$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/DF6E9324D08D11EA9010E72EC4F9AE02.roa File: DF6E9324D08D11EA9010E72EC4F9AE02.roa (raw, json) Hash identifier: NKaWR27X7N0yTdapOCDpWGOjKNUWONO9ba73Q3IbiMc= Subject key identifier: 4F:5F:7B:14:0D:54:C3:7E:3E:03:9E:03:00:BB:6C:25:37:3B:66:C2 Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 35F3 Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/DF6E9324D08D11EA9010E72EC4F9AE02.roa Signing time: Thu 04 Apr 2024 15:21:20 +0000 ROA not before: Thu 04 Apr 2024 15:21:20 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9557 IP address blocks: 58.181.96.0/20 maxlen: 24 119.159.0.0/16 maxlen: 24 182.176.0.0/16 maxlen: 24 202.70.144.0/20 maxlen: 24 202.125.128.0/19 maxlen: 24 203.135.0.0/19 maxlen: 24 203.135.32.0/19 maxlen: 24 221.120.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 14:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13811 (0x35f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Validity Not Before: Apr 4 15:21:20 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=660ec570-0db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:26:8e:e9:10:a5:cb:af:de:72:f5:43:c6: 60:49:9b:24:63:f3:29:09:d8:23:e9:8c:c5:88:46: cc:41:78:49:9a:b8:78:f0:74:9e:33:b3:32:ca:47: d2:6b:41:d9:f5:33:65:fb:0d:71:9c:df:45:d1:78: b6:95:40:88:0b:50:a3:43:42:ac:d7:0a:95:be:70: ea:8d:f5:e5:15:dd:80:25:df:65:eb:7a:cc:9a:7f: 0c:26:10:a1:24:1f:10:99:eb:0b:c8:f6:f2:31:69: 62:54:15:b5:23:c2:e7:8c:c1:34:2f:5f:d5:35:53: 39:95:89:b0:fe:78:7e:3e:f4:86:38:36:a6:ef:7b: fd:51:6a:07:be:1e:92:96:7f:45:e1:76:c2:08:c6: 20:c9:d0:cf:bc:ce:1c:85:89:0d:09:8e:72:c3:aa: 1e:d5:e4:b3:18:67:d3:d6:8d:5f:18:65:1f:d0:6f: 88:de:1d:bb:24:80:4c:66:e1:92:50:23:ea:22:c2: c4:64:6b:66:8f:8b:ae:e0:e0:05:1e:3c:66:99:12: f1:34:0b:12:91:39:88:45:4c:45:64:fd:d0:77:33: ee:59:d2:dc:24:35:e2:18:22:e6:a3:d1:0e:7f:da: 30:dc:57:59:36:4a:b8:4c:19:f8:3c:a1:79:57:c8: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5F:7B:14:0D:54:C3:7E:3E:03:9E:03:00:BB:6C:25:37:3B:66:C2 X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/DF6E9324D08D11EA9010E72EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.96.0/20 119.159.0.0/16 182.176.0.0/16 202.70.144.0/20 202.125.128.0/19 203.135.0.0/18 221.120.192.0/18 Signature Algorithm: sha256WithRSAEncryption 04:bf:81:32:c0:54:58:a3:d1:b0:20:d7:37:61:51:b9:93:51: 34:13:37:94:e7:59:62:c8:68:8a:03:3b:26:74:e3:97:cf:f4: d6:8e:b9:c6:b5:69:fd:34:99:2f:8f:a7:d4:e9:ba:9e:26:27: 94:fd:08:9a:5e:ec:e4:56:9e:54:9a:70:69:fa:66:63:5d:d4: e4:e3:f3:9d:3f:1f:d8:1f:51:21:72:36:04:a1:11:5f:86:20: 26:d9:79:b6:57:1c:e7:da:dd:89:1b:6c:75:e2:99:4a:2d:3d: 1e:35:14:a0:66:f0:39:41:b9:cb:61:08:16:9b:49:90:4d:5c: e1:ec:8a:6e:4e:47:94:b9:e4:2e:95:ed:ed:75:fc:69:58:01: 4a:4e:64:2e:cc:4b:1d:dc:42:ec:98:5d:56:ef:8d:11:a7:4c: 42:8e:91:e9:d6:84:87:4c:5c:f9:b9:ec:62:66:4e:12:d8:38: 82:1d:0a:64:31:8c:4f:f2:bf:c4:4b:b6:ba:fc:5c:75:e8:2a: b7:b4:f2:23:8e:58:a7:79:6a:1d:90:76:61:1c:fb:88:fb:72: 63:21:4e:26:63:5f:16:41:19:4c:00:fd:6b:4c:30:77:0b:d2: fd:7c:3b:ca:74:bc:1e:3f:30:7e:40:43:10:45:5e:b0:0f:9c: 23:3d:5a:c1 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgICNfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjQwNDA0MTUyMTIwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBlYzU3MC0wZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe4mjukQpcuv3nL1Q8ZgSZskY/MpCdgj6YzFiEbMQXhJmrh48HSeM7MyykfS a0HZ9TNl+w1xnN9F0Xi2lUCIC1CjQ0Ks1wqVvnDqjfXlFd2AJd9l63rMmn8MJhCh JB8QmesLyPbyMWliVBW1I8LnjME0L1/VNVM5lYmw/nh+PvSGODam73v9UWoHvh6S ln9F4XbCCMYgydDPvM4chYkNCY5yw6oe1eSzGGfT1o1fGGUf0G+I3h27JIBMZuGS UCPqIsLEZGtmj4uu4OAFHjxmmRLxNAsSkTmIRUxFZP3QdzPuWdLcJDXiGCLmo9EO f9ow3FdZNkq4TBn4PKF5V8hLFQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFE9fexQN VMN+PgOeAwC7bCU3O2bCMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvREY2RTkzMjRE MDhEMTFFQTkwMTBFNzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQQYIKwYBBQUHAQcBAf8E MjAwMC4EAgABMCgDBAQ6tWADAwB3nwMDALawAwQEykaQAwQFyn2AAwQGy4cAAwQG 3XjAMA0GCSqGSIb3DQEBCwUAA4IBAQAEv4EywFRYo9GwINc3YVG5k1E0EzeU51li yGiKAzsmdOOXz/TWjrnGtWn9NJkvj6fU6bqeJieU/QiaXuzkVp5UmnBp+mZjXdTk 4/OdPx/YH1EhcjYEoRFfhiAm2Xm2Vxzn2t2JG2x14plKLT0eNRSgZvA5QbnLYQgW m0mQTVzh7IpuTkeUueQule3tdfxpWAFKTmQuzEsd3ELsmF1W740Rp0xCjpHp1oSH TFz5uexiZk4S2DiCHQpkMYxP8r/ES7a6/Fx16Cq3tPIjjlineWodkHZhHPuI+3Jj IU4mY18WQRlMAP1rTDB3C9L9fDvKdLwePzB+QEMQRV6wD5wjPVrB -----END CERTIFICATE-----Generated at Sat May 4 15:45:47 2024 by rpki-client on console-fra.rpki-client.org