$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa File: A5EB476201D811EEABCFDC80C4F9AE02.roa (raw, json) Hash identifier: 5RZU3ZNVwtwR3E5X7+WylxVlkEfJb6o654CeAqbYORY= Subject key identifier: 81:0D:47:0C:51:A6:6E:24:CF:6F:53:FB:B9:D8:3F:6A:A6:03:B1:03 Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0763 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa Signing time: Sat 03 Jun 2023 06:34:10 +0000 ROA not before: Sat 03 Jun 2023 06:34:10 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 59239 IP address blocks: 114.129.12.0/23 maxlen: 23 114.129.12.0/24 maxlen: 24 114.129.13.0/24 maxlen: 24 114.129.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jul 2023 20:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1891 (0x763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Jun 3 06:34:10 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=647adee2-57a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ef:ae:bc:65:08:76:8b:8c:78:1c:92:7f:3b: c4:84:11:d2:1a:08:8e:2c:f1:d0:b3:00:b0:b5:65: f8:b9:6f:41:46:b9:b5:cf:62:9d:75:dc:9d:4a:7e: 8f:20:09:e6:ac:10:dd:25:63:fb:73:11:63:4f:2b: b2:51:51:f5:f9:ba:e5:7d:38:7b:df:00:99:2e:e6: d3:0d:12:d1:8d:14:f3:cb:c2:4c:c2:c4:43:4a:35: 72:18:fb:2f:19:c3:b3:31:6b:61:f7:ba:0a:6a:a1: 97:9d:28:24:f9:43:59:10:50:d4:fb:9a:eb:48:74: e3:ed:24:5c:79:11:c6:2d:60:9d:24:4e:07:99:b2: c8:89:29:bb:5d:d9:68:32:f0:3c:65:d6:c3:a5:50: 8d:f5:5d:b4:ac:c6:b8:a7:7f:16:33:3f:9e:5c:22: 2f:f8:41:60:83:54:0f:98:0b:1e:4d:2e:0d:46:d2: c4:05:b1:68:61:d5:ba:11:1c:58:5b:0c:a4:83:f8: 2f:48:15:c2:88:c9:66:68:a3:a2:95:87:64:4f:4a: 15:b9:c0:1d:2e:dd:18:9b:aa:74:48:06:38:ba:36: a8:cb:0f:f1:d1:b5:ca:1a:8f:4e:57:06:30:06:f7: 49:66:bb:a1:a0:fc:d1:7d:56:dd:0a:9f:ef:93:a8: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0D:47:0C:51:A6:6E:24:CF:6F:53:FB:B9:D8:3F:6A:A6:03:B1:03 X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.12.0-114.129.14.255 Signature Algorithm: sha256WithRSAEncryption 81:26:0d:03:04:aa:e8:ca:d7:ad:cb:14:c4:e8:d2:6a:73:17: 31:eb:64:89:28:7a:ce:12:07:db:fe:aa:c7:44:10:0d:5b:34: 7f:e1:7b:12:f9:de:6f:41:11:19:d2:4e:73:d1:68:d7:50:76: c7:15:07:4f:18:5a:be:be:0e:cd:62:54:13:ab:50:8b:f7:44: a4:23:7f:85:fd:aa:2a:0c:34:47:52:78:3a:a1:65:8d:92:7e: 41:dd:10:ad:57:a8:65:40:95:7e:76:83:89:2a:19:3d:98:04: fd:e6:94:5f:3f:89:9b:5f:02:cf:c1:2f:aa:55:6a:9e:e8:8f: 5f:0e:59:11:55:b7:51:d7:64:88:fe:78:b7:0e:d8:27:c4:df: 1c:c4:fc:49:7a:b3:b7:12:a4:2e:ad:58:67:d1:2b:11:41:65: 5f:f4:8c:35:d6:d1:27:09:5c:fe:0a:91:b2:64:05:d7:83:90: 86:fd:ef:41:aa:f6:49:3e:f3:0f:f1:84:ec:b9:ca:b0:2c:89: b0:19:16:93:24:46:c4:20:f9:e6:e5:12:3e:18:1e:7c:18:de: 3b:99:98:5c:18:44:65:c1:f5:0b:2a:52:e3:60:b9:09:08:ec: 3e:16:03:18:e2:e0:1a:b1:0c:77:63:1d:f6:24:d2:91:aa:59: 9a:af:66:8b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjMwNjAzMDYzNDEwWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdhZGVlMi01N2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAye+uvGUIdouMeBySfzvEhBHSGgiOLPHQswCwtWX4uW9BRrm1z2KdddydSn6P IAnmrBDdJWP7cxFjTyuyUVH1+brlfTh73wCZLubTDRLRjRTzy8JMwsRDSjVyGPsv GcOzMWth97oKaqGXnSgk+UNZEFDU+5rrSHTj7SRceRHGLWCdJE4HmbLIiSm7Xdlo MvA8ZdbDpVCN9V20rMa4p38WMz+eXCIv+EFgg1QPmAseTS4NRtLEBbFoYdW6ERxY Wwykg/gvSBXCiMlmaKOilYdkT0oVucAdLt0Ym6p0SAY4ujaoyw/x0bXKGo9OVwYw BvdJZruhoPzRfVbdCp/vk6hYbwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFIENRwxR pm4kz29T+7nYP2qmA7EDMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvQTVFQjQ3NjIw MUQ4MTFFRUFCQ0ZEQzgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAnKBDAMEAHKBDjANBgkqhkiG9w0BAQsFAAOCAQEAgSYN AwSq6MrXrcsUxOjSanMXMetkiSh6zhIH2/6qx0QQDVs0f+F7Evneb0ERGdJOc9Fo 11B2xxUHTxhavr4OzWJUE6tQi/dEpCN/hf2qKgw0R1J4OqFljZJ+Qd0QrVeoZUCV fnaDiSoZPZgE/eaUXz+Jm18Cz8EvqlVqnuiPXw5ZEVW3UddkiP54tw7YJ8TfHMT8 SXqztxKkLq1YZ9ErEUFlX/SMNdbRJwlc/gqRsmQF14OQhv3vQar2ST7zD/GE7LnK sCyJsBkWkyRGxCD55uUSPhgefBjeO5mYXBhEZcH1CypS42C5CQjsPhYDGOLgGrEM d2Md9iTSkapZmq9miw== -----END CERTIFICATE-----Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org