$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa File: A4BC2B80195911ED9A037633C4F9AE02.roa (raw, json) Hash identifier: Cs21WrjALRb4HGuvCcmfidtE32bGfEdrRuoJBDfwOTE= Subject key identifier: 95:20:76:8B:D2:9C:89:0D:09:3F:C2:BA:11:FE:EA:15:39:9A:34:03 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 402D Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa Signing time: Mon 30 Oct 2023 09:14:51 +0000 ROA not before: Mon 30 Oct 2023 09:14:51 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 131423 IP address blocks: 42.96.16.0/20 maxlen: 24 45.119.212.0/22 maxlen: 24 103.48.84.0/22 maxlen: 24 103.48.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 14:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16429 (0x402d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 30 09:14:51 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=653f740b-8684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ba:92:77:aa:91:d6:37:60:99:a4:c5:bb:76: 2d:1e:8d:f3:cf:08:a4:49:f9:69:eb:46:1b:90:b6: 00:80:a5:4d:2d:34:c8:6d:0a:4d:8c:f7:c8:c6:c6: 32:1d:16:80:69:78:15:13:da:22:45:e1:56:96:e2: 65:7e:2f:92:dc:12:7a:a3:27:7f:d4:a1:96:9d:28: e8:cf:1f:b4:e7:6e:81:64:85:26:8d:5a:8b:ce:19: 69:61:7c:c2:4a:59:7a:cb:a8:5c:b3:cb:a4:bf:b6: d8:d6:95:8f:64:05:43:6c:ba:f0:c3:f9:98:1a:48: 75:1e:0e:37:95:82:87:b3:96:e6:4b:e5:a1:25:a7: b3:b4:6c:7a:5c:ea:8b:6c:71:c7:e6:0b:b8:82:bb: 0e:f8:6e:0f:6e:be:e3:c5:ed:c1:10:81:c4:bc:37: cf:21:48:51:71:b9:f2:ee:9f:f2:a0:96:eb:2f:d5: 86:6a:b0:9d:70:30:e5:7d:6c:67:7e:83:b0:39:18: b1:83:6a:e7:8d:fb:4c:74:75:67:1b:04:75:b8:dc: 00:92:e1:d1:82:67:7b:e0:44:09:bf:e4:eb:dc:f1: 74:01:47:70:ad:03:ec:ed:e9:bc:80:3a:e0:56:2b: f6:1e:42:ed:9c:9f:fb:e0:39:01:81:9e:4d:0b:6c: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:20:76:8B:D2:9C:89:0D:09:3F:C2:BA:11:FE:EA:15:39:9A:34:03 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A4BC2B80195911ED9A037633C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 42.96.16.0/20 45.119.212.0/22 103.48.84.0/22 103.48.192.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:4e:c2:92:e6:e8:7f:d4:ef:ff:c2:85:82:98:c0:dd:fb:19: 58:4d:1f:f7:ed:44:81:47:f4:2d:79:74:71:89:44:e3:ff:25: 24:d4:cb:9b:cb:06:55:86:e1:9e:95:12:fc:48:64:d3:c9:31: c3:be:d3:63:8a:b0:7e:40:af:21:b8:ff:97:20:6b:59:e2:b0: 95:b3:c8:51:d4:33:e2:44:e3:10:c1:28:ae:ae:d6:6d:0e:c4: 33:c4:6d:00:94:d1:17:a2:d8:98:03:5c:83:22:ba:dc:22:e9: 01:15:69:9c:96:6c:79:fc:4f:69:ed:38:89:bf:ad:84:ca:36: aa:ba:18:e3:39:55:cf:e0:46:0d:bd:f8:05:fc:8c:e8:2e:79: 93:b0:0c:67:ef:6d:c1:04:bf:f7:86:38:3a:1c:76:fe:2c:cd: 35:5b:b0:70:11:e3:82:f6:a0:3c:ea:21:d8:94:11:ab:56:d2: fa:d0:af:43:c1:94:8b:5e:91:0c:7b:d9:20:ba:eb:80:17:cd: b7:43:b8:e8:90:ab:75:9a:e3:82:35:4c:8f:42:88:97:0b:0e: 31:96:dc:f4:59:51:f3:41:f5:62:80:6d:37:a1:cb:3e:34:ee: 80:9b:10:a2:60:51:8c:85:ab:70:01:28:bc:0f:0f:07:2d:45: 31:25:ec:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICQC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMxMDMwMDkxNDUxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNmNzQwYi04Njg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA67qSd6qR1jdgmaTFu3YtHo3zzwikSflp60YbkLYAgKVNLTTIbQpNjPfIxsYy HRaAaXgVE9oiReFWluJlfi+S3BJ6oyd/1KGWnSjozx+0526BZIUmjVqLzhlpYXzC Sll6y6hcs8ukv7bY1pWPZAVDbLrww/mYGkh1Hg43lYKHs5bmS+WhJaeztGx6XOqL bHHH5gu4grsO+G4Pbr7jxe3BEIHEvDfPIUhRcbny7p/yoJbrL9WGarCdcDDlfWxn foOwORixg2rnjftMdHVnGwR1uNwAkuHRgmd74EQJv+Tr3PF0AUdwrQPs7em8gDrg Viv2HkLtnJ/74DkBgZ5NC2yoJQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFJUgdovS nIkNCT/CuhH+6hU5mjQDMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTRCQzJCODAx OTU5MTFFRDlBMDM3NjMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAQqYBADBAItd9QDBAJnMFQDBAJnMMAwDQYJKoZIhvcNAQEL BQADggEBADpOwpLm6H/U7//ChYKYwN37GVhNH/ftRIFH9C15dHGJROP/JSTUy5vL BlWG4Z6VEvxIZNPJMcO+02OKsH5AryG4/5cga1nisJWzyFHUM+JE4xDBKK6u1m0O xDPEbQCU0Rei2JgDXIMiutwi6QEVaZyWbHn8T2ntOIm/rYTKNqq6GOM5Vc/gRg29 +AX8jOgueZOwDGfvbcEEv/eGODocdv4szTVbsHAR44L2oDzqIdiUEatW0vrQr0PB lItekQx72SC664AXzbdDuOiQq3Wa44I1TI9CiJcLDjGW3PRZUfNB9WKAbTehyz40 7oCbEKJgUYyFq3ABKLwPDwctRTEl7DI= -----END CERTIFICATE-----Generated at Fri Jun 14 16:49:42 2024 by rpki-client on console-fra.rpki-client.org