$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa File: 0D118DDEBD0D11EA84F7547CC4F9AE02.roa (raw, json) Hash identifier: Xocnoy51+b1D0/W5rxU8KPL0hq4JtKVYsA0AxIiCp5c= Subject key identifier: 55:2A:37:AA:B3:EA:BB:63:15:43:FF:2F:D3:71:55:1B:1B:DF:16:5E Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3407 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa Signing time: Mon 22 Apr 2024 14:50:48 +0000 ROA not before: Mon 22 Apr 2024 14:50:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38174 IP address blocks: 120.29.234.0/24 maxlen: 24 123.242.252.0/24 maxlen: 24 123.242.254.0/23 maxlen: 23 202.60.60.0/23 maxlen: 23 202.60.60.0/24 maxlen: 24 202.60.61.0/24 maxlen: 24 202.60.62.0/24 maxlen: 24 202.60.63.0/24 maxlen: 24 202.61.10.0/23 maxlen: 23 202.61.10.0/24 maxlen: 24 202.61.11.0/24 maxlen: 24 202.91.136.0/22 maxlen: 22 203.189.180.0/22 maxlen: 22 203.189.180.0/24 maxlen: 24 203.189.181.0/24 maxlen: 24 203.189.182.0/24 maxlen: 24 203.189.183.0/24 maxlen: 24 203.191.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13319 (0x3407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 22 14:50:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66267948-4417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:51:ef:fe:da:44:8b:33:f3:e8:07:5a:fc: f9:13:ff:b2:74:5b:1f:db:b0:20:8c:c0:a9:bc:75: bc:22:71:e6:9d:9b:00:8e:5b:3f:03:c9:e7:69:58: b1:83:42:30:ee:45:d0:6b:c5:22:31:06:73:d4:28: 62:22:7d:46:0a:27:00:48:0c:4d:9b:7b:63:f4:1d: ef:74:4b:09:8e:f4:0f:3a:94:ca:64:a7:c8:e2:63: 11:50:07:4a:c4:c4:e2:67:77:72:69:f9:93:43:63: 7b:81:08:0d:6e:7d:71:be:ef:ff:6b:72:93:1e:19: 3d:33:32:4e:34:8e:e7:6c:b8:d8:75:d9:f5:b7:d3: 88:4e:f0:8b:18:4f:ca:b8:65:61:d0:cd:a8:38:29: 73:bb:0f:08:84:c2:55:d3:9c:a7:0c:02:13:9d:64: 28:fd:19:14:72:87:6b:70:d8:35:8d:49:c4:9e:2f: ba:08:3c:ea:52:c5:64:3b:df:7d:06:fb:01:cf:5d: 5a:59:11:2c:b9:7f:75:90:06:55:ab:1d:62:2f:7a: 63:0d:80:0c:ae:22:c0:76:13:1a:59:ab:94:35:25: b7:8a:7e:7a:56:36:3c:1a:0f:e4:e7:7e:46:15:a0: 2d:3b:0f:f6:25:80:e5:9b:54:ed:68:bf:f1:7b:f6: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:2A:37:AA:B3:EA:BB:63:15:43:FF:2F:D3:71:55:1B:1B:DF:16:5E X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/0D118DDEBD0D11EA84F7547CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.234.0/24 123.242.252.0/24 123.242.254.0/23 202.60.60.0/22 202.61.10.0/23 202.91.136.0/22 203.189.180.0/22 203.191.34.0/23 Signature Algorithm: sha256WithRSAEncryption 77:58:56:0d:b7:fb:9c:6e:45:3f:1d:af:d2:ff:8b:67:ce:c5: 13:c2:55:3f:bf:20:70:0d:4f:36:54:ee:50:c6:85:0f:82:1c: 0f:d9:11:2f:fe:37:70:25:04:a8:8c:c9:7b:e9:c3:72:63:b6: 5d:1c:f2:ae:33:7f:c5:6c:a6:cb:01:50:ee:c4:e0:fc:c3:67: cb:97:d1:92:18:4a:81:d6:bc:4f:18:96:69:ae:a0:9d:70:4f: e7:d6:3e:f1:61:8c:66:5e:a2:df:4e:de:34:a8:42:e0:54:a1: 82:fb:df:af:66:48:21:72:39:bb:55:cb:dc:3d:d1:b6:60:42: c3:ad:b9:83:42:ef:a8:43:34:6b:fa:5d:47:c7:78:88:0a:2b: d3:7d:1e:56:cf:77:c4:40:cb:04:82:d6:74:5a:b7:16:ef:b5: 6c:b6:0d:e9:5a:2f:0b:3b:4c:be:45:8d:aa:27:31:af:24:3d: ca:e8:51:a6:96:62:eb:54:8f:3e:e2:ae:df:75:e8:c0:cd:d5: ef:a2:d7:5f:84:98:f5:48:cf:3f:7a:8d:3a:f4:bc:d2:0c:6f: 7e:4a:5e:e5:e8:03:fc:e6:8c:e2:1d:fc:e7:28:6e:da:19:70: 34:5f:62:2c:b1:0d:92:0c:bc:56:46:83:b5:84:f9:5f:4e:97: 1a:c9:6a:17 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICNAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQwNDIyMTQ1MDQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI2Nzk0OC00NDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF9R7/7aRIsz8+gHWvz5E/+ydFsf27AgjMCpvHW8InHmnZsAjls/A8nnaVix g0Iw7kXQa8UiMQZz1ChiIn1GCicASAxNm3tj9B3vdEsJjvQPOpTKZKfI4mMRUAdK xMTiZ3dyafmTQ2N7gQgNbn1xvu//a3KTHhk9MzJONI7nbLjYddn1t9OITvCLGE/K uGVh0M2oOClzuw8IhMJV05ynDAITnWQo/RkUcodrcNg1jUnEni+6CDzqUsVkO999 BvsBz11aWREsuX91kAZVqx1iL3pjDYAMriLAdhMaWauUNSW3in56VjY8Gg/k535G FaAtOw/2JYDlm1TtaL/xe/ZJkwIDAQABo4ICvzCCArswHQYDVR0OBBYEFFUqN6qz 6rtjFUP/L9NxVRsb3xZeMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMEQxMThEREVC RDBEMTFFQTg0Rjc1NDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAB4HeoDBAB78vwDBAF78v4DBALKPDwDBAHKPQoDBALKW4gD BALLvbQDBAHLvyIwDQYJKoZIhvcNAQELBQADggEBAHdYVg23+5xuRT8dr9L/i2fO xRPCVT+/IHANTzZU7lDGhQ+CHA/ZES/+N3AlBKiMyXvpw3Jjtl0c8q4zf8VspssB UO7E4PzDZ8uX0ZIYSoHWvE8YlmmuoJ1wT+fWPvFhjGZeot9O3jSoQuBUoYL7369m SCFyObtVy9w90bZgQsOtuYNC76hDNGv6XUfHeIgKK9N9HlbPd8RAywSC1nRatxbv tWy2DelaLws7TL5FjaonMa8kPcroUaaWYutUjz7irt916MDN1e+i11+EmPVIzz96 jTr0vNIMb35KXuXoA/zmjOId/OcobtoZcDRfYiyxDZIMvFZGg7WE+V9OlxrJahc= -----END CERTIFICATE-----Generated at Fri May 24 18:23:58 2024 by rpki-client on console-ams.rpki-client.org