$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EFBF37208C5611E792848B4AC4F9AE02.roa File: EFBF37208C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: qHs+fqBU5YlcSjsUhX8kCEmEa4luPEv25Vk2i2sM2HA= Subject key identifier: DF:E5:E6:D5:6B:51:46:73:E6:FB:8E:8A:53:40:98:76:F2:CA:2C:77 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 2696 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EFBF37208C5611E792848B4AC4F9AE02.roa Signing time: Wed 10 Apr 2024 16:23:40 +0000 ROA not before: Wed 10 Apr 2024 16:23:40 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 132803 IP address blocks: 122.55.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9878 (0x2696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 10 16:23:40 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6616bd0c-962e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:ae:24:79:0b:24:0a:f2:e8:d7:f1:a7:7d: 81:c6:87:41:8a:72:6e:d0:af:57:4e:b7:ea:dc:b6: e1:80:51:d5:c2:c7:6a:0b:db:62:bf:4a:9e:9b:27: 4b:59:be:aa:49:94:b2:90:52:da:8e:bb:ed:6b:a1: 5d:a7:b3:60:17:a5:76:96:e1:75:97:de:70:26:22: 8e:21:fc:57:67:b6:8e:77:bc:0e:c5:9f:fa:95:99: b9:8b:70:63:e4:d8:7e:37:f6:19:a9:e8:f5:80:69: 79:98:52:a9:fb:c2:11:0f:36:76:fd:f3:a8:41:99: b7:1d:e8:0c:c7:a5:84:04:86:37:e0:1e:c3:b3:20: f4:11:70:a2:3b:8f:65:43:74:6e:b2:54:f0:f7:ba: 8b:26:b7:61:09:cc:38:96:64:68:b0:cd:fe:b7:2c: 9b:fa:af:7f:30:89:42:08:4f:ad:b6:c0:14:ff:c7: c6:37:c0:bd:12:e4:b9:9e:ff:a2:40:b9:cd:ca:dc: 40:d6:73:3d:3b:92:b4:40:7c:78:df:70:86:bf:7e: d2:9b:7d:95:ee:44:d4:32:5c:1d:49:71:9f:d1:c8: 38:2c:e3:e7:be:c3:3c:82:58:20:9a:de:ba:dd:23: 86:a8:d6:08:06:f1:00:8b:3a:e5:a5:c9:91:c4:8f: b8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E5:E6:D5:6B:51:46:73:E6:FB:8E:8A:53:40:98:76:F2:CA:2C:77 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/EFBF37208C5611E792848B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 122.55.9.0/24 Signature Algorithm: sha256WithRSAEncryption 66:47:b5:1f:f6:94:1d:2c:cf:44:06:31:c9:a8:39:1c:5e:d9: e4:fc:64:69:fb:a0:8c:ad:08:10:96:25:ec:c3:e7:08:28:0a: b2:8e:c2:2f:e2:d0:99:ba:59:10:fc:31:d7:a0:38:a3:75:67: 9b:bf:0d:00:0f:96:79:83:9d:f0:5b:97:8f:c2:f4:79:52:f0: 87:f1:c3:b6:23:ac:56:06:51:82:78:89:72:0f:11:01:ef:de: 9b:63:5e:08:e3:cf:5f:8a:0b:54:56:e6:24:46:d4:55:7d:3c: 74:52:87:af:e1:2b:09:e3:54:04:d7:fd:8a:72:9e:ba:6a:d7: 06:5d:dc:42:bd:bf:7b:b3:1d:9b:25:1b:0d:b0:da:b3:09:4a: 06:38:eb:d2:db:65:7f:7d:ec:27:6a:09:97:64:f4:6b:c8:23: 46:c3:e9:c0:9b:ba:78:88:8d:4d:ff:6a:84:db:33:ef:93:93: 9c:1f:df:31:1f:8b:f5:b9:40:38:1e:da:8d:7f:e4:54:45:b3: 7f:d8:30:31:aa:7c:6a:7d:cd:a7:2f:a4:1f:d8:79:ba:2f:97: 95:ec:27:d0:3b:d1:98:39:3c:e0:dd:34:ca:95:83:a9:eb:a7: f7:f3:8e:af:46:de:4a:92:96:ea:87:51:f8:fc:21:de:cf:d6: 88:a8:2b:54 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjQwNDEwMTYyMzQwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2YmQwYy05NjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/OuJHkLJAry6Nfxp32BxodBinJu0K9XTrfq3LbhgFHVwsdqC9tiv0qemydL Wb6qSZSykFLajrvta6Fdp7NgF6V2luF1l95wJiKOIfxXZ7aOd7wOxZ/6lZm5i3Bj 5Nh+N/YZqej1gGl5mFKp+8IRDzZ2/fOoQZm3HegMx6WEBIY34B7DsyD0EXCiO49l Q3RuslTw97qLJrdhCcw4lmRosM3+tyyb+q9/MIlCCE+ttsAU/8fGN8C9EuS5nv+i QLnNytxA1nM9O5K0QHx433CGv37Sm32V7kTUMlwdSXGf0cg4LOPnvsM8glggmt66 3SOGqNYIBvEAizrlpcmRxI+4WQIDAQABo4IClTCCApEwHQYDVR0OBBYEFN/l5tVr UUZz5vuOilNAmHbyyix3MB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRUZCRjM3MjA4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAB6NwkwDQYJKoZIhvcNAQELBQADggEBAGZHtR/2lB0sz0QG McmoORxe2eT8ZGn7oIytCBCWJezD5wgoCrKOwi/i0Jm6WRD8MdegOKN1Z5u/DQAP lnmDnfBbl4/C9HlS8Ifxw7YjrFYGUYJ4iXIPEQHv3ptjXgjjz1+KC1RW5iRG1FV9 PHRSh6/hKwnjVATX/Ypynrpq1wZd3EK9v3uzHZslGw2w2rMJSgY469LbZX997Cdq CZdk9GvII0bD6cCbuniIjU3/aoTbM++Tk5wf3zEfi/W5QDge2o1/5FRFs3/YMDGq fGp9zacvpB/Yebovl5XsJ9A70Zg5PODdNMqVg6nrp/fzjq9G3kqSluqHUfj8Id7P 1oioK1Q= -----END CERTIFICATE-----Generated at Thu May 2 17:18:57 2024 by rpki-client on console-ams.rpki-client.org