$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/44BB185C0C2A11EFA34C4D82C4F9AE02.roa File: 44BB185C0C2A11EFA34C4D82C4F9AE02.roa (raw, json) Hash identifier: pqKNQh0DbpxdfHaYFu4STUMgjt3c/47BZc0OOFSwOi8= Subject key identifier: B7:C1:5B:E3:16:1C:0E:25:6D:02:BF:37:FC:BF:32:D3:79:C7:5D:E2 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 046B Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/44BB185C0C2A11EFA34C4D82C4F9AE02.roa Signing time: Tue 07 May 2024 09:58:11 +0000 ROA not before: Tue 07 May 2024 09:58:11 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 45458 IP address blocks: 58.137.86.0/23 maxlen: 24 58.137.109.0/24 maxlen: 24 58.137.120.0/24 maxlen: 24 58.137.133.0/24 maxlen: 24 58.137.147.0/24 maxlen: 24 58.137.156.0/24 maxlen: 24 58.137.179.0/24 maxlen: 24 58.137.185.0/24 maxlen: 24 58.137.200.0/23 maxlen: 24 58.137.205.0/24 maxlen: 24 58.137.206.0/23 maxlen: 24 203.170.186.0/24 maxlen: 24 203.170.187.0/24 maxlen: 24 203.170.206.0/24 maxlen: 24 203.170.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: May 7 09:58:11 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=6639fb33-e490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:0b:72:1a:70:7a:43:70:96:a2:2a:24:01: 5c:96:b4:c2:28:cb:41:c2:85:6b:d5:ff:44:a6:bc: e7:20:27:9d:ac:3c:cc:cc:66:11:0e:e5:87:dc:e7: 2a:14:40:ca:7b:08:b4:d8:3b:9f:40:20:50:19:78: 59:85:d9:5d:4e:f0:46:fa:2a:78:9e:a5:98:33:c2: e9:3c:8e:7c:92:d8:e7:2a:c9:84:25:cc:07:4f:c8: d4:b0:08:85:f3:96:90:af:49:17:e7:10:d4:ba:84: 2e:60:0c:0a:c7:b0:12:07:36:14:e4:23:3c:5b:26: 5f:ef:64:07:bb:7c:30:08:b0:91:1c:86:37:67:76: c5:46:b3:62:ec:9b:8a:4a:8f:cf:ef:d5:79:f9:02: 57:85:12:81:e8:a5:f1:a6:23:a5:22:3f:05:4d:0b: 32:43:6b:d9:86:26:26:98:b0:44:1b:12:c5:25:35: 66:bd:ac:08:83:47:56:a7:69:5f:b7:1f:f5:13:13: e2:0b:b6:75:4f:a1:d1:dc:7c:bd:66:4d:79:31:fe: 55:31:16:f1:64:e2:63:a9:ba:9c:e1:71:f6:b9:50: 8b:07:11:b4:a6:a6:9c:b7:8d:df:da:c4:ca:f5:bc: 94:fc:65:10:49:be:a2:bb:0e:0e:50:c5:15:f8:8c: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C1:5B:E3:16:1C:0E:25:6D:02:BF:37:FC:BF:32:D3:79:C7:5D:E2 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/44BB185C0C2A11EFA34C4D82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.137.86.0/23 58.137.109.0/24 58.137.120.0/24 58.137.133.0/24 58.137.147.0/24 58.137.156.0/24 58.137.179.0/24 58.137.185.0/24 58.137.200.0/23 58.137.205.0-58.137.207.255 203.170.186.0/23 203.170.206.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:e0:cd:2b:4f:99:a5:c9:55:39:ce:64:94:5e:a3:f4:fc:4a: e7:77:e2:e4:71:ae:cf:63:74:27:a3:f3:ef:a9:9f:49:67:45: 54:34:e8:91:a3:78:09:f4:a5:19:9c:d0:33:3b:e8:dd:af:81: dc:2e:1d:f6:a6:d7:da:97:5d:b8:47:4e:36:bc:68:58:13:90: cf:ef:ad:04:02:d7:04:6c:1e:d9:0c:61:5f:fb:1b:2c:69:78: 6d:33:03:80:3d:3f:e2:b4:c2:b1:21:c8:f9:dc:dc:51:3f:16: 40:4b:be:23:19:5b:89:84:e4:76:e3:83:bb:95:15:f7:6c:b4: 5a:e5:41:ac:61:f1:0c:0e:d2:0e:74:cb:66:25:74:d0:7d:46: 54:08:64:b9:37:2b:8e:41:91:cf:ab:56:72:a3:16:de:dd:be: 23:75:ac:43:7a:72:76:ef:e1:74:47:cb:95:86:d1:e8:d2:59: 09:ba:b5:45:ae:84:c9:8e:63:c0:d6:c0:0e:c5:34:d4:d3:ca: a8:8a:c6:72:83:c7:f0:ea:fc:dd:24:96:3b:b8:e5:bc:49:8e: e7:5d:2c:47:61:e9:1d:d1:fe:58:ad:0e:f2:6a:f9:31:dd:77: 82:b5:ba:7b:83:da:8a:d9:d8:3e:c7:ba:42:13:97:b9:47:82: d4:3e:66:e2 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjQwNTA3MDk1ODExWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM5ZmIzMy1lNDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlwLchpwekNwlqIqJAFclrTCKMtBwoVr1f9EprznICedrDzMzGYRDuWH3Ocq FEDKewi02DufQCBQGXhZhdldTvBG+ip4nqWYM8LpPI58ktjnKsmEJcwHT8jUsAiF 85aQr0kX5xDUuoQuYAwKx7ASBzYU5CM8WyZf72QHu3wwCLCRHIY3Z3bFRrNi7JuK So/P79V5+QJXhRKB6KXxpiOlIj8FTQsyQ2vZhiYmmLBEGxLFJTVmvawIg0dWp2lf tx/1ExPiC7Z1T6HR3Hy9Zk15Mf5VMRbxZOJjqbqc4XH2uVCLBxG0pqact43f2sTK 9byU/GUQSb6iuw4OUMUV+Iw5vQIDAQABo4IC3zCCAtswHQYDVR0OBBYEFLfBW+MW HA4lbQK/N/y/MtN5x13iMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvNDRCQjE4NUMw QzJBMTFFRkEzNEM0RDgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E WjBYMFYEAgABMFADBAE6iVYDBAA6iW0DBAA6iXgDBAA6iYUDBAA6iZMDBAA6iZwD BAA6ibMDBAA6ibkDBAE6icgwDAMEADqJzQMEBDqJwAMEAcuqugMEAcuqzjANBgkq hkiG9w0BAQsFAAOCAQEAjuDNK0+ZpclVOc5klF6j9PxK53fi5HGuz2N0J6Pz76mf SWdFVDTokaN4CfSlGZzQMzvo3a+B3C4d9qbX2pdduEdONrxoWBOQz++tBALXBGwe 2QxhX/sbLGl4bTMDgD0/4rTCsSHI+dzcUT8WQEu+IxlbiYTkduODu5UV92y0WuVB rGHxDA7SDnTLZiV00H1GVAhkuTcrjkGRz6tWcqMW3t2+I3WsQ3pydu/hdEfLlYbR 6NJZCbq1Ra6EyY5jwNbADsU01NPKqIrGcoPH8Or83SSWO7jlvEmO510sR2HpHdH+ WK0O8mr5Md13grW6e4PaitnYPse6QhOXuUeC1D5m4g== -----END CERTIFICATE-----Generated at Thu Jun 13 03:35:01 2024 by rpki-client on console-fra.rpki-client.org