$ rpki-client -vvf rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/FE53F0DE34AA11EE85FF0735C4F9AE02.roa File: FE53F0DE34AA11EE85FF0735C4F9AE02.roa (raw, json) Hash identifier: 4sja2KDglOPHlvxXAIDl6uJIrNWYcv3i/9rsdXyO1/U= Subject key identifier: 28:00:6D:2E:AC:9E:49:75:73:FD:2A:8A:A5:56:4D:54:F1:54:78:AE Certificate issuer: /CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Certificate serial: 68 Authority key identifier: E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/FE53F0DE34AA11EE85FF0735C4F9AE02.roa Signing time: Mon 29 Jan 2024 06:48:22 +0000 ROA not before: Mon 29 Jan 2024 06:48:22 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 24436 IP address blocks: 192.150.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C74B5/serialNumber=E0ECA7BC5B25A0CA374D9A83CC4CF90DD6CF2209 Validity Not Before: Jan 29 06:48:22 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65b74a36-ec6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:38:c7:36:7f:8d:72:6c:08:5d:e6:c9:43:39: 1d:20:60:16:e2:16:a8:0d:0c:41:1b:97:67:53:00: dd:68:1e:28:71:92:2a:9e:a4:14:19:3a:18:0a:8b: 83:64:b6:d9:8c:44:de:74:17:5c:7f:50:16:45:24: 0a:28:5e:fa:d8:2a:9c:72:a6:23:4c:d2:48:8b:c5: d7:b0:77:dc:44:c3:83:7d:d1:ea:56:ab:bd:30:d1: f5:eb:35:44:6f:13:fb:76:9e:97:9b:76:1d:53:06: b3:04:85:71:11:9e:1a:8c:35:5f:54:dd:b1:23:a3: e9:8c:82:31:70:16:28:96:15:ea:c7:5f:8e:42:f5: 7b:50:69:3d:18:da:f7:66:5c:8e:1f:96:ce:88:20: 95:43:72:97:26:3a:a8:7a:9f:52:95:b2:9c:af:7f: 9a:ee:e7:ff:d7:89:fb:8a:a2:25:f0:a5:17:74:a3: 3a:5d:af:31:50:01:82:cc:19:1a:a0:83:df:42:18: 66:16:ad:46:a9:cb:12:9b:29:3d:ef:b8:61:63:5c: 3f:fe:7e:ce:60:92:78:8a:0c:3b:32:6c:02:93:fc: e2:16:b0:36:2f:a8:5d:d0:86:ca:5a:23:d7:63:2f: 01:5e:a7:7d:51:3d:a1:05:e2:a9:63:6f:43:44:86: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:6D:2E:AC:9E:49:75:73:FD:2A:8A:A5:56:4D:54:F1:54:78:AE X509v3 Authority Key Identifier: keyid:E0:EC:A7:BC:5B:25:A0:CA:37:4D:9A:83:CC:4C:F9:0D:D6:CF:22:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/4OynvFsloMo3TZqDzEz5DdbPIgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4OynvFsloMo3TZqDzEz5DdbPIgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C74B5/9804356E34AA11EEA06AE133C4F9AE02/FE53F0DE34AA11EE85FF0735C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.150.137.0/24 Signature Algorithm: sha256WithRSAEncryption 77:95:e1:99:69:42:45:14:c2:91:0d:86:ca:bb:f3:3e:96:43: f0:51:dc:ae:36:c5:eb:1a:05:27:7e:0f:13:c9:ae:79:8b:a0: 30:bc:4f:40:fe:e5:4f:cb:c9:f3:b1:e0:24:56:84:eb:e8:b5: f2:dd:71:22:75:09:7e:8b:70:ce:cc:e2:e6:7e:af:b7:d2:e5: 5d:00:fb:58:62:89:b6:ba:da:fa:82:1b:8b:14:d6:cc:ff:7b: 39:a6:5b:2e:01:5a:42:b0:b9:f8:70:f2:bc:09:98:b4:ad:41: bb:f8:ae:fa:ca:7b:07:8e:76:93:05:28:33:21:4f:22:81:be: 16:9f:ee:8f:0c:c1:af:b0:f7:f8:1e:3f:cf:db:a9:e6:a6:1b: fa:67:99:34:6e:29:8d:d7:96:90:02:f2:8b:cf:86:b9:b1:64: 87:9b:d2:55:08:d1:9b:f3:44:50:b1:94:c7:8d:9b:48:2f:17: f0:d7:e7:59:1f:88:2d:ba:68:4e:f3:15:d2:74:ae:98:ba:66: fe:57:f7:56:3a:8e:50:a9:4e:3d:c6:bc:3c:ce:a5:85:32:9e: e4:f6:aa:0a:cd:86:fd:75:86:c8:18:57:c6:3f:a6:c0:f3:28: 72:6e:1a:69:9e:80:bc:47:54:37:0f:c9:7b:92:cc:46:ed:bc: a4:99:66:ae -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzRCNTExMC8GA1UEBRMoRTBFQ0E3QkM1QjI1QTBDQTM3NEQ5QTgzQ0M0Q0Y5MERE NkNGMjIwOTAeFw0yNDAxMjkwNjQ4MjJaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Yjc0YTM2LWVjNmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/OMc2f41ybAhd5slDOR0gYBbiFqgNDEEbl2dTAN1oHihxkiqepBQZOhgKi4Nk ttmMRN50F1x/UBZFJAooXvrYKpxypiNM0kiLxdewd9xEw4N90epWq70w0fXrNURv E/t2npebdh1TBrMEhXERnhqMNV9U3bEjo+mMgjFwFiiWFerHX45C9XtQaT0Y2vdm XI4fls6IIJVDcpcmOqh6n1KVspyvf5ru5//XifuKoiXwpRd0ozpdrzFQAYLMGRqg g99CGGYWrUapyxKbKT3vuGFjXD/+fs5gkniKDDsybAKT/OIWsDYvqF3QhspaI9dj LwFep31RPaEF4qljb0NEhjEBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKABtLqye SXVz/SqKpVZNVPFUeK4wHwYDVR0jBBgwFoAU4OynvFsloMo3TZqDzEz5DdbPIgkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NEI1Lzk4MDQzNTZFMzRB QTExRUVBMDZBRTEzM0M0RjlBRTAyLzRPeW52RnNsb01vM1RacUR6RXo1RGRiUEln ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNE95bnZGc2xvTW8zVFpxRHpFejVEZGJQSWdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzRCNS85ODA0MzU2RTM0QUExMUVFQTA2QUUxMzNDNEY5QUUwMi9GRTUzRjBERTM0 QUExMUVFODVGRjA3MzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMCWiTANBgkqhkiG9w0BAQsFAAOCAQEAd5XhmWlCRRTCkQ2G yrvzPpZD8FHcrjbF6xoFJ34PE8mueYugMLxPQP7lT8vJ87HgJFaE6+i18t1xInUJ fotwzszi5n6vt9LlXQD7WGKJtrra+oIbixTWzP97OaZbLgFaQrC5+HDyvAmYtK1B u/iu+sp7B452kwUoMyFPIoG+Fp/ujwzBr7D3+B4/z9up5qYb+meZNG4pjdeWkALy i8+GubFkh5vSVQjRm/NEULGUx42bSC8X8NfnWR+ILbpoTvMV0nSumLpm/lf3VjqO UKlOPca8PM6lhTKe5PaqCs2G/XWGyBhXxj+mwPMocm4aaZ6AvEdUNw/Je5LMRu28 pJlmrg== -----END CERTIFICATE-----Generated at Mon May 27 07:39:40 2024 by rpki-client on console-fra.rpki-client.org