$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa File: 496AB3D2072D11EAAE8E1D56C4F9AE02.roa (raw, json) Hash identifier: PCQKlj6deOHtT7m2rfD9JwGJn7LJ5iM5rrfuzp4pIzE= Subject key identifier: 19:D1:32:66:E2:FB:9D:A9:3F:A9:8F:23:D0:B2:C6:FF:4C:48:FB:03 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0EA8 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa Signing time: Thu 29 Feb 2024 19:38:17 +0000 ROA not before: Thu 29 Feb 2024 19:38:17 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 397235 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 19:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3752 (0xea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 29 19:38:17 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e0dd29-3d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d0:a9:7e:4b:0c:9e:16:c4:07:4a:3e:fa:e8: 57:a2:ca:d2:cc:c4:d7:ee:92:01:95:9a:ae:10:44: 4c:f5:4c:38:f4:ba:00:ae:b1:f5:0e:b3:da:71:74: 9f:e5:a4:ba:d2:35:9e:11:65:17:fe:e3:5f:f1:86: 62:1a:46:66:dc:be:8d:6c:8c:88:38:3b:04:f0:28: 6a:04:48:a9:1b:d9:9b:0e:cd:8f:f2:73:db:71:8b: cb:17:61:9c:9d:dc:87:e1:ef:14:12:f1:f6:1e:c7: fc:3e:ea:0a:d7:76:05:70:b2:5f:f1:b5:9b:65:8c: 19:5f:4c:ba:3b:d5:6e:3a:cf:59:de:86:09:57:81: ec:f8:7f:b7:13:78:31:5c:3c:f3:b0:1a:c0:36:2c: 67:6c:dc:0f:7f:18:23:da:65:e6:62:df:c2:7e:c7: c4:07:e1:03:bf:47:48:d7:7a:bf:3f:c8:3a:95:fb: f6:b0:f1:14:d1:86:57:fe:d1:e9:f9:92:11:ec:85: 80:ae:9c:11:66:d2:73:e0:46:ca:8b:df:0a:e4:db: d8:5a:91:04:cb:97:6f:62:97:df:bb:b0:8a:81:a6: a1:10:89:01:9b:11:fe:4b:35:b1:af:dc:96:00:d3: 16:76:50:79:52:54:cd:0f:0a:33:66:ec:50:18:ec: 27:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D1:32:66:E2:FB:9D:A9:3F:A9:8F:23:D0:B2:C6:FF:4C:48:FB:03 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/496AB3D2072D11EAAE8E1D56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 60:26:dd:c1:74:3b:f9:e1:7d:04:7a:e5:31:cd:b1:10:03:09: de:ff:39:f9:25:ec:23:57:9a:fc:e6:ab:f1:2e:bb:6b:2c:2d: 79:14:3d:93:5a:5c:31:6d:cb:99:86:4f:8e:16:5c:ad:a8:88: 52:1c:ad:2d:23:56:15:15:60:60:8e:52:fe:43:4f:76:79:1c: a6:ce:12:c0:cf:e9:e3:a6:0e:84:60:f1:ea:56:b6:91:df:99: 15:93:42:03:50:78:f4:73:cb:8c:5a:1d:ee:3e:98:2e:1e:c6: db:c1:da:a6:3c:9a:33:f1:21:07:68:0e:c1:b4:3a:3a:ff:16: 04:87:cd:92:fd:21:4b:7c:a8:f3:18:59:16:0c:8e:8d:58:b2: d4:ae:5b:0a:29:8d:87:c8:e0:b6:7a:5a:fd:dc:56:8b:8e:35: d7:47:ed:53:40:58:91:58:63:41:62:f5:5d:f2:05:fa:7e:c9: de:9a:0b:20:bc:5f:10:0a:92:10:c9:de:d3:04:bb:57:a8:d6: 78:66:cc:82:fe:38:d7:9d:40:6d:41:d8:68:7d:12:57:ee:48: 70:17:b8:78:c5:58:72:4d:eb:c4:95:e0:03:15:c1:0e:8b:ef: 26:61:01:e0:47:92:65:4b:a4:79:c3:b1:c1:17:cb:b4:70:01: d5:d1:68:d3 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjQwMjI5MTkzODE3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwZGQyOS0zZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNCpfksMnhbEB0o++uhXosrSzMTX7pIBlZquEERM9Uw49LoArrH1DrPacXSf 5aS60jWeEWUX/uNf8YZiGkZm3L6NbIyIODsE8ChqBEipG9mbDs2P8nPbcYvLF2Gc ndyH4e8UEvH2Hsf8PuoK13YFcLJf8bWbZYwZX0y6O9VuOs9Z3oYJV4Hs+H+3E3gx XDzzsBrANixnbNwPfxgj2mXmYt/CfsfEB+EDv0dI13q/P8g6lfv2sPEU0YZX/tHp +ZIR7IWArpwRZtJz4EbKi98K5NvYWpEEy5dvYpffu7CKgaahEIkBmxH+SzWxr9yW ANMWdlB5UlTNDwozZuxQGOwnzQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFBnRMmbi +52pP6mPI9Cyxv9MSPsDMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNDk2QUIzRDIw NzJEMTFFQUFFOEUxRDU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBAGAm3cF0O/nh fQR65THNsRADCd7/Ofkl7CNXmvzmq/Euu2ssLXkUPZNaXDFty5mGT44WXK2oiFIc rS0jVhUVYGCOUv5DT3Z5HKbOEsDP6eOmDoRg8epWtpHfmRWTQgNQePRzy4xaHe4+ mC4extvB2qY8mjPxIQdoDsG0Ojr/FgSHzZL9IUt8qPMYWRYMjo1YstSuWwopjYfI 4LZ6Wv3cVouONddH7VNAWJFYY0Fi9V3yBfp+yd6aCyC8XxAKkhDJ3tMEu1eo1nhm zIL+ONedQG1B2Gh9ElfuSHAXuHjFWHJN68SV4AMVwQ6L7yZhAeBHkmVLpHnDscEX y7RwAdXRaNM= -----END CERTIFICATE-----Generated at Thu Apr 18 20:34:37 2024 by rpki-client on console-ams.rpki-client.org