$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/329BEBF24BF311EAB4860A6FC4F9AE02.roa File: 329BEBF24BF311EAB4860A6FC4F9AE02.roa (raw, json) Hash identifier: mCWJYcc13zZ2uPoYBjSERJh3FcrlxDm1lS4//jTPyB0= Subject key identifier: 27:51:29:48:3A:EB:45:2F:55:C1:39:35:BF:04:02:40:C8:B5:21:3A Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 2EB9 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/329BEBF24BF311EAB4860A6FC4F9AE02.roa Signing time: Thu 18 May 2023 16:09:10 +0000 ROA not before: Thu 18 May 2023 16:09:10 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 4851 IP address blocks: 117.120.40.0/21 maxlen: 24 119.148.64.0/19 maxlen: 24 202.174.96.0/20 maxlen: 24 2402:e400::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 15:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11961 (0x2eb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: May 18 16:09:10 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64664da6-100f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:47:28:64:b2:c0:12:46:2f:e1:b6:5b:d2:d6: 74:fc:fd:dc:64:ab:6c:c0:ce:f5:2e:d5:a6:cb:32: bf:44:51:d5:c7:84:8c:8c:2a:36:bb:87:76:d1:1d: 19:7d:15:a9:ca:26:3f:ce:2c:24:fa:ae:d4:f3:e4: ff:1b:d4:ff:d7:c6:16:71:eb:74:e1:c7:32:a6:d5: 14:52:bd:a7:f2:4d:5e:23:af:a3:db:d5:d1:52:d1: 4c:a4:8b:16:8c:7a:79:12:a8:16:e6:ba:4b:15:1d: 67:fa:9b:6e:66:49:14:50:13:ed:23:ba:30:f7:6e: 67:23:b7:06:d2:0a:52:30:34:cb:26:68:f1:53:36: 50:04:ce:40:8d:1f:33:ff:b4:db:ca:dd:6c:20:22: b4:34:92:a2:6c:c1:02:fb:6b:fb:e2:65:9e:30:a8: 6b:1d:f0:bb:7d:e8:4f:82:1b:eb:0c:fb:a1:69:da: b3:33:6a:f2:40:b7:be:24:18:6f:b6:39:4b:41:c0: 91:7e:ef:46:58:35:1a:ef:c3:0d:d0:6d:ad:12:c0: 2a:07:e0:90:00:f6:2e:35:2e:db:ac:8a:2b:85:30: 2c:71:02:8e:6c:30:7a:c3:6c:ec:7a:dd:35:fc:69: f9:2d:aa:fa:a9:ba:a6:ae:e0:5c:b4:3b:fd:f3:cd: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:51:29:48:3A:EB:45:2F:55:C1:39:35:BF:04:02:40:C8:B5:21:3A X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/329BEBF24BF311EAB4860A6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.120.40.0/21 119.148.64.0/19 202.174.96.0/20 IPv6: 2402:e400::/32 Signature Algorithm: sha256WithRSAEncryption 0e:4e:40:0a:19:f2:47:d3:d5:ae:14:27:1e:cf:b4:14:04:09: 86:2c:15:82:c3:50:7d:39:d7:4b:73:70:81:75:a4:4d:dd:de: c6:ca:ee:4d:44:94:a2:7d:19:04:fa:22:f1:bd:d3:f1:0e:01: 43:d8:5b:cd:32:ca:68:9b:61:af:db:91:c2:1d:f7:2c:ad:3e: 3a:69:d1:96:4e:d3:06:e8:47:72:3c:ad:69:4b:65:a0:12:f2: ef:14:20:e0:c1:15:db:5c:f7:10:2a:81:fd:ba:79:3a:c9:da: 3a:d9:29:b5:ba:31:f5:76:b5:65:34:c8:b3:97:ef:6e:0e:5c: 46:8e:34:d7:0d:48:54:c2:93:76:d3:7a:34:22:39:44:e7:d0: 8f:c5:c4:f9:d3:96:84:05:ef:87:06:bf:6b:b1:2c:a8:d2:9a: 76:79:8f:21:b2:1e:a8:50:dc:27:6b:75:25:42:b0:25:40:f3: 57:f1:5b:f9:3f:97:83:5e:7c:f3:10:d8:7e:3c:51:0b:7c:10: 66:86:ca:75:7a:72:94:66:d2:a0:3e:d3:70:1d:5b:e2:e5:de: 95:46:24:6a:f8:a9:aa:08:48:bb:82:bc:c4:a2:78:30:cd:7e: 36:45:ee:4f:95:f0:7f:03:8f:9d:39:70:62:f8:2c:ee:14:7b: b9:05:f7:50 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICLrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjMwNTE4MTYwOTEwWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDY2NGRhNi0xMDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUcoZLLAEkYv4bZb0tZ0/P3cZKtswM71LtWmyzK/RFHVx4SMjCo2u4d20R0Z fRWpyiY/ziwk+q7U8+T/G9T/18YWcet04ccyptUUUr2n8k1eI6+j29XRUtFMpIsW jHp5EqgW5rpLFR1n+ptuZkkUUBPtI7ow925nI7cG0gpSMDTLJmjxUzZQBM5AjR8z /7Tbyt1sICK0NJKibMEC+2v74mWeMKhrHfC7fehPghvrDPuhadqzM2ryQLe+JBhv tjlLQcCRfu9GWDUa78MN0G2tEsAqB+CQAPYuNS7brIorhTAscQKObDB6w2zset01 /Gn5Lar6qbqmruBctDv98830UwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCdRKUg6 60UvVcE5Nb8EAkDItSE6MB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzUyRjQvODAxNjRGNEVGOEJDMTFFMkFEOTE4MTNCNTkxMUVBMzIvMzI5QkVCRjI0 QkYzMTFFQUI0ODYwQTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAN1eCgDBAV3lEADBATKrmAwDQQCAAIwBwMFACQC5AAwDQYJ KoZIhvcNAQELBQADggEBAA5OQAoZ8kfT1a4UJx7PtBQECYYsFYLDUH0510tzcIF1 pE3d3sbK7k1ElKJ9GQT6IvG90/EOAUPYW80yymibYa/bkcId9yytPjpp0ZZO0wbo R3I8rWlLZaAS8u8UIODBFdtc9xAqgf26eTrJ2jrZKbW6MfV2tWU0yLOX724OXEaO NNcNSFTCk3bTejQiOUTn0I/FxPnTloQF74cGv2uxLKjSmnZ5jyGyHqhQ3CdrdSVC sCVA81fxW/k/l4NefPMQ2H48UQt8EGaGynV6cpRm0qA+03AdW+Ll3pVGJGr4qaoI SLuCvMSieDDNfjZF7k+V8H8Dj505cGL4LO4Ue7kF91A= -----END CERTIFICATE-----Generated at Thu May 16 17:51:21 2024 by rpki-client on console-ams.rpki-client.org