$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa File: F3DC1FD08C5611E792848B4AC4F9AE02.roa (raw, json) Hash identifier: BdiehjDEvV0WKRQjURsPtAE6tjynwD/JIOJhJo1OvBQ= Subject key identifier: C0:94:90:8A:AA:75:FC:ED:9F:6F:50:2A:53:A1:83:14:C8:0A:1F:F1 Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 26A9 Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa Signing time: Wed 10 Apr 2024 16:23:58 +0000 ROA not before: Wed 10 Apr 2024 16:23:58 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 24451 IP address blocks: 58.71.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 16:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9897 (0x26a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 10 16:23:58 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=6616bd1e-ca5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dc:25:43:e6:af:6e:8f:2a:f5:b0:90:32:ea: f5:1b:3d:e6:b9:9e:77:85:d0:d0:9e:e2:b1:85:db: 29:10:f5:7a:b0:01:e1:c4:56:44:4b:f6:c5:18:82: 56:df:fd:e8:4f:92:b2:6a:d1:34:46:9b:ab:f1:e1: 5c:aa:5c:96:88:fc:75:d1:e9:4d:f5:97:89:d6:8e: 15:13:94:af:41:6e:22:c1:29:5b:a9:33:f3:c5:9b: 5f:67:05:66:50:0a:14:72:54:2c:d4:76:ad:f5:cf: 57:50:42:73:69:c7:4d:60:e0:77:2c:6b:05:6d:34: ae:38:1f:d6:f8:4f:f1:37:40:1c:64:14:4e:e9:5e: 92:8b:9b:75:35:04:1b:29:98:ea:3f:ce:d7:e8:e3: 4d:4b:c1:f4:9b:cb:53:36:68:07:22:5c:7a:e6:ce: dd:55:10:ec:62:e0:bb:1d:aa:d9:ac:ac:d9:39:dd: d0:5e:ab:b5:c5:01:52:07:15:31:62:78:3a:fd:f2: d8:5f:70:2b:e2:25:cf:80:58:53:6d:1f:f2:8a:fc: 65:db:40:b3:7d:c0:86:e1:d8:15:16:b9:89:e4:05: 90:4a:ec:0c:01:77:6c:ce:61:90:53:af:9a:1d:ef: d7:80:2e:0a:d3:68:37:f8:35:fd:29:a3:9f:a4:c5: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:90:8A:AA:75:FC:ED:9F:6F:50:2A:53:A1:83:14:C8:0A:1F:F1 X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F3DC1FD08C5611E792848B4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.71.71.0/24 Signature Algorithm: sha256WithRSAEncryption 79:ba:69:48:e6:30:79:82:c1:d7:0b:09:d3:6b:ab:15:58:ec: 52:46:93:5a:c2:9b:5d:ff:5a:ee:f9:90:b9:c1:74:08:81:16: ae:5c:90:ce:87:d7:49:6a:40:39:41:7c:12:d0:22:1f:3d:89: 3f:d7:83:07:6d:ea:01:8b:f0:ec:fe:f8:b0:d8:3a:e4:b8:d6: 45:b0:17:7d:9e:fa:e2:3e:af:5b:23:01:22:9f:15:ef:ed:b0: 33:2e:17:6d:35:a2:40:29:47:b9:5d:55:c0:67:1f:fe:53:ba: f5:b5:62:10:4b:ff:fc:3b:f6:81:32:e5:96:7a:b2:b8:e6:a4: 7e:0c:77:e9:30:61:4c:52:84:9c:72:5b:b6:40:0f:83:86:0a: 75:7a:69:f5:a5:24:d1:20:f7:71:85:91:a0:78:63:2a:5d:0f: 1f:bb:ad:bf:ce:da:3e:4b:fb:77:4d:e2:ad:c0:fc:ba:22:bf: 26:b2:ed:42:19:ff:7d:9a:bd:83:42:62:10:81:d2:0d:1e:61: 3e:e4:25:29:21:6b:c6:78:72:95:0c:4d:97:a3:9f:58:99:4c: ef:d3:62:ae:bd:06:5a:dd:f5:8d:0a:16:2b:41:c6:59:d4:0a: c3:e5:94:b6:8f:f3:c5:77:3d:4d:22:cd:ce:66:26:bf:25:88: 2b:19:9e:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjQwNDEwMTYyMzU4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjE2YmQxZS1jYTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndwlQ+avbo8q9bCQMur1Gz3muZ53hdDQnuKxhdspEPV6sAHhxFZES/bFGIJW 3/3oT5KyatE0Rpur8eFcqlyWiPx10elN9ZeJ1o4VE5SvQW4iwSlbqTPzxZtfZwVm UAoUclQs1Hat9c9XUEJzacdNYOB3LGsFbTSuOB/W+E/xN0AcZBRO6V6Si5t1NQQb KZjqP87X6ONNS8H0m8tTNmgHIlx65s7dVRDsYuC7HarZrKzZOd3QXqu1xQFSBxUx Yng6/fLYX3Ar4iXPgFhTbR/yivxl20CzfcCG4dgVFrmJ5AWQSuwMAXdszmGQU6+a He/XgC4K02g3+DX9KaOfpMVvDQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMCUkIqq dfztn29QKlOhgxTICh/xMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvRjNEQzFGRDA4 QzU2MTFFNzkyODQ4QjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAA6R0cwDQYJKoZIhvcNAQELBQADggEBAHm6aUjmMHmCwdcL CdNrqxVY7FJGk1rCm13/Wu75kLnBdAiBFq5ckM6H10lqQDlBfBLQIh89iT/Xgwdt 6gGL8Oz++LDYOuS41kWwF32e+uI+r1sjASKfFe/tsDMuF201okApR7ldVcBnH/5T uvW1YhBL//w79oEy5ZZ6srjmpH4Md+kwYUxShJxyW7ZAD4OGCnV6afWlJNEg93GF kaB4YypdDx+7rb/O2j5L+3dN4q3A/Loivyay7UIZ/32avYNCYhCB0g0eYT7kJSkh a8Z4cpUMTZejn1iZTO/TYq69Blrd9Y0KFitBxlnUCsPllLaP88V3PU0izc5mJr8l iCsZniI= -----END CERTIFICATE-----Generated at Thu May 2 17:43:51 2024 by rpki-client on console-fra.rpki-client.org