$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4F6721CEB84B11EAB6247B7AC4F9AE02.roa File: 4F6721CEB84B11EAB6247B7AC4F9AE02.roa (raw, json) Hash identifier: v5rqq+1vbD4A/BqKnkMqbNhWY+ZtznzjTbOL/bdSMTs= Subject key identifier: 57:6C:89:07:18:76:5C:D6:61:3C:37:EC:9B:5F:24:07:E8:36:36:A3 Certificate issuer: /CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Certificate serial: 0B9D Authority key identifier: A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4F6721CEB84B11EAB6247B7AC4F9AE02.roa Signing time: Sat 02 Mar 2024 19:27:51 +0000 ROA not before: Sat 02 Mar 2024 19:27:51 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 139856 IP address blocks: 115.127.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 19:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2973 (0xb9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37E3/serialNumber=A7570DCF3720A8D5A8856A4BB6583F1BAEAE0093 Validity Not Before: Mar 2 19:27:51 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e37db7-73ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:39:19:c5:b4:d1:2c:92:50:34:45:16:5e: 63:42:a2:5e:3f:c3:cd:ee:a6:b7:f6:7d:aa:47:bb: 84:dd:9b:26:03:a3:67:8a:93:a7:e9:6f:af:0e:8d: 5a:73:44:60:5e:78:fb:b8:74:9b:4b:ea:1c:73:25: 2b:81:f6:4e:53:2b:a9:21:9a:71:c1:b0:1b:d3:0a: 1b:84:33:bf:0a:f5:7c:9a:d4:80:40:d7:6f:7c:7d: ee:1a:19:7e:b4:a0:e8:50:dc:66:0e:3b:8d:3f:de: 0b:0c:88:46:bf:c2:1a:0e:9c:b7:0f:b9:55:14:6c: 49:89:12:44:fa:ee:d9:bb:d8:d6:bf:5a:4c:fe:de: 9a:a1:53:05:de:1c:d5:2d:7c:85:9f:26:99:d3:46: 85:a5:c6:b9:d3:7a:2b:67:23:4a:c2:54:e0:f6:f3: 5b:63:50:32:08:68:ae:7d:e2:3d:5e:e8:ae:5d:e7: 4c:8b:27:14:12:5a:66:22:66:7a:b3:dd:26:15:8c: fe:10:75:5f:8f:73:f0:d3:8a:e8:2d:20:44:81:cb: 64:46:76:f8:52:6e:bf:ae:78:e5:7f:11:b4:2c:b0: 9a:d7:2f:39:a0:17:5d:95:6a:aa:1f:f3:b9:ec:11: 44:17:91:2a:30:c1:53:63:1a:c4:09:92:83:00:71: e4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:6C:89:07:18:76:5C:D6:61:3C:37:EC:9B:5F:24:07:E8:36:36:A3 X509v3 Authority Key Identifier: keyid:A7:57:0D:CF:37:20:A8:D5:A8:85:6A:4B:B6:58:3F:1B:AE:AE:00:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/p1cNzzcgqNWohWpLtlg_G66uAJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p1cNzzcgqNWohWpLtlg_G66uAJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37E3/0AFEA7CE03A011EAB4C5D27CC4F9AE02/4F6721CEB84B11EAB6247B7AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.127.38.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e0:a0:9a:52:c3:10:81:90:dd:93:ed:95:58:4d:ac:e1:00: 25:cc:88:c8:d8:e1:ce:cd:da:78:97:20:f7:d1:a1:27:8b:5e: 24:a5:ea:d3:30:5d:46:52:67:d2:fb:47:f8:77:46:53:0a:67: c8:6d:d9:bf:5d:06:e6:67:7a:10:96:c8:b1:75:00:cd:21:6c: 09:66:53:e6:28:de:6a:54:5d:92:db:53:b1:dc:78:27:fd:1a: e3:a4:5f:2c:d3:fc:ed:37:a1:03:8b:d8:7f:1b:cc:f4:91:d0: 2f:12:d9:ff:50:14:c2:96:18:52:23:b4:b3:f5:7f:d9:c1:81: cf:af:02:d1:cb:d3:e5:6c:87:4d:4b:8e:c2:15:be:ed:0b:ae: 94:e2:d2:a9:d3:a5:b7:87:c7:93:9d:8b:69:37:73:b6:c2:f7: f9:19:5b:ad:e0:b8:f6:90:1f:46:bd:08:88:7b:e2:43:ff:ee: 5d:33:50:f6:45:ac:c9:c4:61:33:7b:ef:fd:3a:34:f8:44:f9: 19:c9:6d:4c:a3:1d:70:87:ec:be:fe:f7:36:b2:a0:ef:be:62: ae:0d:1d:4b:33:91:32:21:67:1f:33:fe:f3:a3:26:db:df:bb: e6:43:82:30:8e:bf:24:8e:7b:cc:1a:7a:e3:74:24:c9:19:50: 66:df:c9:ff -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICC50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3RTMxMTAvBgNVBAUTKEE3NTcwRENGMzcyMEE4RDVBODg1NkE0QkI2NTgzRjFC QUVBRTAwOTMwHhcNMjQwMzAyMTkyNzUxWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzN2RiNy03M2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11Q5GcW00SySUDRFFl5jQqJeP8PN7qa39n2qR7uE3ZsmA6NnipOn6W+vDo1a c0RgXnj7uHSbS+occyUrgfZOUyupIZpxwbAb0wobhDO/CvV8mtSAQNdvfH3uGhl+ tKDoUNxmDjuNP94LDIhGv8IaDpy3D7lVFGxJiRJE+u7Zu9jWv1pM/t6aoVMF3hzV LXyFnyaZ00aFpca503orZyNKwlTg9vNbY1AyCGiufeI9XuiuXedMiycUElpmImZ6 s90mFYz+EHVfj3Pw04roLSBEgctkRnb4Um6/rnjlfxG0LLCa1y85oBddlWqqH/O5 7BFEF5EqMMFTYxrECZKDAHHkmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFdsiQcY dlzWYTw37JtfJAfoNjajMB8GA1UdIwQYMBaAFKdXDc83IKjVqIVqS7ZYPxuurgCT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdFMy8wQUZFQTdDRTAz QTAxMUVBQjRDNUQyN0NDNEY5QUUwMi9wMWNOenpjZ3FOV29oV3BMdGxnX0c2NnVB Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AxY056emNncU5Xb2hXcEx0bGdfRzY2dUFKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjM3RTMvMEFGRUE3Q0UwM0EwMTFFQUI0QzVEMjdDQzRGOUFFMDIvNEY2NzIxQ0VC ODRCMTFFQUI2MjQ3QjdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABzfyYwDQYJKoZIhvcNAQELBQADggEBAGfgoJpSwxCBkN2T 7ZVYTazhACXMiMjY4c7N2niXIPfRoSeLXiSl6tMwXUZSZ9L7R/h3RlMKZ8ht2b9d BuZnehCWyLF1AM0hbAlmU+Yo3mpUXZLbU7HceCf9GuOkXyzT/O03oQOL2H8bzPSR 0C8S2f9QFMKWGFIjtLP1f9nBgc+vAtHL0+Vsh01LjsIVvu0LrpTi0qnTpbeHx5Od i2k3c7bC9/kZW63guPaQH0a9CIh74kP/7l0zUPZFrMnEYTN77/06NPhE+RnJbUyj HXCH7L7+9zayoO++Yq4NHUszkTIhZx8z/vOjJtvfu+ZDgjCOvySOe8waeuN0JMkZ UGbfyf8= -----END CERTIFICATE-----Generated at Tue May 14 21:48:44 2024 by rpki-client on console-ams.rpki-client.org