$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa File: F00A66308A9C11EB9B2E044BC4F9AE02.roa (raw, json) Hash identifier: Mk7D+ha2bIGqlsR5pWf130g9P7kg9STpwyKO56RYmvU= Subject key identifier: FB:8C:4D:A8:3A:A4:E8:50:57:88:80:DE:2C:B8:54:08:D7:EB:5B:EB Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 0516 Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa Signing time: Tue 18 Jul 2023 23:40:08 +0000 ROA not before: Tue 18 Jul 2023 23:40:08 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 7575 IP address blocks: 155.205.200.0/24 maxlen: 24 155.205.208.0/24 maxlen: 24 155.205.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Jul 18 23:40:08 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64b722d8-d33f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:52:5e:d9:8a:6a:e3:8d:2b:63:4f:71:6c: ea:6c:3f:2e:fe:10:69:52:84:1f:13:f9:05:d4:b8: d6:a6:bf:c4:14:5d:7a:d0:70:8d:62:76:a6:8d:96: c7:fb:11:ef:ee:4c:8e:a9:b9:39:cc:80:85:9e:72: ed:4b:69:81:80:0d:fc:4e:73:6e:9f:3b:39:0f:e7: 13:73:df:f3:7d:73:4e:b7:23:9d:a2:80:c7:8f:ed: c2:15:e6:d4:2d:50:20:43:41:53:c2:a8:c8:26:37: 6a:4f:63:41:5e:b1:9a:a1:48:ec:6f:91:94:39:67: 70:cf:bc:b9:b8:d2:68:92:c6:b8:2c:4f:68:da:5d: e3:77:29:f4:67:de:1c:a3:bf:b7:4f:02:2e:f0:5a: 05:28:58:36:3a:99:4a:5a:17:99:0f:84:c7:94:40: 99:77:7c:56:8b:79:e7:4b:09:a0:1d:4b:2e:a2:50: 52:ed:f0:68:6f:43:95:6d:9b:e4:51:b3:70:da:4c: a1:d5:d7:fc:7b:2a:9d:db:b2:59:91:b5:22:f2:09: d9:16:9e:7f:6c:ac:da:b5:08:2a:6b:43:65:93:f8: 56:b5:99:3c:98:9a:21:38:c9:9c:70:17:bb:72:c4: a6:5b:a8:60:7c:ba:c6:c5:d4:43:a6:c5:9e:7d:04: f9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:8C:4D:A8:3A:A4:E8:50:57:88:80:DE:2C:B8:54:08:D7:EB:5B:EB X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/F00A66308A9C11EB9B2E044BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 155.205.200.0/24 155.205.208.0/23 Signature Algorithm: sha256WithRSAEncryption 49:45:9c:ce:5e:66:2e:87:24:30:7f:5a:c1:24:7e:c4:cd:90: 4c:e4:0d:07:96:f5:a8:b5:20:9f:7c:1d:48:d1:38:c5:a9:f3: 53:d6:85:31:d4:f4:10:b1:ea:d3:58:0c:74:ab:c0:b5:19:e7: 59:21:1f:32:05:ec:36:01:cf:b8:43:b9:b7:e6:1a:b6:4e:9e: 10:27:58:e8:83:5b:9b:7d:04:01:3a:d5:61:09:f4:36:92:eb: f1:47:a1:c0:9c:35:47:32:a0:7b:d9:7c:19:6d:37:ad:5e:ae: 3f:da:0b:cc:57:60:e4:32:fe:97:c9:0f:e2:4f:c1:ef:c7:af: 87:a7:b0:1f:4f:4d:8c:54:9d:51:d8:3e:d8:d1:ae:0b:55:dc: 15:a6:fb:ca:3c:8f:11:ed:6d:da:4f:47:53:f1:75:de:0a:0d: dc:be:56:66:63:b6:45:f7:db:46:0c:ab:f9:22:38:bb:81:ea: 67:61:0a:a3:df:ba:ab:3b:34:8a:af:7a:c0:05:54:54:fe:19: f0:28:84:ad:b2:07:1d:e7:66:ad:5d:84:90:6e:ab:09:88:f9: 30:84:97:de:f7:b0:f2:12:12:f1:4c:b8:17:85:40:85:92:84: 09:0f:dc:1b:51:6c:5a:f0:30:53:c2:58:de:92:2b:40:9d:ef: 97:44:b2:6c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjMwNzE4MjM0MDA4WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI3MjJkOC1kMzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjFSXtmKauONK2NPcWzqbD8u/hBpUoQfE/kF1LjWpr/EFF160HCNYnamjZbH +xHv7kyOqbk5zICFnnLtS2mBgA38TnNunzs5D+cTc9/zfXNOtyOdooDHj+3CFebU LVAgQ0FTwqjIJjdqT2NBXrGaoUjsb5GUOWdwz7y5uNJoksa4LE9o2l3jdyn0Z94c o7+3TwIu8FoFKFg2OplKWheZD4THlECZd3xWi3nnSwmgHUsuolBS7fBob0OVbZvk UbNw2kyh1df8eyqd27JZkbUi8gnZFp5/bKzatQgqa0Nlk/hWtZk8mJohOMmccBe7 csSmW6hgfLrGxdRDpsWefQT5rQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPuMTag6 pOhQV4iA3iy4VAjX61vrMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5QzEvMEEzRjI2OUM4MDg2MTFFQkI0QzZEMTE2QzRGOUFFMDIvRjAwQTY2MzA4 QTlDMTFFQjlCMkUwNDRCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACbzcgDBAGbzdAwDQYJKoZIhvcNAQELBQADggEBAElFnM5e Zi6HJDB/WsEkfsTNkEzkDQeW9ai1IJ98HUjROMWp81PWhTHU9BCx6tNYDHSrwLUZ 51khHzIF7DYBz7hDubfmGrZOnhAnWOiDW5t9BAE61WEJ9DaS6/FHocCcNUcyoHvZ fBltN61erj/aC8xXYOQy/pfJD+JPwe/Hr4ensB9PTYxUnVHYPtjRrgtV3BWm+8o8 jxHtbdpPR1Pxdd4KDdy+VmZjtkX320YMq/kiOLuB6mdhCqPfuqs7NIqvesAFVFT+ GfAohK2yBx3nZq1dhJBuqwmI+TCEl973sPISEvFMuBeFQIWShAkP3BtRbFrwMFPC WN6SK0Cd75dEsmw= -----END CERTIFICATE-----Generated at Sun May 19 00:59:44 2024 by rpki-client on console-fra.rpki-client.org