$ rpki-client -vvf rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa File: 347735B4C00511EE82324069C4F9AE02.roa (raw, json) Hash identifier: 7T/gwLn5JsujNeCTQC4nPkRboKCTWpsTiYGd4X+xRDo= Subject key identifier: 98:D6:B2:5B:8C:99:61:74:9C:2D:17:E3:DC:D2:64:4C:02:30:8B:BA Certificate issuer: /CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Certificate serial: 3499 Authority key identifier: EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa Signing time: Wed 31 Jan 2024 06:51:48 +0000 ROA not before: Wed 31 Jan 2024 06:51:48 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 150718 IP address blocks: 114.130.94.0/24 maxlen: 24 114.130.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 15:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13465 (0x3499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AABB1/serialNumber=EB7FE9892DF000255FCF3AC0B2B4D12AEA6FF806 Validity Not Before: Jan 31 06:51:48 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65b9ee04-44c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:ff:7c:8e:08:5f:90:fa:ff:85:31:7d:0f: f8:ef:6e:a4:77:1e:39:7f:8e:79:6d:46:24:50:fe: 11:bc:66:c4:26:e9:03:5f:21:6d:3f:7f:b2:66:db: b5:00:7b:fe:3a:2c:e6:8a:14:41:24:9c:8c:e9:8d: 77:62:bd:7e:52:c1:ee:05:a1:46:c4:6e:76:03:60: b7:5c:30:29:b5:a1:f1:52:2a:91:cd:8b:c2:80:4c: 9b:7a:3d:72:ad:ea:ed:e4:42:de:ec:fc:b0:97:d9: c2:c1:83:a3:3a:9c:89:23:b8:8f:48:d8:cc:2a:e8: 1d:35:ed:c2:6d:ab:8d:94:63:33:af:f7:f3:f2:67: 3e:9b:2e:dd:16:2d:20:2f:14:56:d9:73:7b:fa:9d: d8:90:5c:69:ff:9f:72:e7:b2:c3:92:6d:b7:d4:ca: f3:31:41:d1:23:fe:99:3d:84:cf:72:59:b9:00:4f: dd:82:11:67:7e:d5:ef:e4:14:7d:20:07:08:3b:e2: d5:7c:b3:06:4b:4a:68:c6:e3:97:98:c9:fd:1b:f6: 31:c9:fb:17:3a:a2:11:ad:41:d6:bc:c7:c5:11:ba: 1d:75:62:3a:74:d0:32:89:0c:c7:a2:fd:2c:7b:df: e3:63:81:69:07:51:64:8c:20:25:f7:cf:ed:0d:cb: 57:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:B2:5B:8C:99:61:74:9C:2D:17:E3:DC:D2:64:4C:02:30:8B:BA X509v3 Authority Key Identifier: keyid:EB:7F:E9:89:2D:F0:00:25:5F:CF:3A:C0:B2:B4:D1:2A:EA:6F:F8:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/63_piS3wACVfzzrAsrTRKupv-AY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63_piS3wACVfzzrAsrTRKupv-AY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AABB1/8874E9E81D9811E29788A98208B02CD2/347735B4C00511EE82324069C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.130.94.0/23 Signature Algorithm: sha256WithRSAEncryption 95:ac:84:7d:93:aa:01:9e:49:40:9f:49:00:20:19:ec:b6:e6: 1a:6d:31:40:df:d5:ea:49:2d:2e:eb:5e:78:ba:19:bc:13:e6: 94:50:75:d3:eb:19:ba:1f:83:c5:58:57:46:70:41:2e:f1:7e: 67:be:89:e2:47:fd:0b:17:40:89:f6:84:29:33:75:52:20:44: e2:11:f3:1c:f9:ff:42:21:08:b8:66:23:0f:3a:81:b3:63:40: ff:5f:e0:10:7a:05:8d:53:76:7e:f5:02:e0:5d:e4:6d:7f:23: 55:48:f7:29:41:02:8e:4f:64:cc:dc:ef:af:cd:64:6e:b2:52: ea:f0:ce:5f:fe:d0:8a:0a:8a:35:ec:2d:85:1c:71:14:f2:42: 4b:1a:48:4b:47:c2:be:00:a1:1d:a4:45:9f:84:c7:51:b0:aa: 27:d5:20:14:4d:b9:27:7b:bd:b7:14:1d:71:9c:70:aa:05:db: 1b:0e:b8:da:71:90:3e:78:b4:63:2a:11:a4:18:6a:63:55:02: cb:e6:03:4e:38:bf:a5:8b:c0:13:42:74:f2:85:9f:0e:61:49: 28:cd:07:15:2e:ab:a6:f3:83:ed:ee:15:7b:43:6f:50:a2:c7: 26:35:2e:61:a2:b8:db:01:54:98:8a:7e:cc:4b:40:4a:e6:6c: 0a:d0:02:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFCQjExMTAvBgNVBAUTKEVCN0ZFOTg5MkRGMDAwMjU1RkNGM0FDMEIyQjREMTJB RUE2RkY4MDYwHhcNMjQwMTMxMDY1MTQ4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI5ZWUwNC00NGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0H/fI4IX5D6/4UxfQ/4726kdx45f455bUYkUP4RvGbEJukDXyFtP3+yZtu1 AHv+OizmihRBJJyM6Y13Yr1+UsHuBaFGxG52A2C3XDAptaHxUiqRzYvCgEybej1y rert5ELe7Pywl9nCwYOjOpyJI7iPSNjMKugdNe3CbauNlGMzr/fz8mc+my7dFi0g LxRW2XN7+p3YkFxp/59y57LDkm231MrzMUHRI/6ZPYTPclm5AE/dghFnftXv5BR9 IAcIO+LVfLMGS0poxuOXmMn9G/YxyfsXOqIRrUHWvMfFEboddWI6dNAyiQzHov0s e9/jY4FpB1FkjCAl98/tDctXZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJjWsluM mWF0nC0X49zSZEwCMIu6MB8GA1UdIwQYMBaAFOt/6Ykt8AAlX886wLK00Srqb/gG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUJCMS84ODc0RTlFODFE OTgxMUUyOTc4OEE5ODIwOEIwMkNEMi82M19waVMzd0FDVmZ6enJBc3JUUkt1cHYt QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYzX3BpUzN3QUNWZnp6ckFzclRSS3Vwdi1BWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFCQjEvODg3NEU5RTgxRDk4MTFFMjk3ODhBOTgyMDhCMDJDRDIvMzQ3NzM1QjRD MDA1MTFFRTgyMzI0MDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFygl4wDQYJKoZIhvcNAQELBQADggEBAJWshH2TqgGeSUCf SQAgGey25hptMUDf1epJLS7rXni6GbwT5pRQddPrGbofg8VYV0ZwQS7xfme+ieJH /QsXQIn2hCkzdVIgROIR8xz5/0IhCLhmIw86gbNjQP9f4BB6BY1Tdn71AuBd5G1/ I1VI9ylBAo5PZMzc76/NZG6yUurwzl/+0IoKijXsLYUccRTyQksaSEtHwr4AoR2k RZ+Ex1GwqifVIBRNuSd7vbcUHXGccKoF2xsOuNpxkD54tGMqEaQYamNVAsvmA044 v6WLwBNCdPKFnw5hSSjNBxUuq6bzg+3uFXtDb1CixyY1LmGiuNsBVJiKfsxLQErm bArQAiQ= -----END CERTIFICATE-----Generated at Mon May 20 17:23:56 2024 by rpki-client on console-ams.rpki-client.org