$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa File: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: 1ErsPRPbDwReOL5aIDAE645DztuNVhT3y8EHu4V5i/c= Subject key identifier: 7B:AA:7B:D6:8C:78:AA:06:E3:8E:A5:61:0E:E0:52:E4:ED:B9:FB:BF Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0152 Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa Signing time: Sun 31 Mar 2024 05:07:09 +0000 ROA not before: Sun 31 Mar 2024 05:07:09 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 65510 IP address blocks: 140.168.64.0/19 maxlen: 19 140.168.78.0/24 maxlen: 24 140.168.79.0/24 maxlen: 24 140.168.87.0/24 maxlen: 24 140.168.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Mar 31 05:07:09 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6608ef7d-6500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:39:26:6e:2c:54:3b:77:86:f6:00:8b:e7: c9:3b:cc:46:e6:9a:4b:98:d4:cf:56:8b:7c:61:32: 8a:c6:a1:99:53:16:5f:16:f3:91:d0:87:75:2f:b5: 33:b0:b4:17:5b:0a:c1:2a:20:03:1e:aa:1d:e3:37: f8:dd:49:8e:1f:ba:c4:85:68:14:09:f9:77:23:b3: 66:83:df:07:57:2e:e0:fc:0e:77:a3:80:57:24:f2: 45:6c:d0:0c:28:c8:43:b0:69:d1:88:83:f8:a1:f3: ae:e8:aa:8d:ae:07:0f:a2:40:94:99:db:40:77:e5: 26:21:fd:9f:d6:f1:7f:48:81:8f:e6:47:e2:07:8e: cd:84:8c:71:68:f1:00:93:a0:f2:ad:c7:65:16:07: 60:28:cb:67:71:72:e7:ed:f2:dd:10:07:fb:ed:6b: c0:d4:5a:6a:83:f2:83:d1:5d:95:98:9e:92:5b:7d: 14:b2:91:f2:cc:b8:34:74:77:bd:85:80:c5:70:c5: 55:7b:cc:d5:f4:3f:2f:0a:90:47:f8:76:e9:8e:5c: df:5d:a0:26:b2:71:55:23:76:b2:d8:11:06:69:4c: 8f:96:33:85:16:5f:f4:b5:1b:67:e0:5f:b5:13:01: a7:57:7a:54:92:18:65:e7:ee:c8:95:15:9d:89:25: 39:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AA:7B:D6:8C:78:AA:06:E3:8E:A5:61:0E:E0:52:E4:ED:B9:FB:BF X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.64.0/18 Signature Algorithm: sha256WithRSAEncryption 04:30:18:d9:ee:fa:4c:2d:4e:09:34:4d:d6:46:8d:4d:13:d7: b5:43:ff:15:51:8f:1a:0e:7c:21:66:79:63:a4:fb:96:0a:be: d8:47:d9:9d:09:a6:92:13:62:50:a1:a5:16:d1:7e:58:2e:6c: ca:b9:46:5f:76:f4:7e:de:2f:7f:ea:f0:5c:c7:73:a3:c1:5b: 32:23:3c:79:7f:01:17:17:70:40:42:8c:7a:e5:aa:e1:c4:5b: 04:a4:1d:53:f4:68:7c:c5:90:60:79:e3:e6:5f:e7:48:18:19: f7:b4:52:39:dc:87:44:31:1c:c1:70:a0:62:9b:39:14:ab:52: ae:ee:97:83:76:a8:88:95:13:49:d6:34:58:37:a8:8f:6c:be: c3:b6:84:7b:2f:f9:28:88:41:c2:49:76:a2:03:79:bd:87:b6: 65:1f:19:b4:df:8a:e6:f1:b0:18:c8:d6:b2:cf:57:ad:7b:d2: a7:f2:8d:c9:7f:50:d0:23:8e:d6:e5:31:5e:e4:44:f2:06:70: eb:4a:5d:a5:a7:8e:b4:c8:82:b5:b1:84:dd:6d:3c:b9:86:ee: 89:bd:b7:cd:06:9c:6c:3b:9c:44:e6:04:bd:fa:96:fc:85:78: 99:85:56:83:8b:5f:c6:4f:ae:5e:f0:d5:fd:ff:2a:3d:32:84: 32:cc:55:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjQwMzMxMDUwNzA5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA4ZWY3ZC02NTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLM5Jm4sVDt3hvYAi+fJO8xG5ppLmNTPVot8YTKKxqGZUxZfFvOR0Id1L7Uz sLQXWwrBKiADHqod4zf43UmOH7rEhWgUCfl3I7Nmg98HVy7g/A53o4BXJPJFbNAM KMhDsGnRiIP4ofOu6KqNrgcPokCUmdtAd+UmIf2f1vF/SIGP5kfiB47NhIxxaPEA k6DyrcdlFgdgKMtncXLn7fLdEAf77WvA1Fpqg/KD0V2VmJ6SW30UspHyzLg0dHe9 hYDFcMVVe8zV9D8vCpBH+HbpjlzfXaAmsnFVI3ay2BEGaUyPljOFFl/0tRtn4F+1 EwGnV3pUkhhl5+7IlRWdiSU5qQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHuqe9aM eKoG446lYQ7gUuTtufu/MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkZEOEE0NkU1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAaMqEAwDQYJKoZIhvcNAQELBQADggEBAAQwGNnu+kwtTgk0 TdZGjU0T17VD/xVRjxoOfCFmeWOk+5YKvthH2Z0JppITYlChpRbRflgubMq5Rl92 9H7eL3/q8FzHc6PBWzIjPHl/ARcXcEBCjHrlquHEWwSkHVP0aHzFkGB54+Zf50gY Gfe0Ujnch0QxHMFwoGKbORSrUq7ul4N2qIiVE0nWNFg3qI9svsO2hHsv+SiIQcJJ dqIDeb2HtmUfGbTfiubxsBjI1rLPV6170qfyjcl/UNAjjtblMV7kRPIGcOtKXaWn jrTIgrWxhN1tPLmG7om9t80GnGw7nETmBL36lvyFeJmFVoOLX8ZPrl7w1f3/Kj0y hDLMVf8= -----END CERTIFICATE-----Generated at Fri May 17 06:18:09 2024 by rpki-client on console-fra.rpki-client.org