$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/5690B49A09B111EAB045B31EC4F9AE02.roa File: 5690B49A09B111EAB045B31EC4F9AE02.roa (raw, json) Hash identifier: vsR0HJiYkbe+BR/BUhFJteqxMTpXWqIaNvhTXe4uDL8= Subject key identifier: F6:0F:5F:09:75:33:11:59:85:2A:FF:9C:92:AB:FC:A0:5F:7E:54:54 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0EA3 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/5690B49A09B111EAB045B31EC4F9AE02.roa Signing time: Thu 29 Feb 2024 19:38:12 +0000 ROA not before: Thu 29 Feb 2024 19:38:12 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 397230 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 19:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3747 (0xea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 29 19:38:12 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e0dd24-c92c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:94:86:6b:1e:3d:8b:04:d9:fe:f6:44:8b: b4:32:f7:6d:a6:7c:67:80:2a:96:8b:64:7e:86:4d: 47:cc:02:79:44:7f:5e:95:e4:07:f0:4e:cd:14:7c: 3b:e4:19:20:ad:ed:51:f8:93:b8:c5:59:d1:fd:ba: de:6c:5c:bd:64:16:35:f3:92:a3:49:71:22:80:c6: bf:34:32:1a:ad:2d:3f:ec:8a:82:d1:73:bb:5d:bc: 55:04:ca:ca:2d:95:6b:d1:b3:5c:84:80:d9:51:ff: a2:02:78:bd:39:7a:10:e5:a1:19:81:ed:1c:f9:6c: 52:f9:e8:77:e9:95:2c:47:fe:9f:6c:ff:a9:5a:f0: 76:42:ba:0a:73:00:9f:78:c9:58:e1:76:42:bf:30: 4c:b5:e4:02:27:0d:a2:af:7e:6e:4c:ab:16:2e:63: 94:39:33:b0:4a:0f:97:e9:67:5f:6d:99:56:23:11: fd:2a:3b:b4:0e:2a:3d:1c:db:97:a2:bc:5d:68:09: 8b:15:05:a0:30:2e:e6:b9:1d:ca:ae:df:48:bf:18: a8:b7:b6:60:6a:f1:d4:a7:94:13:75:01:e5:b1:3e: 25:5b:93:01:08:b8:a8:be:e7:38:b5:9d:97:59:f7: f1:8d:58:6d:b2:67:57:9a:34:40:00:9e:67:80:b7: 4b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0F:5F:09:75:33:11:59:85:2A:FF:9C:92:AB:FC:A0:5F:7E:54:54 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/5690B49A09B111EAB045B31EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 38:02:41:43:2a:cb:d2:79:84:c8:9b:49:4a:07:ee:aa:d8:89: ce:45:9e:50:fc:94:9d:41:fc:f0:57:fe:65:5a:d7:58:52:07: cb:e9:36:f8:7b:a3:ae:94:0a:fd:e3:b2:a9:58:4d:42:9f:26: 66:fe:7b:9d:64:11:76:8e:02:97:9f:81:84:7c:6e:f1:e4:d6: d7:7f:c3:34:87:cd:c4:3e:92:de:3d:ab:4d:ad:57:2e:d9:57: a1:fd:df:41:4d:08:83:59:f8:67:cd:ef:a3:10:ac:87:e3:ca: 8a:df:5e:ed:f3:4b:f5:55:23:41:83:07:92:f3:26:f4:ea:2a: 7b:a3:af:7d:ab:17:76:bd:bc:93:1b:91:98:78:62:7e:41:0c: e5:80:fc:22:51:29:71:b9:9b:8e:a2:45:3b:9e:a5:63:ab:b1: a3:08:dc:e5:60:63:91:3a:aa:a3:b2:e3:92:d3:5b:41:45:ab: fb:33:99:14:05:f2:e4:ce:05:fd:bd:50:4c:3b:62:fe:f7:0f: 0e:3e:81:b7:1c:8b:c7:fa:f2:90:92:c1:52:d7:db:fd:48:a0: d4:6d:9d:1c:c1:f4:ef:07:5c:76:80:45:62:02:be:31:f5:94: a8:f8:7a:6f:c8:76:49:8f:0e:53:fa:98:61:79:ad:fb:e2:01: d7:c6:7c:ca -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjQwMjI5MTkzODEyWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwZGQyNC1jOTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07aUhmsePYsE2f72RIu0MvdtpnxngCqWi2R+hk1HzAJ5RH9eleQH8E7NFHw7 5Bkgre1R+JO4xVnR/brebFy9ZBY185KjSXEigMa/NDIarS0/7IqC0XO7XbxVBMrK LZVr0bNchIDZUf+iAni9OXoQ5aEZge0c+WxS+eh36ZUsR/6fbP+pWvB2QroKcwCf eMlY4XZCvzBMteQCJw2ir35uTKsWLmOUOTOwSg+X6WdfbZlWIxH9Kju0Dio9HNuX orxdaAmLFQWgMC7muR3Krt9Ivxiot7ZgavHUp5QTdQHlsT4lW5MBCLiovuc4tZ2X WffxjVhtsmdXmjRAAJ5ngLdLrQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFPYPXwl1 MxFZhSr/nJKr/KBfflRUMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNTY5MEI0OUEw OUIxMTFFQUIwNDVCMzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBADgCQUMqy9J5 hMibSUoH7qrYic5FnlD8lJ1B/PBX/mVa11hSB8vpNvh7o66UCv3jsqlYTUKfJmb+ e51kEXaOApefgYR8bvHk1td/wzSHzcQ+kt49q02tVy7ZV6H930FNCINZ+GfN76MQ rIfjyorfXu3zS/VVI0GDB5LzJvTqKnujr32rF3a9vJMbkZh4Yn5BDOWA/CJRKXG5 m46iRTuepWOrsaMI3OVgY5E6qqOy45LTW0FFq/szmRQF8uTOBf29UEw7Yv73Dw4+ gbcci8f68pCSwVLX2/1IoNRtnRzB9O8HXHaARWICvjH1lKj4em/IdkmPDlP6mGF5 rfviAdfGfMo= -----END CERTIFICATE-----Generated at Thu Apr 18 20:34:37 2024 by rpki-client on console-ams.rpki-client.org