$ rpki-client -vvf rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/FB4C89109B6011EEBD830E11C4F9AE02.roa File: FB4C89109B6011EEBD830E11C4F9AE02.roa (raw, json) Hash identifier: a5qFtFKdSxdVlGp8/0f8359/gZ9YcaM4vKpWk0sgGCA= Subject key identifier: 87:F8:05:3A:89:D5:A6:48:45:C5:17:72:9B:B0:CA:32:54:9E:8A:C8 Certificate issuer: /CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Certificate serial: 04 Authority key identifier: 24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/FB4C89109B6011EEBD830E11C4F9AE02.roa Signing time: Fri 15 Dec 2023 15:45:49 +0000 ROA not before: Fri 15 Dec 2023 15:45:49 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 152141 IP address blocks: 210.79.178.0/24 maxlen: 24 210.79.179.0/24 maxlen: 24 2001:df3:39c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C54A1/serialNumber=247B5D6E62E4A49E9DF4DC24C31ECA6ED7A43B28 Validity Not Before: Dec 15 15:45:49 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=657c74ad-ffb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:08:21:cf:4f:84:df:7d:69:d8:57:35:c2: b3:98:86:df:1e:1b:c2:00:5f:3e:66:59:b8:d0:a0: a5:6d:fb:ba:da:d5:94:87:52:0f:51:96:ab:f8:7f: 48:5e:46:9e:2d:d8:0a:53:ac:24:83:99:15:6f:82: c1:0f:d5:8f:c3:b1:1c:5b:14:d8:3e:c4:4b:ab:be: 83:1a:c1:3d:25:4f:37:23:fc:2f:ca:fd:18:ee:bf: 75:e6:7d:c8:54:cf:a4:36:7c:9d:c8:1d:f7:0d:a2: 3d:23:70:87:36:55:b2:c2:be:80:f5:73:28:94:b7: 0f:fb:8c:78:c7:88:5b:3b:d1:f1:0b:eb:f0:6e:62: 7f:77:dd:ed:e4:99:24:60:ce:38:6f:2e:8b:b0:a3: e0:47:2f:c6:5d:a7:a3:ef:d0:ac:c6:bc:6a:8d:bf: a8:e7:0c:4d:cd:67:a5:dc:fd:63:90:57:26:b1:e3: 33:d2:a1:86:8e:7d:0b:af:53:d3:5d:6d:1a:81:06: 6b:90:71:05:77:42:78:ac:d0:0a:40:47:c2:c8:22: 12:38:be:28:45:47:c5:2e:f5:eb:1a:aa:da:18:28: e1:31:a2:d7:3c:a0:37:c7:41:cc:85:50:9d:d3:64: 4d:fc:81:87:29:ed:e8:ef:f1:21:66:67:0f:9e:01: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F8:05:3A:89:D5:A6:48:45:C5:17:72:9B:B0:CA:32:54:9E:8A:C8 X509v3 Authority Key Identifier: keyid:24:7B:5D:6E:62:E4:A4:9E:9D:F4:DC:24:C3:1E:CA:6E:D7:A4:3B:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JHtdbmLkpJ6d9Nwkwx7KbtekOyg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C54A1/7402D8D89B6011EE86EE1D10C4F9AE02/FB4C89109B6011EEBD830E11C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 210.79.178.0/23 IPv6: 2001:df3:39c0::/48 Signature Algorithm: sha256WithRSAEncryption 82:20:20:37:02:b7:0b:92:09:bf:8d:18:08:96:0e:7e:85:83: 9c:1c:b0:ab:4b:e7:9c:d9:3c:f0:74:9c:ba:af:c5:ea:73:e0: fb:4a:17:9f:a9:f7:b7:c5:0d:be:68:21:4c:f5:2f:ea:09:cb: a1:78:45:65:a0:f1:55:d0:a3:e5:c3:51:fd:26:f3:53:32:3c: a7:d2:50:e9:6e:7b:51:7b:62:9d:77:8b:87:2d:19:f6:ea:a3: 69:fd:7a:46:de:32:0d:47:98:e8:47:bd:e8:b1:9e:bf:43:82: ec:76:46:bf:95:01:e1:2d:81:e7:eb:6e:a2:bb:c2:27:61:ac: 8b:76:87:b1:15:87:65:96:b1:a0:bc:d1:f5:d4:6a:01:1a:36: 7a:37:db:6b:8a:54:39:bb:b0:dd:78:4f:6d:68:d7:0e:96:2a: 10:e7:cc:fd:ed:90:d1:85:28:46:93:d8:04:79:c8:f4:c4:11: 1b:7e:ae:bc:52:9c:b4:3c:a9:01:e2:86:c3:10:9a:a6:6e:5e: f5:a5:a7:96:fc:70:cc:cf:0c:4e:5f:36:4f:5d:0c:a3:36:b6: 66:06:b1:f7:62:9a:29:cc:43:af:ce:de:42:b8:9e:5c:1b:d6: 64:5c:0a:93:e6:eb:4a:c3:6c:ad:d3:fd:66:2c:f3:3b:b3:be: db:97:3c:97 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTRBMTExMC8GA1UEBRMoMjQ3QjVENkU2MkU0QTQ5RTlERjREQzI0QzMxRUNBNkVE N0E0M0IyODAeFw0yMzEyMTUxNTQ1NDlaFw0yNTAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY1N2M3NGFkLWZmYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwSgghz0+E331p2Fc1wrOYht8eG8IAXz5mWbjQoKVt+7ra1ZSHUg9Rlqv4f0he Rp4t2ApTrCSDmRVvgsEP1Y/DsRxbFNg+xEurvoMawT0lTzcj/C/K/Rjuv3XmfchU z6Q2fJ3IHfcNoj0jcIc2VbLCvoD1cyiUtw/7jHjHiFs70fEL6/BuYn933e3kmSRg zjhvLouwo+BHL8Zdp6Pv0KzGvGqNv6jnDE3NZ6Xc/WOQVyax4zPSoYaOfQuvU9Nd bRqBBmuQcQV3Qnis0ApAR8LIIhI4vihFR8Uu9esaqtoYKOExotc8oDfHQcyFUJ3T ZE38gYcp7ejv8SFmZw+eAYp/AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUh/gFOonV pkhFxRdym7DKMlSeisgwHwYDVR0jBBgwFoAUJHtdbmLkpJ6d9Nwkwx7KbtekOygw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NEExLzc0MDJEOEQ4OUI2 MDExRUU4NkVFMUQxMEM0RjlBRTAyL0pIdGRibUxrcEo2ZDlOd2t3eDdLYnRla095 Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSkh0ZGJtTGtwSjZkOU53a3d4N0tidGVrT3lnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTRBMS83NDAyRDhEODlCNjAxMUVFODZFRTFEMTBDNEY5QUUwMi9GQjRDODkxMDlC NjAxMUVFQkQ4MzBFMTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAdJPsjAPBAIAAjAJAwcAIAEN8znAMA0GCSqGSIb3DQEBCwUA A4IBAQCCICA3ArcLkgm/jRgIlg5+hYOcHLCrS+ec2TzwdJy6r8Xqc+D7Shefqfe3 xQ2+aCFM9S/qCcuheEVloPFV0KPlw1H9JvNTMjyn0lDpbntRe2Kdd4uHLRn26qNp /XpG3jINR5joR73osZ6/Q4Lsdka/lQHhLYHn626iu8InYayLdoexFYdllrGgvNH1 1GoBGjZ6N9trilQ5u7DdeE9taNcOlioQ58z97ZDRhShGk9gEecj0xBEbfq68Upy0 PKkB4obDEJqmbl71paeW/HDMzwxOXzZPXQyjNrZmBrH3YpopzEOvzt5CuJ5cG9Zk XAqT5utKw2yt0/1mLPM7s77blzyX -----END CERTIFICATE-----Generated at Sun Jun 9 10:16:15 2024 by rpki-client on console-ams.rpki-client.org