$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/5B5CBC68751B11EB9065A822C4F9AE02.roa File: 5B5CBC68751B11EB9065A822C4F9AE02.roa (raw, json) Hash identifier: 5HlGKag658JvYwBq45MtXDAz/r3WmbZjF3WX8Bnxu6I= Subject key identifier: 2E:C5:37:1F:F2:C7:1D:9C:68:61:A5:F4:79:64:88:38:D2:8F:D5:E1 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 07F1 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/5B5CBC68751B11EB9065A822C4F9AE02.roa Signing time: Tue 28 May 2024 23:03:16 +0000 ROA not before: Tue 28 May 2024 23:03:16 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 58682 IP address blocks: 202.168.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A Validity Not Before: May 28 23:03:16 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=665662b3-73f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:41:c1:7e:55:95:98:d0:73:fd:e0:a4:56: 58:5f:45:4c:b8:2d:a9:d2:76:ad:30:64:85:11:b7: c5:b7:3b:fd:46:4e:45:71:ea:4e:0b:7c:5c:cb:50: 39:36:1b:6b:fe:50:c0:60:10:82:45:12:cd:37:69: cd:48:b4:05:21:4d:aa:7e:58:31:ac:19:4a:de:6d: 6a:1f:56:88:ee:a5:ab:15:d4:aa:06:c8:6a:b1:50: 8b:f8:19:0e:10:e3:e7:44:bc:c4:fb:9c:a4:2f:b4: d0:45:97:6a:79:3f:46:ea:b0:2c:c2:6f:e0:53:92: b1:5a:d3:08:f3:66:c3:5f:6b:a4:d5:a0:a9:83:06: c4:99:0e:e5:cc:ee:e6:6c:58:8d:86:01:cd:16:a2: 14:6e:c7:e4:d0:98:47:ea:35:26:66:23:74:59:bf: 05:cf:b3:4b:52:4d:6e:f9:3e:12:53:99:5c:2c:31: fa:bb:f4:0d:63:54:22:89:4a:74:f8:81:95:2f:be: 6e:a0:1d:c4:f9:dc:cc:68:bd:aa:05:6f:31:6e:98: 27:96:82:c6:ad:75:96:38:a8:4a:49:6d:33:e9:4c: c1:4d:3e:64:ab:26:c2:8e:f2:df:b4:1d:9b:8d:fe: bd:e2:ff:39:98:a7:30:94:f6:27:6c:ed:3d:97:5b: f8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C5:37:1F:F2:C7:1D:9C:68:61:A5:F4:79:64:88:38:D2:8F:D5:E1 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/5B5CBC68751B11EB9065A822C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.168.127.0/24 Signature Algorithm: sha256WithRSAEncryption 54:95:d8:d7:2c:73:1e:ed:66:90:d1:24:96:b9:19:e7:f1:01: 85:a0:14:fb:09:f8:89:c7:13:83:40:82:bc:ba:22:86:37:63: 27:65:69:56:32:84:27:32:56:82:ff:77:2b:4f:61:73:80:8f: 01:2a:eb:47:e6:04:6a:c5:51:f1:73:63:0f:95:a7:39:0c:d2: 74:40:b6:3a:54:1c:f1:2b:f5:d8:a5:8d:80:e7:92:f6:28:88: 80:d4:6b:8b:85:12:3b:a0:d1:ad:2b:7a:4e:cd:59:88:5b:87: dd:63:cd:e0:91:35:a8:73:97:30:b7:a3:1e:da:7e:c7:f8:84: fb:46:9b:85:29:c9:af:73:9e:a3:52:31:05:d1:59:a1:fc:29: c0:11:a9:25:a1:94:4d:02:3e:ec:26:81:f4:6f:1d:1c:ab:3c: d7:95:28:e4:b7:92:9b:fe:c9:82:15:c9:6b:0a:63:33:62:b4: 76:30:f5:81:b0:da:ad:01:b4:1d:48:fe:09:fc:41:af:6f:fe: 1c:fb:ad:83:cc:d1:4b:62:01:f3:e0:02:be:97:b1:3a:98:20: 3b:4a:9d:7d:45:4c:28:29:f7:ec:87:d3:ed:cb:75:6d:eb:89: e4:9e:77:60:d0:0e:a9:6d:1e:13:54:b0:11:84:ac:3a:59:dd: d2:67:5d:73 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjQwNTI4MjMwMzE2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU2NjJiMy03M2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLBBwX5VlZjQc/3gpFZYX0VMuC2p0natMGSFEbfFtzv9Rk5FcepOC3xcy1A5 Nhtr/lDAYBCCRRLNN2nNSLQFIU2qflgxrBlK3m1qH1aI7qWrFdSqBshqsVCL+BkO EOPnRLzE+5ykL7TQRZdqeT9G6rAswm/gU5KxWtMI82bDX2uk1aCpgwbEmQ7lzO7m bFiNhgHNFqIUbsfk0JhH6jUmZiN0Wb8Fz7NLUk1u+T4SU5lcLDH6u/QNY1QiiUp0 +IGVL75uoB3E+dzMaL2qBW8xbpgnloLGrXWWOKhKSW0z6UzBTT5kqybCjvLftB2b jf694v85mKcwlPYnbO09l1v4GQIDAQABo4IClTCCApEwHQYDVR0OBBYEFC7FNx/y xx2caGGl9HlkiDjSj9XhMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvNUI1Q0JDNjg3 NTFCMTFFQjkwNjVBODIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKqH8wDQYJKoZIhvcNAQELBQADggEBAFSV2Ncscx7tZpDR JJa5GefxAYWgFPsJ+InHE4NAgry6IoY3YydlaVYyhCcyVoL/dytPYXOAjwEq60fm BGrFUfFzYw+VpzkM0nRAtjpUHPEr9diljYDnkvYoiIDUa4uFEjug0a0rek7NWYhb h91jzeCRNahzlzC3ox7afsf4hPtGm4Upya9znqNSMQXRWaH8KcARqSWhlE0CPuwm gfRvHRyrPNeVKOS3kpv+yYIVyWsKYzNitHYw9YGw2q0BtB1I/gn8Qa9v/hz7rYPM 0UtiAfPgAr6XsTqYIDtKnX1FTCgp9+yH0+3LdW3rieSed2DQDqltHhNUsBGErDpZ 3dJnXXM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:38:15 2025 by rpki-client