$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa File: 882F06DEFF0E11EABBCCCF56C4F9AE02.roa (raw, json) Hash identifier: ZH3Mq/JSGWA6DuI0NcZDqTsE9u1Wv10V6AeYETNaO6o= Subject key identifier: C4:81:85:3C:F1:F1:9A:E7:EC:E7:1E:98:61:1B:9C:78:0E:CE:AE:62 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 5EEB Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa Signing time: Tue 26 Mar 2024 21:40:17 +0000 ROA not before: Tue 26 Mar 2024 21:40:17 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 63673 IP address blocks: 118.143.198.0/24 maxlen: 24 118.143.199.0/24 maxlen: 24 118.143.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 21:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24299 (0x5eeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Validity Not Before: Mar 26 21:40:17 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=660340c1-6689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:1b:5d:82:7c:16:32:2a:26:84:40:2c:eb:53: ba:5c:30:bd:e6:e8:b9:b7:cf:24:76:45:8f:51:b4: 55:d1:1b:61:e1:cf:05:fb:ab:0f:53:b1:81:fb:e5: 98:0a:e2:1c:e0:69:8d:60:c3:7c:09:67:c2:83:a1: 6b:31:09:78:cb:56:89:d4:ab:da:11:7a:a5:cc:a6: dd:f7:14:ce:47:f8:8d:f4:e4:fc:a8:5e:b3:c0:41: c0:0c:9e:83:58:af:fc:97:f1:53:9b:b6:1b:35:5c: 39:83:6e:f6:09:c0:ef:c2:8f:de:9b:1a:26:56:65: 1b:76:d9:47:ea:d0:5e:42:ee:b3:c3:e1:61:fb:4d: 1d:28:45:80:04:e3:bd:ab:b2:59:ce:6a:20:16:e1: ee:5c:84:de:02:02:fe:94:1b:31:30:2d:9d:aa:5d: 0d:49:6c:54:b6:63:bf:44:d1:79:b2:ca:b3:cf:e4: de:87:2d:18:aa:36:eb:fc:82:30:b7:db:a1:35:65: 3f:90:93:f7:22:34:72:cc:ea:bb:49:90:8a:cd:66: ba:44:3b:ec:33:29:3b:6c:cb:db:e7:9f:d3:94:6f: 17:d8:de:49:3b:aa:91:e2:6c:96:6a:4e:49:3a:62: 53:f5:8c:91:3a:43:d1:bd:5d:c0:f1:0f:ee:bc:8f: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:81:85:3C:F1:F1:9A:E7:EC:E7:1E:98:61:1B:9C:78:0E:CE:AE:62 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/882F06DEFF0E11EABBCCCF56C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.143.198.0/23 118.143.215.0/24 Signature Algorithm: sha256WithRSAEncryption 81:5d:6f:32:dc:ed:ce:95:bb:fe:f8:25:65:4a:2b:ef:59:6d: 88:e9:25:94:9c:a6:40:7b:fc:87:45:b5:a9:23:d5:4c:10:dd: dd:c6:8d:90:a1:4c:c9:69:ec:bd:59:53:c8:e3:e3:ef:95:c7: 38:7a:6b:17:59:ea:85:b7:39:30:91:09:3d:f9:84:15:ed:61: b5:5a:3e:ed:43:72:50:cd:e5:28:cf:31:bf:f4:97:47:65:c9: 9f:71:18:fa:2e:a9:ff:01:5a:7e:98:82:7f:de:63:1b:87:3b: 93:ae:c4:ac:30:93:51:38:e1:f2:3d:ff:54:18:a2:0d:79:28: 08:0a:4d:1b:62:95:02:d4:b3:fc:42:2f:19:3a:a4:64:c9:d3: 4a:69:2c:ae:63:da:fe:c0:01:7c:e8:af:0c:75:fe:46:13:84: d9:d7:43:8a:d0:ed:fb:bf:d6:bb:26:13:44:b3:43:16:56:9b: 04:43:e4:7f:1f:99:47:e0:a1:8a:7f:a8:b2:74:a1:f2:2f:eb: b8:f3:6e:0a:c1:97:7c:58:80:04:87:ec:41:65:9c:af:e0:67: a9:17:ca:06:bc:73:80:49:ae:35:49:5e:f5:60:1b:f9:74:ad: 74:07:17:21:f8:e3:10:fe:57:03:cc:ca:1d:e6:18:8e:59:d6: b1:be:0d:ab -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICXuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjQwMzI2MjE0MDE3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjAzNDBjMS02Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlxtdgnwWMiomhEAs61O6XDC95ui5t88kdkWPUbRV0Rth4c8F+6sPU7GB++WY CuIc4GmNYMN8CWfCg6FrMQl4y1aJ1KvaEXqlzKbd9xTOR/iN9OT8qF6zwEHADJ6D WK/8l/FTm7YbNVw5g272CcDvwo/emxomVmUbdtlH6tBeQu6zw+Fh+00dKEWABOO9 q7JZzmogFuHuXITeAgL+lBsxMC2dql0NSWxUtmO/RNF5ssqzz+Tehy0Yqjbr/IIw t9uhNWU/kJP3IjRyzOq7SZCKzWa6RDvsMyk7bMvb55/TlG8X2N5JO6qR4myWak5J OmJT9YyROkPRvV3A8Q/uvI99fQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMSBhTzx 8Zrn7OcemGEbnHgOzq5iMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvODgyRjA2REVG RjBFMTFFQUJCQ0NDRjU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAF2j8YDBAB2j9cwDQYJKoZIhvcNAQELBQADggEBAIFdbzLc 7c6Vu/74JWVKK+9ZbYjpJZScpkB7/IdFtakj1UwQ3d3GjZChTMlp7L1ZU8jj4++V xzh6axdZ6oW3OTCRCT35hBXtYbVaPu1DclDN5SjPMb/0l0dlyZ9xGPouqf8BWn6Y gn/eYxuHO5OuxKwwk1E44fI9/1QYog15KAgKTRtilQLUs/xCLxk6pGTJ00ppLK5j 2v7AAXzorwx1/kYThNnXQ4rQ7fu/1rsmE0SzQxZWmwRD5H8fmUfgoYp/qLJ0ofIv 67jzbgrBl3xYgASH7EFlnK/gZ6kXyga8c4BJrjVJXvVgG/l0rXQHFyH44xD+VwPM yh3mGI5Z1rG+Das= -----END CERTIFICATE-----Generated at Tue May 14 22:49:21 2024 by rpki-client on console-ams.rpki-client.org