$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa File: 84D917FC9F4911EEA0C5C856C4F9AE02.roa (raw, json) Hash identifier: c/0/yt3FRS1cH9Px4YMFXU1xo31vgchf5DTkjF585Rk= Subject key identifier: 99:4E:FC:62:AB:69:B9:7C:C1:DB:FE:61:37:C0:8A:80:63:C4:9C:7B Certificate issuer: /CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Certificate serial: 1D Authority key identifier: A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa Signing time: Wed 20 Dec 2023 15:07:40 +0000 ROA not before: Wed 20 Dec 2023 15:07:40 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 152185 IP address blocks: 36.50.182.0/24 maxlen: 24 36.50.183.0/24 maxlen: 24 2001:df3:4d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 07:17:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF9B0/serialNumber=A2A217D4A412FB538F5C91A34B36CE71879DDB65 Validity Not Before: Dec 20 15:07:40 2023 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6583033c-51ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:ff:35:02:3a:0e:d7:5d:14:ba:18:d8:a0: c8:b5:c5:24:01:5b:ff:27:a0:bd:28:b8:46:92:fb: 83:f4:9c:aa:df:ef:7a:1e:46:7e:87:dc:fb:d2:06: f0:4e:a7:6a:0e:38:bb:c2:5e:94:b9:6b:78:10:3b: 1e:ee:3b:6d:e5:83:a4:bd:92:40:e9:71:eb:42:23: aa:e1:a6:7b:f7:bc:d4:8c:84:83:e3:fd:ea:e4:16: bb:ee:70:f4:33:53:aa:40:9e:00:a3:3f:62:86:5e: 4c:0e:64:13:ff:74:5b:bf:8f:0c:21:9f:b4:4b:f2: c5:3e:4f:a6:fc:de:d4:6d:91:07:31:eb:66:b1:81: f4:59:1b:23:7c:4c:60:18:1c:8b:d5:e5:28:82:13: b5:39:bf:d7:3d:75:bf:f5:ba:f9:3a:4c:37:72:aa: a9:e1:b5:34:84:a8:71:03:53:3e:48:a1:2a:16:c3: 1d:81:d6:b1:97:8f:5b:33:75:47:c3:55:09:d9:1c: 2c:17:c8:e1:2a:89:ac:23:b0:6e:27:e3:30:e6:31: ed:7d:26:a2:11:ec:d3:5a:99:26:33:29:4d:fd:fd: 75:9f:c0:c9:d7:46:bc:18:37:01:4b:65:05:fc:3c: 5e:b5:23:45:7a:dc:5f:34:67:d2:10:fa:68:58:df: d3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4E:FC:62:AB:69:B9:7C:C1:DB:FE:61:37:C0:8A:80:63:C4:9C:7B X509v3 Authority Key Identifier: keyid:A2:A2:17:D4:A4:12:FB:53:8F:5C:91:A3:4B:36:CE:71:87:9D:DB:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/oqIX1KQS-1OPXJGjSzbOcYed22U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oqIX1KQS-1OPXJGjSzbOcYed22U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF9B0/14C9496E9F3F11EE801B1D62C4F9AE02/84D917FC9F4911EEA0C5C856C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.182.0/23 IPv6: 2001:df3:4d40::/48 Signature Algorithm: sha256WithRSAEncryption 7a:b2:df:3e:1e:cd:ef:0d:b5:96:62:68:22:3c:4f:59:b7:c2: 9f:2c:c6:8b:ee:63:56:8c:92:90:e2:75:9b:39:bc:b6:dd:df: 82:d4:34:05:20:55:bc:9d:4d:4e:e0:df:30:9a:4c:b7:25:ed: fd:52:49:d5:7e:83:c3:71:73:b1:54:23:3f:39:d3:13:83:84: 15:fd:d4:a3:62:d9:5b:79:7a:04:8a:be:1d:3a:ac:82:3e:c4: a6:6c:7a:cc:42:b2:b9:e9:c3:b2:b8:b7:85:23:09:59:83:81: 8e:93:2f:45:01:65:b3:f5:bf:a4:42:2a:cd:d5:1d:c7:84:cc: c8:ca:f2:5b:3a:a7:e4:d6:81:b7:15:74:99:51:a6:86:7a:e6: 18:1b:a4:98:07:6e:11:94:a4:17:98:51:ad:d4:fd:90:e2:c4: de:7b:03:f7:7c:af:a6:00:55:a2:c7:38:0e:45:66:d1:f8:94: 1c:63:76:cd:1b:7b:53:4b:d4:28:7b:5d:4e:fb:5f:3e:7a:9f: 77:95:ae:5a:72:c7:01:9d:ec:81:ed:bf:22:d2:72:ec:ff:de: fd:07:95:81:d6:9e:af:61:02:82:9a:87:c0:66:1b:46:a1:3f: e4:72:18:78:15:92:1a:9e:6e:e9:a8:98:bb:2c:27:8d:0f:a1: 55:a8:02:dc -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RjlCMDExMC8GA1UEBRMoQTJBMjE3RDRBNDEyRkI1MzhGNUM5MUEzNEIzNkNFNzE4 NzlEREI2NTAeFw0yMzEyMjAxNTA3NDBaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ODMwMzNjLTUxZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDav81AjoO110UuhjYoMi1xSQBW/8noL0ouEaS+4P0nKrf73oeRn6H3PvSBvBO p2oOOLvCXpS5a3gQOx7uO23lg6S9kkDpcetCI6rhpnv3vNSMhIPj/erkFrvucPQz U6pAngCjP2KGXkwOZBP/dFu/jwwhn7RL8sU+T6b83tRtkQcx62axgfRZGyN8TGAY HIvV5SiCE7U5v9c9db/1uvk6TDdyqqnhtTSEqHEDUz5IoSoWwx2B1rGXj1szdUfD VQnZHCwXyOEqiawjsG4n4zDmMe19JqIR7NNamSYzKU39/XWfwMnXRrwYNwFLZQX8 PF61I0V63F80Z9IQ+mhY39OvAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUmU78Yqtp uXzB2/5hN8CKgGPEnHswHwYDVR0jBBgwFoAUoqIX1KQS+1OPXJGjSzbOcYed22Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNGOUIwLzE0Qzk0OTZFOUYz RjExRUU4MDFCMUQ2MkM0RjlBRTAyL29xSVgxS1FTLTFPUFhKR2pTemJPY1llZDIy VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb3FJWDFLUVMtMU9QWEpHalN6Yk9jWWVkMjJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjlCMC8xNEM5NDk2RTlGM0YxMUVFODAxQjFENjJDNEY5QUUwMi84NEQ5MTdGQzlG NDkxMUVFQTBDNUM4NTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEASQytjAPBAIAAjAJAwcAIAEN801AMA0GCSqGSIb3DQEBCwUA A4IBAQB6st8+Hs3vDbWWYmgiPE9Zt8KfLMaL7mNWjJKQ4nWbOby23d+C1DQFIFW8 nU1O4N8wmky3Je39UknVfoPDcXOxVCM/OdMTg4QV/dSjYtlbeXoEir4dOqyCPsSm bHrMQrK56cOyuLeFIwlZg4GOky9FAWWz9b+kQirN1R3HhMzIyvJbOqfk1oG3FXSZ UaaGeuYYG6SYB24RlKQXmFGt1P2Q4sTeewP3fK+mAFWixzgORWbR+JQcY3bNG3tT S9Qoe11O+18+ep93la5acscBneyB7b8i0nLs/979B5WB1p6vYQKCmofAZhtGoT/k chh4FZIanm7pqJi7LCeND6FVqALc -----END CERTIFICATE-----Generated at Fri Jun 7 11:02:55 2024 by rpki-client on console-fra.rpki-client.org