$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/262C092A2E2D11EBAC0EFC81C4F9AE02.roa File: 262C092A2E2D11EBAC0EFC81C4F9AE02.roa (raw, json) Hash identifier: 3IIecQKzLxW7T8UsqO6hMoSdvHGtr5lECygMGwguvfw= Subject key identifier: 45:5E:AB:EF:E1:08:A0:9A:6A:95:95:16:63:3B:98:36:3F:B6:EB:67 Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0A25 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/262C092A2E2D11EBAC0EFC81C4F9AE02.roa Signing time: Mon 18 Mar 2024 20:49:08 +0000 ROA not before: Mon 18 Mar 2024 20:49:08 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 4765 IP address blocks: 61.47.8.0/22 maxlen: 22 61.47.11.0/24 maxlen: 24 61.47.40.0/24 maxlen: 24 61.47.80.0/21 maxlen: 21 61.47.80.0/24 maxlen: 24 61.47.84.0/22 maxlen: 22 61.47.84.0/24 maxlen: 24 61.47.85.0/24 maxlen: 24 61.47.86.0/24 maxlen: 24 61.47.87.0/24 maxlen: 24 221.128.100.0/22 maxlen: 22 221.128.100.0/24 maxlen: 24 221.128.101.0/24 maxlen: 24 221.128.102.0/24 maxlen: 24 221.128.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2597 (0xa25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Mar 18 20:49:08 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=65f8a8c3-d28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:72:f0:93:ed:a0:20:be:b6:28:bc:2f:04:d6: 47:41:51:05:32:5f:37:27:73:4a:d8:02:2a:8f:5d: 17:23:4e:28:9e:b0:53:c2:8c:dc:98:c1:b0:57:dd: 94:28:6d:72:c0:75:b7:a2:c3:59:bc:bd:5e:12:05: f0:7e:78:7a:b0:06:72:0e:05:88:37:3f:91:40:f5: a9:67:9e:2e:5c:a0:6a:c1:24:a3:d2:9d:3e:51:b9: 1c:6b:79:89:4b:fc:71:4e:f9:d0:12:aa:58:36:ba: 59:73:a2:4c:0a:96:8c:42:f2:30:24:f3:96:11:75: 69:b8:89:99:7d:ee:74:cb:0c:23:51:4e:21:b7:1c: 46:b9:6e:ac:38:1b:60:29:0e:f7:d6:76:e6:2e:34: 37:6b:c7:0a:35:41:8f:e8:a3:de:27:ca:98:eb:4b: 8f:ae:3c:26:71:64:2e:53:48:46:b7:35:74:df:d1: e4:68:9b:94:04:81:43:e1:f2:4e:a8:a8:3f:58:a2: fa:85:36:5f:6e:1e:9a:d8:f1:9a:15:01:49:cb:68: 5b:a2:36:c2:48:4d:83:ff:0a:a1:f9:28:40:dc:c8: 21:46:ce:e8:d8:72:4e:65:b3:f7:8d:20:51:e8:5f: 5a:de:56:59:f4:13:4c:27:28:a9:98:5d:ae:ea:43: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:AB:EF:E1:08:A0:9A:6A:95:95:16:63:3B:98:36:3F:B6:EB:67 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/262C092A2E2D11EBAC0EFC81C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.47.8.0/22 61.47.40.0/24 61.47.80.0/21 221.128.100.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:2c:97:9b:bd:e0:ee:2e:46:7f:10:db:4a:d4:c8:c8:05:2e: eb:b4:ac:83:e2:8c:b6:3f:13:3f:c5:19:22:20:8c:c7:f5:c7: 58:bf:14:24:49:71:78:71:9d:60:85:d6:a2:4b:18:d7:56:19: 0a:a9:a0:37:ce:a6:b5:0f:85:58:1f:72:2d:df:a0:d7:73:d3: 79:8c:26:e9:59:67:e2:03:36:be:ef:08:ba:79:8f:bf:56:28: f1:09:0d:86:bd:f8:c8:34:43:62:5b:60:0b:1f:77:dd:02:1e: ef:2e:7c:90:50:ea:01:f6:c0:5e:b9:83:66:a7:6b:c8:2c:af: b9:28:e0:a5:5f:9e:c1:9d:36:e7:c8:a5:96:0c:4c:d6:50:bb: 4d:8f:96:cc:29:fe:59:29:a4:2f:8a:fa:dd:fd:54:06:46:02: ca:10:2c:6c:30:f7:e8:e4:7e:49:30:ed:02:6a:6e:09:13:2e: 1a:91:77:1d:3d:c1:e4:dc:c6:78:24:8f:c1:b9:61:24:e8:54: ec:ed:8d:ab:b1:ab:f6:07:82:26:9c:ab:74:4f:07:05:02:7b: 06:77:fa:d6:64:b2:6f:0b:7f:79:b1:b0:fc:27:f4:a0:16:c7: 26:fa:af:44:9d:5b:28:88:3f:ed:f6:b8:4a:86:a1:35:76:ae: ce:06:7a:7d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjQwMzE4MjA0OTA4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NWY4YThjMy1kMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnnLwk+2gIL62KLwvBNZHQVEFMl83J3NK2AIqj10XI04onrBTwozcmMGwV92U KG1ywHW3osNZvL1eEgXwfnh6sAZyDgWINz+RQPWpZ54uXKBqwSSj0p0+Ubkca3mJ S/xxTvnQEqpYNrpZc6JMCpaMQvIwJPOWEXVpuImZfe50ywwjUU4htxxGuW6sOBtg KQ731nbmLjQ3a8cKNUGP6KPeJ8qY60uPrjwmcWQuU0hGtzV039HkaJuUBIFD4fJO qKg/WKL6hTZfbh6a2PGaFQFJy2hbojbCSE2D/wqh+ShA3MghRs7o2HJOZbP3jSBR 6F9a3lZZ9BNMJyipmF2u6kOnywIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEVeq+/h CKCaapWVFmM7mDY/tutnMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTIvQjU3NzNBQUM1OTQyMTFFQTkzNkZDRTQzQzRGOUFFMDIvMjYyQzA5MkEy RTJEMTFFQkFDMEVGQzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAI9LwgDBAA9LygDBAM9L1ADBALdgGQwDQYJKoZIhvcNAQEL BQADggEBAGwsl5u94O4uRn8Q20rUyMgFLuu0rIPijLY/Ez/FGSIgjMf1x1i/FCRJ cXhxnWCF1qJLGNdWGQqpoDfOprUPhVgfci3foNdz03mMJulZZ+IDNr7vCLp5j79W KPEJDYa9+Mg0Q2JbYAsfd90CHu8ufJBQ6gH2wF65g2ana8gsr7ko4KVfnsGdNufI pZYMTNZQu02Plswp/lkppC+K+t39VAZGAsoQLGww9+jkfkkw7QJqbgkTLhqRdx09 weTcxngkj8G5YSToVOztjauxq/YHgiacq3RPBwUCewZ3+tZksm8Lf3mxsPwn9KAW xyb6r0SdWyiIP+32uEqGoTV2rs4Gen0= -----END CERTIFICATE-----Generated at Sat May 18 21:31:29 2024 by rpki-client on console-ams.rpki-client.org