$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/767438B6A18911EF8B1A1A24C4F9AE02.roa File: 767438B6A18911EF8B1A1A24C4F9AE02.roa (raw, json) Hash identifier: 6ljZhAmca6eYlGVVDeXkQkKMg1g/auOmvNyuvBxOQN0= Subject key identifier: B6:A3:3C:89:A3:CE:AD:0B:3E:DF:CF:36:81:E6:F5:6D:46:E1:D3:89 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 349A Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/767438B6A18911EF8B1A1A24C4F9AE02.roa Signing time: Wed 13 Nov 2024 06:36:30 +0000 ROA not before: Wed 13 Nov 2024 06:36:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38174 IP address blocks: 120.29.234.0/23 maxlen: 24 123.242.244.0/22 maxlen: 24 123.242.252.0/23 maxlen: 24 123.242.254.0/23 maxlen: 23 202.60.60.0/23 maxlen: 23 202.60.60.0/24 maxlen: 24 202.60.61.0/24 maxlen: 24 202.60.62.0/23 maxlen: 24 202.61.10.0/23 maxlen: 23 202.61.10.0/24 maxlen: 24 202.61.11.0/24 maxlen: 24 202.91.136.0/22 maxlen: 22 203.189.180.0/22 maxlen: 22 203.189.180.0/24 maxlen: 24 203.189.181.0/24 maxlen: 24 203.189.182.0/24 maxlen: 24 203.189.183.0/24 maxlen: 24 203.191.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:39:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13466 (0x349a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Nov 13 06:36:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=673448ee-2868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:33:f3:1a:81:e3:73:7d:2b:05:9a:c4:07: 14:4e:09:b5:cc:5c:c4:12:89:87:46:f4:1c:49:16: 13:e3:9e:70:0c:8a:5c:55:80:79:07:4e:ed:ff:f6: ef:f8:23:db:4e:dc:e7:7d:85:31:cc:49:83:e9:59: 67:8f:8c:1d:d7:9a:d1:09:ad:e2:0e:2a:21:8f:42: a5:dd:02:58:cf:95:24:bb:b3:fc:ad:d8:8b:f3:4d: 4e:b8:b4:74:b4:e3:52:39:c6:db:6f:31:f1:cc:39: aa:09:75:8c:46:28:d7:b1:7c:82:9d:97:a5:f9:9c: d8:01:54:47:81:7f:a1:18:ef:ca:a9:77:93:68:50: c7:a2:bf:76:23:04:d6:67:69:90:8d:73:a3:71:f9: e2:1f:35:ba:9e:e8:4f:93:3e:62:e5:22:c8:b6:3b: 65:da:29:71:dc:1b:c2:fd:05:e6:a9:e8:25:c4:08: 74:ff:6c:15:dd:ca:87:f9:05:b9:7e:a8:35:5e:53: 6b:5a:17:d8:b5:47:3c:ce:b3:bb:45:e8:c7:7f:9b: e0:bc:c9:54:33:47:cf:fb:40:d2:74:1b:0e:8f:71: d8:ca:d8:60:cf:c5:f9:58:4b:45:cc:65:a3:07:4c: 84:08:2a:14:50:39:b1:5b:57:1f:d1:c6:36:ff:ee: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A3:3C:89:A3:CE:AD:0B:3E:DF:CF:36:81:E6:F5:6D:46:E1:D3:89 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/767438B6A18911EF8B1A1A24C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.234.0/23 123.242.244.0/22 123.242.252.0/22 202.60.60.0/22 202.61.10.0/23 202.91.136.0/22 203.189.180.0/22 203.191.34.0/23 Signature Algorithm: sha256WithRSAEncryption 33:3f:38:79:0c:c5:9d:40:10:8a:03:69:8d:3a:21:74:a2:e8: 0c:f4:ff:55:41:5f:35:da:d8:24:6b:9c:87:b5:53:30:3f:72: 38:eb:cf:39:1a:36:71:88:06:47:28:1e:58:e0:c1:4b:4f:5d: e5:20:d4:1e:ff:63:62:83:7d:26:28:e9:ac:71:d5:e4:41:26: f0:a8:ad:fb:4b:c0:d2:35:ae:d2:e5:c2:d5:1d:61:98:21:ea: dc:96:49:a2:0c:5a:9b:b0:4f:5c:9a:0b:43:f7:c1:61:af:ba: 6a:9f:b6:82:9f:9b:b7:1e:06:6d:6b:6d:ad:a6:19:6e:92:5a: cb:a4:d2:77:35:82:40:10:e0:2a:24:3f:5c:ed:80:70:b6:23: 07:42:ef:5b:ec:03:78:c4:9e:3e:cd:6a:a7:9e:8c:ab:f4:80: 6c:48:3f:cf:13:fd:43:e7:0e:d4:e6:4e:27:83:fc:46:a7:bd: 1f:84:3b:05:5c:a2:c5:da:c1:9b:78:c1:7b:f2:ef:96:a2:4a: 15:79:ae:a2:b4:ba:de:5a:d8:25:82:14:90:85:eb:a3:e7:09: cc:9e:34:36:c0:13:da:7b:89:5f:78:83:5c:f9:3d:ed:3d:9e: 50:14:c1:bc:9e:3b:08:26:8d:ae:a1:b1:80:31:35:18:40:a2: c0:83:fd:68 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICNJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQxMTEzMDYzNjMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzM0NDhlZS0yODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxYz8xqB43N9KwWaxAcUTgm1zFzEEomHRvQcSRYT455wDIpcVYB5B07t//bv +CPbTtznfYUxzEmD6Vlnj4wd15rRCa3iDiohj0Kl3QJYz5Uku7P8rdiL801OuLR0 tONSOcbbbzHxzDmqCXWMRijXsXyCnZel+ZzYAVRHgX+hGO/KqXeTaFDHor92IwTW Z2mQjXOjcfniHzW6nuhPkz5i5SLItjtl2ilx3BvC/QXmqeglxAh0/2wV3cqH+QW5 fqg1XlNrWhfYtUc8zrO7RejHf5vgvMlUM0fP+0DSdBsOj3HYythgz8X5WEtFzGWj B0yECCoUUDmxW1cf0cY2/+5ZqQIDAQABo4ICvzCCArswHQYDVR0OBBYEFLajPImj zq0LPt/PNoHm9W1G4dOJMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvNzY3NDM4QjZB MTg5MTFFRjhCMUExQTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAF4HeoDBAJ78vQDBAJ78vwDBALKPDwDBAHKPQoDBALKW4gD BALLvbQDBAHLvyIwDQYJKoZIhvcNAQELBQADggEBADM/OHkMxZ1AEIoDaY06IXSi 6Az0/1VBXzXa2CRrnIe1UzA/cjjrzzkaNnGIBkcoHljgwUtPXeUg1B7/Y2KDfSYo 6axx1eRBJvCorftLwNI1rtLlwtUdYZgh6tyWSaIMWpuwT1yaC0P3wWGvumqftoKf m7ceBm1rba2mGW6SWsuk0nc1gkAQ4CokP1ztgHC2IwdC71vsA3jEnj7NaqeejKv0 gGxIP88T/UPnDtTmTieD/EanvR+EOwVcosXawZt4wXvy75aiShV5rqK0ut5a2CWC FJCF66PnCcyeNDbAE9p7iV94g1z5Pe09nlAUwbyeOwgmja6hsYAxNRhAosCD/Wg= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org