$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/DC4CF7C4BECE11EA9F27811CC4F9AE02.roa File: DC4CF7C4BECE11EA9F27811CC4F9AE02.roa (raw, json) Hash identifier: EOIU3SGjaG3yoWQkMK90rrbkd5uHcov0oh9wII9VG+A= Subject key identifier: 08:28:38:FD:3C:DC:C4:5F:DE:0C:B4:87:B6:B5:B2:9A:29:14:9C:1C Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3406 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/DC4CF7C4BECE11EA9F27811CC4F9AE02.roa Signing time: Mon 22 Apr 2024 14:50:47 +0000 ROA not before: Mon 22 Apr 2024 14:50:47 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38015 IP address blocks: 120.29.232.0/23 maxlen: 24 123.242.248.0/22 maxlen: 22 203.189.176.0/23 maxlen: 24 203.189.178.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:44:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13318 (0x3406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 22 14:50:47 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66267947-d7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:a0:f9:67:9d:b6:98:6e:60:b1:57:ea:5d: 33:8b:f9:73:28:36:5c:ec:c0:84:a3:6c:3f:67:1a: a2:e6:58:e6:44:24:dd:a0:6a:65:3f:e7:1e:a5:2f: a5:55:93:c6:de:5d:19:e2:4f:c2:09:41:b1:7f:ad: d3:94:3f:22:da:d7:50:81:e2:dc:b4:09:49:cf:d8: a8:e5:b6:65:13:f9:a9:e9:82:22:06:51:a9:fd:9f: f8:51:2f:6a:dc:43:20:0f:52:a3:3c:78:9c:4d:a3: b8:38:69:28:67:28:51:45:e0:25:0c:4a:33:23:c1: 23:d9:c8:f9:63:eb:c9:06:cb:7c:c3:ca:09:26:99: 6b:2b:8d:9b:fd:e7:32:87:0e:53:a8:7e:bd:24:c1: c5:49:1f:8a:7e:10:76:c3:3e:5e:03:bc:52:7f:48: 63:e6:2d:8f:9a:7a:29:95:52:07:6b:96:70:c2:7b: cd:19:e5:1c:a7:82:89:ab:d7:b0:0e:e1:36:3f:7b: 16:99:ba:93:2f:f6:e4:28:2f:d7:92:f2:43:c8:07: fc:54:ef:95:88:98:31:bd:73:6c:21:48:ae:75:11: 7e:3d:c8:06:82:6d:12:53:da:d8:90:79:30:77:13: 9b:0e:90:c0:ed:2b:25:d7:59:b0:62:13:af:32:47: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:28:38:FD:3C:DC:C4:5F:DE:0C:B4:87:B6:B5:B2:9A:29:14:9C:1C X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/DC4CF7C4BECE11EA9F27811CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 120.29.232.0/23 123.242.248.0/22 203.189.176.0/22 Signature Algorithm: sha256WithRSAEncryption 84:4f:6d:d2:f0:3b:46:d3:e4:d9:87:7f:0c:32:4d:00:b4:02: 7b:dc:18:97:19:4b:f4:7b:01:f0:47:06:a2:13:4a:f7:f4:fc: 14:3f:af:16:52:7e:35:b6:69:35:58:75:de:8f:ea:5f:ec:43: 4f:0b:65:d4:c5:e7:f8:e8:ca:9c:a5:9d:1b:bd:52:1e:59:ce: 78:28:3e:d2:c1:82:f8:ee:4f:4d:55:49:a2:18:af:f4:f3:b7: aa:cd:fb:94:f7:4f:63:36:37:95:f4:50:ae:5b:f9:10:64:d8: 7f:a4:5f:ea:6b:59:1e:8b:cf:c0:df:77:1e:79:5c:53:00:c6: 8c:53:be:f1:29:0f:5f:51:03:75:20:82:d1:b2:1a:7e:65:14: 8d:38:82:65:90:e4:c8:f0:ed:4f:c8:22:92:f4:cf:5c:33:3c: 6e:28:8c:36:18:65:d2:88:16:09:56:b6:33:28:ea:63:b1:2f: e4:1f:ac:82:90:26:de:94:aa:fc:68:d8:f8:3f:29:b2:7d:5b: 33:cd:4f:4b:26:81:97:ce:1b:48:32:da:e9:18:79:5e:13:a9: 8c:20:18:60:1e:53:70:a0:5e:29:74:ec:74:6b:18:da:ad:3a: c5:a0:b0:f2:6f:64:8e:86:62:18:d6:7c:43:f5:67:92:bc:ba: 18:d5:43:0a -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICNAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQwNDIyMTQ1MDQ3WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI2Nzk0Ny1kN2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4mg+WedtphuYLFX6l0zi/lzKDZc7MCEo2w/Zxqi5ljmRCTdoGplP+cepS+l VZPG3l0Z4k/CCUGxf63TlD8i2tdQgeLctAlJz9io5bZlE/mp6YIiBlGp/Z/4US9q 3EMgD1KjPHicTaO4OGkoZyhRReAlDEozI8Ej2cj5Y+vJBst8w8oJJplrK42b/ecy hw5TqH69JMHFSR+KfhB2wz5eA7xSf0hj5i2PmnoplVIHa5ZwwnvNGeUcp4KJq9ew DuE2P3sWmbqTL/bkKC/XkvJDyAf8VO+ViJgxvXNsIUiudRF+PcgGgm0SU9rYkHkw dxObDpDA7Ssl11mwYhOvMkePAQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAgoOP08 3MRf3gy0h7a1spopFJwcMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvREM0Q0Y3QzRC RUNFMTFFQTlGMjc4MTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAF4HegDBAJ78vgDBALLvbAwDQYJKoZIhvcNAQELBQADggEB AIRPbdLwO0bT5NmHfwwyTQC0AnvcGJcZS/R7AfBHBqITSvf0/BQ/rxZSfjW2aTVY dd6P6l/sQ08LZdTF5/joypylnRu9Uh5ZzngoPtLBgvjuT01VSaIYr/Tzt6rN+5T3 T2M2N5X0UK5b+RBk2H+kX+prWR6Lz8Dfdx55XFMAxoxTvvEpD19RA3UggtGyGn5l FI04gmWQ5Mjw7U/IIpL0z1wzPG4ojDYYZdKIFglWtjMo6mOxL+QfrIKQJt6Uqvxo 2Pg/KbJ9WzPNT0smgZfOG0gy2ukYeV4TqYwgGGAeU3CgXil07HRrGNqtOsWgsPJv ZI6GYhjWfEP1Z5K8uhjVQwo= -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org