$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/110A7248841F11EEAF514B09C4F9AE02.roa File: 110A7248841F11EEAF514B09C4F9AE02.roa (raw, json) Hash identifier: 3UMzDkmaCKQSgaeBeiUzWqmgHjiQdo/Y4B6yGA1t2M4= Subject key identifier: F7:AF:DF:DD:79:BA:3C:83:3B:E5:35:90:3A:6F:2B:6E:6F:C2:5D:26 Certificate issuer: /CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Certificate serial: 14 Authority key identifier: 01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/110A7248841F11EEAF514B09C4F9AE02.roa Signing time: Thu 07 Dec 2023 07:23:38 +0000 ROA not before: Thu 07 Dec 2023 07:23:38 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 135283 IP address blocks: 202.47.190.0/23 maxlen: 23 202.47.190.0/24 maxlen: 24 202.47.191.0/24 maxlen: 24 2401:4fe0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3C52/serialNumber=01B6DB4BF1D33A341F4760A98C85F876103FAEE9 Validity Not Before: Dec 7 07:23:38 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=657172f9-1be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:e5:0a:02:d4:b8:e1:ad:7e:f1:5d:f1:57: 61:b7:73:5e:26:2b:38:03:4b:10:9c:5f:d8:28:e4: d5:4d:bc:46:8f:c4:d4:54:b9:f2:a1:46:59:7e:c6: 1f:30:92:49:81:6d:dd:3e:74:b6:75:82:92:b9:41: d4:c4:d9:7f:59:c7:c6:44:5b:4b:07:34:e9:8d:fa: fa:c7:70:35:66:38:06:57:22:a1:16:15:0b:0c:1f: df:ea:b6:cd:9d:1c:98:3a:ab:6c:d0:5e:e0:d3:d8: 70:f1:ac:28:e7:3c:6c:b9:22:64:30:eb:b5:40:58: a3:97:82:29:42:c4:cb:55:19:25:8d:28:14:05:99: 26:35:b4:cd:a9:ad:bd:9f:1c:33:0e:f5:7a:47:c5: ae:6d:96:08:b8:31:ce:75:fd:e3:c2:f9:ba:1c:a5: 37:86:a9:03:af:7d:20:a8:68:cb:5f:96:1a:90:e5: 58:ef:39:ac:80:c5:59:82:9b:1c:b5:9d:a6:8a:0f: 60:af:5b:16:3d:8b:a6:f3:b9:18:46:00:55:4a:e7: dd:91:19:5a:91:e4:97:4e:4f:51:da:ec:6a:d4:c6: 19:1c:5c:63:a5:35:a3:34:b4:a5:ac:0d:71:25:cf: 51:5c:fa:49:99:9d:ea:8b:4b:23:1d:a9:5c:62:aa: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:DF:DD:79:BA:3C:83:3B:E5:35:90:3A:6F:2B:6E:6F:C2:5D:26 X509v3 Authority Key Identifier: keyid:01:B6:DB:4B:F1:D3:3A:34:1F:47:60:A9:8C:85:F8:76:10:3F:AE:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/AbbbS_HTOjQfR2CpjIX4dhA_ruk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AbbbS_HTOjQfR2CpjIX4dhA_ruk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3C52/7DC3A342841E11EE88983087C4F9AE02/110A7248841F11EEAF514B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.47.190.0/23 IPv6: 2401:4fe0::/32 Signature Algorithm: sha256WithRSAEncryption 13:94:71:88:5a:fa:7a:40:a5:4c:0c:74:52:70:4e:d5:99:60: 91:05:93:40:eb:3e:91:4b:4e:3e:68:8a:a2:6b:8c:b3:7f:54: e3:f6:28:70:1c:e9:e7:0e:25:84:a0:af:e8:9f:73:2c:e7:63: 7e:fc:79:1e:62:96:29:30:4a:64:12:6d:9e:bb:cf:03:23:4f: c0:4a:83:00:db:7e:b7:e5:e2:9a:9c:a0:a0:cc:cd:0a:dc:9d: 8b:c6:25:04:ba:16:18:87:94:a5:66:6c:97:6b:0d:d6:6d:09: 91:b6:a5:e4:28:6a:08:32:81:87:3a:5d:f7:18:92:98:59:96: 92:72:27:6e:27:43:c5:53:e3:10:6a:00:10:37:71:a1:78:23: 3c:27:24:41:d1:47:44:c5:62:26:30:fa:d3:bc:f4:96:26:6b: b6:88:65:30:8e:b2:d1:a2:4f:6a:55:fa:cd:a9:fc:0b:82:db: a6:9c:d2:94:4c:9c:a0:11:04:d3:c7:a7:e1:c3:b2:41:49:9c: 6c:a4:2e:a5:04:1d:40:4f:4c:43:16:77:1c:3a:e3:7d:e8:87: 8d:d0:36:22:e8:27:45:e5:27:01:58:cd:ae:ce:c4:31:14:a8: 3a:11:79:a8:d2:75:18:1e:67:ae:da:ce:6a:9c:cf:e8:a8:21: 58:22:fc:99 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB M0M1MjExMC8GA1UEBRMoMDFCNkRCNEJGMUQzM0EzNDFGNDc2MEE5OEM4NUY4NzYx MDNGQUVFOTAeFw0yMzEyMDcwNzIzMzhaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NzE3MmY5LTFiZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZOuUKAtS44a1+8V3xV2G3c14mKzgDSxCcX9go5NVNvEaPxNRUufKhRll+xh8w kkmBbd0+dLZ1gpK5QdTE2X9Zx8ZEW0sHNOmN+vrHcDVmOAZXIqEWFQsMH9/qts2d HJg6q2zQXuDT2HDxrCjnPGy5ImQw67VAWKOXgilCxMtVGSWNKBQFmSY1tM2prb2f HDMO9XpHxa5tlgi4Mc51/ePC+bocpTeGqQOvfSCoaMtflhqQ5VjvOayAxVmCmxy1 naaKD2CvWxY9i6bzuRhGAFVK592RGVqR5JdOT1Ha7GrUxhkcXGOlNaM0tKWsDXEl z1Fc+kmZneqLSyMdqVxiqtcjAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU96/f3Xm6 PIM75TWQOm8rbm/CXSYwHwYDVR0jBBgwFoAUAbbbS/HTOjQfR2CpjIX4dhA/rukw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzQzUyLzdEQzNBMzQyODQx RTExRUU4ODk4MzA4N0M0RjlBRTAyL0FiYmJTX0hUT2pRZlIyQ3BqSVg0ZGhBX3J1 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQWJiYlNfSFRPalFmUjJDcGpJWDRkaEFfcnVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0M1Mi83REMzQTM0Mjg0MUUxMUVFODg5ODMwODdDNEY5QUUwMi8xMTBBNzI0ODg0 MUYxMUVFQUY1MTRCMDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAcovvjANBAIAAjAHAwUAJAFP4DANBgkqhkiG9w0BAQsFAAOC AQEAE5RxiFr6ekClTAx0UnBO1ZlgkQWTQOs+kUtOPmiKomuMs39U4/YocBzp5w4l hKCv6J9zLOdjfvx5HmKWKTBKZBJtnrvPAyNPwEqDANt+t+XimpygoMzNCtydi8Yl BLoWGIeUpWZsl2sN1m0Jkbal5ChqCDKBhzpd9xiSmFmWknInbidDxVPjEGoAEDdx oXgjPCckQdFHRMViJjD607z0liZrtohlMI6y0aJPalX6zan8C4LbppzSlEycoBEE 08en4cOyQUmcbKQupQQdQE9MQxZ3HDrjfeiHjdA2IugnReUnAVjNrs7EMRSoOhF5 qNJ1GB5nrtrOapzP6KghWCL8mQ== -----END CERTIFICATE-----Generated at Thu Jun 13 08:42:05 2024 by rpki-client on console-fra.rpki-client.org