$ rpki-client -vvf rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/1F1440787A1D11EEA924361CC4F9AE02.roa File: 1F1440787A1D11EEA924361CC4F9AE02.roa (raw, json) Hash identifier: jAO7lY7VcvSQYu5LMEviNEfsPvvggvkCS3O1ZJi1CV4= Subject key identifier: 97:E8:CB:E9:57:CD:A1:9E:73:1E:2F:53:5C:9C:87:78:67:71:7D:21 Certificate issuer: /CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Certificate serial: 0AC0 Authority key identifier: 9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/1F1440787A1D11EEA924361CC4F9AE02.roa Signing time: Mon 04 Dec 2023 19:47:29 +0000 ROA not before: Mon 04 Dec 2023 19:47:29 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135673 IP address blocks: 123.108.90.0/23 maxlen: 23 123.108.90.0/24 maxlen: 24 123.108.91.0/24 maxlen: 24 2407:d380::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91814CB/serialNumber=9AA53D27BE1BB614953C379D39E0BBC5F1C124A7 Validity Not Before: Dec 4 19:47:29 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656e2cd1-c7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1c:26:9f:18:47:55:2b:da:a1:8f:4a:59:ed: 42:6f:fe:02:7f:99:32:d3:c9:27:62:84:ec:87:31: ca:e1:39:82:75:d6:55:4e:2f:6d:e2:89:e1:26:2f: 59:8a:77:ec:7a:fb:ce:1b:33:a6:54:c2:34:d0:4e: 62:7e:9e:d4:81:dd:6d:b2:9a:f9:3e:22:9f:56:d0: ae:b9:40:3d:51:94:46:00:92:64:c2:da:ff:8a:2c: 79:8a:0c:83:7f:60:b4:07:bf:21:9a:e2:c2:e6:f0: 4a:34:6f:f4:5a:b6:1e:e7:8a:f5:88:24:45:59:36: 7a:b0:6f:e7:ed:83:ce:59:a8:de:9a:f3:d0:ca:0f: 94:81:af:3d:6c:66:44:42:18:68:55:97:58:52:5c: 4c:89:20:03:3e:7b:1c:5b:1d:34:23:1c:76:2e:f8: 36:a8:fb:d9:72:99:a4:86:7b:14:4e:42:d5:50:16: 5d:80:b3:d7:b9:b9:e6:f5:0b:5c:a4:98:e0:4b:c2: 92:1c:18:40:9c:5b:49:98:7e:aa:94:9c:3c:82:0a: 52:ea:7d:1d:b4:7d:e0:90:b7:4d:2d:88:ab:b3:11: e8:d5:5d:5a:1d:10:b6:0b:fd:f0:5f:85:33:f3:47: 9c:c0:ce:cb:6e:63:38:3c:8e:77:e3:7a:64:39:3d: 02:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E8:CB:E9:57:CD:A1:9E:73:1E:2F:53:5C:9C:87:78:67:71:7D:21 X509v3 Authority Key Identifier: keyid:9A:A5:3D:27:BE:1B:B6:14:95:3C:37:9D:39:E0:BB:C5:F1:C1:24:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/mqU9J74bthSVPDedOeC7xfHBJKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mqU9J74bthSVPDedOeC7xfHBJKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91814CB/ADEC543A1D7811EA8D301744C4F9AE02/1F1440787A1D11EEA924361CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 123.108.90.0/23 IPv6: 2407:d380::/32 Signature Algorithm: sha256WithRSAEncryption cc:f0:5e:3e:1b:13:95:92:a2:fe:70:e0:e5:43:99:50:f3:29: cc:c9:50:66:52:80:d4:25:da:66:59:68:74:b7:86:21:4f:53: 88:b9:35:87:94:a3:74:9b:47:60:b3:3e:3b:fb:47:21:cc:29: fd:ca:e5:e0:7d:0a:ef:89:6b:dc:4e:7b:71:a6:31:6c:b5:42: 0f:05:8c:ac:08:7c:0f:b7:1d:39:c9:1c:9c:06:24:0e:44:34: 21:24:0e:0b:62:60:e0:85:9d:4e:ee:0a:bc:bf:c9:13:2c:e0: 7c:54:e8:57:7f:de:d2:b4:8a:09:57:9b:85:25:02:ae:ae:0c: 49:c7:21:be:27:41:79:39:3f:51:5c:3c:34:ba:bc:9a:a9:47: c1:40:5b:f8:35:5b:fb:f7:ea:7d:2f:4d:99:62:54:0b:49:fa: cf:d9:1b:7d:ca:ac:60:cc:80:1c:f1:81:1a:70:1d:44:45:bf: dd:2d:39:8e:da:95:2a:b5:cb:79:f5:c4:89:d1:e4:68:f1:fc: c3:33:d5:42:06:9a:43:38:80:55:45:a7:7c:7f:36:8e:7c:38: 17:fd:90:f3:28:6a:6e:e7:09:0a:48:ff:1f:b5:ca:79:19:df: ff:f4:42:ab:83:e5:aa:81:c6:02:84:98:0f:28:ca:ea:93:58: c1:b9:fb:4b -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODE0Q0IxMTAvBgNVBAUTKDlBQTUzRDI3QkUxQkI2MTQ5NTNDMzc5RDM5RTBCQkM1 RjFDMTI0QTcwHhcNMjMxMjA0MTk0NzI5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZlMmNkMS1jN2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RwmnxhHVSvaoY9KWe1Cb/4Cf5ky08knYoTshzHK4TmCddZVTi9t4onhJi9Z infsevvOGzOmVMI00E5ifp7Ugd1tspr5PiKfVtCuuUA9UZRGAJJkwtr/iix5igyD f2C0B78hmuLC5vBKNG/0WrYe54r1iCRFWTZ6sG/n7YPOWajemvPQyg+Uga89bGZE QhhoVZdYUlxMiSADPnscWx00Ixx2Lvg2qPvZcpmkhnsUTkLVUBZdgLPXubnm9Qtc pJjgS8KSHBhAnFtJmH6qlJw8ggpS6n0dtH3gkLdNLYirsxHo1V1aHRC2C/3wX4Uz 80ecwM7LbmM4PI5343pkOT0CYQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJfoy+lX zaGecx4vU1ych3hncX0hMB8GA1UdIwQYMBaAFJqlPSe+G7YUlTw3nTngu8XxwSSn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTRDQi9BREVDNTQzQTFE NzgxMUVBOEQzMDE3NDRDNEY5QUUwMi9tcVU5Sjc0YnRoU1ZQRGVkT2VDN3hmSEJK S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21xVTlKNzRidGhTVlBEZWRPZUM3eGZIQkpLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODE0Q0IvQURFQzU0M0ExRDc4MTFFQThEMzAxNzQ0QzRGOUFFMDIvMUYxNDQwNzg3 QTFEMTFFRUE5MjQzNjFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAF7bFowDQQCAAIwBwMFACQH04AwDQYJKoZIhvcNAQELBQAD ggEBAMzwXj4bE5WSov5w4OVDmVDzKczJUGZSgNQl2mZZaHS3hiFPU4i5NYeUo3Sb R2CzPjv7RyHMKf3K5eB9Cu+Ja9xOe3GmMWy1Qg8FjKwIfA+3HTnJHJwGJA5ENCEk DgtiYOCFnU7uCry/yRMs4HxU6Fd/3tK0iglXm4UlAq6uDEnHIb4nQXk5P1FcPDS6 vJqpR8FAW/g1W/v36n0vTZliVAtJ+s/ZG33KrGDMgBzxgRpwHURFv90tOY7alSq1 y3n1xInR5Gjx/MMz1UIGmkM4gFVFp3x/No58OBf9kPMoam7nCQpI/x+1ynkZ3//0 QquD5aqBxgKEmA8oyuqTWMG5+0s= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:20 2024 by rpki-client on console-ams.rpki-client.org