$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa File: 53CAA3B2023811EBA421D755C4F9AE02.roa (raw, json) Hash identifier: foej3QKzD3G25vAXzDYSO+reZnBCU6HHzTJeiNa5zo8= Subject key identifier: 1D:60:3B:D1:DD:A5:3C:4D:FC:66:20:CB:65:F4:97:50:72:6C:14:41 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0A0E Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa Signing time: Mon 15 Apr 2024 08:05:31 +0000 ROA not before: Mon 15 Apr 2024 08:05:31 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 58807 IP address blocks: 223.118.32.0/24 maxlen: 24 223.119.8.0/21 maxlen: 21 223.119.10.0/24 maxlen: 24 223.119.32.0/24 maxlen: 24 223.119.34.0/24 maxlen: 24 223.119.35.0/24 maxlen: 24 223.119.36.0/24 maxlen: 24 223.119.37.0/24 maxlen: 24 223.119.100.0/24 maxlen: 24 223.119.192.0/24 maxlen: 24 223.119.253.0/24 maxlen: 24 2402:4f00:f000::/36 maxlen: 36 2402:4f00:f000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Apr 15 08:05:31 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=661cdfcb-7b08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:c7:fc:7d:e2:2f:1b:67:a3:3d:67:48:2f: b9:be:65:14:90:bb:df:89:a2:e4:e9:c3:4b:97:5b: 1a:1e:f5:ec:f5:49:2e:d4:d1:0e:b4:d6:c8:fa:bd: 57:28:c1:0e:c6:54:05:a7:6b:9e:86:6f:60:53:38: 09:12:77:90:db:8d:39:f3:fa:a8:c6:86:7c:3b:01: ab:a1:e2:cc:ea:1a:5c:03:6c:94:44:66:c6:5a:01: 00:54:d9:1d:61:0b:c8:0f:47:d0:83:ea:e2:84:03: 61:51:2f:4a:f9:ea:0a:d8:16:33:b5:4e:70:c8:c0: 49:5e:0d:c1:c5:76:1c:06:af:0d:88:75:fe:77:dc: e0:58:b9:3d:7e:68:a3:85:3c:5b:17:a4:56:33:4d: 49:17:25:7f:6d:2a:fb:9f:a6:0b:f0:9f:5f:28:94: 29:ac:6b:87:66:49:a4:59:2e:3f:4a:cc:9f:ed:63: a9:07:52:bc:82:90:58:7a:27:6d:1f:d6:28:b5:2f: ad:54:d5:36:a3:30:8b:2c:da:41:9b:4b:fe:e5:61: 95:7b:2b:a8:69:ae:8f:62:16:0f:02:94:71:b7:25: a9:47:e8:f2:09:8c:12:d6:04:45:91:ee:fd:c8:73: 99:bf:8e:38:28:91:5d:2b:66:bc:46:73:e2:c7:1f: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:3B:D1:DD:A5:3C:4D:FC:66:20:CB:65:F4:97:50:72:6C:14:41 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/53CAA3B2023811EBA421D755C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.118.32.0/24 223.119.8.0/21 223.119.32.0/24 223.119.34.0-223.119.37.255 223.119.100.0/24 223.119.192.0/24 223.119.253.0/24 IPv6: 2402:4f00:f000::/36 Signature Algorithm: sha256WithRSAEncryption 1b:85:fd:52:74:d5:8f:21:33:7d:3e:02:32:01:75:85:e1:89: ae:56:f3:eb:d0:86:ee:a3:bb:b1:d2:bb:cc:18:a9:0d:af:51: 4f:7e:82:4a:8e:b9:9b:ff:b8:0b:cd:92:ab:ac:67:72:ad:91: 70:99:a9:29:ac:2e:ab:66:7f:02:ee:13:72:a4:a3:c2:49:b7: fe:5f:72:ae:40:57:6b:11:ff:dc:d2:03:9b:4c:e1:a6:59:29: 8c:8c:89:78:b9:b7:75:47:f7:93:a7:06:2d:45:b3:31:b4:6d: a0:6e:0a:97:db:18:55:ce:e1:cd:72:a9:7f:59:6a:d6:82:44: df:62:28:cb:ed:e2:f1:9c:40:50:d0:52:e5:89:f8:ba:b1:9c: 08:a9:c2:67:e1:a6:70:b8:71:24:ee:54:0c:29:80:5c:8a:56: 63:2d:7f:35:5e:5e:ff:88:15:de:2b:ac:4d:85:91:a4:ab:c2: d1:85:d9:98:d9:98:f1:f9:d8:88:e9:a9:7c:ef:16:b9:89:5e: 1c:55:96:9f:63:c2:26:cb:15:cf:ba:b8:f3:c0:71:25:4c:47: b9:61:9b:6a:1b:ab:79:75:e9:8a:80:42:88:cf:a3:3c:98:a7: 33:c8:df:cc:d6:d1:78:43:3b:c4:4e:1a:b5:b3:3a:7d:8a:6c: 87:f4:97:7a -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjQwNDE1MDgwNTMxWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjFjZGZjYi03YjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjTH/H3iLxtnoz1nSC+5vmUUkLvfiaLk6cNLl1saHvXs9Uku1NEOtNbI+r1X KMEOxlQFp2uehm9gUzgJEneQ24058/qoxoZ8OwGroeLM6hpcA2yURGbGWgEAVNkd YQvID0fQg+rihANhUS9K+eoK2BYztU5wyMBJXg3BxXYcBq8NiHX+d9zgWLk9fmij hTxbF6RWM01JFyV/bSr7n6YL8J9fKJQprGuHZkmkWS4/Ssyf7WOpB1K8gpBYeidt H9YotS+tVNU2ozCLLNpBm0v+5WGVeyuoaa6PYhYPApRxtyWpR+jyCYwS1gRFke79 yHOZv444KJFdK2a8RnPixx8rhQIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFB1gO9Hd pTxN/GYgy2X0l1BybBRBMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUVDQUYvRUVGREZFQTQ1RUE3MTFFQUE1RTgzMTg0QzRGOUFFMDIvNTNDQUEzQjIw MjM4MTFFQkE0MjFENzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMDgEAgABMDIDBADfdiADBAPfdwgDBADfdyAwDAMEAd93IgMEAd93JAMEAN93 ZAMEAN93wAMEAN93/TAOBAIAAjAIAwYEJAJPAPAwDQYJKoZIhvcNAQELBQADggEB ABuF/VJ01Y8hM30+AjIBdYXhia5W8+vQhu6ju7HSu8wYqQ2vUU9+gkqOuZv/uAvN kqusZ3KtkXCZqSmsLqtmfwLuE3Kko8JJt/5fcq5AV2sR/9zSA5tM4aZZKYyMiXi5 t3VH95OnBi1FszG0baBuCpfbGFXO4c1yqX9ZataCRN9iKMvt4vGcQFDQUuWJ+Lqx nAipwmfhpnC4cSTuVAwpgFyKVmMtfzVeXv+IFd4rrE2FkaSrwtGF2ZjZmPH52Ijp qXzvFrmJXhxVlp9jwibLFc+6uPPAcSVMR7lhm2obq3l16YqAQojPozyYpzPI38zW 0XhDO8ROGrWzOn2KbIf0l3o= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:32 2024 by rpki-client on console-ams.rpki-client.org