$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/A471289AEFC911EEA00D5753C4F9AE02.roa File: A471289AEFC911EEA00D5753C4F9AE02.roa (raw, json) Hash identifier: n/5DPIix0RybAVp2yqh6kceUDttY/mTN7qKSstDiHeg= Subject key identifier: 07:C0:8F:47:0D:A2:FD:E1:DB:13:3E:1D:AB:D5:0A:5F:64:D2:2C:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0362 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/A471289AEFC911EEA00D5753C4F9AE02.roa Signing time: Mon 01 Apr 2024 01:46:22 +0000 ROA not before: Mon 01 Apr 2024 01:46:22 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 141759 IP address blocks: 204.52.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 866 (0x362) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Apr 1 01:46:22 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=660a11ee-736a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:70:16:59:d6:6e:9a:13:b9:b4:b8:ac:88: 09:22:9f:36:99:f4:9c:58:b0:05:35:eb:99:75:25: b9:8d:81:a6:ca:67:41:1a:57:f8:22:67:86:c8:95: 90:7c:60:64:0b:3c:f7:84:b8:e9:d2:1f:2b:8a:d9: a0:85:08:59:9c:a8:95:f1:15:ce:96:87:41:3c:83: b0:17:90:1e:1b:7f:38:33:d6:31:d2:85:ab:eb:c8: 28:09:79:2a:5c:fb:9b:32:e4:8b:e3:b7:9f:82:f9: 9f:ad:f3:31:40:48:d2:7e:f6:eb:1d:5e:0e:2a:21: 4f:91:1a:0e:95:1a:62:bc:ec:c5:fb:db:ea:85:ad: e6:4c:db:40:c4:0d:e1:63:45:e7:92:f3:80:07:d4: 16:0d:1d:65:19:99:77:e1:83:22:e6:e2:1a:81:7d: c3:58:d9:16:cd:81:4b:9b:91:bd:9f:53:9c:5e:70: 06:39:b0:f7:41:0a:85:72:02:68:4e:95:47:82:a1: 0a:8d:06:ca:9f:07:2a:76:39:0e:2c:03:d6:96:36: 60:1e:9d:d2:f8:51:d4:b9:13:e2:35:61:e1:11:d5: f2:e4:99:7d:1d:3d:b4:fc:93:48:29:4f:e9:5d:2a: a9:b2:90:3c:40:fa:8b:23:c5:94:41:47:6b:1e:d6: 48:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C0:8F:47:0D:A2:FD:E1:DB:13:3E:1D:AB:D5:0A:5F:64:D2:2C:92 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/A471289AEFC911EEA00D5753C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 204.52.191.0/24 Signature Algorithm: sha256WithRSAEncryption 46:80:01:42:a3:66:1f:d2:05:61:92:90:bf:7f:5e:88:7d:84: 1d:13:62:0c:f0:fa:7a:64:38:de:a6:77:99:7d:5d:18:fe:78: 4c:a1:fb:e9:ab:5d:b8:30:13:c3:57:29:35:67:e3:90:d0:73: 94:d7:44:b5:7f:71:c0:d1:9e:99:d2:0c:43:7a:b1:ef:c0:38: dc:e1:da:c7:b7:d4:bd:b9:de:e6:33:2c:29:af:8f:ba:4b:92: f8:48:59:cb:c4:49:77:c1:62:ba:64:3b:f0:ea:85:17:d8:04: ca:c8:d1:05:85:92:3b:39:53:e9:c9:4b:b0:ae:b5:e0:4f:96: a3:a7:4d:a6:37:09:35:05:f6:aa:1e:ff:a4:46:55:02:9d:aa: 07:93:14:c5:ec:84:0a:db:df:af:09:e2:c4:09:e5:df:3c:17: bb:83:33:d1:df:f0:61:e4:70:ba:ac:57:0a:ce:23:a0:65:b7: 6e:1f:84:29:4c:03:40:d2:1f:50:04:a2:c0:af:15:d5:d2:f1: 1e:dc:55:1b:80:52:6f:ca:fb:7c:d1:eb:cf:91:56:bd:ad:bc: 5b:54:fd:cf:bc:a5:10:ec:b0:82:99:c4:c3:c0:ff:7d:2e:7d: dd:31:32:5f:f8:b0:47:99:65:9a:99:f8:b7:b0:82:d0:fc:c8: 19:70:db:fb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjQwNDAxMDE0NjIyWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NjBhMTFlZS03MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpVwFlnWbpoTubS4rIgJIp82mfScWLAFNeuZdSW5jYGmymdBGlf4ImeGyJWQ fGBkCzz3hLjp0h8ritmghQhZnKiV8RXOlodBPIOwF5AeG384M9Yx0oWr68goCXkq XPubMuSL47efgvmfrfMxQEjSfvbrHV4OKiFPkRoOlRpivOzF+9vqha3mTNtAxA3h Y0XnkvOAB9QWDR1lGZl34YMi5uIagX3DWNkWzYFLm5G9n1OcXnAGObD3QQqFcgJo TpVHgqEKjQbKnwcqdjkOLAPWljZgHp3S+FHUuRPiNWHhEdXy5Jl9HT20/JNIKU/p XSqpspA8QPqLI8WUQUdrHtZIfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAfAj0cN ov3h2xM+HavVCl9k0iySMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvQTQ3MTI4OUFF RkM5MTFFRUEwMEQ1NzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADMNL8wDQYJKoZIhvcNAQELBQADggEBAEaAAUKjZh/SBWGS kL9/Xoh9hB0TYgzw+npkON6md5l9XRj+eEyh++mrXbgwE8NXKTVn45DQc5TXRLV/ ccDRnpnSDEN6se/AONzh2se31L253uYzLCmvj7pLkvhIWcvESXfBYrpkO/DqhRfY BMrI0QWFkjs5U+nJS7CuteBPlqOnTaY3CTUF9qoe/6RGVQKdqgeTFMXshArb368J 4sQJ5d88F7uDM9Hf8GHkcLqsVwrOI6Blt24fhClMA0DSH1AEosCvFdXS8R7cVRuA Um/K+3zR68+RVr2tvFtU/c+8pRDssIKZxMPA/30ufd0xMl/4sEeZZZqZ+LewgtD8 yBlw2/s= -----END CERTIFICATE-----Generated at Wed May 15 03:48:19 2024 by rpki-client on console-ams.rpki-client.org