$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa File: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (raw, json) Hash identifier: 0/xafuuGG8rfiK9Ig8f1RIKTwP7RtpwbETwfPGlz+3g= Subject key identifier: 11:79:C7:22:C8:B9:EA:8D:54:70:FE:1B:E5:87:57:43:20:67:5D:93 Certificate issuer: /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Certificate serial: 07 Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa Signing time: Tue 17 Oct 2023 16:48:48 +0000 ROA not before: Tue 17 Oct 2023 16:48:48 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 150335 IP address blocks: 223.130.8.0/23 maxlen: 23 223.130.8.0/24 maxlen: 24 223.130.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69 Validity Not Before: Oct 17 16:48:48 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=652ebaf0-e636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:49:e5:8b:04:1c:69:45:3d:24:8a:ed:07: 99:34:92:fd:87:37:8e:31:d0:d8:20:b7:47:ca:17: 58:9d:db:9c:6d:9b:14:59:34:03:d8:ec:3e:50:a8: 96:f6:16:69:50:3b:ab:a3:cb:d5:cb:63:a0:99:64: 35:3b:61:6b:6d:a5:0a:6b:b6:79:c4:87:24:93:ee: 9c:ff:a0:b1:9a:47:21:46:66:c5:6d:3d:fd:48:b3: 11:84:77:89:7a:ec:52:fb:32:d4:01:02:5b:d0:fb: f8:19:68:d2:98:73:99:c1:21:9d:8f:f0:4d:ac:a9: 23:85:67:40:25:d4:45:a6:44:89:f9:b7:8c:de:40: 46:81:6e:45:da:4f:be:1f:b1:05:3c:57:81:7d:62: 6f:a9:5d:96:4f:d7:78:71:5d:5c:d9:40:0e:94:47: 0f:3c:f9:c9:2e:b0:f6:a5:d6:31:b0:3e:92:36:44: b1:c3:1f:5a:3e:87:7c:b1:34:bc:ec:e3:3e:89:b3: 7d:89:61:c7:f1:76:90:d0:e2:16:88:cc:26:ec:25: 6f:04:6e:85:f1:a2:8d:b8:65:c1:3a:a6:c4:d5:9d: 61:6e:2d:6f:03:b7:be:60:be:33:3d:d3:c5:4e:26: 5e:33:7c:d8:92:e0:03:66:5a:71:2d:56:69:3e:50: 0d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:79:C7:22:C8:B9:EA:8D:54:70:FE:1B:E5:87:57:43:20:67:5D:93 X509v3 Authority Key Identifier: keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/0B2052EA6D0D11EEA65D7522C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.130.8.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:34:95:f4:ab:56:11:da:42:e0:fc:26:ee:08:f3:05:17:a1: fa:3f:d5:4e:83:23:78:66:42:b4:ed:35:5e:81:b8:8f:c4:84: 3e:ac:a3:05:5f:aa:9f:d0:9d:10:a8:62:71:eb:ae:45:0c:37: 79:c9:eb:e7:3b:4d:09:33:2d:39:64:58:d0:5d:5c:ab:ba:8e: 81:23:24:49:3b:0c:35:6a:e2:1a:e5:f0:ee:84:b2:13:6c:91: 80:02:a8:2b:f3:e1:3c:b0:92:27:e1:ec:cd:a8:64:94:7a:b3: 6b:da:4b:3b:ce:34:78:12:24:c6:3f:83:06:ba:68:5b:be:b8: 40:98:e5:0a:3f:12:cc:47:b9:d9:c6:75:0b:1b:ab:6b:bb:c0: 4f:8c:dc:56:25:d6:f9:4c:a2:6e:17:27:17:dd:df:77:21:4f: b8:c2:98:65:45:ce:c2:58:84:95:85:e7:6e:ab:c8:41:6c:f6: f3:6a:3b:8d:fa:df:f2:fa:e9:83:38:ab:ba:19:ec:94:47:7f: 83:24:13:47:45:e6:e1:40:98:63:71:cd:ac:30:0b:8b:e6:d2: 52:47:cd:eb:ed:9d:cd:92:f2:07:50:76:5c:ac:5c:da:44:c9: b2:94:cb:e4:fc:c3:6e:04:10:f3:c7:9d:c1:aa:cb:f7:71:c2: e6:af:65:09 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MENBRTExMC8GA1UEBRMoMjk4MTFFMURCMDY4QkRCQkFCRkI3QUI2OTVGODU4OThC RDYxOEM2OTAeFw0yMzEwMTcxNjQ4NDhaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1MmViYWYwLWU2MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDofknliwQcaUU9JIrtB5k0kv2HN44x0Nggt0fKF1id25xtmxRZNAPY7D5QqJb2 FmlQO6ujy9XLY6CZZDU7YWttpQprtnnEhyST7pz/oLGaRyFGZsVtPf1IsxGEd4l6 7FL7MtQBAlvQ+/gZaNKYc5nBIZ2P8E2sqSOFZ0Al1EWmRIn5t4zeQEaBbkXaT74f sQU8V4F9Ym+pXZZP13hxXVzZQA6URw88+ckusPal1jGwPpI2RLHDH1o+h3yxNLzs 4z6Js32JYcfxdpDQ4haIzCbsJW8EboXxoo24ZcE6psTVnWFuLW8Dt75gvjM908VO Jl4zfNiS4ANmWnEtVmk+UA17AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUEXnHIsi5 6o1UcP4b5YdXQyBnXZMwHwYDVR0jBBgwFoAUKYEeHbBovbur+3q2lfhYmL1hjGkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwQ0FFLzdDNjQ0RUU2NkE3 MTExRUVBNUI0Q0IyNkM0RjlBRTAyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpH ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvS1lFZUhiQm92YnVyLTNxMmxmaFltTDFoakdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MENBRS83QzY0NEVFNjZBNzExMUVFQTVCNENCMjZDNEY5QUUwMi8wQjIwNTJFQTZE MEQxMUVFQTY1RDc1MjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAd+CCDANBgkqhkiG9w0BAQsFAAOCAQEADjSV9KtWEdpC4Pwm 7gjzBReh+j/VToMjeGZCtO01XoG4j8SEPqyjBV+qn9CdEKhiceuuRQw3ecnr5ztN CTMtOWRY0F1cq7qOgSMkSTsMNWriGuXw7oSyE2yRgAKoK/PhPLCSJ+HszahklHqz a9pLO840eBIkxj+DBrpoW764QJjlCj8SzEe52cZ1Cxura7vAT4zcViXW+Uyibhcn F93fdyFPuMKYZUXOwliElYXnbqvIQWz282o7jfrf8vrpgziruhnslEd/gyQTR0Xm 4UCYY3HNrDALi+bSUkfN6+2dzZLyB1B2XKxc2kTJspTL5PzDbgQQ88edwarL93HC 5q9lCQ== -----END CERTIFICATE-----Generated at Fri May 31 10:42:51 2024 by rpki-client on console-fra.rpki-client.org