$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa File: EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa (raw, json) Hash identifier: We4AOCs3wlmMlsBWADwxobOhQClN47XZpcqyP4WgwGE= Subject key identifier: A6:3D:4E:E1:72:94:0C:4A:52:00:F5:B1:5C:0E:EF:40:CB:21:F2:84 Certificate issuer: /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Certificate serial: EF Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa Signing time: Tue 23 Jan 2024 02:06:29 +0000 ROA not before: Tue 23 Jan 2024 02:06:29 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 14618 IP address blocks: 202.126.97.0/24 maxlen: 24 202.134.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305 Validity Not Before: Jan 23 02:06:29 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65af1f25-d178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:07:39:9c:24:d3:42:b1:9b:42:6d:51:89: 19:03:e6:46:3c:b8:8a:6d:21:12:08:df:6f:b5:bf: 3f:f1:63:48:42:9b:db:60:e8:99:c3:19:1f:b1:18: 89:36:b0:ee:bb:e5:ba:33:42:ed:c3:a6:cd:54:fb: 3f:a4:b7:a5:0c:eb:55:08:b4:96:13:e4:ec:eb:8a: 61:42:a1:32:8e:a8:92:7d:89:75:0f:3b:aa:e0:49: e3:e8:88:8c:1f:2a:22:b6:6a:03:37:b1:77:af:2f: 3d:95:51:67:33:23:78:43:c0:0d:cd:f8:be:d7:24: 18:5d:e7:bf:8d:00:bb:62:58:f2:60:d4:96:aa:3d: 07:0a:62:92:48:c0:e5:25:fb:cf:4c:2b:16:2d:f8: 7f:24:ad:89:bf:70:06:cf:f7:2c:85:ae:7e:f5:ed: a3:4b:29:67:a7:46:9a:42:05:d5:4c:24:63:5f:2c: ea:6d:bf:fc:4c:37:0d:03:8c:cd:81:20:33:31:b2: 42:e2:ea:13:aa:fe:d7:23:78:7e:42:e6:b5:18:ab: c9:50:e9:75:44:0c:7f:2c:98:b0:62:a6:8b:d1:cb: 64:74:a4:57:88:56:dd:02:c3:f3:f3:77:c1:e9:c8: ca:f8:a0:13:69:c9:7c:8e:fe:29:06:ba:33:0a:2a: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3D:4E:E1:72:94:0C:4A:52:00:F5:B1:5C:0E:EF:40:CB:21:F2:84 X509v3 Authority Key Identifier: keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.126.97.0/24 202.134.239.0/24 Signature Algorithm: sha256WithRSAEncryption 58:57:d3:c1:9f:9e:9f:ac:73:c9:8e:85:08:c1:21:cd:2a:a8: 70:34:33:d4:ae:bc:93:f1:fa:84:ee:9d:64:fe:84:93:37:f6: 32:87:5a:f8:33:fd:fa:36:a4:2b:5f:ae:5e:be:99:4b:79:c3: 50:45:e7:b2:57:bd:d0:05:cc:c6:30:6f:f5:0c:f3:72:95:9b: c0:6c:a1:65:f3:97:df:54:ea:67:46:36:8f:b2:68:a6:fc:d2: 5e:18:8c:da:c7:c8:f8:16:94:2c:9f:54:f8:b7:6d:24:58:f4: 96:93:4d:3c:8b:bb:bb:0b:d0:02:cb:ee:48:58:e0:3a:8d:09: f1:08:76:51:ed:40:9b:1c:92:37:53:2c:e3:13:1a:fe:e0:31: 80:81:89:05:f4:1d:71:bb:7e:4f:04:66:4e:c2:09:2f:c8:ad: ae:10:45:80:b2:25:b3:bc:22:04:9e:26:a0:5a:6d:21:6a:44: 1d:e4:e9:50:f0:24:d6:30:74:af:f7:cc:53:eb:4a:ad:e8:b9: 56:14:b1:b1:ba:43:68:13:44:cc:53:52:6a:28:2b:ce:75:52: 4c:ec:1c:c6:22:cf:3e:7b:7c:0a:fc:39:a4:11:44:5c:11:22: 84:9e:84:14:25:2e:b2:7f:27:51:ea:b4:3e:bf:f8:fb:33:98: 09:7e:22:a3 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE Q0Q3ODMzMDUwHhcNMjQwMTIzMDIwNjI5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWFmMWYyNS1kMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwucHOZwk00Kxm0JtUYkZA+ZGPLiKbSESCN9vtb8/8WNIQpvbYOiZwxkfsRiJ NrDuu+W6M0Ltw6bNVPs/pLelDOtVCLSWE+Ts64phQqEyjqiSfYl1Dzuq4Enj6IiM HyoitmoDN7F3ry89lVFnMyN4Q8ANzfi+1yQYXee/jQC7YljyYNSWqj0HCmKSSMDl JfvPTCsWLfh/JK2Jv3AGz/csha5+9e2jSylnp0aaQgXVTCRjXyzqbb/8TDcNA4zN gSAzMbJC4uoTqv7XI3h+Qua1GKvJUOl1RAx/LJiwYqaL0ctkdKRXiFbdAsPz83fB 6cjK+KATacl8jv4pBrozCioKeQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKY9TuFy lAxKUgD1sVwO70DLIfKEMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzY1NTAvODQwMDk1NEFDRUM0MTFFRDhBODNGQjExQzRGOUFFMDIvRUZGN0M4RkMz QzhBMTFFRTlBMDE1MDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBADKfmEDBADKhu8wDQYJKoZIhvcNAQELBQADggEBAFhX08Gf np+sc8mOhQjBIc0qqHA0M9SuvJPx+oTunWT+hJM39jKHWvgz/fo2pCtfrl6+mUt5 w1BF57JXvdAFzMYwb/UM83KVm8BsoWXzl99U6mdGNo+yaKb80l4YjNrHyPgWlCyf VPi3bSRY9JaTTTyLu7sL0ALL7khY4DqNCfEIdlHtQJsckjdTLOMTGv7gMYCBiQX0 HXG7fk8EZk7CCS/Ira4QRYCyJbO8IgSeJqBabSFqRB3k6VDwJNYwdK/3zFPrSq3o uVYUsbG6Q2gTRMxTUmooK851UkzsHMYizz57fAr8OaQRRFwRIoSehBQlLrJ/J1Hq tD6/+PszmAl+IqM= -----END CERTIFICATE-----Generated at Wed May 1 07:23:56 2024 by rpki-client on console-ams.rpki-client.org