$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa File: E4A74BE6255211EB96B9B269C4F9AE02.roa (raw, json) Hash identifier: Ahmq+kO6A0bgXkAjwTqcQfdgpiGuxiz20RpREd5Xycs= Subject key identifier: 21:80:40:0F:49:93:C8:42:A9:35:04:21:2F:9A:E5:D1:6D:9C:A6:68 Certificate issuer: /CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Certificate serial: 127A Authority key identifier: 1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa Signing time: Mon 26 Feb 2024 17:55:38 +0000 ROA not before: Mon 26 Feb 2024 17:55:38 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 136943 IP address blocks: 121.200.0.0/24 maxlen: 24 123.253.151.0/24 maxlen: 24 2403:5800:1::/48 maxlen: 48 2403:5800:3::/48 maxlen: 48 2403:5800:1900::/40 maxlen: 40 2403:5800:1900::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 17:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8/serialNumber=1C4E9F3F800505A40BA165B6C020405A22C64B3B Validity Not Before: Feb 26 17:55:38 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65dcd09a-0914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:01:39:12:6f:e6:6b:f7:ec:88:7c:ee:e1:47: 67:df:08:1f:f1:6c:08:63:f7:40:6e:12:91:6b:da: 79:c4:0b:5e:4b:f0:1c:a5:4c:47:1d:23:94:fd:11: 4e:42:21:86:0f:7f:98:25:f6:76:49:1c:f8:49:e9: 81:6a:f7:36:c0:d0:32:01:2e:75:26:28:4d:cc:a5: 30:ee:e6:89:b7:7f:30:31:5c:bd:36:ce:e9:76:ed: c8:65:84:e9:36:af:9c:ba:d5:1c:1d:a1:2a:63:4b: 6c:14:28:5f:ae:78:88:f1:11:3e:89:85:d9:31:2b: 18:2e:50:86:e4:76:b1:66:e8:e8:a5:d3:48:65:c0: 63:88:72:c9:ef:d5:bf:8d:d4:d6:e7:d1:49:c8:c0: 5c:71:42:47:bc:50:09:47:5f:fd:07:e7:fc:ba:90: 2f:e2:99:e5:c8:49:6c:b5:d6:13:17:12:5e:56:ad: 8c:0f:58:58:57:84:81:46:53:5f:71:93:52:e7:d2: be:56:84:b2:55:d3:81:03:31:93:b0:3d:1c:aa:fa: 4b:47:6c:f2:5f:7d:83:25:73:d9:a0:f7:42:e5:5f: c4:3e:d1:d1:fb:cd:b9:3c:ab:3b:ae:96:de:8f:4e: 48:53:68:27:ba:7a:f2:a6:bc:07:f4:75:45:4c:f2: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:40:0F:49:93:C8:42:A9:35:04:21:2F:9A:E5:D1:6D:9C:A6:68 X509v3 Authority Key Identifier: keyid:1C:4E:9F:3F:80:05:05:A4:0B:A1:65:B6:C0:20:40:5A:22:C6:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/HE6fP4AFBaQLoWW2wCBAWiLGSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HE6fP4AFBaQLoWW2wCBAWiLGSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/E861FD3AAFD911E8B2ED4C7FC4F9AE02/E4A74BE6255211EB96B9B269C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 121.200.0.0/24 123.253.151.0/24 IPv6: 2403:5800:1::/48 2403:5800:3::/48 2403:5800:1900::/40 Signature Algorithm: sha256WithRSAEncryption 5f:30:c7:4f:e4:7f:f2:61:7a:48:d1:a9:54:ce:60:d9:61:cc: d0:97:dc:fb:d4:e5:cf:67:23:f9:49:00:f2:d3:f3:0f:32:07: 60:b2:d0:93:cc:3e:56:c5:cb:69:f0:3c:7f:6e:62:1e:89:34: c4:66:1b:5f:c8:4b:45:b2:62:07:1a:ae:0b:84:b0:4c:32:33: 9b:5c:76:cd:74:3e:ba:e9:f6:d6:7a:03:1a:f0:16:b2:85:ae: e1:af:b1:1d:43:92:19:a8:88:00:46:22:ab:26:de:da:dd:9a: 88:08:c3:30:fa:1b:90:64:07:1b:50:16:5d:1d:d2:7d:3c:da: 3d:57:68:72:48:17:55:30:5c:0c:d0:97:ff:aa:d9:f6:ec:dc: 1b:24:25:aa:ff:da:09:27:1b:f6:bd:85:68:2a:0f:88:17:fa: cf:73:ef:a1:8d:d1:f1:db:01:2d:83:13:60:95:f0:a2:a0:fd: be:7f:19:53:2e:6e:92:7c:06:54:e4:89:69:bb:d6:09:c7:51: f2:fb:ff:70:13:46:e0:d9:77:0f:a5:20:2f:42:17:72:2c:94: a6:68:3f:0f:4e:9f:65:6d:fa:fd:c9:1f:d7:ae:e9:b5:57:5b: a9:3c:9f:09:82:a7:67:38:83:b3:2b:06:4e:98:89:08:6f:e7: 22:e0:61:89 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDFDNEU5RjNGODAwNTA1QTQwQkExNjVCNkMwMjA0MDVB MjJDNjRCM0IwHhcNMjQwMjI2MTc1NTM4WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRjZDA5YS0wOTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QE5Em/ma/fsiHzu4Udn3wgf8WwIY/dAbhKRa9p5xAteS/AcpUxHHSOU/RFO QiGGD3+YJfZ2SRz4SemBavc2wNAyAS51JihNzKUw7uaJt38wMVy9Ns7pdu3IZYTp Nq+cutUcHaEqY0tsFChfrniI8RE+iYXZMSsYLlCG5HaxZujopdNIZcBjiHLJ79W/ jdTW59FJyMBccUJHvFAJR1/9B+f8upAv4pnlyElstdYTFxJeVq2MD1hYV4SBRlNf cZNS59K+VoSyVdOBAzGTsD0cqvpLR2zyX32DJXPZoPdC5V/EPtHR+825PKs7rpbe j05IU2gnunryprwH9HVFTPJl+QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFCGAQA9J k8hCqTUEIS+a5dFtnKZoMB8GA1UdIwQYMBaAFBxOnz+ABQWkC6FltsAgQFoixks7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9FODYxRkQzQUFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9IRTZmUDRBRkJhUUxvV1cyd0NCQVdpTEdT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFNmZQNEFGQmFRTG9XVzJ3Q0JBV2lMR1N6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGQTgvRTg2MUZEM0FBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvRTRBNzRCRTYy NTUyMTFFQjk2QjlCMjY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRwYIKwYBBQUHAQcBAf8E ODA2MBIEAgABMAwDBAB5yAADBAB7/ZcwIAQCAAIwGgMHACQDWAAAAQMHACQDWAAA AwMGACQDWAAZMA0GCSqGSIb3DQEBCwUAA4IBAQBfMMdP5H/yYXpI0alUzmDZYczQ l9z71OXPZyP5SQDy0/MPMgdgstCTzD5Wxctp8Dx/bmIeiTTEZhtfyEtFsmIHGq4L hLBMMjObXHbNdD666fbWegMa8Bayha7hr7EdQ5IZqIgARiKrJt7a3ZqICMMw+huQ ZAcbUBZdHdJ9PNo9V2hySBdVMFwM0Jf/qtn27NwbJCWq/9oJJxv2vYVoKg+IF/rP c++hjdHx2wEtgxNglfCioP2+fxlTLm6SfAZU5Ilpu9YJx1Hy+/9wE0bg2XcPpSAv QhdyLJSmaD8PTp9lbfr9yR/Xrum1V1upPJ8JgqdnOIOzKwZOmIkIb+ci4GGJ -----END CERTIFICATE-----Generated at Wed May 22 18:46:49 2024 by rpki-client on console-fra.rpki-client.org