$ rpki-client -vvf rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/AC98F354BF3711ED8D820C0AC4F9AE02.roa File: AC98F354BF3711ED8D820C0AC4F9AE02.roa (raw, json) Hash identifier: rIXZUNADPz/ZzxU5UjwHuAFOjyepQR4f1rDPZOHAoTI= Subject key identifier: A0:9C:DF:E2:E7:3E:FF:49:CF:2E:9E:88:1D:A4:F8:6E:E5:D9:BC:E3 Certificate issuer: /CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1 Certificate serial: 8C Authority key identifier: 7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/AC98F354BF3711ED8D820C0AC4F9AE02.roa Signing time: Sun 03 Dec 2023 05:35:42 +0000 ROA not before: Sun 03 Dec 2023 05:35:42 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 150788 IP address blocks: 203.0.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 04:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850E2/serialNumber=7F8CC684712294B65F018B719E072F442A015BD1 Validity Not Before: Dec 3 05:35:42 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656c13ae-760d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:28:0f:79:55:65:cf:e5:ab:c7:a9:88:de: 0b:ce:68:20:6f:7e:6d:8d:83:cd:63:fe:49:80:2c: 3b:66:23:b8:d3:8f:75:b1:37:2a:20:dc:9c:e3:62: 7c:a0:68:34:70:1e:fe:ed:20:95:57:27:66:1d:b7: 94:79:34:28:d3:15:67:8b:fd:50:c3:fc:eb:7f:06: be:33:6c:6c:02:3b:3a:5e:02:4e:8a:4e:4d:a2:0f: 47:a8:62:64:d3:55:03:19:5b:4c:c4:e6:fa:9e:81: 3e:9d:c6:85:5c:47:27:1d:8f:45:5a:95:e0:da:7a: 5c:c8:c5:31:ea:8d:6a:89:e5:c1:95:8f:4a:d7:d8: d2:ef:f1:de:91:59:b4:9e:d0:d4:ab:d4:8e:5d:97: 02:23:1c:8c:ba:ba:06:aa:c2:c2:96:68:02:46:ad: a5:7b:24:fa:40:a1:60:ca:11:6c:5b:b4:6d:a6:40: e9:dc:e0:bc:3a:c5:70:3f:f3:8d:22:7e:c8:1c:72: 98:10:b2:49:a8:1f:77:c2:f7:61:bf:90:22:0e:ec: ad:8b:d1:cf:fc:21:6a:14:c6:c8:e8:36:44:e2:77: b0:b1:23:f9:1c:dd:cd:cc:65:98:2b:c3:5b:8c:2d: b7:b6:08:62:6e:c4:93:71:53:b7:ab:ee:d3:d0:db: 4a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9C:DF:E2:E7:3E:FF:49:CF:2E:9E:88:1D:A4:F8:6E:E5:D9:BC:E3 X509v3 Authority Key Identifier: keyid:7F:8C:C6:84:71:22:94:B6:5F:01:8B:71:9E:07:2F:44:2A:01:5B:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/f4zGhHEilLZfAYtxngcvRCoBW9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f4zGhHEilLZfAYtxngcvRCoBW9E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850E2/76A01640BF3411ED9FC02E87C4F9AE02/AC98F354BF3711ED8D820C0AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.0.139.0/24 Signature Algorithm: sha256WithRSAEncryption 19:69:d1:05:06:f2:23:ac:b6:49:c9:5c:7e:34:2c:25:e5:6d: 1e:41:0a:1b:26:f7:00:65:88:5c:62:52:c0:b5:85:17:15:41: 8e:99:21:ff:b6:69:9e:53:2b:7f:a3:20:aa:de:d4:44:17:79: 87:b1:ea:e5:5e:77:5e:c6:41:1e:7f:ad:85:97:24:c3:07:43: 4f:3e:e6:b7:e0:1c:79:c8:e8:f6:b5:cc:31:81:0f:04:dc:ed: bc:39:ea:38:b3:7c:30:9d:7b:9a:b7:c9:b6:80:4b:e6:ca:2d: a9:05:cb:f3:4d:62:aa:f8:e4:96:fa:5a:92:31:2f:e8:6b:07: eb:0b:08:53:55:c5:ea:02:67:cb:f4:07:2a:e5:f3:27:cd:f1: 19:43:a4:c6:8c:45:b9:88:c5:b3:bb:68:e8:0a:7e:98:b6:0f: 87:d6:2c:82:bf:95:dc:8e:ff:c8:d3:cc:ac:2e:ba:63:e1:6e: 96:ab:4c:41:fd:2a:0e:a2:71:0a:d4:d8:ab:a4:55:b7:7e:b5: 75:5d:63:ce:b5:9f:f7:b0:62:a5:3f:3a:7e:9d:11:55:97:d2: ac:ec:18:6b:d0:d1:77:34:5e:33:96:b5:96:31:a5:7b:a7:88: 16:4f:36:72:af:4d:7b:0e:96:42:01:f8:bc:4d:d3:1d:ee:d7: 13:e6:69:55 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwRTIxMTAvBgNVBAUTKDdGOENDNjg0NzEyMjk0QjY1RjAxOEI3MTlFMDcyRjQ0 MkEwMTVCRDEwHhcNMjMxMjAzMDUzNTQyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZjMTNhZS03NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KooD3lVZc/lq8epiN4Lzmggb35tjYPNY/5JgCw7ZiO40491sTcqINyc42J8 oGg0cB7+7SCVVydmHbeUeTQo0xVni/1Qw/zrfwa+M2xsAjs6XgJOik5Nog9HqGJk 01UDGVtMxOb6noE+ncaFXEcnHY9FWpXg2npcyMUx6o1qieXBlY9K19jS7/HekVm0 ntDUq9SOXZcCIxyMuroGqsLClmgCRq2leyT6QKFgyhFsW7RtpkDp3OC8OsVwP/ON In7IHHKYELJJqB93wvdhv5AiDuyti9HP/CFqFMbI6DZE4newsSP5HN3NzGWYK8Nb jC23tghibsSTcVO3q+7T0NtKfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKCc3+Ln Pv9Jzy6eiB2k+G7l2bzjMB8GA1UdIwQYMBaAFH+MxoRxIpS2XwGLcZ4HL0QqAVvR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBFMi83NkEwMTY0MEJG MzQxMUVEOUZDMDJFODdDNEY5QUUwMi9mNHpHaEhFaWxMWmZBWXR4bmdjdlJDb0JX OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y0ekdoSEVpbExaZkFZdHhuZ2N2UkNvQlc5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUwRTIvNzZBMDE2NDBCRjM0MTFFRDlGQzAyRTg3QzRGOUFFMDIvQUM5OEYzNTRC RjM3MTFFRDhEODIwQzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLAIswDQYJKoZIhvcNAQELBQADggEBABlp0QUG8iOstknJ XH40LCXlbR5BChsm9wBliFxiUsC1hRcVQY6ZIf+2aZ5TK3+jIKre1EQXeYex6uVe d17GQR5/rYWXJMMHQ08+5rfgHHnI6Pa1zDGBDwTc7bw56jizfDCde5q3ybaAS+bK LakFy/NNYqr45Jb6WpIxL+hrB+sLCFNVxeoCZ8v0Byrl8yfN8RlDpMaMRbmIxbO7 aOgKfpi2D4fWLIK/ldyO/8jTzKwuumPhbparTEH9Kg6icQrU2KukVbd+tXVdY861 n/ewYqU/On6dEVWX0qzsGGvQ0Xc0XjOWtZYxpXuniBZPNnKvTXsOlkIB+LxN0x3u 1xPmaVU= -----END CERTIFICATE-----Generated at Wed May 15 06:54:30 2024 by rpki-client on console-ams.rpki-client.org