$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B227EEE26EE11EF81B1E029C4F9AE02.roa File: 5B227EEE26EE11EF81B1E029C4F9AE02.roa (raw, json) Hash identifier: ylH813Bwfas2xTBRubK3eRklJhf12uRGcGp6hn4Ut9o= Subject key identifier: DF:87:F6:F6:47:55:74:99:84:CA:2B:B6:D1:71:AD:AB:7F:56:61:44 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 91BF Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B227EEE26EE11EF81B1E029C4F9AE02.roa Signing time: Mon 10 Jun 2024 05:57:44 +0000 ROA not before: Mon 10 Jun 2024 05:57:44 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135772 IP address blocks: 14.192.52.0/22 maxlen: 24 45.127.232.0/22 maxlen: 24 103.68.216.0/22 maxlen: 24 103.126.32.0/22 maxlen: 24 103.139.60.0/23 maxlen: 24 103.176.126.0/23 maxlen: 24 103.177.178.0/23 maxlen: 24 103.196.220.0/22 maxlen: 24 2001:df6:6b00::/48 maxlen: 48 2403:67c0::/32 maxlen: 36 2407:a8c0::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37311 (0x91bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jun 10 05:57:44 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=666695d8-18fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:9c:ec:d6:a0:c5:87:9d:94:74:a3:17:7c: 59:ab:b1:a6:b1:db:b3:25:4c:39:c1:d0:d1:71:ab: 7d:20:7f:89:14:0c:9d:05:33:71:ba:4c:87:3a:93: 01:3d:88:e3:70:1c:0e:d1:8a:3b:14:8e:4d:d1:8f: 4e:ed:e7:be:d3:ae:e5:89:42:34:2b:67:e4:19:59: e3:ad:54:41:db:c7:c5:77:93:0b:f6:fe:d9:0b:19: db:2e:32:4d:ca:7f:80:20:37:f1:5e:c6:5c:0f:9f: c4:9c:bb:4d:91:3e:5d:27:59:09:bc:e0:8e:42:79: 98:70:c7:e5:25:26:97:89:1f:63:95:ac:59:63:59: 77:51:b0:56:68:28:e7:f7:09:6e:32:d8:c4:32:46: d5:e1:35:d5:5d:53:23:cb:3b:1b:c2:fa:2f:fb:c7: 25:6b:6d:c3:2d:c5:84:90:60:0a:c7:9e:4f:f3:9a: c1:70:8a:f6:65:c7:56:3f:2d:68:74:eb:f5:46:65: f2:ce:5a:5d:62:28:eb:92:00:28:d5:2d:8a:d0:94: 53:b1:09:c2:b4:de:e3:94:68:85:34:e1:ab:c8:32: 62:2e:d2:23:42:ea:4b:eb:1e:62:b0:87:8f:9d:33: 58:78:1a:9a:ca:f3:3f:82:b0:bd:ed:21:ef:2e:00: d6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:87:F6:F6:47:55:74:99:84:CA:2B:B6:D1:71:AD:AB:7F:56:61:44 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B227EEE26EE11EF81B1E029C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.52.0/22 45.127.232.0/22 103.68.216.0/22 103.126.32.0/22 103.139.60.0/23 103.176.126.0/23 103.177.178.0/23 103.196.220.0/22 IPv6: 2001:df6:6b00::/48 2403:67c0::/32 2407:a8c0::/32 Signature Algorithm: sha256WithRSAEncryption 90:1e:90:dc:26:6b:df:b9:93:ce:7b:76:b1:d5:69:9b:47:98: 11:ed:f8:06:f7:f9:24:67:13:bd:6c:fd:a4:59:75:b9:9a:d9: 7f:da:bc:bb:09:f1:d4:94:c0:4f:99:d0:7b:f1:b4:27:85:16: 38:68:0f:29:b2:f4:ff:fd:b1:0d:d1:80:07:c1:07:68:b8:d6: a9:fe:9d:3e:9c:0a:18:cf:ea:37:76:18:d6:ac:98:a2:46:86: 6c:06:e8:66:6f:24:d9:68:82:c9:57:61:ad:a3:13:d2:4b:71: 26:4e:de:9f:d7:97:14:34:8f:58:ea:90:17:e4:f8:25:85:f7: 02:44:c7:c7:bf:9a:f6:a3:e9:f3:89:86:6e:01:16:aa:b1:25: dd:77:b6:2e:08:e0:d3:ed:a1:7a:97:63:f0:b0:60:cf:1a:58: 8d:c2:2d:71:23:51:13:5e:a4:5e:7b:57:3e:06:8b:79:c7:c1: d6:ab:cc:9c:81:1c:aa:77:04:6f:49:eb:58:41:45:1b:8a:ab: 94:a7:70:23:a5:6a:ba:aa:eb:3e:77:d6:82:58:ec:f0:f8:45: 79:7a:dd:c4:97:5e:54:fc:fd:67:14:07:cc:4a:7d:2d:02:02: a6:c0:7e:a7:c1:a0:6e:72:67:b1:79:cb:2e:2d:eb:41:ae:02: 8f:8b:f0:d9 -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIDAJG/MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI0MDYxMDA1NTc0NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjY2Njk1ZDgtMThmZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhBnOzWoMWHnZR0oxd8WauxprHbsyVMOcHQ0XGrfSB/iRQMnQUzcbpMhzqT AT2I43AcDtGKOxSOTdGPTu3nvtOu5YlCNCtn5BlZ461UQdvHxXeTC/b+2QsZ2y4y Tcp/gCA38V7GXA+fxJy7TZE+XSdZCbzgjkJ5mHDH5SUml4kfY5WsWWNZd1GwVmgo 5/cJbjLYxDJG1eE11V1TI8s7G8L6L/vHJWttwy3FhJBgCseeT/OawXCK9mXHVj8t aHTr9UZl8s5aXWIo65IAKNUtitCUU7EJwrTe45RohTThq8gyYi7SI0LqS+seYrCH j50zWHgamsrzP4Kwve0h7y4A1hcCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBTfh/b2 R1V0mYTKK7bRca2rf1ZhRDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVCMjI3RUVF MjZFRTExRUY4MUIxRTAyOUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMGgGCCsGAQUFBwEHAQH/ BFkwVzA2BAIAATAwAwQCDsA0AwQCLX/oAwQCZ0TYAwQCZ34gAwQBZ4s8AwQBZ7B+ AwQBZ7GyAwQCZ8TcMB0EAgACMBcDBwAgAQ32awADBQAkA2fAAwUAJAeowDANBgkq hkiG9w0BAQsFAAOCAQEAkB6Q3CZr37mTznt2sdVpm0eYEe34Bvf5JGcTvWz9pFl1 uZrZf9q8uwnx1JTAT5nQe/G0J4UWOGgPKbL0//2xDdGAB8EHaLjWqf6dPpwKGM/q N3YY1qyYokaGbAboZm8k2WiCyVdhraMT0ktxJk7en9eXFDSPWOqQF+T4JYX3AkTH x7+a9qPp84mGbgEWqrEl3Xe2Lgjg0+2hepdj8LBgzxpYjcItcSNRE16kXntXPgaL ecfB1qvMnIEcqncEb0nrWEFFG4qrlKdwI6VquqrrPnfWgljs8PhFeXrdxJdeVPz9 ZxQHzEp9LQICpsB+p8GgbnJnsXnLLi3rQa4Cj4vw2Q== -----END CERTIFICATE-----Generated at Fri Nov 22 11:17:39 2024 by rpki-client on console-fra.rpki-client.org