$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/EA1E8B8A51C711EE9A3CC954C4F9AE02.roa File: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (raw, json) Hash identifier: Da/S1vhffx2bAniYArf13My2tD2OTRCkqaPJ4eK7KVQ= Subject key identifier: A0:6A:E0:F5:29:E9:69:3A:DE:EB:A0:48:08:9E:88:6C:41:B1:EC:74 Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 18 Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/EA1E8B8A51C711EE9A3CC954C4F9AE02.roa Signing time: Wed 20 Sep 2023 23:11:28 +0000 ROA not before: Wed 20 Sep 2023 23:11:28 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 19905 IP address blocks: 58.28.0.0/16 maxlen: 16 118.90.0.0/16 maxlen: 16 182.154.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 07:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Sep 20 23:11:28 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=650b7c20-db22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0f:0a:b0:53:da:a1:9c:52:85:97:ff:8f:17: d5:e8:08:89:c9:b8:de:b8:5e:d8:c7:2f:73:8a:97: 5d:62:b0:8d:15:15:ee:e9:a3:9a:88:b1:bd:93:74: a7:23:fe:8c:a2:a4:b7:cc:a8:69:6c:5a:0c:44:fc: 24:09:b2:ab:38:df:cf:01:f7:0a:08:e0:0c:8f:17: 12:07:5b:16:a8:41:c8:e9:98:78:18:06:97:32:43: c7:09:80:02:3f:5d:6a:2b:1f:bf:95:a3:86:c1:f4: df:a4:00:b4:7c:a9:be:35:7b:1c:ba:41:e2:b0:27: 84:19:35:a7:60:6e:98:95:a4:01:4b:1b:8f:8b:dc: b2:f7:0c:34:7f:a5:c9:eb:c9:24:06:9f:33:37:bb: dc:85:cb:b1:1a:4f:94:4b:1d:09:90:3b:88:ed:dc: e4:43:3d:ca:d8:16:6d:47:53:68:ef:9e:8e:3f:d2: 31:35:cc:3b:7c:2f:6e:61:43:1d:d0:4e:43:1d:67: c1:ff:58:41:eb:ad:d4:33:76:d1:22:d3:73:ca:a8: 5e:73:af:6b:c6:48:2e:3e:38:c3:df:24:d7:41:67: 8d:35:a4:87:df:43:c6:27:d3:4a:62:08:2c:89:1c: f1:37:7b:b9:88:1d:92:f3:36:c0:c0:ed:4b:4f:49: 2b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6A:E0:F5:29:E9:69:3A:DE:EB:A0:48:08:9E:88:6C:41:B1:EC:74 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/EA1E8B8A51C711EE9A3CC954C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.28.0.0/16 118.90.0.0/16 182.154.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7b:af:0c:ec:1b:cf:c8:f4:7e:b5:4e:e9:73:5b:95:d3:de:bf: 60:85:8c:e7:9d:d8:ce:09:67:d2:74:b4:8e:f0:ca:e2:39:8f: 1e:fa:f0:36:9a:b4:e1:93:96:c3:8d:d2:25:0a:87:73:99:d3: 07:c2:fc:a8:62:e6:03:14:4a:3b:de:e8:80:6a:4a:2a:8f:e1: 8a:bf:fe:33:cd:44:67:7d:63:3d:7c:2e:0f:6d:03:36:09:38: 38:43:f4:31:dd:e2:5a:4b:52:7b:6a:f9:25:8d:0c:d6:9a:a5: ab:9d:89:8d:0d:53:8f:07:95:13:d9:97:38:02:f2:60:b1:e2: 60:b1:24:5b:0d:fb:e4:52:1f:8e:b6:64:62:2a:8f:34:b4:b7: 09:40:81:76:fc:99:bc:bf:52:23:08:09:c7:d2:fd:fa:0f:03: a5:25:95:3e:8d:54:46:8a:4a:15:03:86:91:15:21:1b:31:69: 6f:21:76:8f:d9:2b:d7:e8:8e:93:56:6c:c0:30:aa:1b:aa:a2: 6f:9a:eb:d9:50:6f:8c:55:7e:84:f4:18:ec:43:cb:37:19:37: fc:1a:95:da:9f:ad:aa:db:3f:74:24:74:80:da:99:59:88:ed: dd:c8:bd:90:62:3b:34:fa:96:65:a2:67:cf:a9:a0:2d:6b:df: c8:c8:87:ac -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTVDNjExMC8GA1UEBRMoM0Q0N0U2Njg3QkI0REY0MEM1MUIwM0E0NTU5QzEwQ0Ey MkY2NzcyRjAeFw0yMzA5MjAyMzExMjhaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MGI3YzIwLWRiMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuDwqwU9qhnFKFl/+PF9XoCInJuN64XtjHL3OKl11isI0VFe7po5qIsb2TdKcj /oyipLfMqGlsWgxE/CQJsqs4388B9woI4AyPFxIHWxaoQcjpmHgYBpcyQ8cJgAI/ XWorH7+Vo4bB9N+kALR8qb41exy6QeKwJ4QZNadgbpiVpAFLG4+L3LL3DDR/pcnr ySQGnzM3u9yFy7EaT5RLHQmQO4jt3ORDPcrYFm1HU2jvno4/0jE1zDt8L25hQx3Q TkMdZ8H/WEHrrdQzdtEi03PKqF5zr2vGSC4+OMPfJNdBZ401pIffQ8Yn00piCCyJ HPE3e7mIHZLzNsDA7UtPSSsjAgMBAAGjggKeMIICmjAdBgNVHQ4EFgQUoGrg9Snp aTre66BICJ6IbEGx7HQwHwYDVR0jBBgwFoAUPUfmaHu030DFGwOkVZwQyiL2dy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNUM2L0Q1NTUxOUI0NEMz NDExRUVBRUVEQTIyQ0M0RjlBRTAyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUFVmbWFIdTAzMERGR3dPa1Zad1F5aUwyZHk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9FQTFFOEI4QTUx QzcxMUVFOUEzQ0M5NTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAoBggrBgEFBQcBBwEB/wQZ MBcwFQQCAAEwDwMDADocAwMAdloDAwC2mjANBgkqhkiG9w0BAQsFAAOCAQEAe68M 7BvPyPR+tU7pc1uV096/YIWM553Yzgln0nS0jvDK4jmPHvrwNpq04ZOWw43SJQqH c5nTB8L8qGLmAxRKO97ogGpKKo/hir/+M81EZ31jPXwuD20DNgk4OEP0Md3iWktS e2r5JY0M1pqlq52JjQ1TjweVE9mXOALyYLHiYLEkWw375FIfjrZkYiqPNLS3CUCB dvyZvL9SIwgJx9L9+g8DpSWVPo1URopKFQOGkRUhGzFpbyF2j9kr1+iOk1ZswDCq G6qib5rr2VBvjFV+hPQY7EPLNxk3/BqV2p+tqts/dCR0gNqZWYjt3ci9kGI7NPqW ZaJnz6mgLWvfyMiHrA== -----END CERTIFICATE-----Generated at Wed May 1 10:34:18 2024 by rpki-client on console-fra.rpki-client.org