$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa File: 032B593EB1C511E9A4B3CE25C4F9AE02.roa (raw, json) Hash identifier: TXYafClgQVQeXJUBvNnLknPV2XqYxQCmJVpXmho0QT0= Subject key identifier: A6:49:A6:11:26:2E:96:20:59:03:C3:24:46:D8:E6:81:34:8D:CC:16 Certificate issuer: /CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Certificate serial: 0D0E Authority key identifier: E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa Signing time: Thu 22 Feb 2024 18:56:39 +0000 ROA not before: Thu 22 Feb 2024 18:56:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 9216 IP address blocks: 122.144.32.0/19 maxlen: 24 202.154.192.0/19 maxlen: 24 203.135.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 18:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3342 (0xd0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A39/serialNumber=E7B41B3D256EC6BD0CE7121B370DE4741B835E61 Validity Not Before: Feb 22 18:56:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65d798e7-f06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:4d:32:68:1e:7d:08:4d:40:b4:d4:dc:3e: f5:01:53:7f:17:a9:f9:39:41:b3:f4:3a:4d:66:b7: 66:a7:7a:9b:69:41:74:45:fb:af:d1:e3:8c:45:31: ca:88:89:50:e5:13:95:33:cd:03:3f:6b:3b:9c:e0: c2:5a:a9:3d:0d:07:7f:c7:ee:7e:25:46:df:54:ea: 18:fd:34:b2:38:fd:0f:90:05:b5:17:ad:fe:b1:20: 95:01:27:ae:c2:ff:8f:5a:ee:bd:ca:b5:b8:9d:3c: 28:8a:7f:b7:75:9b:5d:d9:d2:48:e2:db:f9:40:d0: c8:7f:26:35:6e:21:13:b8:15:2e:2c:3c:ef:5e:77: bf:2e:a3:fa:9d:dd:04:ea:5f:dd:cc:21:62:5c:a8: d4:3a:7b:73:6c:f3:67:b1:6c:3f:d1:a0:80:69:c2: f3:4d:0c:d5:f8:c6:9f:7c:83:ba:d5:a5:7b:4a:dd: df:73:05:78:86:f0:a4:cd:19:a1:4d:1d:66:ee:d4: f9:93:70:85:4a:67:ee:34:e0:91:59:13:48:2b:99: 6a:b6:db:d7:f7:8a:bf:91:ba:bc:17:02:d7:0c:2a: 5a:43:a7:0c:22:78:7e:52:0c:d7:f7:41:e4:57:4c: 9f:67:52:f7:0c:54:d3:74:dc:b3:23:f5:69:e5:ba: 6a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:49:A6:11:26:2E:96:20:59:03:C3:24:46:D8:E6:81:34:8D:CC:16 X509v3 Authority Key Identifier: keyid:E7:B4:1B:3D:25:6E:C6:BD:0C:E7:12:1B:37:0D:E4:74:1B:83:5E:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/57QbPSVuxr0M5xIbNw3kdBuDXmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/57QbPSVuxr0M5xIbNw3kdBuDXmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A39/730F00B2B1C411E9BECB1825C4F9AE02/032B593EB1C511E9A4B3CE25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.144.32.0/19 202.154.192.0/19 203.135.64.0/19 Signature Algorithm: sha256WithRSAEncryption a1:68:8d:53:fe:95:3e:fb:e7:dc:df:83:b9:ae:63:52:db:84: ac:16:20:8b:e0:ec:45:ac:46:a4:72:8c:7b:65:5c:36:fc:c9: 56:35:ef:1f:ed:de:52:61:6f:e2:69:58:e6:16:94:f1:a0:f7: 55:31:17:ed:9c:49:2d:08:58:e9:eb:38:b8:c0:9c:6c:cd:32: 66:32:ed:14:09:e8:99:a5:b1:a3:d5:81:5d:05:b8:59:9a:9f: 27:a1:0c:72:01:fb:c5:87:89:34:25:2a:2d:81:a4:8e:41:02: d3:96:4d:ce:37:db:3f:ce:d0:59:76:23:37:45:c4:4f:78:f8: e4:26:54:18:ad:4a:0e:8e:e2:e9:9d:3f:51:57:6c:a7:58:e9: 7b:41:3b:5a:ea:44:34:8a:53:2f:9d:17:be:16:20:c3:ff:53: 6c:9f:32:1b:0b:37:cf:8c:b8:3a:c9:16:a6:f4:26:fa:bd:20: 04:0b:ab:04:10:d3:49:ab:9f:4e:11:4e:15:52:1b:e5:ba:58: ac:47:b5:df:81:cd:16:aa:13:e7:bd:65:0e:43:7f:68:b7:a1: 42:d1:87:ad:b2:c8:74:e0:6e:c8:a6:b0:d4:b7:fb:8e:fc:17: cf:75:e6:fc:28:23:64:74:16:e7:a5:b9:51:03:f4:1f:5b:14: 74:e9:e7:d4 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICDQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZBMzkxMTAvBgNVBAUTKEU3QjQxQjNEMjU2RUM2QkQwQ0U3MTIxQjM3MERFNDc0 MUI4MzVFNjEwHhcNMjQwMjIyMTg1NjM5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ3OThlNy1mMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAme9NMmgefQhNQLTU3D71AVN/F6n5OUGz9DpNZrdmp3qbaUF0Rfuv0eOMRTHK iIlQ5ROVM80DP2s7nODCWqk9DQd/x+5+JUbfVOoY/TSyOP0PkAW1F63+sSCVASeu wv+PWu69yrW4nTwoin+3dZtd2dJI4tv5QNDIfyY1biETuBUuLDzvXne/LqP6nd0E 6l/dzCFiXKjUOntzbPNnsWw/0aCAacLzTQzV+MaffIO61aV7St3fcwV4hvCkzRmh TR1m7tT5k3CFSmfuNOCRWRNIK5lqttvX94q/kbq8FwLXDCpaQ6cMInh+UgzX90Hk V0yfZ1L3DFTTdNyzI/Vp5bpqPQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKZJphEm LpYgWQPDJEbY5oE0jcwWMB8GA1UdIwQYMBaAFOe0Gz0lbsa9DOcSGzcN5HQbg15h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzOS83MzBGMDBCMkIx QzQxMUU5QkVDQjE4MjVDNEY5QUUwMi81N1FiUFNWdXhyME01eEliTncza2RCdURY bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU3UWJQU1Z1eHIwTTV4SWJOdzNrZEJ1RFhtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZBMzkvNzMwRjAwQjJCMUM0MTFFOUJFQ0IxODI1QzRGOUFFMDIvMDMyQjU5M0VC MUM1MTFFOUE0QjNDRTI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAV6kCADBAXKmsADBAXLh0AwDQYJKoZIhvcNAQELBQADggEB AKFojVP+lT7759zfg7muY1LbhKwWIIvg7EWsRqRyjHtlXDb8yVY17x/t3lJhb+Jp WOYWlPGg91UxF+2cSS0IWOnrOLjAnGzNMmYy7RQJ6JmlsaPVgV0FuFmanyehDHIB +8WHiTQlKi2BpI5BAtOWTc432z/O0Fl2IzdFxE94+OQmVBitSg6O4umdP1FXbKdY 6XtBO1rqRDSKUy+dF74WIMP/U2yfMhsLN8+MuDrJFqb0Jvq9IAQLqwQQ00mrn04R ThVSG+W6WKxHtd+BzRaqE+e9ZQ5Df2i3oULRh62yyHTgbsimsNS3+478F8915vwo I2R0FueluVED9B9bFHTp59Q= -----END CERTIFICATE-----Generated at Tue May 28 19:51:24 2024 by rpki-client on console-fra.rpki-client.org