$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/77C9E89A3CDC11EEBFA0475EC4F9AE02.roa File: 77C9E89A3CDC11EEBFA0475EC4F9AE02.roa (raw, json) Hash identifier: As2LymjqIDH0cOS124NvImUruw0ZeoIg/jht9yiAhvI= Subject key identifier: 5B:6D:16:9A:80:9E:58:8E:2B:76:5F:C6:3A:1D:7F:FB:E8:57:FA:96 Certificate issuer: /CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Certificate serial: 33A6 Authority key identifier: A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/77C9E89A3CDC11EEBFA0475EC4F9AE02.roa Signing time: Thu 14 Mar 2024 15:00:51 +0000 ROA not before: Thu 14 Mar 2024 15:00:51 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45246 IP address blocks: 114.198.232.0/24 maxlen: 24 114.198.233.0/24 maxlen: 24 114.198.234.0/24 maxlen: 24 114.198.235.0/24 maxlen: 24 114.198.236.0/24 maxlen: 24 114.198.237.0/24 maxlen: 24 114.198.238.0/24 maxlen: 24 114.198.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13222 (0x33a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0267/serialNumber=A01D23F781E8FF353B18BD188284C9ADFCD9E396 Validity Not Before: Mar 14 15:00:51 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=65f31123-cc50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:bd:f7:0e:53:aa:da:f2:09:aa:4e:24:35: 3c:7c:1f:d2:c9:b2:3c:85:26:5c:11:9f:b6:4b:92: 49:06:bd:9e:a3:df:14:64:f0:ac:2c:11:8f:d7:18: ce:46:40:9f:a8:40:77:8e:a6:1c:fa:48:c1:b3:e3: 3b:ba:a3:f2:f4:1e:3d:b0:9d:30:9b:ce:6f:d1:f1: 88:53:e0:49:2c:61:8c:ee:3e:f9:48:7b:b8:e2:f8: 02:ed:d5:bb:3b:c2:7f:be:bd:68:53:ec:07:e2:eb: f5:90:49:80:8b:50:e7:79:3e:f4:1e:ca:8d:cd:f9: 6e:3d:e9:b1:66:49:56:e6:1a:be:a7:9d:27:d8:fc: aa:60:fc:33:1e:60:1f:88:f9:23:67:7e:5d:31:6a: 51:6f:9c:9e:23:26:f6:b2:09:b6:f0:18:5a:e5:57: 33:47:f0:1f:f7:76:0c:7d:f2:e5:5d:93:8e:25:98: a3:d0:3c:a3:fc:d3:73:e3:a6:5d:89:fd:c4:de:ce: 50:50:04:2c:de:6a:68:08:ee:ec:7a:ba:27:a4:5d: a9:94:d9:ea:15:d3:6f:72:0b:b4:14:83:40:c5:4b: 6c:b2:74:8a:ae:53:1b:1c:2d:bc:3c:f4:27:aa:a2: 3c:4c:24:2b:c4:2f:ca:00:3b:a4:d5:26:54:21:27: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6D:16:9A:80:9E:58:8E:2B:76:5F:C6:3A:1D:7F:FB:E8:57:FA:96 X509v3 Authority Key Identifier: keyid:A0:1D:23:F7:81:E8:FF:35:3B:18:BD:18:82:84:C9:AD:FC:D9:E3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oB0j94Ho_zU7GL0YgoTJrfzZ45Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0267/190EAB5C1D9811E29E65FF8108B02CD2/77C9E89A3CDC11EEBFA0475EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 114.198.232.0/21 Signature Algorithm: sha256WithRSAEncryption ba:b7:2f:ba:03:0d:8e:da:6a:44:ef:84:4e:d7:bc:63:9e:5d: fb:cc:57:ad:32:9d:2f:e4:5d:2e:d3:96:b0:8b:2a:74:e2:cb: 6e:0c:16:79:6c:a4:28:14:bf:65:04:ba:e7:f4:5a:b1:56:62: 29:fc:c0:b0:97:8e:95:a2:ed:74:6a:f1:29:b4:da:8b:d2:48: 54:54:75:99:7e:36:d5:f7:db:d3:bb:86:d3:0b:c7:c9:0c:52: 64:61:35:84:14:3b:07:f7:8d:f5:6a:70:d7:6f:27:d3:15:6e: a3:16:fa:a2:72:54:1b:22:43:52:86:f5:78:f3:07:bd:0e:9e: 48:e8:df:d0:0b:76:5f:38:84:53:ad:b1:50:68:e6:82:a7:0e: cd:62:1f:a8:c6:79:a9:f9:0c:5a:fd:83:e9:a2:7b:62:5a:68: 73:60:b7:c9:6a:7b:ae:f1:8e:c3:ca:5a:be:c9:74:04:f9:d0: 70:95:aa:71:9d:f5:4f:ee:4f:b4:2c:72:62:99:13:bd:45:e9: a6:19:50:72:49:43:3b:79:c8:33:86:17:59:56:8c:c3:02:74: 34:bf:33:f7:e3:f1:f9:1c:de:4c:4d:7b:46:d0:6b:cd:d7:19: e6:5a:ce:a0:00:07:ad:da:2b:d0:13:70:83:f5:7a:48:cb:3f: 0c:86:62:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICM6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAyNjcxMTAvBgNVBAUTKEEwMUQyM0Y3ODFFOEZGMzUzQjE4QkQxODgyODRDOUFE RkNEOUUzOTYwHhcNMjQwMzE0MTUwMDUxWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWYzMTEyMy1jYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPC99w5TqtryCapOJDU8fB/SybI8hSZcEZ+2S5JJBr2eo98UZPCsLBGP1xjO RkCfqEB3jqYc+kjBs+M7uqPy9B49sJ0wm85v0fGIU+BJLGGM7j75SHu44vgC7dW7 O8J/vr1oU+wH4uv1kEmAi1DneT70HsqNzfluPemxZklW5hq+p50n2PyqYPwzHmAf iPkjZ35dMWpRb5yeIyb2sgm28Bha5VczR/Af93YMffLlXZOOJZij0Dyj/NNz46Zd if3E3s5QUAQs3mpoCO7seronpF2plNnqFdNvcgu0FINAxUtssnSKrlMbHC28PPQn qqI8TCQrxC/KADuk1SZUISfe/wIDAQABo4IClTCCApEwHQYDVR0OBBYEFFttFpqA nliOK3Zfxjodf/voV/qWMB8GA1UdIwQYMBaAFKAdI/eB6P81Oxi9GIKEya382eOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDI2Ny8xOTBFQUI1QzFE OTgxMUUyOUU2NUZGODEwOEIwMkNEMi9vQjBqOTRIb196VTdHTDBZZ29USnJmelo0 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29CMGo5NEhvX3pVN0dMMFlnb1RKcmZ6WjQ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAyNjcvMTkwRUFCNUMxRDk4MTFFMjlFNjVGRjgxMDhCMDJDRDIvNzdDOUU4OUEz Q0RDMTFFRUJGQTA0NzVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBANyxugwDQYJKoZIhvcNAQELBQADggEBALq3L7oDDY7aakTv hE7XvGOeXfvMV60ynS/kXS7TlrCLKnTiy24MFnlspCgUv2UEuuf0WrFWYin8wLCX jpWi7XRq8Sm02ovSSFRUdZl+NtX329O7htMLx8kMUmRhNYQUOwf3jfVqcNdvJ9MV bqMW+qJyVBsiQ1KG9XjzB70Onkjo39ALdl84hFOtsVBo5oKnDs1iH6jGean5DFr9 g+mie2JaaHNgt8lqe67xjsPKWr7JdAT50HCVqnGd9U/uT7QscmKZE71F6aYZUHJJ Qzt5yDOGF1lWjMMCdDS/M/fj8fkc3kxNe0bQa83XGeZazqAAB63aK9ATcIP1ekjL PwyGYvA= -----END CERTIFICATE-----Generated at Fri May 24 15:43:24 2024 by rpki-client on console-fra.rpki-client.org