$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7934717A3BA611EC8737B534C4F9AE02.roa File: 7934717A3BA611EC8737B534C4F9AE02.roa (raw, json) Hash identifier: 4vsf8Wb5GZNfQuzk5ueb59N8mX6Ev5ag+kkwZpFI5OQ= Subject key identifier: 8D:F8:7C:6F:46:F8:CD:03:C4:15:6E:CE:87:8D:25:C9:57:FB:56:2E Certificate issuer: /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Certificate serial: 044D Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7934717A3BA611EC8737B534C4F9AE02.roa Signing time: Tue 13 Feb 2024 01:53:55 +0000 ROA not before: Tue 13 Feb 2024 01:53:55 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 38622 IP address blocks: 111.119.8.0/22 maxlen: 22 111.119.8.0/24 maxlen: 24 111.119.9.0/24 maxlen: 24 111.119.10.0/24 maxlen: 24 111.119.11.0/24 maxlen: 24 111.119.18.0/24 maxlen: 24 111.119.19.0/24 maxlen: 24 117.121.252.0/22 maxlen: 22 117.121.252.0/23 maxlen: 23 117.121.252.0/24 maxlen: 24 117.121.253.0/24 maxlen: 24 2402:6800:740::/48 maxlen: 48 2402:6800:770::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1101 (0x44d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857 Validity Not Before: Feb 13 01:53:55 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65cacbb3-61aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:ff:9d:08:99:a6:a5:d0:c8:e1:6f:1b:08: 86:fd:90:f8:2b:ea:68:39:fc:17:74:a5:1f:a6:4f: 38:bb:72:bc:63:22:94:a2:d0:cd:6d:99:c0:85:11: 4f:b4:10:f9:fb:3f:04:7e:0c:57:41:7c:f5:f7:2e: 2d:7a:c1:7d:8d:86:06:b7:c9:dc:f6:6e:3d:31:84: 9b:09:76:ba:b0:1e:84:f4:d6:8c:00:a2:c5:81:4e: f4:20:76:3c:95:4a:ec:c6:6b:6c:59:0e:64:ef:33: 0c:8e:45:2e:02:56:0f:8c:db:43:ac:a3:9e:3c:63: ca:1c:7f:5c:c4:ab:6a:17:10:68:82:4c:e6:55:af: d7:84:c1:c1:14:10:36:b3:3b:40:57:9c:d9:01:18: 38:59:75:f8:2b:60:39:e2:8c:5f:5b:2f:95:86:28: 01:a8:4f:88:d7:bc:9f:21:0e:ed:6a:9c:6e:ab:5c: 8f:3e:ac:1e:8e:88:d1:53:17:2d:fa:0a:0d:7b:8a: 41:08:f5:bb:8b:0a:b3:1f:80:f4:6f:b7:2b:4d:73: cc:d9:d9:d7:70:14:40:c9:3d:4a:4e:18:64:19:b3: a1:51:12:57:23:b8:4f:52:fb:11:1f:3c:5c:7e:27: 46:83:06:5f:38:44:3d:18:85:cb:0b:71:0d:70:a2: ab:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F8:7C:6F:46:F8:CD:03:C4:15:6E:CE:87:8D:25:C9:57:FB:56:2E X509v3 Authority Key Identifier: keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7934717A3BA611EC8737B534C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.119.8.0/22 111.119.18.0/23 117.121.252.0/22 IPv6: 2402:6800:740::/48 2402:6800:770::/48 Signature Algorithm: sha256WithRSAEncryption 48:68:ea:c8:b1:44:41:b5:9d:37:9b:dd:46:24:87:f7:7e:d8: 5c:d4:61:31:e8:a1:92:43:eb:1e:40:52:64:8d:d3:1b:89:3a: 0d:11:32:9e:9f:a5:f3:8e:e5:77:20:cf:bd:1f:f3:80:45:ab: 44:60:8c:2c:c4:ff:31:2b:6d:3c:a4:76:5e:a0:c7:64:46:2b: 76:78:83:ee:e5:0c:17:2d:41:f9:ee:c5:f1:f3:45:87:79:fe: ba:05:39:8c:58:45:75:2a:97:92:19:56:f7:3f:c8:a6:fe:1e: 1a:9d:be:e3:e0:55:b4:ac:a3:30:e6:41:07:b0:9f:d5:53:84: 2d:b8:c4:99:0a:29:cd:d9:f8:4c:3e:1f:f5:bd:f8:66:92:8a: fd:10:e2:73:94:19:37:e7:5f:cf:3c:74:19:6b:e8:8c:f0:0c: 4a:35:54:0e:db:f7:f0:b6:df:58:3b:0b:2b:7f:17:23:09:91: b1:6b:6d:0b:b7:99:d6:8a:af:48:94:12:76:ae:1c:c0:57:df: af:0f:3c:a0:19:20:c6:a2:e3:dd:d3:9c:9c:ff:4a:0d:87:2a: 48:cd:6e:2b:92:2c:f8:d8:ab:54:12:a2:90:d5:7b:97:19:ad: eb:aa:8f:81:3f:ad:12:83:9f:3f:de:51:90:ed:ee:c4:90:f0: 96:15:47:93 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICBE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyNjgxMTAvBgNVBAUTKDkzNzMyRjNGQzMxMzU5QkJCRjhCMzc5NjI0QkY5MTM1 MUNDQUQ4NTcwHhcNMjQwMjEzMDE1MzU1WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWNhY2JiMy02MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fr/nQiZpqXQyOFvGwiG/ZD4K+poOfwXdKUfpk84u3K8YyKUotDNbZnAhRFP tBD5+z8EfgxXQXz19y4tesF9jYYGt8nc9m49MYSbCXa6sB6E9NaMAKLFgU70IHY8 lUrsxmtsWQ5k7zMMjkUuAlYPjNtDrKOePGPKHH9cxKtqFxBogkzmVa/XhMHBFBA2 sztAV5zZARg4WXX4K2A54oxfWy+VhigBqE+I17yfIQ7tapxuq1yPPqwejojRUxct +goNe4pBCPW7iwqzH4D0b7crTXPM2dnXcBRAyT1KThhkGbOhURJXI7hPUvsRHzxc fidGgwZfOEQ9GIXLC3ENcKKrPQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFI34fG9G +M0DxBVuzoeNJclX+1YuMB8GA1UdIwQYMBaAFJNzLz/DE1m7v4s3liS/kTUcythX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI2OC9DNzhFQkNFQTIx OTMxMUVDOTAwQzU2NTNDNEY5QUUwMi9rM012UDhNVFdidV9pemVXSkwtUk5Seksy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2szTXZQOE1UV2J1X2l6ZVdKTC1STlJ6SzJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQyNjgvQzc4RUJDRUEyMTkzMTFFQzkwMEM1NjUzQzRGOUFFMDIvNzkzNDcxN0Ez QkE2MTFFQzg3MzdCNTM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MBgEAgABMBIDBAJvdwgDBAFvdxIDBAJ1efwwGAQCAAIwEgMHACQCaAAHQAMH ACQCaAAHcDANBgkqhkiG9w0BAQsFAAOCAQEASGjqyLFEQbWdN5vdRiSH937YXNRh MeihkkPrHkBSZI3TG4k6DREynp+l847ldyDPvR/zgEWrRGCMLMT/MSttPKR2XqDH ZEYrdniD7uUMFy1B+e7F8fNFh3n+ugU5jFhFdSqXkhlW9z/Ipv4eGp2+4+BVtKyj MOZBB7Cf1VOELbjEmQopzdn4TD4f9b34ZpKK/RDic5QZN+dfzzx0GWvojPAMSjVU Dtv38LbfWDsLK38XIwmRsWttC7eZ1oqvSJQSdq4cwFffrw88oBkgxqLj3dOcnP9K DYcqSM1uK5Is+NirVBKikNV7lxmt66qPgT+tEoOfP95RkO3uxJDwlhVHkw== -----END CERTIFICATE-----Generated at Fri May 17 03:06:34 2024 by rpki-client on console-ams.rpki-client.org