$ rpki-client -vvf rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa File: 01B2AC1E064111E8A62EF586C4F9AE02.roa (raw, json) Hash identifier: jP6GIbinp3Nw7ptUURz/NryO9wh+K7IIfBQeKgw27k0= Subject key identifier: DA:69:8F:CB:33:7E:86:77:84:3C:E7:58:66:49:4A:F4:51:CD:FF:4C Certificate issuer: /CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Certificate serial: 152E Authority key identifier: FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa Signing time: Fri 30 Jun 2023 17:06:03 +0000 ROA not before: Fri 30 Jun 2023 17:06:03 +0000 ROA not after: Sat 31 Aug 2024 00:00:00 +0000 asID: 9834 IP address blocks: 103.88.104.0/22 maxlen: 24 122.252.184.0/21 maxlen: 24 202.21.128.0/24 maxlen: 24 202.162.72.0/23 maxlen: 24 203.57.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 17:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5422 (0x152e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91935EA/serialNumber=FD7C4811C87C566EF55EDAB0E743FF066B9FA866 Validity Not Before: Jun 30 17:06:03 2023 GMT Not After : Aug 31 00:00:00 2024 GMT Subject: CN=649f0b7b-1b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ca:97:57:10:4b:5a:b7:64:e9:d2:0d:f6:12: a1:8e:18:1c:1f:0c:00:a3:ab:1b:e5:a1:b3:1d:6f: 13:89:26:44:c8:f1:dc:1c:e4:08:72:8d:2e:a2:4f: 8e:72:e2:96:23:c5:52:ff:de:74:82:85:11:b1:90: ea:8a:3e:13:f5:c5:91:a4:30:b0:bd:17:7e:4a:e6: ca:21:b6:93:d1:3b:2c:e4:b6:95:ec:0c:45:bc:07: 08:8f:66:db:ec:4c:28:f4:fc:96:6f:7b:87:c4:21: be:5f:90:31:1c:a1:f9:d8:8e:26:4a:d1:83:ab:ce: 73:33:ab:a5:a5:74:27:88:ba:a9:b6:1b:ff:b6:72: ef:84:39:4e:83:ab:90:54:9c:54:91:9a:fd:3e:31: e4:2d:45:94:e3:d1:23:ad:51:1a:a7:56:86:e0:49: 04:e5:78:73:8b:23:3f:2c:f7:f7:53:0b:a2:52:6e: 9a:ad:0c:30:c9:9e:e3:89:40:aa:79:28:c8:17:62: 55:00:52:83:86:b4:3f:3f:3a:24:2c:ac:d2:78:6f: c4:77:9d:f3:d9:a5:85:9b:01:1d:ca:87:98:2f:fd: 80:1b:78:88:b7:29:db:c9:ac:ef:86:37:df:9d:99: 3c:c0:98:e9:1d:5b:38:01:17:e6:13:8d:ed:cb:ed: 4a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:69:8F:CB:33:7E:86:77:84:3C:E7:58:66:49:4A:F4:51:CD:FF:4C X509v3 Authority Key Identifier: keyid:FD:7C:48:11:C8:7C:56:6E:F5:5E:DA:B0:E7:43:FF:06:6B:9F:A8:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/_XxIEch8Vm71Xtqw50P_BmufqGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_XxIEch8Vm71Xtqw50P_BmufqGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91935EA/19DD467000AE11E8BC3A1F2FC4F9AE02/01B2AC1E064111E8A62EF586C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.88.104.0/22 122.252.184.0/21 202.21.128.0/24 202.162.72.0/23 203.57.145.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:09:b9:3d:3c:ed:28:d6:fb:6d:65:ea:0f:c6:9d:60:36:cf: 6c:cd:48:6b:e8:ed:62:ba:68:b0:17:b2:43:7e:40:20:27:20: d0:79:92:f2:54:a8:a7:f5:e5:6e:e0:98:9f:65:33:80:0d:d2: 50:b3:b6:20:9b:1e:d3:c6:14:c1:fd:e3:62:b3:97:24:05:d4: b6:f6:62:e1:fd:4d:04:ce:50:c2:fd:a3:03:d8:0b:9c:35:10: f2:e8:af:fc:ed:67:1a:72:b8:53:6e:df:68:b1:c1:74:2d:d8: 53:d0:94:04:9e:64:87:35:fa:8c:40:16:03:c7:a7:99:5c:64: 54:c5:ca:04:4c:14:af:9c:1e:62:be:31:f5:77:ea:6d:d2:ff: a6:0b:44:97:20:99:76:0d:7d:6b:6c:dd:13:11:d0:39:8b:f1: bb:bf:90:c1:2c:3e:d4:d6:a8:0a:55:ed:25:d8:16:3c:87:16: 8c:2a:f3:9e:ac:40:25:4d:a6:f1:81:a5:8c:02:cd:62:6e:45: 43:8f:24:6e:ab:92:0b:7e:5a:76:92:e0:e3:11:b6:9e:63:ac: 04:7a:72:11:ca:13:9c:05:a1:8b:9b:5d:e4:44:54:c8:cc:7c: 78:af:5c:07:81:d9:61:26:1c:69:85:db:34:4f:c8:a8:29:bc: ba:c3:c2:27 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICFS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM1RUExMTAvBgNVBAUTKEZEN0M0ODExQzg3QzU2NkVGNTVFREFCMEU3NDNGRjA2 NkI5RkE4NjYwHhcNMjMwNjMwMTcwNjAzWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDlmMGI3Yi0xYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArsqXVxBLWrdk6dIN9hKhjhgcHwwAo6sb5aGzHW8TiSZEyPHcHOQIco0uok+O cuKWI8VS/950goURsZDqij4T9cWRpDCwvRd+SubKIbaT0Tss5LaV7AxFvAcIj2bb 7Ewo9PyWb3uHxCG+X5AxHKH52I4mStGDq85zM6ulpXQniLqpthv/tnLvhDlOg6uQ VJxUkZr9PjHkLUWU49EjrVEap1aG4EkE5XhziyM/LPf3UwuiUm6arQwwyZ7jiUCq eSjIF2JVAFKDhrQ/PzokLKzSeG/Ed53z2aWFmwEdyoeYL/2AG3iItynbyazvhjff nZk8wJjpHVs4ARfmE43ty+1KywIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNppj8sz foZ3hDznWGZJSvRRzf9MMB8GA1UdIwQYMBaAFP18SBHIfFZu9V7asOdD/wZrn6hm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzVFQS8xOURENDY3MDAw QUUxMUU4QkMzQTFGMkZDNEY5QUUwMi9fWHhJRWNoOFZtNzFYdHF3NTBQX0JtdWZx R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19YeElFY2g4Vm03MVh0cXc1MFBfQm11ZnFHWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTM1RUEvMTlERDQ2NzAwMEFFMTFFOEJDM0ExRjJGQzRGOUFFMDIvMDFCMkFDMUUw NjQxMTFFOEE2MkVGNTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAJnWGgDBAN6/LgDBADKFYADBAHKokgDBADLOZEwDQYJKoZI hvcNAQELBQADggEBAAoJuT087SjW+21l6g/GnWA2z2zNSGvo7WK6aLAXskN+QCAn INB5kvJUqKf15W7gmJ9lM4AN0lCztiCbHtPGFMH942KzlyQF1Lb2YuH9TQTOUML9 owPYC5w1EPLor/ztZxpyuFNu32ixwXQt2FPQlASeZIc1+oxAFgPHp5lcZFTFygRM FK+cHmK+MfV36m3S/6YLRJcgmXYNfWts3RMR0DmL8bu/kMEsPtTWqApV7SXYFjyH Fowq856sQCVNpvGBpYwCzWJuRUOPJG6rkgt+WnaS4OMRtp5jrAR6chHKE5wFoYub XeREVMjMfHivXAeB2WEmHGmF2zRPyKgpvLrDwic= -----END CERTIFICATE-----Generated at Fri May 31 20:34:10 2024 by rpki-client on console-ams.rpki-client.org