$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa File: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (raw, json) Hash identifier: FWEd0H6y19WusM4f7QjIt5nk8Yf6ZMgsbnJTgvhao80= Subject key identifier: 26:F2:25:C3:35:6C:B6:62:B2:C1:51:87:72:D2:A0:82:3C:C3:EC:2F Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 03DF Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa Signing time: Fri 06 Oct 2023 16:54:08 +0000 ROA not before: Fri 06 Oct 2023 16:54:08 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 19905 IP address blocks: 213.170.156.0/24 maxlen: 24 213.170.157.0/24 maxlen: 24 213.170.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 991 (0x3df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Oct 6 16:54:08 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65203bb0-01d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:fc:ae:5c:7c:43:6a:36:b6:07:e5:b6:5c: b8:82:f0:b7:81:b2:32:24:8f:63:8a:04:7e:cb:29: e0:42:a3:84:80:16:6f:c8:a1:05:e9:58:d8:b4:91: 6f:6e:bc:90:61:91:e3:63:c5:d4:71:31:81:96:55: c6:1c:95:61:05:e0:d1:d3:ce:fe:d7:8b:2d:64:d6: d7:8f:34:02:97:0c:44:06:52:96:0b:65:fb:da:8f: 08:38:3e:b5:19:1c:d6:4f:fc:aa:19:9e:71:d9:46: 49:f4:8a:5c:e1:62:42:c0:d7:24:97:7a:9f:ac:12: a6:98:28:f3:cb:3d:bb:c4:8b:8d:e8:52:91:92:78: 77:90:05:93:37:e6:c3:50:5e:1a:80:61:dd:e7:2a: 10:a6:6a:92:b7:7e:b9:d5:c7:6b:45:6f:17:ab:76: 0f:80:87:21:e9:2c:4f:00:49:24:39:a2:e2:f0:5c: 2b:be:c0:90:0a:bc:4b:bb:53:b5:47:87:c5:9c:0a: fd:76:66:06:91:3a:6c:96:8a:7b:18:c4:2f:24:0c: 0b:71:b7:d0:20:a9:dc:2b:5a:89:c8:a9:bc:3f:43: 5a:14:96:02:8a:4d:73:e0:01:e7:7a:ca:de:9c:af: 22:5b:29:a0:c2:97:67:e4:2b:ba:e8:db:70:38:ed: fb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:F2:25:C3:35:6C:B6:62:B2:C1:51:87:72:D2:A0:82:3C:C3:EC:2F X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 213.170.156.0-213.170.158.255 Signature Algorithm: sha256WithRSAEncryption 8b:08:e1:9a:3c:2f:36:bb:e2:6a:60:8b:2d:88:05:de:17:d2: bc:de:c1:e0:a0:49:2f:e5:13:68:d0:a4:07:70:31:7b:c8:4b: 6d:15:f5:71:88:6a:8e:4d:95:f1:5a:21:99:e5:4a:4b:16:21: 41:ec:7c:1b:5a:88:96:76:33:3f:90:f3:cb:a8:59:b4:86:d1: 08:91:b0:ab:55:f3:87:22:4b:1c:28:d6:e9:65:80:3c:25:0e: 0e:44:68:96:49:d9:0a:01:3c:f4:cf:f0:5a:79:dd:00:c7:84: 3f:44:a2:dd:a6:dd:c9:f8:49:49:6f:a5:f7:bb:78:e6:50:55: a9:59:9e:63:5f:9e:53:23:14:7f:25:52:82:d6:d5:4f:34:56: ab:b3:77:43:cf:3b:f9:ad:f8:65:2c:3a:2b:2b:97:49:f0:f0: d6:90:97:75:7e:cd:2c:51:a0:02:8a:2c:04:73:45:64:a5:e5: 96:d7:f0:85:30:2a:b6:a8:cd:a6:0e:e4:9a:7b:48:67:d1:9f: 72:cb:dc:34:36:27:e2:2c:59:b1:9e:67:3c:bd:97:82:d3:94: 37:0a:5b:9c:07:80:15:e8:71:34:03:ff:66:b2:01:e2:72:04: 51:d6:f2:6f:46:1c:f5:81:96:7a:58:a6:0b:8b:66:89:1a:4b: 69:24:17:05 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICA98wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjMxMDA2MTY1NDA4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIwM2JiMC0wMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpD8rlx8Q2o2tgfltly4gvC3gbIyJI9jigR+yyngQqOEgBZvyKEF6VjYtJFv bryQYZHjY8XUcTGBllXGHJVhBeDR087+14stZNbXjzQClwxEBlKWC2X72o8IOD61 GRzWT/yqGZ5x2UZJ9Ipc4WJCwNckl3qfrBKmmCjzyz27xIuN6FKRknh3kAWTN+bD UF4agGHd5yoQpmqSt3651cdrRW8Xq3YPgIch6SxPAEkkOaLi8FwrvsCQCrxLu1O1 R4fFnAr9dmYGkTpslop7GMQvJAwLcbfQIKncK1qJyKm8P0NaFJYCik1z4AHnesre nK8iWymgwpdn5Cu66NtwOO37awIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCbyJcM1 bLZissFRh3LSoII8w+wvMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvNUIwQURDMzA4 RDNBMTFFQzk0REVFQzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAtWqnAMEANWqnjANBgkqhkiG9w0BAQsFAAOCAQEAiwjh mjwvNrviamCLLYgF3hfSvN7B4KBJL+UTaNCkB3Axe8hLbRX1cYhqjk2V8VohmeVK SxYhQex8G1qIlnYzP5Dzy6hZtIbRCJGwq1XzhyJLHCjW6WWAPCUODkRolknZCgE8 9M/wWnndAMeEP0Si3abdyfhJSW+l97t45lBVqVmeY1+eUyMUfyVSgtbVTzRWq7N3 Q887+a34ZSw6KyuXSfDw1pCXdX7NLFGgAoosBHNFZKXlltfwhTAqtqjNpg7kmntI Z9GfcsvcNDYn4ixZsZ5nPL2XgtOUNwpbnAeAFehxNAP/ZrIB4nIEUdbyb0Yc9YGW elimC4tmiRpLaSQXBQ== -----END CERTIFICATE-----Generated at Thu May 2 20:05:00 2024 by rpki-client on console-ams.rpki-client.org