$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/79E6617E073111EA993EC663C4F9AE02.roa File: 79E6617E073111EA993EC663C4F9AE02.roa (raw, json) Hash identifier: gxcqMjqJdHakFd3R3eZ3MKpJ0wg3dtDrCjjIhe2ywRw= Subject key identifier: 17:C5:5C:1C:5D:A5:7A:03:DC:8D:28:9B:B5:C1:9E:9B:5B:23:EC:19 Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0E9D Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/79E6617E073111EA993EC663C4F9AE02.roa Signing time: Thu 29 Feb 2024 19:38:07 +0000 ROA not before: Thu 29 Feb 2024 19:38:06 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 397224 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 18:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3741 (0xe9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 29 19:38:06 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e0dd1e-c0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:ff:cb:c8:84:d5:69:a1:6d:3a:59:83:fc: 83:ec:70:a5:ad:6c:c8:f1:58:67:38:90:ed:f2:a5: d2:05:8c:15:54:54:c3:7b:1d:e9:48:40:d6:d9:bf: 2a:43:1d:eb:31:a2:4f:f8:70:3b:63:d9:38:7f:de: 36:19:8d:f0:6f:07:e2:6b:c2:30:23:7f:c9:f0:b4: d8:5b:6f:ed:31:20:a9:4a:2f:d4:ff:ae:49:37:19: d1:7f:ee:94:13:80:78:95:33:98:af:0b:d8:b8:0e: eb:b6:00:1e:cf:98:7c:b7:c4:00:6a:d6:84:c6:af: b0:f7:33:8f:67:9d:b2:a6:05:fe:1a:e5:d8:81:5f: 6a:86:23:de:61:4e:e2:55:7a:37:74:ff:ea:3d:03: f5:c3:49:a2:c1:db:9c:21:e0:1c:1b:34:78:a4:2d: 87:c5:1e:69:15:5f:9e:f4:09:7b:5e:e0:76:7c:dd: 95:05:d6:67:bc:01:f2:c7:a0:0b:85:1e:ea:46:e3: 80:86:b7:ed:2a:37:65:0c:a0:17:f4:c5:70:3c:3b: 21:c9:00:89:9d:9e:7b:91:ca:be:77:39:90:4a:11: 51:81:19:ee:52:aa:0a:69:ab:ac:9e:26:cb:ea:8a: b2:03:22:a5:a4:6f:7e:18:56:9e:1e:53:ac:24:ce: 87:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:5C:1C:5D:A5:7A:03:DC:8D:28:9B:B5:C1:9E:9B:5B:23:EC:19 X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/79E6617E073111EA993EC663C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 8c:90:0a:9e:54:ad:3c:be:2d:ba:54:dc:e4:8f:db:90:6b:91: 5a:d0:d2:56:72:ff:f8:e6:f5:3d:43:3d:32:d3:e8:07:e8:8f: f5:f2:65:2f:8c:c2:c6:7d:65:80:b7:a6:7d:5d:73:77:ab:13: f9:8d:6e:d4:ed:cf:d5:31:61:c7:98:49:1d:b2:1f:0b:62:2d: f0:50:ea:33:17:4a:b7:65:22:64:cd:0a:6a:d1:51:a2:aa:47: ae:7b:de:65:86:b4:ad:75:85:e3:a9:54:66:1c:fa:c9:51:60: f6:a9:59:d4:b7:7e:57:fa:1e:f9:08:74:54:17:a9:69:79:bc: ea:b8:83:93:8d:12:ef:fc:ea:21:43:cb:f0:ac:6a:c5:b4:a2: e7:69:b7:9b:99:e3:61:ef:3d:2a:a3:fb:62:14:d2:77:4c:73: d3:57:74:a1:07:b4:88:aa:4e:32:52:75:6e:1d:57:4c:67:22: 30:2a:3e:db:08:c0:95:b2:7c:52:8a:7e:2e:c1:eb:39:31:b9: 6b:c1:f7:f6:df:fd:54:fb:31:a0:cf:3e:f5:7d:34:8e:74:fb: 0c:95:9a:ad:85:a5:f3:bd:0a:9b:2a:6b:a6:44:40:a0:ae:11: 90:68:e5:42:9a:32:6b:8b:09:49:ea:e0:28:e2:e2:13:1e:1b: 22:e7:c2:4e -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjQwMjI5MTkzODA2WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwZGQxZS1jMGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx33/y8iE1WmhbTpZg/yD7HClrWzI8VhnOJDt8qXSBYwVVFTDex3pSEDW2b8q Qx3rMaJP+HA7Y9k4f942GY3wbwfia8IwI3/J8LTYW2/tMSCpSi/U/65JNxnRf+6U E4B4lTOYrwvYuA7rtgAez5h8t8QAataExq+w9zOPZ52ypgX+GuXYgV9qhiPeYU7i VXo3dP/qPQP1w0miwducIeAcGzR4pC2HxR5pFV+e9Al7XuB2fN2VBdZnvAHyx6AL hR7qRuOAhrftKjdlDKAX9MVwPDshyQCJnZ57kcq+dzmQShFRgRnuUqoKaausnibL 6oqyAyKlpG9+GFaeHlOsJM6HRwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFBfFXBxd pXoD3I0om7XBnptbI+wZMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvNzlFNjYxN0Uw NzMxMTFFQTk5M0VDNjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBAIyQCp5UrTy+ LbpU3OSP25BrkVrQ0lZy//jm9T1DPTLT6Afoj/XyZS+MwsZ9ZYC3pn1dc3erE/mN btTtz9UxYceYSR2yHwtiLfBQ6jMXSrdlImTNCmrRUaKqR6573mWGtK11heOpVGYc +slRYPapWdS3flf6HvkIdFQXqWl5vOq4g5ONEu/86iFDy/CsasW0oudpt5uZ42Hv PSqj+2IU0ndMc9NXdKEHtIiqTjJSdW4dV0xnIjAqPtsIwJWyfFKKfi7B6zkxuWvB 9/bf/VT7MaDPPvV9NI50+wyVmq2FpfO9Cpsqa6ZEQKCuEZBo5UKaMmuLCUnq4Cji 4hMeGyLnwk4= -----END CERTIFICATE-----Generated at Wed Apr 24 20:29:50 2024 by rpki-client on console-fra.rpki-client.org