$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9AB918A02DB811ED94AFED62C4F9AE02.roa File: 9AB918A02DB811ED94AFED62C4F9AE02.roa (raw, json) Hash identifier: HH9mkJdmQFjgndTpJJDPNjIhoYS5pu1z9luZ/jF4wew= Subject key identifier: 99:2C:3F:55:46:5D:43:32:B6:61:08:BC:D5:86:BF:F1:D1:F3:9F:CD Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3E58 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9AB918A02DB811ED94AFED62C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:41:07 +0000 ROA not before: Tue 12 Sep 2023 02:41:07 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 131413 IP address blocks: 27.0.240.0/22 maxlen: 24 103.238.208.0/22 maxlen: 24 2001:df6:1d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15960 (0x3e58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:41:07 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffcfc3-13e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:95:8c:39:a6:f7:6f:be:db:9d:b1:10:f0: 03:c7:fd:fb:91:9d:9b:ad:ed:95:5b:4d:22:04:51: f7:aa:be:3d:3c:32:8c:49:bb:f3:75:17:ca:24:40: d8:d1:d8:51:e7:36:c7:c7:b6:44:b1:2f:9c:1f:28: 0a:ee:21:b5:dc:41:40:8e:e8:ad:28:aa:b1:dd:93: aa:1e:64:f0:d2:ec:75:a3:9e:60:18:f8:07:28:ed: 69:36:a4:b0:9e:d0:ed:bf:38:36:12:84:f3:53:c6: 0a:ca:a0:0e:2f:8c:4f:b1:66:31:e2:cf:87:55:2f: 61:b4:b5:98:f4:e0:ca:d9:ff:26:74:27:89:56:68: a8:db:c9:5e:d9:de:ec:3b:92:be:b4:99:7f:21:ee: bd:8e:49:f2:9b:be:eb:86:ca:51:d1:f7:87:8a:61: 67:ed:1e:50:75:c1:74:59:22:0e:a9:c2:75:1f:86: bc:6c:7b:ed:ed:94:c1:c4:c9:66:b5:54:ff:c0:36: e0:09:a6:87:48:50:4f:1c:fc:06:da:04:0f:88:bf: 89:ee:74:14:34:78:d5:c4:bb:36:2f:35:35:f5:38: 0e:71:4f:e5:15:ae:74:51:11:00:a9:dc:78:6c:ab: 47:73:e4:e3:d1:d9:7f:58:e9:29:33:04:1d:50:38: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2C:3F:55:46:5D:43:32:B6:61:08:BC:D5:86:BF:F1:D1:F3:9F:CD X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9AB918A02DB811ED94AFED62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.0.240.0/22 103.238.208.0/22 IPv6: 2001:df6:1d80::/48 Signature Algorithm: sha256WithRSAEncryption 16:0d:40:17:90:32:1b:1a:57:7a:11:6f:e6:66:18:45:18:cc: a2:43:2b:e2:c1:3b:71:64:92:e0:c7:fa:2a:56:cb:e3:bf:d2: 95:3e:81:fe:48:25:28:c2:9e:dd:21:c8:39:66:f1:c4:48:0a: fb:5b:30:6e:c8:f4:e5:27:f7:b7:26:82:77:de:c0:9e:f4:85: cb:96:f5:ac:d8:4e:57:97:b7:16:03:09:74:59:7c:87:32:1a: 08:83:d9:88:a5:bd:85:79:16:0b:46:f1:43:11:2b:7f:d2:e8: 29:e9:b7:a2:6e:61:34:04:fb:e1:a2:04:7f:b6:da:14:e0:93: 77:80:13:c8:4a:29:c2:7f:3d:9b:53:e9:02:81:c9:fa:01:94: 18:bd:fd:27:6a:78:d6:ad:26:e0:53:05:c4:78:e6:e8:7d:9c: b6:1f:e9:86:48:6c:6e:aa:e1:68:27:15:db:38:e6:4f:88:f2: 28:cb:7a:b0:4f:78:fe:96:83:2e:dd:5c:33:f9:ce:36:3d:5d: a4:40:ee:5c:36:9b:2e:84:f2:45:ad:f3:17:5a:d0:a1:6d:8f: fd:40:b9:32:f1:76:ff:41:20:76:62:7d:03:cf:4f:38:4f:66: 2b:58:ba:3c:ed:3f:4d:03:9a:38:6a:42:dd:45:d9:e7:63:78: 5a:79:2e:32 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICPlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MTA3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmY2ZjMy0xM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3KaVjDmm92++252xEPADx/37kZ2bre2VW00iBFH3qr49PDKMSbvzdRfKJEDY 0dhR5zbHx7ZEsS+cHygK7iG13EFAjuitKKqx3ZOqHmTw0ux1o55gGPgHKO1pNqSw ntDtvzg2EoTzU8YKyqAOL4xPsWYx4s+HVS9htLWY9ODK2f8mdCeJVmio28le2d7s O5K+tJl/Ie69jknym77rhspR0feHimFn7R5QdcF0WSIOqcJ1H4a8bHvt7ZTBxMlm tVT/wDbgCaaHSFBPHPwG2gQPiL+J7nQUNHjVxLs2LzU19TgOcU/lFa50UREAqdx4 bKtHc+Tj0dl/WOkpMwQdUDhVZwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJksP1VG XUMytmEIvNWGv/HR85/NMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOUFCOTE4QTAy REI4MTFFRDk0QUZFRDYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIbAPADBAJn7tAwDwQCAAIwCQMHACABDfYdgDANBgkqhkiG 9w0BAQsFAAOCAQEAFg1AF5AyGxpXehFv5mYYRRjMokMr4sE7cWSS4Mf6KlbL47/S lT6B/kglKMKe3SHIOWbxxEgK+1swbsj05Sf3tyaCd97AnvSFy5b1rNhOV5e3FgMJ dFl8hzIaCIPZiKW9hXkWC0bxQxErf9LoKem3om5hNAT74aIEf7baFOCTd4ATyEop wn89m1PpAoHJ+gGUGL39J2p41q0m4FMFxHjm6H2cth/phkhsbqrhaCcV2zjmT4jy KMt6sE94/paDLt1cM/nONj1dpEDuXDabLoTyRa3zF1rQoW2P/UC5MvF2/0EgdmJ9 A89POE9mK1i6PO0/TQOaOGpC3UXZ52N4WnkuMg== -----END CERTIFICATE-----Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org