$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa File: B57678E8D73711EEAECFA720C4F9AE02.roa (raw, json) Hash identifier: zaJAYhQTcybhHQIlp/uCcC9JLNAhj46aBOJI3WaHnt0= Subject key identifier: A2:65:C7:43:25:E0:10:6C:1F:89:12:D3:DC:82:D7:D1:6E:53:1D:B2 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: 0A Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa Signing time: Thu 07 Mar 2024 18:34:18 +0000 ROA not before: Thu 07 Mar 2024 18:34:18 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152129 IP address blocks: 210.79.128.0/23 maxlen: 23 210.79.128.0/24 maxlen: 24 210.79.129.0/24 maxlen: 24 2401:5420::/32 maxlen: 32 2401:5420::/48 maxlen: 48 2401:5420:1::/48 maxlen: 48 2401:5420:2::/48 maxlen: 48 2401:5420:3::/48 maxlen: 48 2401:5420:4::/48 maxlen: 48 2401:5420:5::/48 maxlen: 48 2401:5420:6::/48 maxlen: 48 2401:5420:7::/48 maxlen: 48 2401:5420:8::/48 maxlen: 48 2401:5420:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: Mar 7 18:34:18 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65ea08aa-5156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a9:45:13:75:28:eb:62:2c:e6:8e:50:e9:74: 4e:c8:02:ee:b7:6a:70:78:f6:ee:82:1c:48:6d:53: 04:a4:a2:3d:24:68:03:9d:0b:be:4b:57:64:e8:e9: 35:ae:17:df:10:35:22:07:41:06:17:d1:2f:78:d8: 11:dd:bc:6c:6e:68:23:7c:a9:51:6c:35:c1:a6:80: 2e:ac:aa:1b:3e:1f:03:41:b0:1f:77:d3:5d:05:2f: e6:9d:13:07:0e:72:f1:7b:a0:f2:f6:03:e0:27:e4: 9f:dc:e1:d6:2b:94:b2:0a:61:74:f1:f6:51:96:07: 50:80:3b:da:01:a4:1d:62:76:fe:92:e8:cc:0e:a9: a6:8b:4b:de:3e:ba:53:1f:19:ad:d5:c0:9f:53:a1: 8e:6d:cc:14:2d:ff:4e:1c:50:b6:6c:4c:c9:4b:84: d4:66:65:43:19:34:36:2f:63:3f:c9:d9:aa:76:09: 91:2d:99:b1:4c:33:8c:8b:47:0d:48:5a:82:44:ea: 62:c6:95:0e:c0:54:9a:bb:1e:07:3f:be:f0:e4:8b: e7:38:03:9e:48:07:92:38:ab:9b:55:4f:b6:e8:aa: 4c:37:a4:59:bc:08:82:80:10:83:e7:de:d0:c7:b3: dd:82:d3:5a:0c:d5:87:ef:56:f0:26:ec:38:ba:ab: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:65:C7:43:25:E0:10:6C:1F:89:12:D3:DC:82:D7:D1:6E:53:1D:B2 X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.128.0/23 IPv6: 2401:5420::/32 Signature Algorithm: sha256WithRSAEncryption 3d:a7:31:c5:0a:26:e5:12:d5:ef:13:a4:6a:84:aa:2a:19:d6: d6:80:a2:19:22:f5:64:eb:86:ba:4f:05:2f:7c:04:a1:be:27: d4:86:c4:9e:e5:42:a5:fb:c6:3a:4d:71:ae:a9:2e:c0:8b:94: f1:55:ab:a8:bf:2f:bc:3f:21:0f:8a:ea:d8:fb:14:a1:cd:2e: 67:a4:d5:de:97:87:43:a8:a1:21:10:44:da:a1:83:46:2a:c7: ff:bc:c6:40:d6:83:7b:05:78:ad:04:18:a1:96:13:d0:00:a2: 7b:0e:b2:b6:0a:52:c7:fa:75:33:5f:20:71:5c:aa:77:0a:e0: 44:50:e7:5b:fb:72:0d:0c:34:48:71:31:60:ef:c2:86:c2:71: 1f:58:13:62:51:20:2a:d1:ae:af:7c:21:27:67:57:5c:b7:ae: bc:fe:21:50:14:06:16:54:7b:9c:14:17:56:4b:6e:c8:f2:26: b7:e1:ed:48:8e:85:1e:0c:cf:ce:3d:cc:b5:ce:d2:39:d0:3a: 5e:3f:9c:ce:2e:c0:50:8f:53:3b:20:9e:aa:2d:b2:69:3c:25: b7:93:a5:11:6d:2f:e4:49:28:b7:5d:03:25:b9:ab:b2:59:77: 41:62:4b:6b:01:0b:bb:2c:13:9e:5a:11:98:6f:df:f3:04:1d: 73:ec:4a:d9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzQxNTExMC8GA1UEBRMoQTgyRTYzMzFFQkY0NEY1OEZDNjU5OTg2REIwNTQ0QzY2 MTVGMjZGMTAeFw0yNDAzMDcxODM0MThaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ZWEwOGFhLTUxNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAqUUTdSjrYizmjlDpdE7IAu63anB49u6CHEhtUwSkoj0kaAOdC75LV2To6TWu F98QNSIHQQYX0S942BHdvGxuaCN8qVFsNcGmgC6sqhs+HwNBsB93010FL+adEwcO cvF7oPL2A+An5J/c4dYrlLIKYXTx9lGWB1CAO9oBpB1idv6S6MwOqaaLS94+ulMf Ga3VwJ9ToY5tzBQt/04cULZsTMlLhNRmZUMZNDYvYz/J2ap2CZEtmbFMM4yLRw1I WoJE6mLGlQ7AVJq7Hgc/vvDki+c4A55IB5I4q5tVT7boqkw3pFm8CIKAEIPn3tDH s92C01oM1YfvVvAm7Di6q0hZAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUomXHQyXg EGwfiRLT3ILX0W5THbIwHwYDVR0jBBgwFoAUqC5jMev0T1j8ZZmG2wVExmFfJvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNDE1L0JEMUM5MzVDRDcz MjExRUVBMTgzRjUwQUM0RjlBRTAyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUM1ak1ldjBUMWo4WlptRzJ3VkV4bUZmSnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9CNTc2NzhFOEQ3 MzcxMUVFQUVDRkE3MjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAdJPgDANBAIAAjAHAwUAJAFUIDANBgkqhkiG9w0BAQsFAAOC AQEAPacxxQom5RLV7xOkaoSqKhnW1oCiGSL1ZOuGuk8FL3wEob4n1IbEnuVCpfvG Ok1xrqkuwIuU8VWrqL8vvD8hD4rq2PsUoc0uZ6TV3peHQ6ihIRBE2qGDRirH/7zG QNaDewV4rQQYoZYT0ACiew6ytgpSx/p1M18gcVyqdwrgRFDnW/tyDQw0SHExYO/C hsJxH1gTYlEgKtGur3whJ2dXXLeuvP4hUBQGFlR7nBQXVktuyPImt+HtSI6FHgzP zj3Mtc7SOdA6Xj+czi7AUI9TOyCeqi2yaTwlt5OlEW0v5Ekot10DJbmrsll3QWJL awELuywTnloRmG/f8wQdc+xK2Q== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:30 2024 by rpki-client on console-ams.rpki-client.org