$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/B757FF4EAB8311EA9983D717C4F9AE02.roa File: B757FF4EAB8311EA9983D717C4F9AE02.roa (raw, json) Hash identifier: DFYmotmgpsB5tTA/60Ic5g7wJNaP0r3jSSNRCaoltrE= Subject key identifier: 54:01:F1:AF:0C:8E:B7:0B:D7:49:6E:89:26:35:98:84:CD:2A:70:E6 Certificate issuer: /CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37 Certificate serial: 07FD Authority key identifier: 5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/B757FF4EAB8311EA9983D717C4F9AE02.roa Signing time: Thu 18 Jan 2024 21:39:32 +0000 ROA not before: Thu 18 Jan 2024 21:39:32 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 10109 IP address blocks: 119.40.96.0/21 maxlen: 21 119.40.96.0/24 maxlen: 24 119.40.97.0/24 maxlen: 24 119.40.98.0/24 maxlen: 24 119.40.99.0/24 maxlen: 24 119.40.100.0/24 maxlen: 24 119.40.101.0/24 maxlen: 24 119.40.102.0/24 maxlen: 24 119.40.103.0/24 maxlen: 24 2400:d4e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2045 (0x7fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCF31/serialNumber=5F8E4FD4A6DD635E43782E5A055622CAB2654A37 Validity Not Before: Jan 18 21:39:32 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65a99a93-aa99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:e8:72:f7:0f:f6:2e:48:ab:48:9c:80:53: fc:c2:08:7a:5b:31:8f:84:55:b3:9b:60:39:65:76: e0:9b:97:41:bb:fe:38:0f:75:6f:7c:e6:e3:ff:49: 59:e8:6b:bd:fb:20:00:91:57:2b:b1:fc:8c:58:99: e8:be:a7:a7:83:f7:a6:a6:86:16:4c:d0:a2:3a:de: 45:b9:48:56:20:5a:b5:75:69:03:e5:b7:94:39:65: c6:7c:90:f3:d9:09:24:17:2d:ae:bf:e6:2a:e1:49: 0b:be:b9:32:9a:03:5d:57:2e:31:4e:be:98:ef:65: d2:95:f4:7c:ae:c4:27:37:fa:ae:17:f1:61:d3:55: 5c:95:7d:bb:69:94:9f:f6:39:d4:82:e4:b4:dd:98: 3f:3e:64:a8:8a:5d:99:35:a4:db:a9:7a:12:09:65: e5:3a:40:37:a3:d0:83:81:6e:e5:cf:7b:2a:54:78: 8b:ef:13:25:e4:e8:99:ab:fa:de:ec:78:c7:03:aa: d2:49:78:e3:26:e2:22:c8:0d:f7:07:53:90:11:05: 22:d4:0e:24:19:84:ba:fc:59:03:48:b6:48:47:ea: 45:b6:9a:aa:82:74:f9:5c:15:b5:b0:f0:08:3b:ba: 6e:b3:10:b1:3b:8e:f4:8e:be:23:6e:0c:66:42:ba: 36:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:01:F1:AF:0C:8E:B7:0B:D7:49:6E:89:26:35:98:84:CD:2A:70:E6 X509v3 Authority Key Identifier: keyid:5F:8E:4F:D4:A6:DD:63:5E:43:78:2E:5A:05:56:22:CA:B2:65:4A:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/X45P1KbdY15DeC5aBVYiyrJlSjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X45P1KbdY15DeC5aBVYiyrJlSjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCF31/AF7FED62AA4E11EA9D8EC782C4F9AE02/B757FF4EAB8311EA9983D717C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 119.40.96.0/21 IPv6: 2400:d4e0::/32 Signature Algorithm: sha256WithRSAEncryption 06:cf:29:fa:ea:ce:ab:7d:ff:87:85:69:90:d9:1d:0b:ab:16: cc:b6:b3:d7:6d:4d:ee:22:1a:f7:96:4c:f9:f0:7c:39:4d:09: 14:55:2f:1c:01:5b:6d:5b:d0:9b:b3:9c:45:ef:85:14:88:80: 79:92:f8:e2:01:5f:ea:fc:c7:40:7c:c5:74:d7:d5:70:48:bf: 28:fa:e2:bd:68:8a:31:47:f8:6f:00:82:3c:09:07:28:49:d3: f9:f8:45:1e:45:7f:dd:6a:1d:b8:38:fd:21:19:e4:40:c1:f2: 70:e7:f9:e4:49:39:43:93:b8:5c:4a:11:07:fd:05:75:22:bc: 04:82:20:05:0d:80:43:87:e8:47:20:ae:48:12:a7:c3:42:6f: 3a:3b:13:ea:14:d6:50:8a:56:8a:91:3b:40:62:0f:7a:f7:d5: 89:81:42:b8:ae:d4:77:f0:cf:4e:b1:72:6e:35:db:4c:29:d4: 0f:7d:28:72:da:86:23:59:e5:ba:11:6a:6b:76:93:85:c5:88: a1:d7:cf:f2:82:e3:82:4a:49:f9:e0:c9:9f:5f:24:80:d7:e5: 74:93:db:59:25:13:1a:37:0a:2d:28:83:3b:ef:1c:6b:62:c7: 57:5f:76:98:c8:ad:5d:b7:64:25:56:cf:a4:3a:2e:4d:e1:46: db:68:26:ff -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNGMzExMTAvBgNVBAUTKDVGOEU0RkQ0QTZERDYzNUU0Mzc4MkU1QTA1NTYyMkNB QjI2NTRBMzcwHhcNMjQwMTE4MjEzOTMyWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE5OWE5My1hYTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2u/ocvcP9i5Iq0icgFP8wgh6WzGPhFWzm2A5ZXbgm5dBu/44D3VvfObj/0lZ 6Gu9+yAAkVcrsfyMWJnovqeng/empoYWTNCiOt5FuUhWIFq1dWkD5beUOWXGfJDz 2QkkFy2uv+Yq4UkLvrkymgNdVy4xTr6Y72XSlfR8rsQnN/quF/Fh01VclX27aZSf 9jnUguS03Zg/PmSoil2ZNaTbqXoSCWXlOkA3o9CDgW7lz3sqVHiL7xMl5OiZq/re 7HjHA6rSSXjjJuIiyA33B1OQEQUi1A4kGYS6/FkDSLZIR+pFtpqqgnT5XBW1sPAI O7pusxCxO470jr4jbgxmQro2DQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFQB8a8M jrcL10luiSY1mITNKnDmMB8GA1UdIwQYMBaAFF+OT9Sm3WNeQ3guWgVWIsqyZUo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0YzMS9BRjdGRUQ2MkFB NEUxMUVBOUQ4RUM3ODJDNEY5QUUwMi9YNDVQMUtiZFkxNURlQzVhQlZZaXlySmxT amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g0NVAxS2JkWTE1RGVDNWFCVllpeXJKbFNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkNGMzEvQUY3RkVENjJBQTRFMTFFQTlEOEVDNzgyQzRGOUFFMDIvQjc1N0ZGNEVB QjgzMTFFQTk5ODNENzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAN3KGAwDQQCAAIwBwMFACQA1OAwDQYJKoZIhvcNAQELBQAD ggEBAAbPKfrqzqt9/4eFaZDZHQurFsy2s9dtTe4iGveWTPnwfDlNCRRVLxwBW21b 0JuznEXvhRSIgHmS+OIBX+r8x0B8xXTX1XBIvyj64r1oijFH+G8AgjwJByhJ0/n4 RR5Ff91qHbg4/SEZ5EDB8nDn+eRJOUOTuFxKEQf9BXUivASCIAUNgEOH6EcgrkgS p8NCbzo7E+oU1lCKVoqRO0BiD3r31YmBQriu1Hfwz06xcm4120wp1A99KHLahiNZ 5boRamt2k4XFiKHXz/KC44JKSfngyZ9fJIDX5XST21klExo3Ci0ogzvvHGtix1df dpjIrV23ZCVWz6Q6Lk3hRttoJv8= -----END CERTIFICATE-----Generated at Fri May 31 22:56:58 2024 by rpki-client on console-fra.rpki-client.org