$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa File: E56FCF286F9E11E9B98EF633C4F9AE02.roa (raw, json) Hash identifier: HrD8wloe3iue1rkCggoa0BL5sTfzVaZdzTzTDbT0lGk= Subject key identifier: E8:22:F7:7B:4A:EB:6B:B5:F3:89:A3:7F:30:D6:93:32:85:85:BD:67 Certificate issuer: /CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Certificate serial: 0E1C Authority key identifier: CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa Signing time: Fri 20 Oct 2023 18:06:38 +0000 ROA not before: Fri 20 Oct 2023 18:06:38 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 134684 IP address blocks: 193.119.0.0/24 maxlen: 24 193.119.1.0/24 maxlen: 24 193.119.2.0/24 maxlen: 24 193.119.3.0/24 maxlen: 24 193.119.4.0/24 maxlen: 24 193.119.5.0/24 maxlen: 24 193.119.6.0/24 maxlen: 24 193.119.7.0/24 maxlen: 24 193.119.8.0/24 maxlen: 24 193.119.9.0/24 maxlen: 24 193.119.10.0/24 maxlen: 24 193.119.11.0/24 maxlen: 24 193.119.12.0/24 maxlen: 24 193.119.13.0/24 maxlen: 24 193.119.14.0/24 maxlen: 24 193.119.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Apr 2024 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3612 (0xe1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECDA/serialNumber=CCCE54EEAFBF93213CD992BCA1E5267D5052B3C7 Validity Not Before: Oct 20 18:06:38 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6532c1ae-8af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b7:55:13:5f:30:24:2d:60:b4:5d:57:a0:1e: ea:a2:58:1e:df:90:11:46:c0:2e:33:2c:9f:b1:a9: ee:d2:79:32:ff:fe:c6:7f:15:f4:6e:75:86:11:b1: 1b:45:d0:58:16:10:4e:49:cd:eb:32:30:a2:3d:90: 99:ce:fa:50:cc:5c:fc:a8:3e:c3:7f:69:59:41:9b: 5d:ed:5b:01:b5:60:42:66:c9:ab:73:67:9b:be:63: f0:f1:cb:5b:2e:4c:ac:91:40:cd:a5:09:15:52:30: d7:bd:b4:a3:ac:ba:c0:6f:ca:75:35:63:a0:05:b0: a5:38:13:b8:fa:19:19:c9:2b:b4:6c:7c:24:d9:99: c1:7f:ee:84:36:04:57:db:97:2b:8a:2e:5b:c5:7e: 79:4c:f7:b8:a6:f6:e7:c2:97:41:44:13:21:0c:63: 02:de:91:b2:e9:16:cf:da:03:a3:00:df:7c:e3:43: 73:52:42:cf:e8:9f:c3:d9:bc:5e:8b:e9:0a:7a:2e: 2a:db:e2:a3:10:36:b2:a1:02:97:89:10:60:70:cd: 96:1e:41:c1:b6:41:f4:85:1b:05:39:b4:39:b2:54: db:b9:14:42:d7:c6:d4:79:3c:01:56:4d:1f:b1:72: 97:37:dd:37:97:ae:af:38:e5:86:17:7e:e3:2c:f1: 99:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:22:F7:7B:4A:EB:6B:B5:F3:89:A3:7F:30:D6:93:32:85:85:BD:67 X509v3 Authority Key Identifier: keyid:CC:CE:54:EE:AF:BF:93:21:3C:D9:92:BC:A1:E5:26:7D:50:52:B3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/zM5U7q-_kyE82ZK8oeUmfVBSs8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/zM5U7q-_kyE82ZK8oeUmfVBSs8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/9BA971A26F9C11E9A5074B2FC4F9AE02/E56FCF286F9E11E9B98EF633C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 193.119.0.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:7e:f9:80:e2:8a:b2:5c:47:31:f5:d8:e0:bd:4d:d6:fc:60: 44:f2:a5:c5:31:9c:f4:a1:f1:a0:c4:20:54:4c:ec:7d:4f:8e: 85:34:31:42:0f:f1:00:5a:e5:c1:b5:71:c4:2e:c7:6c:61:8b: 3e:46:8d:ba:83:cd:ee:bc:0e:a1:57:3b:c1:be:6c:fe:98:a5: ec:7f:9c:2a:10:cc:40:66:15:63:5e:2d:2b:c8:1c:b4:29:b6: a6:3a:73:f8:5a:9d:e6:36:9a:d4:5d:43:0b:54:15:e4:b9:f2: f8:ca:df:68:00:04:74:3a:12:06:32:21:3e:18:bc:47:b8:f2: e7:26:a9:22:ca:30:cc:6c:2a:93:c6:f8:ea:43:9e:ca:d3:77: f0:7f:aa:8f:99:da:ba:53:03:fe:3c:c2:fb:94:eb:c4:bd:8e: d7:58:31:02:15:43:a9:67:5c:a2:1f:65:85:49:00:02:68:e6: 3a:23:86:bf:33:e6:ef:c7:f3:ba:a0:7c:65:ef:be:56:8c:02: e8:47:f0:5b:a7:d5:47:ef:91:ae:ce:94:a7:6a:f7:a7:45:bc: 68:43:56:37:f1:fc:e4:db:04:9d:56:f7:a2:f4:0e:ea:c0:2d: 6c:b7:50:ce:03:ac:e6:8b:1e:d4:78:f3:1a:36:8e:e0:45:8c: 21:b4:69:87 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDREExMTAvBgNVBAUTKENDQ0U1NEVFQUZCRjkzMjEzQ0Q5OTJCQ0ExRTUyNjdE NTA1MkIzQzcwHhcNMjMxMDIwMTgwNjM4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTMyYzFhZS04YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7dVE18wJC1gtF1XoB7qolge35ARRsAuMyyfsanu0nky//7GfxX0bnWGEbEb RdBYFhBOSc3rMjCiPZCZzvpQzFz8qD7Df2lZQZtd7VsBtWBCZsmrc2ebvmPw8ctb LkyskUDNpQkVUjDXvbSjrLrAb8p1NWOgBbClOBO4+hkZySu0bHwk2ZnBf+6ENgRX 25crii5bxX55TPe4pvbnwpdBRBMhDGMC3pGy6RbP2gOjAN9840NzUkLP6J/D2bxe i+kKei4q2+KjEDayoQKXiRBgcM2WHkHBtkH0hRsFObQ5slTbuRRC18bUeTwBVk0f sXKXN903l66vOOWGF37jLPGZmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOgi93tK 62u184mjfzDWkzKFhb1nMB8GA1UdIwQYMBaAFMzOVO6vv5MhPNmSvKHlJn1QUrPH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS85QkE5NzFBMjZG OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi96TTVVN3EtX2t5RTgyWks4b2VVbWZWQlNz OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3pNNVU3cS1fa3lFODJaSzhvZVVtZlZCU3M4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVDREEvOUJBOTcxQTI2RjlDMTFFOUE1MDc0QjJGQzRGOUFFMDIvRTU2RkNGMjg2 RjlFMTFFOUI5OEVGNjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBATBdwAwDQYJKoZIhvcNAQELBQADggEBAI5++YDiirJcRzH1 2OC9Tdb8YETypcUxnPSh8aDEIFRM7H1PjoU0MUIP8QBa5cG1ccQux2xhiz5GjbqD ze68DqFXO8G+bP6Ypex/nCoQzEBmFWNeLSvIHLQptqY6c/haneY2mtRdQwtUFeS5 8vjK32gABHQ6EgYyIT4YvEe48ucmqSLKMMxsKpPG+OpDnsrTd/B/qo+Z2rpTA/48 wvuU68S9jtdYMQIVQ6lnXKIfZYVJAAJo5jojhr8z5u/H87qgfGXvvlaMAuhH8Fun 1Ufvka7OlKdq96dFvGhDVjfx/OTbBJ1W96L0DurALWy3UM4DrOaLHtR48xo2juBF jCG0aYc= -----END CERTIFICATE-----Generated at Tue Mar 26 21:07:08 2024 by rpki-client on console-fra.rpki-client.org