$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7ADA1A6C8F4F11EEB5BB7E7EC4F9AE02.roa File: 7ADA1A6C8F4F11EEB5BB7E7EC4F9AE02.roa (raw, json) Hash identifier: 1eGPekoi/HEbAcS0F4xI3D7mLhPx3cTNws1mb2khy78= Subject key identifier: 00:9F:A2:E6:1B:06:7D:20:3B:1B:3E:E5:27:2B:D8:CC:5A:F1:CF:93 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 41F1 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7ADA1A6C8F4F11EEB5BB7E7EC4F9AE02.roa Signing time: Mon 29 Jan 2024 07:16:23 +0000 ROA not before: Mon 29 Jan 2024 07:16:23 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150862 IP address blocks: 36.50.24.0/23 maxlen: 23 36.50.134.0/23 maxlen: 23 203.145.46.0/23 maxlen: 23 2401:5120::/48 maxlen: 48 2401:5b20::/48 maxlen: 48 2401:7160::/48 maxlen: 48 2401:71a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16881 (0x41f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jan 29 07:16:23 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65b750c7-381f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:09:30:d3:bc:02:14:ac:fd:97:e0:3a:8b: 1f:42:6b:c3:87:3d:0d:77:c5:c7:72:9c:c8:7a:3c: c9:b2:86:13:85:e4:a8:3a:9b:83:e4:0e:a2:45:c1: 99:b0:6e:de:83:93:2f:37:73:83:b4:71:2c:91:40: 75:af:b5:06:21:5c:45:34:87:02:0c:cf:1b:fe:ec: 56:85:16:a6:33:f6:41:cc:a0:93:4a:d7:da:e4:ca: f0:84:c8:7c:94:47:b8:ec:ab:2c:c3:20:91:21:c8: 88:41:a9:33:e2:e5:2d:03:e0:9d:3e:6e:a3:26:1d: 90:ee:83:5a:0e:4d:83:5c:a7:e3:16:d5:b2:78:5e: 39:bc:23:81:26:0c:e4:76:f8:ac:52:4a:cf:a8:76: e3:ea:7a:07:ec:74:dd:59:5b:ff:f8:90:6a:5e:e8: a7:6c:bd:74:c4:ff:ef:ff:68:cc:8e:98:d2:11:07: a6:35:35:88:c5:ee:34:a9:63:c8:22:70:b8:6d:38: 13:75:7a:98:a6:98:0b:ee:71:cc:79:ed:68:c6:b2: 61:4a:72:5f:af:cb:ce:72:d8:b9:5f:9f:d0:34:66: f2:a5:f1:de:ab:12:0f:38:46:c6:fa:3b:7f:22:58: 13:46:7c:2c:26:39:5e:f2:ea:ab:0d:82:b4:6d:e7: 15:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:A2:E6:1B:06:7D:20:3B:1B:3E:E5:27:2B:D8:CC:5A:F1:CF:93 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7ADA1A6C8F4F11EEB5BB7E7EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.24.0/23 36.50.134.0/23 203.145.46.0/23 IPv6: 2401:5120::/48 2401:5b20::/48 2401:7160::/48 2401:71a0::/48 Signature Algorithm: sha256WithRSAEncryption 4c:f5:a7:69:e8:97:2c:69:d9:aa:eb:10:a7:5a:aa:10:5c:b9: ff:3b:d8:be:13:d1:91:55:b9:bd:e3:1d:75:12:6a:c0:6e:e2: 83:0b:8b:0a:75:35:7e:74:b3:cc:83:ca:de:cc:39:cd:c1:13: 0a:2d:33:d3:8d:a5:73:2b:55:9b:d8:e4:57:54:68:92:1a:24: 22:ae:62:dc:b7:ac:6b:ef:e5:ff:83:77:ec:3b:7e:18:a1:a0: 75:5d:dc:0d:67:bf:02:d1:84:e2:de:88:61:a4:19:0a:9f:72: eb:95:ee:6c:5c:ac:6c:41:41:e2:00:da:b4:32:29:25:43:ec: 2c:33:8d:10:48:a8:ad:37:5d:fe:fe:37:5b:b7:bf:dc:ed:73: 46:57:6f:0d:01:ef:6a:f2:1a:10:61:e1:6f:04:58:8a:e6:30: 17:da:6b:1f:7e:bf:d3:38:45:2e:7d:dc:34:2c:e0:b3:83:3e: 02:07:bf:a9:0a:b6:d0:f1:1c:cc:f5:db:bf:e2:25:32:e0:45: 5b:5b:8e:63:d6:7f:d7:30:ac:cc:e0:5c:ff:34:51:2e:69:a8: 25:e5:36:db:58:2f:ce:33:65:30:0c:cb:f2:8f:5f:c2:a6:3a: 51:3d:5d:5d:25:bf:d3:6e:71:bd:8c:04:65:ba:78:8c:5b:46: 92:f6:73:0c -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgICQfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwMTI5MDcxNjIzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWI3NTBjNy0zODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt4JMNO8AhSs/ZfgOosfQmvDhz0Nd8XHcpzIejzJsoYTheSoOpuD5A6iRcGZ sG7eg5MvN3ODtHEskUB1r7UGIVxFNIcCDM8b/uxWhRamM/ZBzKCTStfa5MrwhMh8 lEe47KsswyCRIciIQakz4uUtA+CdPm6jJh2Q7oNaDk2DXKfjFtWyeF45vCOBJgzk dvisUkrPqHbj6noH7HTdWVv/+JBqXuinbL10xP/v/2jMjpjSEQemNTWIxe40qWPI InC4bTgTdXqYppgL7nHMee1oxrJhSnJfr8vOcti5X5/QNGbypfHeqxIPOEbG+jt/ IlgTRnwsJjle8uqrDYK0becVpQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFACfouYb Bn0gOxs+5Scr2Mxa8c+TMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvN0FEQTFBNkM4 RjRGMTFFRUI1QkI3RTdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVwYIKwYBBQUHAQcBAf8E SDBGMBgEAgABMBIDBAEkMhgDBAEkMoYDBAHLkS4wKgQCAAIwJAMHACQBUSAAAAMH ACQBWyAAAAMHACQBcWAAAAMHACQBcaAAADANBgkqhkiG9w0BAQsFAAOCAQEATPWn aeiXLGnZqusQp1qqEFy5/zvYvhPRkVW5veMddRJqwG7igwuLCnU1fnSzzIPK3sw5 zcETCi0z042lcytVm9jkV1RokhokIq5i3Lesa+/l/4N37Dt+GKGgdV3cDWe/AtGE 4t6IYaQZCp9y65XubFysbEFB4gDatDIpJUPsLDONEEiorTdd/v43W7e/3O1zRldv DQHvavIaEGHhbwRYiuYwF9prH36/0zhFLn3cNCzgs4M+Age/qQq20PEczPXbv+Il MuBFW1uOY9Z/1zCszOBc/zRRLmmoJeU221gvzjNlMAzL8o9fwqY6UT1dXSW/025x vYwEZbp4jFtGkvZzDA== -----END CERTIFICATE-----Generated at Fri May 31 16:41:40 2024 by rpki-client on console-ams.rpki-client.org