$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa File: FB1F8158242A11ED9547B486C4F9AE02.roa (raw, json) Hash identifier: fvux1k7GikvVMbvsyR+ZqxhQBbFbbVFEy4QXKcI06RM= Subject key identifier: 53:65:88:2B:7B:B6:35:CE:35:3C:C0:37:ED:DA:A5:EE:39:58:08:3A Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 017C Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa Signing time: Fri 03 May 2024 05:17:59 +0000 ROA not before: Fri 03 May 2024 05:17:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 23859 IP address blocks: 129.94.0.0/16 maxlen: 16 131.236.0.0/16 maxlen: 16 149.171.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: May 3 05:17:59 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66347387-9d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b9:2c:6e:6d:27:4c:67:5f:4d:98:0e:28:ac: 0d:5e:75:f9:07:44:f2:e7:12:d0:52:f9:94:31:25: cc:b7:59:73:6e:3c:57:fd:b0:91:9c:0c:38:05:2c: bf:03:22:82:0e:1c:0e:df:5f:de:42:17:f8:49:b2: de:72:27:25:87:85:99:08:6e:5f:ca:d8:b2:67:b4: f7:1e:e3:92:c4:d6:13:ef:c5:90:88:ae:11:05:b6: 05:9a:ad:87:e5:dd:d7:36:a9:c8:e6:38:37:ec:5f: a7:50:eb:34:45:32:d1:ec:37:d7:5f:0e:04:bc:2a: d6:ab:5c:55:42:3c:ff:5e:1c:96:9e:1e:48:db:78: 58:85:0b:42:eb:cf:56:c1:7b:01:b4:63:3d:f6:02: c0:ee:b2:8f:e3:dd:e3:44:ea:f7:43:57:14:e8:b4: 68:e6:28:f9:f4:52:41:ec:4d:1f:72:53:db:9f:c7: ec:25:9b:1e:da:04:00:e8:3b:48:32:bc:1f:2f:29: 5d:35:7c:b3:9a:9f:1e:7d:b2:a7:86:c0:b2:f5:47: a0:a9:e8:b7:2d:2c:39:ac:b2:99:15:2e:9d:0c:d8: db:ef:ca:97:15:7f:a9:22:d2:fe:63:71:45:84:59: c3:a5:4b:14:01:d3:1e:9a:63:37:a8:21:24:53:f7: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:65:88:2B:7B:B6:35:CE:35:3C:C0:37:ED:DA:A5:EE:39:58:08:3A X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/FB1F8158242A11ED9547B486C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 129.94.0.0/16 131.236.0.0/16 149.171.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5a:c6:d5:43:e9:63:9c:a7:50:d0:02:bc:d0:1f:f7:00:88:77: a7:a4:1a:58:a2:b4:1c:77:a7:85:20:dd:16:51:9f:e0:eb:f8: 77:16:dd:3f:7f:77:c7:43:8a:0d:e5:b7:98:03:c0:26:5b:f7: 6a:94:b2:d8:71:3c:12:ad:ef:e7:ef:30:12:d0:bb:ea:6c:6c: 52:f2:85:27:c5:48:79:00:ab:b9:32:ec:59:82:0f:8d:5e:59: 93:78:42:db:98:eb:3c:13:c9:c3:87:94:cf:0c:13:cd:91:2a: fd:d3:05:ea:a0:72:ed:11:23:4f:d6:77:c8:81:62:4d:5c:e9: bd:9c:16:b6:ed:b3:60:28:ff:e6:15:85:87:0e:03:f3:a8:08: ce:7a:9f:2b:3b:a7:b5:3e:96:46:86:35:62:19:ac:68:df:51: 05:9a:2e:1d:56:72:40:08:fe:66:f3:fc:3c:c8:4d:73:53:2b: 4d:41:2d:53:52:ff:c4:79:69:54:83:e3:c0:7d:ae:ee:c7:7b: 5a:ce:34:0f:44:4b:80:cf:98:72:0d:ad:54:82:dd:48:28:f5: 7a:fd:61:d9:db:6a:42:69:68:ea:8a:b0:27:7c:37:a1:20:87: 7a:b4:c9:0d:9b:9e:b2:66:5c:f9:75:7f:f0:50:e0:e5:0b:23: 95:32:38:33 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjQwNTAzMDUxNzU5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM0NzM4Ny05ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17ksbm0nTGdfTZgOKKwNXnX5B0Ty5xLQUvmUMSXMt1lzbjxX/bCRnAw4BSy/ AyKCDhwO31/eQhf4SbLeciclh4WZCG5fytiyZ7T3HuOSxNYT78WQiK4RBbYFmq2H 5d3XNqnI5jg37F+nUOs0RTLR7DfXXw4EvCrWq1xVQjz/XhyWnh5I23hYhQtC689W wXsBtGM99gLA7rKP493jROr3Q1cU6LRo5ij59FJB7E0fclPbn8fsJZse2gQA6DtI MrwfLyldNXyzmp8efbKnhsCy9Uegqei3LSw5rLKZFS6dDNjb78qXFX+pItL+Y3FF hFnDpUsUAdMemmM3qCEkU/fasQIDAQABo4ICnjCCApowHQYDVR0OBBYEFFNliCt7 tjXONTzAN+3ape45WAg6MB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk1QUEvMTU2QkQ4OUUyNDI3MTFFREIzRUEzNDgwQzRGOUFFMDIvRkIxRjgxNTgy NDJBMTFFRDk1NDdCNDg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKAYIKwYBBQUHAQcBAf8E GTAXMBUEAgABMA8DAwCBXgMDAIPsAwMAlaswDQYJKoZIhvcNAQELBQADggEBAFrG 1UPpY5ynUNACvNAf9wCId6ekGliitBx3p4Ug3RZRn+Dr+HcW3T9/d8dDig3lt5gD wCZb92qUsthxPBKt7+fvMBLQu+psbFLyhSfFSHkAq7ky7FmCD41eWZN4QtuY6zwT ycOHlM8ME82RKv3TBeqgcu0RI0/Wd8iBYk1c6b2cFrbts2Ao/+YVhYcOA/OoCM56 nys7p7U+lkaGNWIZrGjfUQWaLh1WckAI/mbz/DzITXNTK01BLVNS/8R5aVSD48B9 ru7He1rONA9ES4DPmHINrVSC3Ugo9Xr9YdnbakJpaOqKsCd8N6Egh3q0yQ2bnrJm XPl1f/BQ4OULI5UyODM= -----END CERTIFICATE-----Generated at Tue May 21 05:25:20 2024 by rpki-client on console-fra.rpki-client.org