$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa File: 0BD04D300F6D11EC8D9F1E13C4F9AE02.roa (raw, json) Hash identifier: E+7VIMWynnD0GMAsbprd2KbyTyeA4xcUzYEEZDnzF+w= Subject key identifier: D4:D1:D0:02:AA:53:C1:79:CB:C1:0B:8F:26:88:C6:2A:D9:01:4C:2D Certificate issuer: /CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Certificate serial: 06D9 Authority key identifier: 6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa Signing time: Fri 16 Feb 2024 03:13:25 +0000 ROA not before: Fri 16 Feb 2024 03:13:25 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 64073 IP address blocks: 118.67.192.0/23 maxlen: 24 118.67.194.0/23 maxlen: 24 118.67.196.0/22 maxlen: 24 202.36.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1753 (0x6d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8C3/serialNumber=6A4DBBA36D4C767D5BD72B6EE970A8000FC5495E Validity Not Before: Feb 16 03:13:25 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65ced2d4-9903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:50:8f:bf:65:35:eb:35:2a:00:3e:9c:1e:b3: 51:1d:73:23:f7:10:06:1d:f1:24:0a:1d:af:98:b5: 34:c0:7b:12:8b:dc:50:49:7c:7e:1e:b9:75:ba:b8: 4d:0e:0c:d2:2c:3f:65:b1:4c:72:56:44:7b:c2:c0: f9:d5:f5:e4:99:a3:c2:80:d8:34:e4:46:54:76:02: 98:e2:ef:0d:5c:ea:9e:73:4f:bd:88:28:33:6a:4d: 86:67:47:a2:95:9c:93:55:f3:44:34:f0:c8:e3:c3: 99:25:4a:93:72:e1:bf:fe:b5:9e:8c:90:02:c2:46: 83:90:e5:49:79:c6:81:04:b6:10:a4:9b:7e:21:3a: 04:72:03:67:b8:eb:3d:42:b6:45:ac:b5:a9:19:e0: 61:f1:dd:5e:dd:8b:a2:bc:a3:36:96:88:86:f1:62: f0:c7:c9:74:f9:db:5a:82:f3:0f:f6:99:d1:c1:fa: ab:44:5d:53:f2:dc:be:19:68:f6:a6:00:c3:72:0a: 62:12:ce:17:95:2f:23:47:56:24:c6:6a:c0:f6:5b: 63:01:c2:57:80:00:45:38:6b:a3:c9:99:94:41:59: 81:0d:38:e7:91:60:a1:e0:54:31:5c:33:51:84:b5: fd:b6:0b:73:b3:a2:80:99:cf:4a:a7:3b:e2:43:16: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D1:D0:02:AA:53:C1:79:CB:C1:0B:8F:26:88:C6:2A:D9:01:4C:2D X509v3 Authority Key Identifier: keyid:6A:4D:BB:A3:6D:4C:76:7D:5B:D7:2B:6E:E9:70:A8:00:0F:C5:49:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/ak27o21Mdn1b1ytu6XCoAA_FSV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak27o21Mdn1b1ytu6XCoAA_FSV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8C3/D0E33FA402C311EB8ADC3238C4F9AE02/0BD04D300F6D11EC8D9F1E13C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.67.192.0/21 202.36.209.0/24 Signature Algorithm: sha256WithRSAEncryption 55:c8:92:b8:96:c4:43:2d:de:ab:11:fd:80:fb:9d:43:2f:58: e1:54:5e:e9:67:75:f4:ab:d0:27:27:87:0f:2a:98:32:0b:62: 74:5b:e9:20:af:ed:95:d4:03:3d:6c:b1:b5:f9:c4:6f:86:3f: dd:a3:c2:25:b5:33:4c:8a:57:e5:16:3d:12:0c:ea:be:1a:ce: 90:32:11:ed:cf:a7:1e:09:64:07:62:be:a2:c1:40:0e:80:7e: 43:84:d4:87:e7:fe:00:5d:2a:83:84:27:95:26:a7:97:c2:00: 81:95:a5:e1:38:77:87:e3:ab:ac:b1:4d:c0:f7:f7:0c:13:28: 34:86:b8:6a:6b:83:d1:17:eb:21:5f:45:73:1e:f5:2e:b8:26: e7:4d:61:37:07:c5:cb:fa:64:94:1f:2a:b4:41:fb:37:11:ef: d8:06:6c:55:aa:ee:24:28:9a:58:96:06:1a:b3:9b:0a:a8:e2: 97:bf:9e:56:8e:0d:dc:15:bb:7a:55:25:98:19:98:59:58:e1: aa:da:c6:53:e3:72:52:38:01:fa:4a:46:da:ed:3d:6d:f1:16: a3:9e:41:3b:d0:37:8b:27:d4:c7:dd:b4:65:29:3f:76:4a:6f: ca:8e:71:49:93:69:05:b5:49:8d:5f:54:29:6a:9b:78:db:13: fc:f0:bf:34 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4QzMxMTAvBgNVBAUTKDZBNERCQkEzNkQ0Qzc2N0Q1QkQ3MkI2RUU5NzBBODAw MEZDNTQ5NUUwHhcNMjQwMjE2MDMxMzI1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNlZDJkNC05OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFCPv2U16zUqAD6cHrNRHXMj9xAGHfEkCh2vmLU0wHsSi9xQSXx+Hrl1urhN DgzSLD9lsUxyVkR7wsD51fXkmaPCgNg05EZUdgKY4u8NXOqec0+9iCgzak2GZ0ei lZyTVfNENPDI48OZJUqTcuG//rWejJACwkaDkOVJecaBBLYQpJt+IToEcgNnuOs9 QrZFrLWpGeBh8d1e3YuivKM2loiG8WLwx8l0+dtagvMP9pnRwfqrRF1T8ty+GWj2 pgDDcgpiEs4XlS8jR1YkxmrA9ltjAcJXgABFOGujyZmUQVmBDTjnkWCh4FQxXDNR hLX9tgtzs6KAmc9KpzviQxZ4YQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFNTR0AKq U8F5y8ELjyaIxirZAUwtMB8GA1UdIwQYMBaAFGpNu6NtTHZ9W9crbulwqAAPxUle MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhDMy9EMEUzM0ZBNDAy QzMxMUVCOEFEQzMyMzhDNEY5QUUwMi9hazI3bzIxTWRuMWIxeXR1NlhDb0FBX0ZT VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrMjdvMjFNZG4xYjF5dHU2WENvQUFfRlNWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY4QzMvRDBFMzNGQTQwMkMzMTFFQjhBREMzMjM4QzRGOUFFMDIvMEJEMDREMzAw RjZEMTFFQzhEOUYxRTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAN2Q8ADBADKJNEwDQYJKoZIhvcNAQELBQADggEBAFXIkriW xEMt3qsR/YD7nUMvWOFUXulndfSr0Ccnhw8qmDILYnRb6SCv7ZXUAz1ssbX5xG+G P92jwiW1M0yKV+UWPRIM6r4azpAyEe3Ppx4JZAdivqLBQA6AfkOE1Ifn/gBdKoOE J5Ump5fCAIGVpeE4d4fjq6yxTcD39wwTKDSGuGprg9EX6yFfRXMe9S64JudNYTcH xcv6ZJQfKrRB+zcR79gGbFWq7iQomliWBhqzmwqo4pe/nlaODdwVu3pVJZgZmFlY 4araxlPjclI4AfpKRtrtPW3xFqOeQTvQN4sn1MfdtGUpP3ZKb8qOcUmTaQW1SY1f VClqm3jbE/zwvzQ= -----END CERTIFICATE-----Generated at Sun May 19 00:16:18 2024 by rpki-client on console-fra.rpki-client.org