$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/1798FA5630DF11ED9C562309C4F9AE02.roa File: 1798FA5630DF11ED9C562309C4F9AE02.roa (raw, json) Hash identifier: 30DPj1Ur+aGoeQXgrocvUURCS81rNeM67S01JBFeIZM= Subject key identifier: 39:88:49:34:5E:91:0A:5D:D8:A3:26:84:62:8E:F1:54:EC:2B:A7:A3 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 01A0 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/1798FA5630DF11ED9C562309C4F9AE02.roa Signing time: Sat 01 Jul 2023 02:52:42 +0000 ROA not before: Sat 01 Jul 2023 02:52:42 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 4739 IP address blocks: 203.0.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Jul 1 02:52:42 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649f94fa-07d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:80:0b:b6:70:a0:f6:96:45:09:26:3a:19: 63:bd:c4:40:6f:f4:cb:21:a8:eb:88:10:46:bd:f4: 40:3b:0a:e2:c0:2b:05:e3:1a:ee:21:ef:f8:bd:29: 8d:37:21:5c:f6:87:b3:fa:76:55:53:bb:67:f4:4b: 77:f7:34:3a:15:dc:2e:28:49:d2:19:26:5d:90:ec: 3f:2b:eb:a5:30:3a:16:fe:04:ec:ac:9e:17:78:52: 04:bf:9a:a2:95:b7:5c:39:2d:44:df:8d:c0:a1:67: b8:27:29:c8:5c:99:ad:8a:c7:3b:2f:cf:8c:cc:60: 80:d3:70:1f:ec:a7:b6:1b:e3:02:67:89:41:bb:83: d1:cf:cf:a4:d0:24:61:ac:69:dd:8a:82:d0:9a:f4: f8:d5:4a:ae:11:7c:35:ba:56:cb:1d:d9:b3:89:26: 2b:ec:01:3d:5c:70:dd:d4:e2:1a:70:d1:ea:ef:93: ae:42:d9:b4:93:df:d7:f4:00:31:33:da:66:6d:19: 3b:4b:cd:97:87:9c:98:4a:4d:8c:d8:fa:e4:18:d2: a6:78:2d:a6:af:d5:8e:5b:8f:49:83:55:13:0e:ed: 39:7c:98:0b:7e:ef:25:da:02:da:ad:72:96:f5:62: 7a:ff:9e:42:fa:f2:7e:59:c2:01:78:67:bb:42:fa: 7f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:88:49:34:5E:91:0A:5D:D8:A3:26:84:62:8E:F1:54:EC:2B:A7:A3 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/1798FA5630DF11ED9C562309C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.0.13.0/24 Signature Algorithm: sha256WithRSAEncryption 61:5f:fb:5f:86:0b:ea:8c:11:9d:b7:34:fa:85:d4:06:bd:10: 2f:bc:0a:85:71:cd:e3:de:93:3e:9b:c5:82:a0:6a:3e:28:ac: 06:d2:cf:c1:f9:dc:63:d5:7e:c8:45:67:94:74:31:2b:85:bd: a9:c8:7b:b2:39:63:30:7f:2b:61:4c:b9:1f:78:b7:a0:24:70: 44:5a:b2:f2:97:bd:df:d3:e3:12:6a:e4:b6:da:b9:00:24:98: 7e:2e:91:2c:fe:bb:44:81:a9:e9:fc:ae:df:c8:c6:fd:70:ef: dc:aa:bd:34:bd:27:58:bf:63:cf:30:31:97:01:83:52:bc:8b: bd:9c:14:54:ad:44:d5:b5:d1:e2:e0:20:3a:75:bf:c1:07:b7: 15:a3:e5:11:97:83:81:10:df:c7:b4:f6:77:15:10:78:2b:73: c1:d5:b7:78:11:85:e3:df:86:2e:b0:13:85:09:3e:53:e1:4b: 25:5f:82:41:2e:30:f3:c2:50:de:5c:1d:22:6c:a8:1e:bd:4f: ea:43:a3:a7:90:25:0c:25:bd:0e:ad:65:1a:c2:e5:79:80:42: 22:e3:5a:12:28:0b:c5:31:02:24:6a:41:54:b9:c8:f0:fc:0f: bb:02:e3:0e:e1:6d:5c:60:17:99:1a:b3:40:c2:f2:29:5b:eb: 17:03:8c:a7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjMwNzAxMDI1MjQyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmOTRmYS0wN2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IWAC7ZwoPaWRQkmOhljvcRAb/TLIajriBBGvfRAOwriwCsF4xruIe/4vSmN NyFc9oez+nZVU7tn9Et39zQ6FdwuKEnSGSZdkOw/K+ulMDoW/gTsrJ4XeFIEv5qi lbdcOS1E343AoWe4JynIXJmtisc7L8+MzGCA03Af7Ke2G+MCZ4lBu4PRz8+k0CRh rGndioLQmvT41UquEXw1ulbLHdmziSYr7AE9XHDd1OIacNHq75OuQtm0k9/X9AAx M9pmbRk7S82Xh5yYSk2M2PrkGNKmeC2mr9WOW49Jg1UTDu05fJgLfu8l2gLarXKW 9WJ6/55C+vJ+WcIBeGe7Qvp/4wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDmISTRe kQpd2KMmhGKO8VTsK6ejMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTkxQkMvQUU0NEQyNEFEQkU5MTFFQzk1MTEwNTE1QzRGOUFFMDIvMTc5OEZBNTYz MERGMTFFRDlDNTYyMzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADLAA0wDQYJKoZIhvcNAQELBQADggEBAGFf+1+GC+qMEZ23 NPqF1Aa9EC+8CoVxzePekz6bxYKgaj4orAbSz8H53GPVfshFZ5R0MSuFvanIe7I5 YzB/K2FMuR94t6AkcERasvKXvd/T4xJq5LbauQAkmH4ukSz+u0SBqen8rt/Ixv1w 79yqvTS9J1i/Y88wMZcBg1K8i72cFFStRNW10eLgIDp1v8EHtxWj5RGXg4EQ38e0 9ncVEHgrc8HVt3gRhePfhi6wE4UJPlPhSyVfgkEuMPPCUN5cHSJsqB69T+pDo6eQ JQwlvQ6tZRrC5XmAQiLjWhIoC8UxAiRqQVS5yPD8D7sC4w7hbVxgF5kas0DC8ilb 6xcDjKc= -----END CERTIFICATE-----Generated at Fri May 17 04:44:33 2024 by rpki-client on console-ams.rpki-client.org