$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A86D8A14784911EC9A6B8D30C4F9AE02.roa File: A86D8A14784911EC9A6B8D30C4F9AE02.roa (raw, json) Hash identifier: ax556ugKwfun/NsA5uoapQFVZStmu5TdJ/IOAI+7YzY= Subject key identifier: 06:AD:60:3F:23:8E:D0:05:C3:5E:5D:24:FF:80:FA:E7:59:E5:F9:B0 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4654 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A86D8A14784911EC9A6B8D30C4F9AE02.roa Signing time: Thu 05 Sep 2024 03:35:57 +0000 ROA not before: Thu 05 Sep 2024 03:35:57 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 45538 IP address blocks: 43.239.224.0/22 maxlen: 24 45.117.164.0/22 maxlen: 24 103.15.48.0/22 maxlen: 24 103.234.36.0/22 maxlen: 24 103.237.148.0/22 maxlen: 24 103.249.100.0/22 maxlen: 24 112.78.0.0/20 maxlen: 24 125.253.112.0/20 maxlen: 24 2401:75a0::/48 maxlen: 48 2405:7bc0::/48 maxlen: 48 2405:9d80::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Oct 2024 14:33:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18004 (0x4654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 5 03:35:57 2024 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=66d9271d-c071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:3a:1d:58:0b:7e:9c:37:6b:df:aa:d7:35: 51:06:af:57:71:59:b5:ce:d4:e8:cc:27:47:b3:19: 16:7e:3d:73:6b:fc:3d:06:24:18:28:a3:7e:8e:c7: 03:0e:50:97:ac:15:ea:b0:b0:ef:e9:e4:ea:8c:b9: da:b5:1e:b2:5f:60:d6:32:b2:e5:59:41:33:c5:e1: e6:59:6c:6b:14:b7:f7:13:19:38:f9:6e:07:9b:3e: eb:22:13:61:75:e4:8a:b2:3d:f6:da:45:ba:73:0f: 51:e1:2d:ad:d7:b8:75:e1:b6:19:a3:b5:aa:de:df: 8c:f9:5e:71:62:25:2a:c7:5c:32:60:eb:b1:2a:12: b6:2d:3f:39:62:cb:42:ae:48:12:fc:2d:4f:21:30: 2e:12:2d:a7:fe:47:01:74:ec:36:a3:d1:7e:e3:3b: fe:e2:b2:46:5a:4b:60:81:7f:b9:83:47:0d:13:57: 6f:36:66:47:3a:bd:b3:d0:cf:c4:5b:f7:b1:ea:e8: 98:de:d1:bb:cb:11:c1:96:eb:e3:4a:00:f9:73:0f: 5e:72:d7:a1:43:52:9b:1b:4b:93:ee:1c:fd:dc:69: 00:5d:65:12:4f:10:52:4e:37:9c:67:f0:d0:ac:d6: a6:8d:3e:6e:35:e9:0b:a1:d0:a4:14:80:a8:27:9a: ce:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AD:60:3F:23:8E:D0:05:C3:5E:5D:24:FF:80:FA:E7:59:E5:F9:B0 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/A86D8A14784911EC9A6B8D30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.239.224.0/22 45.117.164.0/22 103.15.48.0/22 103.234.36.0/22 103.237.148.0/22 103.249.100.0/22 112.78.0.0/20 125.253.112.0/20 IPv6: 2401:75a0::/48 2405:7bc0::/48 2405:9d80::/32 Signature Algorithm: sha256WithRSAEncryption a4:c3:bd:44:70:78:d1:65:50:22:39:08:92:23:2f:80:aa:64: 0e:16:9a:17:32:5f:d9:fd:af:f5:7f:45:1f:29:5b:a3:95:27: a1:2a:91:8f:0c:e3:d1:58:3f:c1:17:a6:fe:f0:ab:8f:ca:82: 98:00:09:c2:29:24:9d:93:7f:12:3a:b5:55:02:e0:6a:8a:48: 33:27:55:03:0a:cd:91:4a:c6:25:68:2e:28:0c:fb:aa:62:86: 20:a8:aa:84:b5:d4:b4:ed:35:a7:e8:22:a3:9a:dc:df:f3:78: f3:51:45:0c:43:9d:90:54:f9:ed:40:93:15:55:ac:4c:e1:5d: cf:ca:47:19:76:7c:51:47:e0:e4:6e:23:27:3f:f0:b8:7c:43: 41:6b:87:1a:b6:d7:4d:4c:c1:0d:5f:2b:60:3f:44:c7:bc:e8: 17:26:54:25:c8:e8:fe:0e:fd:79:1d:a2:3d:3c:a4:94:35:58: 0c:60:3b:41:07:18:eb:f3:4f:9c:1e:fb:5a:5d:68:9b:b2:ff: c7:e9:3a:99:21:d5:8c:90:35:e4:b1:55:06:ba:d3:26:1a:e0: 83:46:38:a7:49:1f:8a:28:52:19:83:f8:98:80:a6:48:e9:16: 9a:de:a9:2b:d9:7e:2f:55:7c:5f:60:b7:2f:70:78:0a:b2:e2: ac:0e:f1:e2 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICRlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwOTA1MDMzNTU3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ5MjcxZC1jMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ek6HVgLfpw3a9+q1zVRBq9XcVm1ztTozCdHsxkWfj1za/w9BiQYKKN+jscD DlCXrBXqsLDv6eTqjLnatR6yX2DWMrLlWUEzxeHmWWxrFLf3Exk4+W4Hmz7rIhNh deSKsj322kW6cw9R4S2t17h14bYZo7Wq3t+M+V5xYiUqx1wyYOuxKhK2LT85YstC rkgS/C1PITAuEi2n/kcBdOw2o9F+4zv+4rJGWktggX+5g0cNE1dvNmZHOr2z0M/E W/ex6uiY3tG7yxHBluvjSgD5cw9ectehQ1KbG0uT7hz93GkAXWUSTxBSTjecZ/DQ rNamjT5uNekLodCkFICoJ5rOgQIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFAatYD8j jtAFw15dJP+A+udZ5fmwMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQTg2RDhBMTQ3 ODQ5MTFFQzlBNkI4RDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMDYEAgABMDADBAIr7+ADBAItdaQDBAJnDzADBAJn6iQDBAJn7ZQDBAJn+WQD BARwTgADBAR9/XAwHwQCAAIwGQMHACQBdaAAAAMHACQFe8AAAAMFACQFnYAwDQYJ KoZIhvcNAQELBQADggEBAKTDvURweNFlUCI5CJIjL4CqZA4WmhcyX9n9r/V/RR8p W6OVJ6EqkY8M49FYP8EXpv7wq4/KgpgACcIpJJ2TfxI6tVUC4GqKSDMnVQMKzZFK xiVoLigM+6pihiCoqoS11LTtNafoIqOa3N/zePNRRQxDnZBU+e1AkxVVrEzhXc/K Rxl2fFFH4ORuIyc/8Lh8Q0Frhxq2101MwQ1fK2A/RMe86BcmVCXI6P4O/Xkdoj08 pJQ1WAxgO0EHGOvzT5we+1pdaJuy/8fpOpkh1YyQNeSxVQa60yYa4INGOKdJH4oo UhmD+JiApkjpFpreqSvZfi9VfF9gty9weAqy4qwO8eI= -----END CERTIFICATE-----Generated at Sat Sep 28 16:20:31 2024 by rpki-client on console-ams.rpki-client.org