$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1637570ECDDB11ED90586709C4F9AE02.roa File: 1637570ECDDB11ED90586709C4F9AE02.roa (raw, json) Hash identifier: g7wFobfalmW/wmbyCgGd2nTAlyFImj+xRM3IBeJa5yw= Subject key identifier: 79:16:65:54:DF:D2:75:DB:61:15:C0:D4:BB:0E:79:80:FB:44:CC:6C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3EF5 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1637570ECDDB11ED90586709C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:43:25 +0000 ROA not before: Tue 12 Sep 2023 02:43:25 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 24085 IP address blocks: 116.193.64.0/20 maxlen: 24 120.72.80.0/21 maxlen: 24 120.72.96.0/19 maxlen: 24 202.78.224.0/21 maxlen: 24 210.2.64.0/18 maxlen: 24 2403:6000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16117 (0x3ef5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:43:25 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd04d-0e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:cc:11:f2:58:d2:89:1a:82:64:9f:f5:45:08: 80:30:b3:2c:94:e0:8c:00:e3:80:fd:12:20:73:2a: 49:8c:f6:a3:1c:9f:34:c8:32:14:40:69:e8:54:3f: 74:53:8c:3a:19:7f:4f:b1:5c:d3:e6:a4:b0:70:aa: 15:56:72:6b:4a:cb:dd:8f:f8:35:75:2e:25:dd:d1: b9:5c:96:ef:4b:a3:f4:05:7e:ed:b3:27:ce:ed:3d: 42:ad:ce:42:cc:9c:23:bb:94:35:f3:10:93:89:61: e4:99:97:8e:a2:c9:04:cb:7b:30:b2:ff:67:60:48: 8f:85:0f:0f:e0:c6:a9:82:15:aa:76:dc:98:af:dd: 84:bc:20:69:db:1f:68:b6:fb:2b:46:51:84:8e:46: 32:8b:31:ca:83:0c:79:60:f7:cc:e9:8c:96:b1:16: d3:f9:3d:03:1c:02:21:46:d3:ad:b8:ae:0b:5e:e5: 4b:d1:72:f3:70:08:8b:23:a0:af:70:bb:1d:4b:7e: e3:5e:ff:f1:d5:9d:db:df:2b:2c:0e:d9:cf:c8:4b: e4:20:41:83:13:a3:10:a7:e2:be:ca:3e:11:0e:dc: 62:e4:ee:f9:e9:7a:b8:d2:73:aa:cf:e8:e8:55:a7: 07:0f:52:12:b0:d5:39:0b:72:c3:f6:f3:2e:2e:fa: 01:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:16:65:54:DF:D2:75:DB:61:15:C0:D4:BB:0E:79:80:FB:44:CC:6C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1637570ECDDB11ED90586709C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.64.0/20 120.72.80.0/21 120.72.96.0/19 202.78.224.0/21 210.2.64.0/18 IPv6: 2403:6000::/32 Signature Algorithm: sha256WithRSAEncryption 02:31:82:31:93:90:f8:57:9a:f6:66:3a:7b:2f:55:f3:9a:58: 40:0f:d0:22:03:37:23:a7:75:32:14:43:d4:35:af:c6:de:ef: 91:7c:e8:06:47:4a:e1:be:ae:e6:b2:d2:12:c7:ee:28:42:69: e1:35:d8:32:ef:fe:22:19:d6:69:19:a8:33:d8:63:65:b4:8a: b1:39:3d:a1:0c:f7:39:c7:1e:37:04:d5:f0:99:8d:99:b2:04: 03:5c:8f:12:56:1c:5c:75:8d:44:f5:f7:1c:6f:50:98:f1:47: c4:95:0a:e8:3b:dd:f3:ec:ec:58:9b:8b:07:2f:a8:6f:a0:e6: af:00:de:0a:42:54:21:5c:35:98:f9:01:26:98:5a:d4:d1:b4: 97:1a:0f:78:cf:6f:6c:5e:f3:3e:32:ba:f8:83:fc:fb:6e:dd: 82:ee:f1:96:08:cf:07:c8:8c:64:06:07:d5:c5:e9:17:dd:4d: 08:c8:48:7e:c6:e2:11:41:4e:de:52:7d:fd:9c:00:b7:23:28: 1c:fb:ac:5e:16:0d:00:2e:13:a9:a9:fe:ee:70:e5:8e:2e:47: f4:62:c5:9f:fa:bc:dc:b3:02:f0:ac:6c:7a:3a:10:c6:e1:b6: a3:5d:f5:4c:2e:73:fe:c5:2e:78:ea:8c:f6:2f:5c:6f:61:28: df:80:9e:78 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICPvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzI1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA0ZC0wZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9MwR8ljSiRqCZJ/1RQiAMLMslOCMAOOA/RIgcypJjPajHJ80yDIUQGnoVD90 U4w6GX9PsVzT5qSwcKoVVnJrSsvdj/g1dS4l3dG5XJbvS6P0BX7tsyfO7T1Crc5C zJwju5Q18xCTiWHkmZeOoskEy3swsv9nYEiPhQ8P4MapghWqdtyYr92EvCBp2x9o tvsrRlGEjkYyizHKgwx5YPfM6YyWsRbT+T0DHAIhRtOtuK4LXuVL0XLzcAiLI6Cv cLsdS37jXv/x1Z3b3yssDtnPyEvkIEGDE6MQp+K+yj4RDtxi5O756Xq40nOqz+jo VacHD1ISsNU5C3LD9vMuLvoB0QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFHkWZVTf 0nXbYRXA1LsOeYD7RMxsMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMTYzNzU3MEVD RERCMTFFRDkwNTg2NzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAR0wUADBAN4SFADBAV4SGADBAPKTuADBAbSAkAwDQQCAAIw BwMFACQDYAAwDQYJKoZIhvcNAQELBQADggEBAAIxgjGTkPhXmvZmOnsvVfOaWEAP 0CIDNyOndTIUQ9Q1r8be75F86AZHSuG+ruay0hLH7ihCaeE12DLv/iIZ1mkZqDPY Y2W0irE5PaEM9znHHjcE1fCZjZmyBANcjxJWHFx1jUT19xxvUJjxR8SVCug73fPs 7FibiwcvqG+g5q8A3gpCVCFcNZj5ASaYWtTRtJcaD3jPb2xe8z4yuviD/Ptu3YLu 8ZYIzwfIjGQGB9XF6RfdTQjISH7G4hFBTt5Sff2cALcjKBz7rF4WDQAuE6mp/u5w 5Y4uR/RixZ/6vNyzAvCsbHo6EMbhtqNd9Uwuc/7FLnjqjPYvXG9hKN+Anng= -----END CERTIFICATE-----Generated at Fri May 31 16:41:39 2024 by rpki-client on console-ams.rpki-client.org