$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa File: BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa (raw, json) Hash identifier: 9B+FZQBA+ID6mfEwHbGU4CvthxlT7m1s13yr/gj3u94= Subject key identifier: 66:6A:0F:C1:1D:B0:7E:E6:8A:B1:E7:74:C3:64:05:64:78:79:21:D0 Certificate issuer: /CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Certificate serial: 03 Authority key identifier: 19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa Signing time: Mon 08 Apr 2024 04:23:22 +0000 ROA not before: Mon 08 Apr 2024 04:23:22 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 152668 IP address blocks: 117.55.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 09:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC931/serialNumber=198C4364CF032C730D9585834982096D50A752C9 Validity Not Before: Apr 8 04:23:22 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6613713a-91f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:d6:f4:43:ed:90:61:83:f4:74:29:22:26: e0:df:de:20:8e:c0:e8:e6:56:d2:72:80:56:e6:2d: 63:37:d2:ac:b3:30:2f:90:61:b5:1d:5b:4c:fe:77: 03:96:01:95:7d:2d:8d:81:e5:11:45:26:8b:cd:7c: ec:9b:1d:d9:a7:9c:f8:77:37:35:54:ee:c6:b4:4f: 2a:73:5e:b5:18:8d:33:41:c4:9d:17:aa:9f:f1:32: 76:6b:63:fe:4f:2a:df:fc:8d:30:bf:3c:c3:71:b1: 36:3c:42:da:1d:e4:2a:96:55:4b:75:3a:b4:9f:13: 4b:2a:20:02:6e:32:8d:59:2a:e4:f8:66:ba:01:24: 11:b1:a1:2e:09:25:6a:51:c3:1e:dc:7e:15:e7:27: 03:e2:97:4e:9a:40:b7:e5:4b:f4:92:26:4e:bb:1a: 59:0b:11:17:47:a1:e3:fd:eb:fa:6f:74:94:1b:93: 93:7c:f2:5c:1f:c8:97:2f:c2:22:4b:e5:d5:92:c9: e9:50:f0:a5:37:2d:f4:ed:ac:1a:f4:14:ef:99:1e: bd:25:45:24:0a:ed:cb:04:2c:3d:e7:d5:75:62:de: 71:dd:bd:b4:5f:09:d3:41:51:07:fb:63:d3:1a:33: a8:63:96:48:25:10:57:73:7e:92:2f:86:a9:1b:a2: 94:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6A:0F:C1:1D:B0:7E:E6:8A:B1:E7:74:C3:64:05:64:78:79:21:D0 X509v3 Authority Key Identifier: keyid:19:8C:43:64:CF:03:2C:73:0D:95:85:83:49:82:09:6D:50:A7:52:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/GYxDZM8DLHMNlYWDSYIJbVCnUsk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GYxDZM8DLHMNlYWDSYIJbVCnUsk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC931/4A25B6A0F55D11EE9BE19780C4F9AE02/BBE9AEC0F55F11EEB6F1153CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.55.255.0/24 Signature Algorithm: sha256WithRSAEncryption 71:8e:11:9e:ba:5a:31:24:ba:44:00:a1:fe:a6:40:c1:9e:5f: e5:ef:15:7b:c0:6d:91:d6:ef:34:6c:d3:ae:87:a5:11:e6:8d: 8d:ce:1e:7b:85:b7:30:25:93:00:a1:73:c6:e2:34:40:a5:87: f5:99:26:9f:50:54:71:d9:d0:df:34:cd:1c:90:d3:1e:db:31: b3:1d:6f:d4:96:53:b0:32:ce:79:a6:74:88:78:61:28:6f:71: fb:5c:ed:bc:f4:c4:a3:fe:d4:66:74:64:27:ab:e8:27:54:18: 0e:bc:2f:28:42:a2:58:7f:85:17:a7:6b:fa:26:8f:02:ce:48: 60:df:a2:88:3c:80:da:06:d7:4b:25:9d:88:f2:41:54:4b:99: 90:b0:03:18:42:77:b0:0f:d4:f9:eb:8d:a1:61:27:2c:ee:71: 28:98:d9:48:03:e9:fa:c0:13:f7:42:dc:75:91:b2:72:16:c2: e9:26:1e:1e:d0:c5:fb:57:a4:84:82:c7:68:91:ab:f8:72:b1: 1e:e9:e8:52:ff:80:e5:b1:ab:b3:d1:b6:6b:6f:e7:3c:5d:a5: 06:99:15:ad:c4:9d:79:63:38:e0:12:22:bd:94:25:34:2e:66: af:17:05:b4:d1:2e:f3:39:99:df:d0:c3:4d:b0:55:e1:25:c4: 18:9d:1f:08 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QzkzMTExMC8GA1UEBRMoMTk4QzQzNjRDRjAzMkM3MzBEOTU4NTgzNDk4MjA5NkQ1 MEE3NTJDOTAeFw0yNDA0MDgwNDIzMjJaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MTM3MTNhLTkxZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8Ddb0Q+2QYYP0dCkiJuDf3iCOwOjmVtJygFbmLWM30qyzMC+QYbUdW0z+dwOW AZV9LY2B5RFFJovNfOybHdmnnPh3NzVU7sa0TypzXrUYjTNBxJ0Xqp/xMnZrY/5P Kt/8jTC/PMNxsTY8Qtod5CqWVUt1OrSfE0sqIAJuMo1ZKuT4ZroBJBGxoS4JJWpR wx7cfhXnJwPil06aQLflS/SSJk67GlkLERdHoeP96/pvdJQbk5N88lwfyJcvwiJL 5dWSyelQ8KU3LfTtrBr0FO+ZHr0lRSQK7csELD3n1XVi3nHdvbRfCdNBUQf7Y9Ma M6hjlkglEFdzfpIvhqkbopSRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUZmoPwR2w fuaKsed0w2QFZHh5IdAwHwYDVR0jBBgwFoAUGYxDZM8DLHMNlYWDSYIJbVCnUskw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDOTMxLzRBMjVCNkEwRjU1 RDExRUU5QkUxOTc4MEM0RjlBRTAyL0dZeERaTThETEhNTmxZV0RTWUlKYlZDblVz ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR1l4RFpNOERMSE1ObFlXRFNZSUpiVkNuVXNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzkzMS80QTI1QjZBMEY1NUQxMUVFOUJFMTk3ODBDNEY5QUUwMi9CQkU5QUVDMEY1 NUYxMUVFQjZGMTE1M0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAHU3/zANBgkqhkiG9w0BAQsFAAOCAQEAcY4RnrpaMSS6RACh /qZAwZ5f5e8Ve8BtkdbvNGzTroelEeaNjc4ee4W3MCWTAKFzxuI0QKWH9Zkmn1BU cdnQ3zTNHJDTHtsxsx1v1JZTsDLOeaZ0iHhhKG9x+1ztvPTEo/7UZnRkJ6voJ1QY DrwvKEKiWH+FF6dr+iaPAs5IYN+iiDyA2gbXSyWdiPJBVEuZkLADGEJ3sA/U+euN oWEnLO5xKJjZSAPp+sAT90LcdZGychbC6SYeHtDF+1ekhILHaJGr+HKxHunoUv+A 5bGrs9G2a2/nPF2lBpkVrcSdeWM44BIivZQlNC5mrxcFtNEu8zmZ39DDTbBV4SXE GJ0fCA== -----END CERTIFICATE-----Generated at Wed May 29 10:44:02 2024 by rpki-client on console-ams.rpki-client.org