$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa File: 38556AC6ED7711EEA7B2AF12C4F9AE02.roa (raw, json) Hash identifier: aGLy/8PjmHM9bBnjKLxACS5cFbKo+n0HrFlLFQU8ICc= Subject key identifier: 3C:26:46:12:78:16:F4:7B:2E:63:14:BB:42:DD:80:1A:4C:C2:C3:96 Certificate issuer: /CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Certificate serial: 04 Authority key identifier: D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa Signing time: Fri 29 Mar 2024 02:51:20 +0000 ROA not before: Fri 29 Mar 2024 02:51:20 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 9919 IP address blocks: 202.58.21.0/24 maxlen: 24 202.58.23.0/24 maxlen: 24 202.58.24.0/24 maxlen: 24 202.58.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959/serialNumber=D6EC22A73A59D2AA955997470279C662D11088F2 Validity Not Before: Mar 29 02:51:20 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=66062ca7-b771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5f:7f:33:ef:ad:16:38:1b:dc:10:7b:bd:15: 3a:6a:7e:3c:54:2b:da:ce:62:64:9e:a1:5c:1e:91: e7:ce:25:26:8a:74:b2:a7:ee:13:0b:7b:84:f4:2b: 97:25:4c:11:40:bd:91:24:41:35:a2:67:23:5d:ae: 65:5e:f8:5d:27:45:45:bf:e3:e6:36:9c:69:f2:41: b7:e5:b5:8d:b8:ec:8b:e7:37:c0:88:c8:b9:05:01: f2:a8:dd:dc:20:51:a4:36:d3:99:d7:57:af:08:34: 29:d6:45:e0:23:48:7d:9d:79:ae:82:c9:34:69:81: 5c:dd:ed:5d:1e:8b:4e:3d:13:b0:31:21:3c:77:9a: 06:45:98:58:16:ab:9e:5a:af:80:25:6f:96:b0:a1: f7:2f:4c:23:54:11:18:66:99:e3:f2:7a:fd:3f:79: 0a:48:c2:18:2f:8a:7c:b4:51:05:8f:a3:56:f8:d8: 31:62:77:3e:0c:0d:e4:34:46:1a:5f:cc:74:43:55: a2:4e:08:77:00:31:5a:2b:e8:6c:38:47:30:29:79: 96:bf:9d:62:96:6e:4a:0a:c0:e6:d2:b6:74:99:48: e7:b9:b5:2a:46:35:ad:f6:a9:ba:4a:83:65:fc:73: 3b:2e:7f:b5:76:db:53:9d:29:5a:50:8a:d6:b7:94: a2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:26:46:12:78:16:F4:7B:2E:63:14:BB:42:DD:80:1A:4C:C2:C3:96 X509v3 Authority Key Identifier: keyid:D6:EC:22:A7:3A:59:D2:AA:95:59:97:47:02:79:C6:62:D1:10:88:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/1uwipzpZ0qqVWZdHAnnGYtEQiPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1uwipzpZ0qqVWZdHAnnGYtEQiPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/AA4C77ECED7611EEAD871A11C4F9AE02/38556AC6ED7711EEA7B2AF12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.58.21.0/24 202.58.23.0-202.58.25.255 Signature Algorithm: sha256WithRSAEncryption 92:bc:96:d1:85:29:35:59:5b:ed:ec:49:c4:bf:82:38:c5:7d: f8:e9:de:fe:66:cc:06:fd:98:45:54:2c:cd:06:4f:cc:a1:3f: 0d:ae:25:46:9a:27:f3:6c:74:47:50:72:3c:16:d1:9b:50:8d: 71:ce:b3:01:83:0b:64:2c:0b:7f:72:e6:11:74:39:eb:f7:3b: 98:01:af:42:d1:4c:31:b4:7f:2f:b2:8d:6c:b6:42:1e:05:b5: 86:c2:a5:42:d4:14:84:19:01:67:14:25:82:37:69:cc:9b:5c: 2e:62:fc:a0:2a:e8:96:6a:c9:1a:97:ee:6d:52:38:11:54:66: 22:5b:9f:e8:d6:ae:1f:3d:73:2e:53:e6:28:f3:e3:84:8e:9f: c3:c9:11:42:fe:73:d5:66:c1:58:d6:06:84:d1:2a:fc:39:5c: ee:9a:34:af:42:59:e8:be:25:82:e6:c5:7c:4f:97:a3:33:5f: e6:82:db:dc:62:76:d8:cb:f3:a0:1b:dd:40:6e:2a:87:e9:20: 1d:d7:65:88:0d:d7:e6:0d:fa:78:03:2f:75:a6:76:50:c8:04: 70:d5:e3:2c:9e:80:67:70:2d:ed:0d:40:e5:ce:f5:8b:66:d5: c5:4c:23:b2:2a:4e:7c:47:04:53:90:4c:d8:38:f0:7c:5b:6b: a3:0b:cc:a2 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTk1OTExMC8GA1UEBRMoRDZFQzIyQTczQTU5RDJBQTk1NTk5NzQ3MDI3OUM2NjJE MTEwODhGMjAeFw0yNDAzMjkwMjUxMjBaFw0yNTA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MDYyY2E3LWI3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjX38z760WOBvcEHu9FTpqfjxUK9rOYmSeoVwekefOJSaKdLKn7hMLe4T0K5cl TBFAvZEkQTWiZyNdrmVe+F0nRUW/4+Y2nGnyQbfltY247IvnN8CIyLkFAfKo3dwg UaQ205nXV68INCnWReAjSH2dea6CyTRpgVzd7V0ei049E7AxITx3mgZFmFgWq55a r4Alb5awofcvTCNUERhmmePyev0/eQpIwhgviny0UQWPo1b42DFidz4MDeQ0Rhpf zHRDVaJOCHcAMVor6Gw4RzApeZa/nWKWbkoKwObStnSZSOe5tSpGNa32qbpKg2X8 czsuf7V221OdKVpQita3lKILAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQUPCZGEngW 9HsuYxS7Qt2AGkzCw5YwHwYDVR0jBBgwFoAU1uwipzpZ0qqVWZdHAnnGYtEQiPIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTU5L0FBNEM3N0VDRUQ3 NjExRUVBRDg3MUExMUM0RjlBRTAyLzF1d2lwenBaMHFxVldaZEhBbm5HWXRFUWlQ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMXV3aXB6cFowcXFWV1pkSEFubkdZdEVRaVBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9BQTRDNzdFQ0VENzYxMUVFQUQ4NzFBMTFDNEY5QUUwMi8zODU1NkFDNkVE NzcxMUVFQTdCMkFGMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFAMEAMo6FTAMAwQAyjoXAwQByjoYMA0GCSqGSIb3DQEBCwUAA4IB AQCSvJbRhSk1WVvt7EnEv4I4xX346d7+ZswG/ZhFVCzNBk/MoT8NriVGmifzbHRH UHI8FtGbUI1xzrMBgwtkLAt/cuYRdDnr9zuYAa9C0UwxtH8vso1stkIeBbWGwqVC 1BSEGQFnFCWCN2nMm1wuYvygKuiWaskal+5tUjgRVGYiW5/o1q4fPXMuU+Yo8+OE jp/DyRFC/nPVZsFY1gaE0Sr8OVzumjSvQlnoviWC5sV8T5ejM1/mgtvcYnbYy/Og G91AbiqH6SAd12WIDdfmDfp4Ay91pnZQyARw1eMsnoBncC3tDUDlzvWLZtXFTCOy Kk58RwRTkEzYOPB8W2ujC8yi -----END CERTIFICATE-----Generated at Sat Jun 1 11:14:32 2024 by rpki-client on console-fra.rpki-client.org