$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa File: 57D0ACB609B111EAB045B31EC4F9AE02.roa (raw, json) Hash identifier: FSyGFE7K35QX2cyotfzUQAvVJ9+/c5ofR0HDyKVjUD0= Subject key identifier: 49:1A:E6:F2:3D:23:00:D8:1A:5A:50:E0:2A:A8:6F:6F:6E:B2:10:33 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0EA9 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa Signing time: Thu 29 Feb 2024 19:38:19 +0000 ROA not before: Thu 29 Feb 2024 19:38:19 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 397236 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3753 (0xea9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 29 19:38:19 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e0dd2a-bb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:79:21:67:15:8e:fa:fa:30:6d:85:26:38:2d: f9:c1:cd:74:0f:1c:c2:93:8e:0f:8b:8d:03:c8:96: ec:33:f6:3c:af:9c:9b:70:ef:ce:bb:b8:cf:85:6b: dd:23:5a:46:2f:c5:f1:a1:f9:55:84:2e:bb:b2:f1: 01:8d:bd:90:9c:de:ae:29:27:76:82:75:0a:02:db: fc:0a:03:36:6b:66:b0:13:47:da:20:ee:ab:7a:ae: 21:84:d8:9c:e8:a1:27:2a:cb:47:41:86:5e:d0:54: 87:cd:b8:e7:94:51:54:19:f2:60:42:31:2e:bb:b1: b1:4d:88:a0:27:67:48:fd:f9:dd:a4:a3:46:cd:bb: 58:4e:52:ba:67:75:2e:d9:2c:85:52:4e:12:a7:4f: 7a:42:e2:b6:de:41:b1:8e:c9:cc:73:ab:11:1b:b4: 17:35:b2:6e:71:69:79:8b:9a:82:19:c3:e1:3f:43: 24:2b:6d:20:94:c3:8f:b3:59:94:24:d7:49:43:6a: fa:17:6d:61:2b:b6:0f:25:53:e0:9f:38:34:a7:5a: 2f:90:1c:6d:87:a9:26:6d:16:a3:e4:05:20:b5:20: 50:d0:fe:35:9f:45:41:79:d5:e4:82:ba:e5:b0:d4: ec:7c:52:c4:cc:0e:d0:1f:d4:8d:60:c7:22:08:74: e4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:E6:F2:3D:23:00:D8:1A:5A:50:E0:2A:A8:6F:6F:6E:B2:10:33 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/57D0ACB609B111EAB045B31EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 47:2b:05:73:66:9d:7d:ac:8d:bf:b2:36:a9:6d:3d:f1:e3:36: e8:0a:19:15:e3:a7:22:f3:5c:f2:7d:14:90:8d:0f:cd:b3:6a: 1f:b2:1e:f5:d6:3a:cb:67:35:2e:d2:c8:f2:92:1e:3b:f2:03: 5e:73:3a:d1:98:02:e8:a4:35:8f:3a:7d:48:e1:d5:82:25:d7: 40:07:22:df:19:54:5b:b4:29:59:01:f4:4c:3b:04:ba:71:dc: 67:88:77:b7:d4:17:d2:e5:18:11:39:6e:a3:1e:be:9e:36:9b: 77:94:22:33:ef:39:f8:e3:b7:37:57:1c:5d:26:61:b2:cc:59: 52:2a:46:7d:07:0e:2e:82:2b:55:b2:66:66:62:3d:12:06:6a: 25:fa:10:72:0c:30:5d:51:a8:78:8e:a0:a9:17:2c:c0:8d:a0: 56:27:42:16:93:33:60:75:2e:6a:6d:3e:59:1c:a8:87:b5:92: 8d:1d:44:d1:71:a1:5d:fd:d3:38:bc:08:69:7d:f1:cb:ed:86: 9f:70:a3:03:82:64:85:f1:a3:fa:92:33:8c:a4:3f:93:56:06: 8f:b9:00:28:2c:70:51:08:1e:24:e5:e8:63:27:1d:e3:35:80: 33:4e:91:f3:8f:d0:aa:a6:69:41:bb:72:40:aa:60:5d:3f:b9: 6a:40:21:80 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjQwMjI5MTkzODE5WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwZGQyYS1iYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXkhZxWO+vowbYUmOC35wc10DxzCk44Pi40DyJbsM/Y8r5ybcO/Ou7jPhWvd I1pGL8XxoflVhC67svEBjb2QnN6uKSd2gnUKAtv8CgM2a2awE0faIO6req4hhNic 6KEnKstHQYZe0FSHzbjnlFFUGfJgQjEuu7GxTYigJ2dI/fndpKNGzbtYTlK6Z3Uu 2SyFUk4Sp096QuK23kGxjsnMc6sRG7QXNbJucWl5i5qCGcPhP0MkK20glMOPs1mU JNdJQ2r6F21hK7YPJVPgnzg0p1ovkBxth6kmbRaj5AUgtSBQ0P41n0VBedXkgrrl sNTsfFLEzA7QH9SNYMciCHTkMwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFEka5vI9 IwDYGlpQ4Cqob29ushAzMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNTdEMEFDQjYw OUIxMTFFQUIwNDVCMzFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBAEcrBXNmnX2s jb+yNqltPfHjNugKGRXjpyLzXPJ9FJCND82zah+yHvXWOstnNS7SyPKSHjvyA15z OtGYAuikNY86fUjh1YIl10AHIt8ZVFu0KVkB9Ew7BLpx3GeId7fUF9LlGBE5bqMe vp42m3eUIjPvOfjjtzdXHF0mYbLMWVIqRn0HDi6CK1WyZmZiPRIGaiX6EHIMMF1R qHiOoKkXLMCNoFYnQhaTM2B1LmptPlkcqIe1ko0dRNFxoV390zi8CGl98cvthp9w owOCZIXxo/qSM4ykP5NWBo+5ACgscFEIHiTl6GMnHeM1gDNOkfOP0KqmaUG7ckCq YF0/uWpAIYA= -----END CERTIFICATE-----Generated at Wed Apr 24 21:18:17 2024 by rpki-client on console-ams.rpki-client.org