$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B34D07906A8D11EB82AF1144C4F9AE02.roa File: B34D07906A8D11EB82AF1144C4F9AE02.roa (raw, json) Hash identifier: 8p4i+8lGsQJuWyTH+iuKQaYP20JlNN4z3S9SLB6427s= Subject key identifier: D9:D4:D2:D3:E7:EB:E0:F9:E2:AE:FC:AD:EE:15:6F:6B:8C:D7:B6:C0 Certificate issuer: /CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Certificate serial: 061D Authority key identifier: D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B34D07906A8D11EB82AF1144C4F9AE02.roa Signing time: Fri 10 Nov 2023 23:31:35 +0000 ROA not before: Fri 10 Nov 2023 23:31:35 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 17444 IP address blocks: 58.64.128.0/17 maxlen: 24 59.188.0.0/16 maxlen: 24 103.84.32.0/22 maxlen: 24 113.10.128.0/17 maxlen: 24 123.1.128.0/17 maxlen: 24 192.188.82.0/23 maxlen: 24 202.4.162.0/23 maxlen: 24 203.98.128.0/18 maxlen: 24 203.176.192.0/18 maxlen: 24 210.209.64.0/18 maxlen: 24 210.245.128.0/17 maxlen: 24 2401:4a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Jun 2024 00:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF1F/serialNumber=D37179CBB97D680E6A80DC12EE422FE8B6E363F5 Validity Not Before: Nov 10 23:31:35 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=654ebd56-ba2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:97:be:6c:de:1b:3d:36:99:f3:a2:b5:5e: b8:30:87:9f:5b:71:aa:b1:9c:46:43:f8:af:5d:57: db:c9:53:d7:87:72:ab:00:cd:7c:54:49:0d:1e:36: cc:78:77:22:9c:cd:fa:52:72:61:a3:7a:c0:48:20: bb:90:8d:ca:ff:1a:bf:f0:c3:eb:5a:e3:1a:8b:0a: af:06:61:44:29:71:5d:e8:ad:f8:cd:bf:68:a6:b7: c0:89:3f:48:54:ed:dd:9a:10:d6:43:37:92:fc:a8: 78:d7:d7:25:53:6e:64:b2:4a:80:c3:ba:f7:91:5a: b3:5e:a2:92:63:21:eb:97:59:78:25:a6:47:0f:e9: 96:d6:f3:47:30:b1:cd:5a:e3:f1:53:41:ff:43:af: c0:2c:72:ae:3d:13:41:41:b2:ad:c7:ac:54:06:0b: 38:d6:da:60:50:9a:c8:43:80:b0:23:9d:63:fa:51: 49:25:a3:15:7f:98:53:94:22:26:66:13:06:03:b0: 8f:f3:4c:79:87:78:14:cb:77:5a:14:b6:ed:7a:21: f3:66:23:92:b8:3a:2b:9c:95:9a:e8:f0:e1:81:21: d3:c2:05:91:2d:c2:35:53:66:cd:bf:c6:cd:4a:c5: 57:a6:6c:1f:40:0a:2c:67:4f:bb:e9:57:2f:77:62: cf:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D4:D2:D3:E7:EB:E0:F9:E2:AE:FC:AD:EE:15:6F:6B:8C:D7:B6:C0 X509v3 Authority Key Identifier: keyid:D3:71:79:CB:B9:7D:68:0E:6A:80:DC:12:EE:42:2F:E8:B6:E3:63:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/03F5y7l9aA5qgNwS7kIv6LbjY_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03F5y7l9aA5qgNwS7kIv6LbjY_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF1F/F5CB6E6A5C5311EBB6627853C4F9AE02/B34D07906A8D11EB82AF1144C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.64.128.0/17 59.188.0.0/16 103.84.32.0/22 113.10.128.0/17 123.1.128.0/17 192.188.82.0/23 202.4.162.0/23 203.98.128.0/18 203.176.192.0/18 210.209.64.0/18 210.245.128.0/17 IPv6: 2401:4a00::/32 Signature Algorithm: sha256WithRSAEncryption 32:30:7b:47:0c:5f:ed:ee:6b:5d:a6:36:84:c2:d5:71:19:a5: 96:53:fa:b8:a3:8e:dc:d6:9f:29:35:c8:55:de:01:d5:a4:82: cf:5f:56:f8:a6:ad:91:5d:8d:46:0f:05:9d:92:61:a4:2d:27: 49:2c:65:7c:49:4e:0f:3c:77:d7:09:e7:54:ec:85:0e:65:57: bc:03:63:e0:f9:4f:52:d2:76:8c:12:dd:4e:42:a1:78:24:20: 7e:9b:21:31:19:c7:90:3f:ff:77:04:d6:72:0e:7a:fd:3a:71: ec:a6:6d:4f:e8:b2:42:cf:9e:a3:33:cd:3f:f5:62:7a:db:d8: 2a:9e:01:28:aa:71:1f:2c:71:78:f8:29:38:44:fa:ed:73:2e: a2:b2:c6:f9:7b:00:ce:0d:d2:00:62:08:cb:bb:d8:69:b0:1e: 85:2f:13:98:b8:23:b6:bf:71:d7:b0:c3:f0:da:47:ac:a9:bf: 7a:3b:96:2d:fe:2d:30:a8:c1:ae:66:dc:bd:5f:3d:42:ba:fd: 2b:8e:04:32:70:9c:dd:4c:cb:de:86:cd:86:44:22:4e:35:0f: 8a:f2:f9:ed:b9:6d:ce:b6:ab:e5:2b:d7:5f:df:d2:bc:48:04: c0:63:d9:97:dd:eb:e7:17:e2:31:b0:f4:f1:cb:4a:d3:9f:73: 88:02:99:36 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGMUYxMTAvBgNVBAUTKEQzNzE3OUNCQjk3RDY4MEU2QTgwREMxMkVFNDIyRkU4 QjZFMzYzRjUwHhcNMjMxMTEwMjMzMTM1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRlYmQ1Ni1iYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4uXvmzeGz02mfOitV64MIefW3GqsZxGQ/ivXVfbyVPXh3KrAM18VEkNHjbM eHcinM36UnJho3rASCC7kI3K/xq/8MPrWuMaiwqvBmFEKXFd6K34zb9oprfAiT9I VO3dmhDWQzeS/Kh419clU25kskqAw7r3kVqzXqKSYyHrl1l4JaZHD+mW1vNHMLHN WuPxU0H/Q6/ALHKuPRNBQbKtx6xUBgs41tpgUJrIQ4CwI51j+lFJJaMVf5hTlCIm ZhMGA7CP80x5h3gUy3daFLbteiHzZiOSuDornJWa6PDhgSHTwgWRLcI1U2bNv8bN SsVXpmwfQAosZ0+76Vcvd2LP/wIDAQABo4IC3zCCAtswHQYDVR0OBBYEFNnU0tPn 6+D54q78re4Vb2uM17bAMB8GA1UdIwQYMBaAFNNxecu5fWgOaoDcEu5CL+i242P1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREYxRi9GNUNCNkU2QTVD NTMxMUVCQjY2Mjc4NTNDNEY5QUUwMi8wM0Y1eTdsOWFBNXFnTndTN2tJdjZMYmpZ X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzAzRjV5N2w5YUE1cWdOd1M3a0l2NkxiallfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MURGMUYvRjVDQjZFNkE1QzUzMTFFQkI2NjI3ODUzQzRGOUFFMDIvQjM0RDA3OTA2 QThEMTFFQjgyQUYxMTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E WjBYMEcEAgABMEEDBAc6QIADAwA7vAMEAmdUIAMEB3EKgAMEB3sBgAMEAcC8UgME AcoEogMEBstigAMEBsuwwAMEBtLRQAMEB9L1gDANBAIAAjAHAwUAJAFKADANBgkq hkiG9w0BAQsFAAOCAQEAMjB7Rwxf7e5rXaY2hMLVcRmlllP6uKOO3NafKTXIVd4B 1aSCz19W+KatkV2NRg8FnZJhpC0nSSxlfElODzx31wnnVOyFDmVXvANj4PlPUtJ2 jBLdTkKheCQgfpshMRnHkD//dwTWcg56/Tpx7KZtT+iyQs+eozPNP/VietvYKp4B KKpxHyxxePgpOET67XMuorLG+XsAzg3SAGIIy7vYabAehS8TmLgjtr9x17DD8NpH rKm/ejuWLf4tMKjBrmbcvV89Qrr9K44EMnCc3UzL3obNhkQiTjUPivL57bltzrar 5SvXX9/SvEgEwGPZl93r5xfiMbD08ctK059ziAKZNg== -----END CERTIFICATE-----Generated at Fri Jun 7 03:18:08 2024 by rpki-client on console-ams.rpki-client.org