$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/99E52804462E11ED90035452C4F9AE02.roa File: 99E52804462E11ED90035452C4F9AE02.roa (raw, json) Hash identifier: mQyboEeKF6QIHVKg2jTKXrJTpGQjqbX5/841KTylhfs= Subject key identifier: 09:1D:D6:62:66:0C:F7:9A:0D:32:D7:FC:D4:72:D8:C4:53:4A:80:AF Certificate issuer: /CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Certificate serial: E4 Authority key identifier: 8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/99E52804462E11ED90035452C4F9AE02.roa Signing time: Sun 03 Dec 2023 04:35:02 +0000 ROA not before: Sun 03 Dec 2023 04:35:02 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 133748 IP address blocks: 206.131.192.0/24 maxlen: 24 206.131.193.0/24 maxlen: 24 206.131.194.0/24 maxlen: 24 206.131.195.0/24 maxlen: 24 206.131.196.0/24 maxlen: 24 206.131.197.0/24 maxlen: 24 206.131.198.0/24 maxlen: 24 206.131.199.0/24 maxlen: 24 206.131.200.0/24 maxlen: 24 206.131.201.0/24 maxlen: 24 206.131.202.0/24 maxlen: 24 206.131.203.0/24 maxlen: 24 206.131.204.0/24 maxlen: 24 206.131.205.0/24 maxlen: 24 206.131.206.0/24 maxlen: 24 206.131.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74/serialNumber=8F0BEA3D96FC8E2ED1E8C6837047694569EEE3CE Validity Not Before: Dec 3 04:35:02 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=656c0576-1ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0a:38:09:50:d5:15:5a:0d:e9:dd:2f:6c:1c: 5b:5c:f4:45:35:49:1d:95:c7:75:e9:a1:63:71:0e: a1:58:08:a6:eb:08:02:6a:dc:78:42:7b:79:49:0e: 5d:3f:0f:11:5e:aa:f2:91:f3:e0:85:32:76:8a:9c: c0:99:87:47:66:12:65:69:7b:cb:1e:2d:2a:79:bc: 88:0f:93:97:22:a1:a8:ec:23:d5:ce:60:1e:9f:8d: d8:0b:35:58:fa:27:f9:49:23:8e:b2:34:13:ed:b7: 56:4f:0e:aa:71:92:e8:3d:03:27:6e:4c:21:c0:58: 7a:ca:2d:a1:b8:5e:e2:88:b4:d9:c2:ec:b1:a9:d9: 89:5b:77:53:31:0d:38:96:a0:68:ed:0c:d5:a1:74: 0a:c9:ac:ed:72:ee:41:52:15:42:0b:dd:6a:fd:ff: cd:40:3a:4d:77:f1:c9:ac:6e:dd:0f:a9:90:c7:f7: 8c:6d:26:a7:95:76:ec:de:e1:bc:e9:dd:e1:23:82: 03:64:d9:fa:a1:1a:b6:d2:07:e7:1f:fd:3b:a6:82: 7a:0f:17:53:bf:d6:9f:e1:37:9b:86:ae:5d:f2:91: 95:73:92:c9:0c:40:31:43:66:50:4e:6e:ff:00:a3: dc:29:cd:87:40:0e:5e:d0:31:77:e8:a3:4b:5a:29: 9f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1D:D6:62:66:0C:F7:9A:0D:32:D7:FC:D4:72:D8:C4:53:4A:80:AF X509v3 Authority Key Identifier: keyid:8F:0B:EA:3D:96:FC:8E:2E:D1:E8:C6:83:70:47:69:45:69:EE:E3:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/jwvqPZb8ji7R6MaDcEdpRWnu484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jwvqPZb8ji7R6MaDcEdpRWnu484.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/DA2240E6462911EDAE78B235C4F9AE02/99E52804462E11ED90035452C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 206.131.192.0/20 Signature Algorithm: sha256WithRSAEncryption 03:57:6d:49:2f:b4:74:0e:62:09:d4:ad:a8:1d:7f:10:a1:67: 4d:e9:6f:9d:8a:b4:c9:9f:d1:5e:1c:c9:c2:97:e4:91:51:57: 70:25:ad:68:76:f5:42:12:f4:8e:97:2e:0d:40:55:fe:06:73: ba:19:83:46:07:a3:87:e8:85:f3:55:78:bf:4b:12:11:b5:39: aa:33:18:d8:f1:bb:18:0f:9b:74:ea:e4:80:b2:a6:44:29:d8: b9:fd:6c:3b:ed:17:71:6e:fb:fb:5c:48:57:16:89:b4:f3:a1: 0f:c2:70:2c:6c:f5:26:50:00:fd:36:4b:de:cb:47:00:fc:2d: d4:f1:5b:d6:53:5b:9a:f6:c2:9d:86:75:a3:a3:ec:ec:d7:49: 30:5e:0c:ec:4a:b1:4c:37:11:80:a7:84:6f:11:30:89:04:1a: b7:d1:fd:f5:c1:65:57:89:12:ed:39:51:07:a2:7e:e3:a5:dd: 25:99:d1:4f:f9:ae:df:f3:69:f1:e0:9e:67:0a:ae:3c:d0:ca: 46:e6:9b:6d:bf:f4:80:88:81:ac:27:c5:68:a1:e1:cf:b4:0b: 8a:1f:84:66:93:3d:c2:f9:16:c7:d1:a8:b7:c9:02:37:24:4a: a7:1d:c5:82:e1:3c:7d:9e:cc:0d:28:5a:b9:8c:ea:2d:be:63: 4c:5d:47:5e -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKDhGMEJFQTNEOTZGQzhFMkVEMUU4QzY4MzcwNDc2OTQ1 NjlFRUUzQ0UwHhcNMjMxMjAzMDQzNTAyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTZjMDU3Ni0xZWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Qo4CVDVFVoN6d0vbBxbXPRFNUkdlcd16aFjcQ6hWAim6wgCatx4Qnt5SQ5d Pw8RXqrykfPghTJ2ipzAmYdHZhJlaXvLHi0qebyID5OXIqGo7CPVzmAen43YCzVY +if5SSOOsjQT7bdWTw6qcZLoPQMnbkwhwFh6yi2huF7iiLTZwuyxqdmJW3dTMQ04 lqBo7QzVoXQKyaztcu5BUhVCC91q/f/NQDpNd/HJrG7dD6mQx/eMbSanlXbs3uG8 6d3hI4IDZNn6oRq20gfnH/07poJ6DxdTv9af4Tebhq5d8pGVc5LJDEAxQ2ZQTm7/ AKPcKc2HQA5e0DF36KNLWimfAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAkd1mJm DPeaDTLX/NRy2MRTSoCvMB8GA1UdIwQYMBaAFI8L6j2W/I4u0ejGg3BHaUVp7uPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9EQTIyNDBFNjQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi9qd3ZxUFpiOGppN1I2TWFEY0VkcFJXbnU0 ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2p3dnFQWmI4amk3UjZNYURjRWRwUldudTQ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OURDNzQvREEyMjQwRTY0NjI5MTFFREFFNzhCMjM1QzRGOUFFMDIvOTlFNTI4MDQ0 NjJFMTFFRDkwMDM1NDUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATOg8AwDQYJKoZIhvcNAQELBQADggEBAANXbUkvtHQOYgnU ragdfxChZ03pb52KtMmf0V4cycKX5JFRV3AlrWh29UIS9I6XLg1AVf4Gc7oZg0YH o4fohfNVeL9LEhG1OaozGNjxuxgPm3Tq5ICypkQp2Ln9bDvtF3Fu+/tcSFcWibTz oQ/CcCxs9SZQAP02S97LRwD8LdTxW9ZTW5r2wp2GdaOj7OzXSTBeDOxKsUw3EYCn hG8RMIkEGrfR/fXBZVeJEu05UQeifuOl3SWZ0U/5rt/zafHgnmcKrjzQykbmm22/ 9ICIgawnxWih4c+0C4ofhGaTPcL5FsfRqLfJAjckSqcdxYLhPH2ezA0oWrmM6i2+ Y0xdR14= -----END CERTIFICATE-----Generated at Mon May 27 05:39:34 2024 by rpki-client on console-fra.rpki-client.org