$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa File: 42A8B35A753911ED9FF88D3DC4F9AE02.roa (raw, json) Hash identifier: JWBypTZYhsNCn+f4AnwL2yPlXSM85B3Y570oOLV/O3M= Subject key identifier: 5A:7D:EF:5F:A0:2A:4E:B3:BD:D1:F9:2E:02:36:2C:5E:50:C1:3A:24 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F22 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa Signing time: Tue 12 Sep 2023 02:44:03 +0000 ROA not before: Tue 12 Sep 2023 02:44:03 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 56141 IP address blocks: 49.156.52.0/22 maxlen: 24 103.101.76.0/22 maxlen: 24 2001:df2:9b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16162 (0x3f22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:44:03 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd073-b6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:60:22:92:d0:34:af:cd:2a:fc:69:58:62: f6:6b:20:bf:af:02:13:7f:eb:ed:f8:c4:46:9c:8a: d8:24:a1:e3:6e:24:44:30:ac:0b:bf:f7:74:99:71: ac:b7:55:4b:d7:28:4b:62:e4:3b:55:ec:1a:7c:63: 7f:57:f6:15:05:b5:5b:a9:9f:8a:24:34:3b:8b:2f: e1:d9:00:0f:a3:11:a5:24:3a:f8:54:0f:bb:70:a9: e9:1b:d9:e6:92:71:0c:d3:2a:54:48:61:0f:49:c6: b7:c0:a8:f2:55:2c:2d:5b:74:67:50:43:43:eb:8e: 44:ef:de:d2:e7:62:26:25:23:7f:12:a2:26:4a:66: d4:57:e8:fe:0f:86:bd:46:c1:a0:81:a6:0b:85:af: 9a:22:9e:b8:45:76:5f:32:d5:42:46:d1:2b:43:67: 55:6b:a8:3b:2a:d6:93:19:cb:a3:74:da:a8:19:cd: 0b:4b:a9:2f:14:a6:11:6e:1f:ac:98:cc:3a:73:b4: a5:a3:93:7b:22:66:e2:13:e4:d8:bb:3c:23:97:4e: ae:51:06:ad:e8:38:03:65:e6:b4:3b:0b:66:5b:54: f0:fa:ab:ca:aa:dd:64:16:57:d2:93:9b:14:5e:9e: 35:62:62:cf:13:af:e5:d6:0b:4a:31:34:e6:5f:75: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7D:EF:5F:A0:2A:4E:B3:BD:D1:F9:2E:02:36:2C:5E:50:C1:3A:24 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42A8B35A753911ED9FF88D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.156.52.0/22 103.101.76.0/22 IPv6: 2001:df2:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 50:75:f5:4c:ae:34:95:82:ad:d4:37:79:2d:87:a2:05:b3:66: 42:e4:d4:f3:46:05:b6:7e:66:8a:7b:d3:69:b1:02:2e:cb:14: 70:96:f1:b6:cf:0f:6d:ef:b9:5f:90:fd:0a:c9:8a:25:c9:b3: 5a:a6:35:3b:0c:fe:8a:c8:11:42:e1:b5:a8:8c:1c:12:51:b3: 45:2d:93:56:34:44:0d:7b:75:0c:79:95:a6:9f:d5:d0:fb:a2: 3a:52:13:68:87:d0:d1:84:8d:34:96:60:ee:e7:9d:2d:78:a5: 0d:31:e0:41:56:75:de:17:8a:64:ff:00:0d:90:18:1a:37:48: 44:70:3d:b4:6b:36:9c:5d:5d:01:ae:60:b2:91:f7:ca:5e:ed: ac:e1:1c:37:e5:3e:7f:b3:5c:27:d6:f5:7e:90:99:18:d0:55: f6:27:8d:ea:40:fa:9c:f0:d0:b5:b0:fe:70:0e:ad:d7:6d:03: 39:3d:50:f0:78:9f:0f:56:c1:1b:3b:01:f4:91:93:e7:e4:67: f9:16:5b:f1:a7:6d:5d:29:cf:67:af:09:9b:cf:34:19:92:b9: a1:5f:0d:b1:fa:7f:30:37:64:4e:bb:e1:16:fe:6b:d4:0f:20: 63:e3:52:53:5a:66:15:33:4c:51:3d:fd:9b:23:98:5d:bd:6f: ad:0d:44:c3 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICPyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0NDAzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA3My1iNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy51gIpLQNK/NKvxpWGL2ayC/rwITf+vt+MRGnIrYJKHjbiREMKwLv/d0mXGs t1VL1yhLYuQ7VewafGN/V/YVBbVbqZ+KJDQ7iy/h2QAPoxGlJDr4VA+7cKnpG9nm knEM0ypUSGEPSca3wKjyVSwtW3RnUEND645E797S52ImJSN/EqImSmbUV+j+D4a9 RsGggaYLha+aIp64RXZfMtVCRtErQ2dVa6g7KtaTGcujdNqoGc0LS6kvFKYRbh+s mMw6c7Slo5N7ImbiE+TYuzwjl06uUQat6DgDZea0OwtmW1Tw+qvKqt1kFlfSk5sU Xp41YmLPE6/l1gtKMTTmX3VnUQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFFp971+g Kk6zvdH5LgI2LF5QwTokMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJBOEIzNUE3 NTM5MTFFRDlGRjg4RDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIxnDQDBAJnZUwwDwQCAAIwCQMHACABDfKbADANBgkqhkiG 9w0BAQsFAAOCAQEAUHX1TK40lYKt1Dd5LYeiBbNmQuTU80YFtn5minvTabECLssU cJbxts8Pbe+5X5D9CsmKJcmzWqY1Owz+isgRQuG1qIwcElGzRS2TVjREDXt1DHmV pp/V0PuiOlITaIfQ0YSNNJZg7uedLXilDTHgQVZ13heKZP8ADZAYGjdIRHA9tGs2 nF1dAa5gspH3yl7trOEcN+U+f7NcJ9b1fpCZGNBV9ieN6kD6nPDQtbD+cA6t120D OT1Q8HifD1bBGzsB9JGT5+Rn+RZb8adtXSnPZ68Jm880GZK5oV8Nsfp/MDdkTrvh Fv5r1A8gY+NSU1pmFTNMUT39myOYXb1vrQ1Eww== -----END CERTIFICATE-----Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org