$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa File: 9FBA5FCCA63911ED874E6630C4F9AE02.roa (raw, json) Hash identifier: Ta/ZWvPosDSPnLIBb0P0lxVE7uAqrQxU6Y7zoCnFQ8w= Subject key identifier: EA:28:00:EC:1E:88:B2:57:EE:4F:02:62:27:8E:0A:66:89:49:EC:89 Certificate issuer: /CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Certificate serial: D7 Authority key identifier: 5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa Signing time: Tue 27 Feb 2024 05:38:04 +0000 ROA not before: Tue 27 Feb 2024 05:38:04 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 19625 IP address blocks: 203.11.220.0/24 maxlen: 24 203.23.160.0/24 maxlen: 24 203.23.162.0/24 maxlen: 24 203.23.163.0/24 maxlen: 24 203.23.165.0/24 maxlen: 24 203.23.166.0/24 maxlen: 24 203.23.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5240/serialNumber=5D89F3AAF9B13A07A5B264F2DEBA64D5C500651C Validity Not Before: Feb 27 05:38:04 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65dd753c-e6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:64:aa:9d:2d:3b:3b:e8:87:21:72:3d:90: b4:94:e0:d9:95:08:1a:e9:51:f0:fc:57:85:09:9f: 19:e7:40:32:15:fe:11:18:5b:2f:e0:59:59:3b:13: f0:61:61:ad:98:d7:b9:dd:f3:51:46:64:2b:07:61: 90:df:ae:da:ea:4b:c1:c2:18:49:f1:aa:4c:06:5b: 90:2f:f1:fd:54:46:83:2f:e1:b1:3e:54:83:bd:5d: 90:d6:2a:ca:e9:8e:7e:26:c3:09:d2:ba:b7:4b:40: 0e:61:f1:35:5a:f7:97:49:35:01:c0:86:c6:65:ec: 69:d8:93:34:f5:8d:d9:78:45:07:9d:c5:43:8f:db: b9:47:5c:d1:f4:a5:81:0d:12:7c:04:0c:2f:50:f2: 2d:e9:92:b7:80:2d:97:8e:88:cf:bf:ca:11:2d:06: 88:cc:dc:b3:e7:3a:b4:23:6a:7d:cc:f7:4f:d4:cd: e8:e2:ab:7f:89:c2:03:34:59:79:9f:67:39:68:b8: 72:52:73:03:49:56:7e:00:bc:f1:45:92:03:a2:82: a3:e2:47:a7:96:e4:42:69:c9:9c:a2:d2:bc:9e:b5: 77:6d:98:92:66:2e:e9:d9:e5:f8:01:4c:63:02:72: 3b:59:00:ec:2f:32:68:f5:b5:31:e9:d9:19:39:27: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:28:00:EC:1E:88:B2:57:EE:4F:02:62:27:8E:0A:66:89:49:EC:89 X509v3 Authority Key Identifier: keyid:5D:89:F3:AA:F9:B1:3A:07:A5:B2:64:F2:DE:BA:64:D5:C5:00:65:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/XYnzqvmxOgelsmTy3rpk1cUAZRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XYnzqvmxOgelsmTy3rpk1cUAZRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5240/27DDE7D89B7D11EDB3C33F5DC4F9AE02/9FBA5FCCA63911ED874E6630C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.11.220.0/24 203.23.160.0/24 203.23.162.0/23 203.23.165.0-203.23.167.255 Signature Algorithm: sha256WithRSAEncryption 93:d3:a6:58:db:c8:55:6d:2d:a6:cf:66:59:0d:3c:0a:60:b4: 53:e5:89:c4:ba:81:8b:9c:e3:3a:ff:24:fd:2d:ae:77:03:92: c1:9d:25:32:55:89:49:2f:3d:08:16:bd:4a:48:88:4d:f2:1a: 13:77:71:b8:05:46:c0:c9:8c:16:9a:45:c4:f3:1a:13:6f:e5: 49:7d:22:51:e8:42:02:6e:f8:b9:58:52:81:9d:a9:ce:61:5f: 37:a7:3a:b7:f8:bc:48:16:5f:d4:5c:a4:df:55:96:2f:0d:9f: 27:2b:39:d2:41:eb:2d:8a:cf:db:32:07:f2:0b:3d:42:81:09: 9e:fd:f5:39:d7:ad:e9:bd:58:22:ee:fe:68:c5:c9:38:e4:9c: 78:52:5e:a2:8e:24:73:60:20:03:f4:a2:22:f7:44:0f:e0:91: 4f:cd:86:ec:38:8a:94:bd:b2:6b:ed:7a:d5:b2:03:72:32:e1: 89:69:af:0f:1f:ce:c5:fe:f6:3d:5f:91:14:30:70:ce:10:50: b9:a3:1b:db:fb:30:fb:0d:0c:fd:c5:c0:e5:18:de:20:da:3c: 33:11:86:5f:d4:b7:4e:08:9d:68:0e:cd:92:92:33:62:ba:83: eb:3e:be:10:fd:35:b0:d0:5f:9e:e4:a9:90:58:85:a7:79:91: a6:85:6c:b1 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyNDAxMTAvBgNVBAUTKDVEODlGM0FBRjlCMTNBMDdBNUIyNjRGMkRFQkE2NEQ1 QzUwMDY1MUMwHhcNMjQwMjI3MDUzODA0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWRkNzUzYy1lNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukVkqp0tOzvohyFyPZC0lODZlQga6VHw/FeFCZ8Z50AyFf4RGFsv4FlZOxPw YWGtmNe53fNRRmQrB2GQ367a6kvBwhhJ8apMBluQL/H9VEaDL+GxPlSDvV2Q1irK 6Y5+JsMJ0rq3S0AOYfE1WveXSTUBwIbGZexp2JM09Y3ZeEUHncVDj9u5R1zR9KWB DRJ8BAwvUPIt6ZK3gC2XjojPv8oRLQaIzNyz5zq0I2p9zPdP1M3o4qt/icIDNFl5 n2c5aLhyUnMDSVZ+ALzxRZIDooKj4kenluRCacmcotK8nrV3bZiSZi7p2eX4AUxj AnI7WQDsLzJo9bUx6dkZOScV7QIDAQABo4ICrzCCAqswHQYDVR0OBBYEFOooAOwe iLJX7k8CYieOCmaJSeyJMB8GA1UdIwQYMBaAFF2J86r5sToHpbJk8t66ZNXFAGUc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTI0MC8yN0RERTdEODlC N0QxMUVEQjNDMzNGNURDNEY5QUUwMi9YWW56cXZteE9nZWxzbVR5M3JwazFjVUFa UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hZbnpxdm14T2dlbHNtVHkzcnBrMWNVQVpSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDUyNDAvMjdEREU3RDg5QjdEMTFFREIzQzMzRjVEQzRGOUFFMDIvOUZCQTVGQ0NB NjM5MTFFRDg3NEU2NjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBADLC9wDBADLF6ADBAHLF6IwDAMEAMsXpQMEA8sXoDANBgkq hkiG9w0BAQsFAAOCAQEAk9OmWNvIVW0tps9mWQ08CmC0U+WJxLqBi5zjOv8k/S2u dwOSwZ0lMlWJSS89CBa9SkiITfIaE3dxuAVGwMmMFppFxPMaE2/lSX0iUehCAm74 uVhSgZ2pzmFfN6c6t/i8SBZf1Fyk31WWLw2fJys50kHrLYrP2zIH8gs9QoEJnv31 Odet6b1YIu7+aMXJOOSceFJeoo4kc2AgA/SiIvdED+CRT82G7DiKlL2ya+161bID cjLhiWmvDx/Oxf72PV+RFDBwzhBQuaMb2/sw+w0M/cXA5RjeINo8MxGGX9S3Tgid aA7NkpIzYrqD6z6+EP01sNBfnuSpkFiFp3mRpoVssQ== -----END CERTIFICATE-----Generated at Mon May 27 06:19:23 2024 by rpki-client on console-fra.rpki-client.org