$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa File: EFDC701A099A11EAB5891D5BC4F9AE02.roa (raw, json) Hash identifier: ThJ/r1UPbbOhsBDCxK8ziXsacEDHIM2voA7gPJ/2xsU= Subject key identifier: 44:45:E7:FF:AF:FB:61:0E:FD:0A:6B:0F:52:6B:0F:1A:65:85:72:8D Certificate issuer: /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Certificate serial: 0E94 Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa Signing time: Thu 29 Feb 2024 19:37:58 +0000 ROA not before: Thu 29 Feb 2024 19:37:58 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 397215 IP address blocks: 120.29.252.0/24 maxlen: 24 120.29.253.0/24 maxlen: 24 120.29.254.0/24 maxlen: 24 203.17.72.0/24 maxlen: 24 2001:dcd:1::/48 maxlen: 48 2001:dcd:2::/48 maxlen: 48 2001:dcd:3::/48 maxlen: 48 2001:dcd:4::/48 maxlen: 48 2001:dcd:5::/48 maxlen: 48 2001:dcd:6::/48 maxlen: 48 2001:dcd:7::/48 maxlen: 48 2001:dcd:dd05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 18:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3732 (0xe94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A Validity Not Before: Feb 29 19:37:58 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e0dd16-d182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:ab:9c:af:ed:2c:9e:07:a9:77:2e:b9:de: 2d:50:d6:34:db:51:79:ea:92:0c:1a:a6:6b:dc:51: ee:20:60:3b:77:b6:a1:73:a8:ff:84:9f:b3:1a:ee: ee:4a:28:0c:92:5b:4f:ef:51:cd:bf:1c:ca:4d:5f: e8:d2:de:7d:4d:74:2d:b0:30:db:5e:04:3f:a1:e8: bf:c5:d1:41:66:bf:2a:bb:6a:81:42:49:35:73:47: 44:33:04:04:d8:88:d4:a2:dc:97:ac:64:8c:3d:f7: 94:73:e0:75:ee:06:9f:2c:37:1b:91:f0:a8:b9:c4: 63:a1:e0:0b:3a:52:ed:59:93:dc:e4:3d:76:9c:f4: 5b:06:c6:a4:29:b4:7a:ac:c9:af:c1:0f:9f:c2:e5: e7:eb:79:5e:32:e5:1e:e3:b9:cd:45:9a:25:35:e9: 80:ae:bc:1b:d3:ef:0a:af:bc:b2:d1:b2:cc:95:7a: 40:42:3e:24:4a:79:96:ac:6c:3a:10:de:53:b8:ba: 93:5b:8d:97:5b:51:94:05:ca:26:e8:19:93:cf:79: 51:38:70:45:49:01:9a:26:9e:2b:3d:c1:0b:bb:f8: 9f:5c:ee:40:04:5c:52:67:a1:38:66:79:d9:73:00: 70:a3:a0:4d:63:ba:c1:12:c9:a0:f4:21:f4:00:af: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:45:E7:FF:AF:FB:61:0E:FD:0A:6B:0F:52:6B:0F:1A:65:85:72:8D X509v3 Authority Key Identifier: keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/EFDC701A099A11EAB5891D5BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.252.0-120.29.254.255 203.17.72.0/24 IPv6: 2001:dcd:1::-2001:dcd:7:ffff:ffff:ffff:ffff:ffff 2001:dcd:dd05::/48 Signature Algorithm: sha256WithRSAEncryption 3a:1d:4a:f6:3d:9a:5d:8c:66:63:bc:b6:86:a3:fb:8b:7e:5d: ce:02:55:26:06:55:7b:5c:2d:c0:fe:b2:6d:5f:27:66:43:c4: bc:86:c4:32:2e:16:fd:b8:bf:d5:bf:9e:a7:e8:38:99:51:aa: 28:17:ce:2c:c9:72:7f:68:50:0d:09:36:75:9a:10:23:1b:25: 17:28:df:37:68:d1:17:82:32:53:9f:9b:cc:4b:68:97:b8:44: d2:23:91:b7:77:f7:8e:61:d2:0d:ba:be:77:b4:31:f4:39:27: d9:fc:d5:84:bc:99:a3:a7:b1:e0:5a:52:41:ba:65:6e:fe:8a: 0a:89:ac:df:d3:ff:a9:8f:c0:d1:51:d6:0b:fd:74:c6:2a:d5: 12:b2:d9:a1:9a:5e:14:cb:94:27:0b:bf:7b:3c:4d:25:9a:ac: 9c:00:40:2d:7e:de:1c:c8:8b:8a:42:50:f0:1b:9d:82:21:3e: 04:00:d2:e5:a1:78:e1:aa:a3:f1:80:3c:06:ab:c9:45:af:68: 20:76:80:ab:29:af:92:c4:91:ee:35:0e:3e:f2:98:c3:e0:15: 09:c7:96:e3:25:f2:45:8f:1a:3c:80:5b:91:39:bf:c0:fa:17: 0e:e6:00:fc:9c:60:f1:34:de:3f:22:c4:98:71:c6:06:5a:08: 4b:dd:54:a2 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTE5RUExMTAvBgNVBAUTKDdCMDFDQUNDMTcwRkU2QTYxQjIwMzA0MTg1RTg2ODk0 NkRGNzI4NUEwHhcNMjQwMjI5MTkzNzU4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUwZGQxNi1kMTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0SrnK/tLJ4HqXcuud4tUNY021F56pIMGqZr3FHuIGA7d7ahc6j/hJ+zGu7u SigMkltP71HNvxzKTV/o0t59TXQtsDDbXgQ/oei/xdFBZr8qu2qBQkk1c0dEMwQE 2IjUotyXrGSMPfeUc+B17gafLDcbkfCoucRjoeALOlLtWZPc5D12nPRbBsakKbR6 rMmvwQ+fwuXn63leMuUe47nNRZolNemArrwb0+8Kr7yy0bLMlXpAQj4kSnmWrGw6 EN5TuLqTW42XW1GUBcom6BmTz3lROHBFSQGaJp4rPcELu/ifXO5ABFxSZ6E4ZnnZ cwBwo6BNY7rBEsmg9CH0AK9EsQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFERF5/+v +2EO/QprD1JrDxplhXKNMB8GA1UdIwQYMBaAFHsByswXD+amGyAwQYXoaJRt9yha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTlFQS82RDQ2M0NGRTA0 RkQxMUVBODJDQ0NBMThDNEY5QUUwMi9ld0hLekJjUDVxWWJJREJCaGVob2xHMzNL Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V3SEt6QmNQNXFZYklEQkJoZWhvbEczM0tGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTE5RUEvNkQ0NjNDRkUwNEZEMTFFQTgyQ0NDQTE4QzRGOUFFMDIvRUZEQzcwMUEw OTlBMTFFQUI1ODkxRDVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMBoEAgABMBQwDAMEAngd/AMEAHgd/gMEAMsRSDAjBAIAAjAdMBIDBwAgAQ3N AAEDBwMgAQ3NAAADBwAgAQ3N3QUwDQYJKoZIhvcNAQELBQADggEBADodSvY9ml2M ZmO8toaj+4t+Xc4CVSYGVXtcLcD+sm1fJ2ZDxLyGxDIuFv24v9W/nqfoOJlRqigX zizJcn9oUA0JNnWaECMbJRco3zdo0ReCMlOfm8xLaJe4RNIjkbd3945h0g26vne0 MfQ5J9n81YS8maOnseBaUkG6ZW7+igqJrN/T/6mPwNFR1gv9dMYq1RKy2aGaXhTL lCcLv3s8TSWarJwAQC1+3hzIi4pCUPAbnYIhPgQA0uWheOGqo/GAPAaryUWvaCB2 gKspr5LEke41Dj7ymMPgFQnHluMl8kWPGjyAW5E5v8D6Fw7mAPycYPE03j8ixJhx xgZaCEvdVKI= -----END CERTIFICATE-----Generated at Wed Nov 20 21:34:55 2024 by rpki-client on console-ams.rpki-client.org