$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa File: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (raw, json) Hash identifier: kH876vZyW3GeVSO2xrTOLPkMn6gRw6bbF6f8wrV0tl0= Subject key identifier: 3D:FC:F8:69:1C:8D:48:B4:54:60:59:B3:75:DB:50:4A:C1:80:7E:F6 Certificate issuer: /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Certificate serial: 0611 Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa Signing time: Fri 10 Nov 2023 05:01:12 +0000 ROA not before: Fri 10 Nov 2023 05:01:12 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 55834 IP address blocks: 49.0.8.0/23 maxlen: 23 49.0.8.0/24 maxlen: 24 49.0.9.0/24 maxlen: 24 49.0.10.0/23 maxlen: 23 49.0.10.0/24 maxlen: 24 49.0.12.0/24 maxlen: 24 49.0.13.0/24 maxlen: 24 49.0.14.0/23 maxlen: 23 49.0.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 23:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1553 (0x611) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F Validity Not Before: Nov 10 05:01:12 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654db918-c94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c8:eb:72:8a:e1:cc:72:94:80:08:a8:c3:0f: f3:d7:76:0b:37:d6:8e:21:56:64:bf:40:c3:7d:4f: 9e:3c:5c:fc:b1:fa:4c:98:c0:a8:94:81:57:09:5e: 81:60:5c:87:6f:30:42:fc:bd:53:56:77:14:71:56: d7:5b:3a:3c:07:8d:3a:6a:82:11:88:01:75:23:6c: c8:12:50:a5:70:5a:29:04:62:05:81:1a:51:a4:99: de:da:50:b4:bb:88:8c:51:ff:a3:f1:92:84:63:bf: 50:fc:e1:31:c0:42:b4:56:1f:a3:12:66:fa:0e:67: a8:37:ca:af:8c:b9:aa:9e:3f:18:5b:23:8a:89:c4: 98:f7:09:91:eb:bd:d8:bd:86:46:25:27:58:d2:53: 84:fc:d0:f0:ee:ce:87:0e:3e:3b:62:d1:96:77:ee: 21:b3:75:d6:d5:fb:9e:3c:58:5b:ab:87:42:f0:2c: ad:eb:30:69:44:34:19:e7:e2:31:66:bf:0c:fa:96: e0:68:8d:a1:1a:50:23:29:5e:37:08:8a:95:a2:f2: 45:7d:c2:23:40:1d:87:67:b5:72:83:b2:e2:3c:e7: e9:ce:75:28:66:d5:7d:30:2f:aa:5a:e9:ca:e6:5e: 10:3c:bb:ca:26:79:42:e3:ac:20:55:86:c4:85:fb: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FC:F8:69:1C:8D:48:B4:54:60:59:B3:75:DB:50:4A:C1:80:7E:F6 X509v3 Authority Key Identifier: keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/C74B01CA3C3E11EBA08CAC72C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.0.8.0/21 Signature Algorithm: sha256WithRSAEncryption c4:19:a4:d1:5e:12:47:91:88:62:8a:7e:f9:c2:39:dc:d9:8f: 77:f7:04:e4:0f:b6:87:5f:5a:72:b2:53:9e:b2:4f:f6:f4:87: 0a:98:44:cf:80:b3:37:31:ab:4a:29:97:08:16:0f:e6:0a:67: 77:c8:cb:91:2c:33:f1:49:1f:d3:cf:e9:bd:62:72:a3:0c:34: 0b:ab:ea:7d:c1:15:0b:ef:60:b1:d2:4a:95:01:11:6c:9c:8b: 8d:fa:4a:5f:f1:fe:f0:42:5b:3c:e5:85:53:a0:c7:20:15:5e: 30:55:db:03:b0:d4:f3:74:6c:44:a5:9d:d6:52:f6:11:a1:6b: 31:b0:1e:fc:12:70:6e:f1:16:e2:06:98:05:d3:d4:c7:fd:3d: c7:82:be:e3:dd:e2:16:94:af:8d:17:10:18:95:b2:9b:78:97: 6b:86:52:36:48:87:7f:f1:1e:9c:23:6d:9a:6f:68:bf:18:81: d5:51:9f:04:5b:34:7f:8a:3e:57:75:d9:2f:ca:e3:77:b3:79: a8:54:4a:04:5d:ff:fa:12:c6:6a:b8:e8:70:35:45:80:8d:ba: 60:d1:bf:08:95:f0:e2:26:c6:1a:67:77:97:6f:38:fc:49:d0: 30:18:eb:b4:2d:0f:2d:8c:63:6f:7b:89:8e:58:53:d0:e3:9d: 22:26:0c:f7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx N0RENjc5NkYwHhcNMjMxMTEwMDUwMTEyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRkYjkxOC1jOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucjrcorhzHKUgAioww/z13YLN9aOIVZkv0DDfU+ePFz8sfpMmMColIFXCV6B YFyHbzBC/L1TVncUcVbXWzo8B406aoIRiAF1I2zIElClcFopBGIFgRpRpJne2lC0 u4iMUf+j8ZKEY79Q/OExwEK0Vh+jEmb6DmeoN8qvjLmqnj8YWyOKicSY9wmR673Y vYZGJSdY0lOE/NDw7s6HDj47YtGWd+4hs3XW1fuePFhbq4dC8Cyt6zBpRDQZ5+Ix Zr8M+pbgaI2hGlAjKV43CIqVovJFfcIjQB2HZ7Vyg7LiPOfpznUoZtV9MC+qWunK 5l4QPLvKJnlC46wgVYbEhfukGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD38+Gkc jUi0VGBZs3XbUErBgH72MB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjU4RkYvMTIwNEFCM0MzQzNEMTFFQkI5MzgxRjcxQzRGOUFFMDIvQzc0QjAxQ0Ez QzNFMTFFQkEwOENBQzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAMxAAgwDQYJKoZIhvcNAQELBQADggEBAMQZpNFeEkeRiGKK fvnCOdzZj3f3BOQPtodfWnKyU56yT/b0hwqYRM+Aszcxq0oplwgWD+YKZ3fIy5Es M/FJH9PP6b1icqMMNAur6n3BFQvvYLHSSpUBEWyci436Sl/x/vBCWzzlhVOgxyAV XjBV2wOw1PN0bESlndZS9hGhazGwHvwScG7xFuIGmAXT1Mf9PceCvuPd4haUr40X EBiVspt4l2uGUjZIh3/xHpwjbZpvaL8YgdVRnwRbNH+KPld12S/K43ezeahUSgRd //oSxmq46HA1RYCNumDRvwiV8OImxhpnd5dvOPxJ0DAY67QtDy2MY297iY5YU9Dj nSImDPc= -----END CERTIFICATE-----Generated at Fri May 17 00:24:22 2024 by rpki-client on console-fra.rpki-client.org