8f:b7:1f:a8:c0:7b:b8:09:41:b1:a1: 31:37:ea:09:c8:df:aa:be:fe:20:c6:73:60:a6:fb: 59:04:7f:02:0c:1a:ed:c8:27:8e:2c:43:57:70:60: ad:2b:10:4f:d5:f5:36:ca:a5:54:eb:d9:19:96:23: 24:68:b3:25:9b:f4:97:42:93:8c:74:4c:c3:65:3b: a3:b0:0e:ee:b3:c0:ad:c1:f5:df:cf:f4:5e:6f:27: d2:6a:99:d6:7b:89:16:4e:d2:93:06:f2:38:78:6e: b2:62:6c:1d:9a:ce:79:12:c1:cb:14:00:ae:39:9e: 13:ec:e2:09:47:eb:80:d2:47:9c:18:6c:3d:20:7e: 84:e1:c4:9b:69:a5:09:78:b3:b3:89:bc:2a:73:2e: 7f:87:fb:32:3a:1f:04:ae:96:5d:b7:4a:05:68:93: dd:dd:b4:85:6a:97:de:a7:30:82:cf:76:3b:2a:16: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5C:5D:E5:9A:91:20:A9:FD:8F:C5:DE:F0:F4:84:5D:9C:62:4E:99 X509v3 Authority Key Identifier: keyid:E1:D1:43:D9:D8:EA:02:22:4C:1C:B0:C9:15:EC:B8:4E:E2:8B:5A:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/4dFD2djqAiJMHLDJFey4TuKLWqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4dFD2djqAiJMHLDJFey4TuKLWqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170C53/CE445BD0DA5B11ED96747C5AC4F9AE02/91FAB1ECDA6011ED9BC6175FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.48.176.0/24 Signature Algorithm: sha256WithRSAEncryption 77:25:04:02:f8:92:ba:70:d1:38:18:b3:58:e8:6f:28:43:42: b9:3e:cb:fa:89:4b:b3:c6:06:e3:01:d8:e7:91:37:de:d0:90: e6:ae:fc:4d:23:79:a5:34:7d:34:3d:82:72:22:8b:e6:11:7f: 07:7f:f9:f4:29:f6:0c:59:9e:96:79:76:8a:44:4b:72:8f:2a: 01:db:52:f5:75:bc:88:55:c6:4b:ee:86:a6:7f:6d:b5:ea:2c: 83:ac:78:ec:af:66:a4:99:d1:c8:fa:05:93:9f:ec:99:1d:a4: 91:3a:2b:e4:05:cd:1c:d5:64:7a:29:3d:16:2e:e0:76:55:a0: 62:60:5e:a6:41:22:55:02:31:d3:00:e6:42:d4:2d:b4:37:24: ba:d8:d7:76:b3:a4:38:21:4b:7e:db:a8:7e:80:32:9b:d8:53: 26:1e:15:48:be:d8:b1:ae:41:40:1a:04:b2:51:66:09:c3:bb: 49:9a:0d:e6:92:cb:37:e2:21:59:49:76:0c:95:0f:95:98:a3: 8e:13:c5:4d:8b:cf:9c:1a:71:b4:01:16:b8:e6:32:b5:7b:7f: 30:39:fb:be:0c:56:cc:66:c0:8d:0c:35:b0:61:ae:f3:66:f1: 43:13:f7:58:43:65:4d:38:8c:0b:a0:83:61:99:f2:2f:60:ad: 77:cd:9f:d8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBDNTMxMTAvBgNVBAUTKEUxRDE0M0Q5RDhFQTAyMjI0QzFDQjBDOTE1RUNCODRF RTI4QjVBQUEwHhcNMjQwMzE1MDYwODI1WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzZTVkOS00YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz6Fu6P5u2Dhe4uLRJDncpOa1DO3u/VImp6/bzv4rcRGXsDTF5UdXhnEGO0vP mqzgv0Wt2owoWzzA+CcxvyYthG8sp7RAj/AJu9rfEEgwj7cfqMB7uAlBsaExN+oJ yN+qvv4gxnNgpvtZBH8CDBrtyCeOLENXcGCtKxBP1fU2yqVU69kZliMkaLMlm/SX QpOMdEzDZTujsA7us8CtwfXfz/RebyfSapnWe4kWTtKTBvI4eG6yYmwdms55EsHL FACuOZ4T7OIJR+uA0kecGGw9IH6E4cSbaaUJeLOzibwqcy5/h/syOh8ErpZdt0oF aJPd3bSFapfepzCCz3Y7KhZRWwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMdcXeWa kSCp/Y/F3vD0hF2cYk6ZMB8GA1UdIwQYMBaAFOHRQ9nY6gIiTBywyRXsuE7ii1qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEM1My9DRTQ0NUJEMERB NUIxMUVEOTY3NDdDNUFDNEY5QUUwMi80ZEZEMmRqcUFpSk1ITERKRmV5NFR1S0xX cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRkRkQyZGpxQWlKTUhMREpGZXk0VHVLTFdxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBDNTMvQ0U0NDVCRDBEQTVCMTFFRDk2NzQ3QzVBQzRGOUFFMDIvOTFGQUIxRUNE QTYwMTFFRDlCQzYxNzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADSMLAwDQYJKoZIhvcNAQELBQADggEBAHclBAL4krpw0TgY s1jobyhDQrk+y/qJS7PGBuMB2OeRN97QkOau/E0jeaU0fTQ9gnIii+YRfwd/+fQp 9gxZnpZ5dopES3KPKgHbUvV1vIhVxkvuhqZ/bbXqLIOseOyvZqSZ0cj6BZOf7Jkd pJE6K+QFzRzVZHopPRYu4HZVoGJgXqZBIlUCMdMA5kLULbQ3JLrY13azpDghS37b qH6AMpvYUyYeFUi+2LGuQUAaBLJRZgnDu0maDeaSyzfiIVlJdgyVD5WYo44TxU2L z5wacbQBFrjmMrV7fzA5+74MVsxmwI0MNbBhrvNm8UMT91hDZU04jAugg2GZ8i9g rXfNn9g= -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:33 2024 by rpki-client on console-fra.rpki-client.org