$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/C76440BA01F111EE9F38262EC4F9AE02.roa File: C76440BA01F111EE9F38262EC4F9AE02.roa (raw, json) Hash identifier: 7vhMMRjUbX0Q1XiGBOVvdFb5xFThAOaZ7iPz8cD1NqE= Subject key identifier: 05:A5:E4:2D:E7:AA:C3:54:FD:2E:5B:62:FB:EB:1E:C8:D9:65:E9:2D Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Certificate serial: 0767 Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/C76440BA01F111EE9F38262EC4F9AE02.roa Signing time: Sat 03 Jun 2023 10:03:45 +0000 ROA not before: Sat 03 Jun 2023 10:03:45 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 38138 IP address blocks: 114.129.8.0/22 maxlen: 22 114.129.8.0/24 maxlen: 24 114.129.9.0/24 maxlen: 24 114.129.10.0/24 maxlen: 24 114.129.11.0/24 maxlen: 24 2405:eec0::/32 maxlen: 32 2405:eec0:1::/48 maxlen: 48 2405:eec0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jul 2023 20:47:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1895 (0x767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918 Validity Not Before: Jun 3 10:03:45 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=647b1000-840d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2c:54:47:d1:55:09:40:74:f3:8e:1b:a3:ec: cd:26:cc:f4:41:f3:9b:79:e7:ac:c5:7a:84:8b:8b: db:0f:14:21:74:09:8e:2a:d3:ce:64:c4:f7:f7:9e: 50:ed:9b:c4:12:74:67:36:11:08:74:69:6c:81:db: af:60:70:22:37:db:d2:f4:99:a4:8e:ab:74:28:e9: 42:ed:33:2b:f1:85:20:4e:0d:dd:d5:32:d6:8e:ad: d5:64:f5:c8:72:5c:52:01:50:de:46:2a:ea:19:fa: 04:99:ce:45:fe:5d:0a:11:a6:c1:cc:2d:9e:37:4a: 8e:b6:04:e8:d5:eb:bd:fd:b8:cc:b6:6d:eb:bc:55: 6f:10:b0:6a:f7:d3:8e:5c:83:d6:db:15:ff:28:77: 79:02:86:29:b5:52:48:dc:e0:ad:93:74:42:b0:4e: fd:6a:46:3b:de:ce:a3:73:f9:b0:0c:f3:81:ff:ed: 8e:4c:e1:5d:b7:b2:35:df:d2:a3:ed:c1:d4:a8:dd: e9:02:cf:9e:3a:d1:40:05:95:d2:04:01:08:7b:74: 47:0e:46:cc:ce:8b:48:f4:d2:0f:38:7f:80:bf:ee: 7b:66:ca:eb:1e:88:e5:aa:eb:3e:24:20:5e:db:21: 24:8d:28:c5:09:37:d0:d9:1d:99:51:28:1d:0b:3e: 37:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A5:E4:2D:E7:AA:C3:54:FD:2E:5B:62:FB:EB:1E:C8:D9:65:E9:2D X509v3 Authority Key Identifier: keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/C76440BA01F111EE9F38262EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.129.8.0/22 IPv6: 2405:eec0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:d6:0f:74:45:71:3e:b9:0a:7d:01:14:7f:f5:03:fd:79:b1: fb:2e:8c:de:e9:96:a8:06:70:be:23:0c:2b:78:6d:8f:ed:00: b9:a2:04:fc:40:77:21:e8:f6:ef:d2:8b:67:11:b3:c0:57:f0: 40:1c:cf:3e:ac:86:01:e7:7d:30:49:eb:f3:a1:31:c8:9f:78: 92:96:4a:66:11:bd:bc:e8:c4:81:98:49:b4:00:d0:63:bd:00: 65:94:0a:70:cc:02:89:00:09:0a:54:fb:a2:f6:ea:08:b9:23: 34:d3:92:77:8e:6b:0e:1e:e2:f0:c4:3b:ae:4f:92:e1:58:47: 37:a7:cc:8e:65:cc:94:15:5e:27:18:41:09:4e:23:7e:f6:e8: 69:5a:00:c5:ec:18:5e:a5:a2:e5:00:06:db:de:1d:16:48:46: 26:da:8c:a3:06:e7:b3:9d:d4:bc:b1:58:e2:f6:c7:d2:00:39: b2:fa:3e:46:3f:65:cd:84:cb:1f:b5:b9:79:f0:4d:8e:8d:94: de:d8:52:51:88:02:07:be:ad:7a:47:14:ef:e9:69:8d:8c:cf: 1a:8b:a7:7b:50:9e:3c:c6:a3:8a:a4:32:60:c0:5b:6c:4d:e6: 31:94:8a:b1:02:b6:d4:51:0e:9e:4f:9c:c2:f0:4c:95:73:b9: e9:e6:37:67 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC RTE2OTA5MTgwHhcNMjMwNjAzMTAwMzQ1WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdiMTAwMC04NDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SxUR9FVCUB0844bo+zNJsz0QfObeeesxXqEi4vbDxQhdAmOKtPOZMT3955Q 7ZvEEnRnNhEIdGlsgduvYHAiN9vS9Jmkjqt0KOlC7TMr8YUgTg3d1TLWjq3VZPXI clxSAVDeRirqGfoEmc5F/l0KEabBzC2eN0qOtgTo1eu9/bjMtm3rvFVvELBq99OO XIPW2xX/KHd5AoYptVJI3OCtk3RCsE79akY73s6jc/mwDPOB/+2OTOFdt7I139Kj 7cHUqN3pAs+eOtFABZXSBAEIe3RHDkbMzotI9NIPOH+Av+57ZsrrHojlqus+JCBe 2yEkjSjFCTfQ2R2ZUSgdCz43fQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFAWl5C3n qsNU/S5bYvvrHsjZZektMB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5 NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzBCREUvN0U1QUMzRTA4OTcxMTFFQTkyNDAyQTBBQzRGOUFFMDIvQzc2NDQwQkEw MUYxMTFFRTlGMzgyNjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJygQgwDQQCAAIwBwMFACQF7sAwDQYJKoZIhvcNAQELBQAD ggEBAAvWD3RFcT65Cn0BFH/1A/15sfsujN7plqgGcL4jDCt4bY/tALmiBPxAdyHo 9u/Si2cRs8BX8EAczz6shgHnfTBJ6/OhMcifeJKWSmYRvbzoxIGYSbQA0GO9AGWU CnDMAokACQpU+6L26gi5IzTTkneOaw4e4vDEO65PkuFYRzenzI5lzJQVXicYQQlO I3726GlaAMXsGF6louUABtveHRZIRibajKMG57Od1LyxWOL2x9IAObL6PkY/Zc2E yx+1uXnwTY6NlN7YUlGIAge+rXpHFO/paY2MzxqLp3tQnjzGo4qkMmDAW2xN5jGU irECttRRDp5PnMLwTJVzuenmN2c= -----END CERTIFICATE-----Generated at Wed Jul 19 23:23:03 2023 by rpki-client on console-ams.rpki-client.org