$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa File: AF0CF752FE6511EE93D6CC3AC4F9AE02.roa (raw, json) Hash identifier: OCfMHEQ1pTT1xbfPNByoCVA5k6DV126K7ZFj3HTMgkg= Subject key identifier: DD:8A:BE:B1:D3:46:B2:F7:91:D1:14:9E:1B:DF:48:F6:01:6A:70:5D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4327 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa Signing time: Fri 19 Apr 2024 16:09:53 +0000 ROA not before: Fri 19 Apr 2024 16:09:53 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 24176 IP address blocks: 101.53.0.0/18 maxlen: 24 119.15.176.0/20 maxlen: 24 119.17.224.0/19 maxlen: 24 202.151.168.0/21 maxlen: 24 210.86.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17191 (0x4327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Apr 19 16:09:53 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=66229751-a2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f5:12:24:65:9c:e8:c3:90:a3:1e:69:eb:ea: 1f:44:25:4f:da:fc:7a:24:c6:63:1c:f9:18:16:59: 57:0b:ba:0b:16:64:6c:a1:f9:51:5d:51:60:7f:dc: b3:73:3e:4d:06:67:fc:c2:7e:55:00:a3:59:3f:e5: 78:fa:35:d1:44:ca:c7:f6:d2:d3:b6:4d:fa:8e:fc: e6:68:89:7c:a3:f8:12:3e:66:7f:a1:15:b4:0f:b2: 10:8a:75:96:e3:1c:e5:ae:48:cf:c5:b8:2c:27:05: 88:45:10:68:dc:2d:08:fc:c0:e4:ca:3f:77:18:92: 7c:92:24:d9:c3:77:71:9e:de:4e:78:7c:2e:ad:b2: 13:85:03:93:5e:12:03:40:29:ff:a5:ee:dd:b8:f7: e9:1a:3a:19:c8:89:de:0e:61:02:4c:89:4a:7d:b6: 5b:f8:5c:45:35:bf:60:0b:4d:37:59:67:c5:54:1d: d1:df:88:f2:56:95:74:3d:a5:5d:52:22:a3:5a:ec: c5:78:f4:3c:70:de:eb:97:e5:fa:e7:01:72:3a:90: 11:31:a0:dd:dc:69:7f:31:86:a7:b9:d1:34:d5:6a: ac:fa:0e:d4:b8:1a:cb:da:de:b9:c8:8b:be:be:9f: 85:da:d7:a3:01:da:b2:fc:f8:7a:a7:9c:30:df:e4: 02:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:BE:B1:D3:46:B2:F7:91:D1:14:9E:1B:DF:48:F6:01:6A:70:5D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/AF0CF752FE6511EE93D6CC3AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.53.0.0/18 119.15.176.0/20 119.17.224.0/19 202.151.168.0/21 210.86.232.0/21 Signature Algorithm: sha256WithRSAEncryption a4:4e:f0:26:cb:8f:dd:4e:6c:05:26:2b:b1:11:80:dc:a7:4d: 22:06:56:56:de:9c:b5:df:aa:01:2c:26:8e:8b:b5:2a:30:da: bf:6c:f6:26:b6:23:34:cf:23:1c:59:02:ca:97:9a:e4:6d:63: c8:df:88:7e:1c:76:0b:85:80:bd:be:54:36:e0:94:f3:e3:fc: 9d:8f:a8:02:2b:7d:c6:ee:35:d1:42:20:7f:f5:44:ec:d6:d5: 8e:43:fc:7e:7c:5b:c8:72:0b:07:f9:94:95:f7:af:4f:f0:d5: ed:84:17:35:82:a5:35:a3:d9:4c:13:60:cd:8b:d0:cc:40:bf: 96:17:e8:37:d2:23:3c:80:8f:dd:0f:cc:ed:28:a2:52:bf:6b: 0d:0c:88:df:3f:ae:dd:15:6f:02:33:fd:f1:8b:01:c9:c1:53: e2:d4:b8:32:ee:eb:28:d2:8a:bb:c6:0e:45:8e:75:4d:d7:a1: 2d:21:28:39:20:95:14:98:8c:1f:20:55:1a:b2:87:ed:5d:92: 32:4f:f6:43:9f:36:d6:1d:65:70:5f:3b:7c:e1:ba:8a:9d:90: 71:ef:38:f7:eb:69:dc:27:d5:b5:8e:58:ad:94:1d:b2:13:f4: fe:db:2b:1e:02:b8:e0:5a:8f:20:48:8e:7b:f5:b9:4b:db:9e: 0c:22:42:d7 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICQycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwNDE5MTYwOTUzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIyOTc1MS1hMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPUSJGWc6MOQox5p6+ofRCVP2vx6JMZjHPkYFllXC7oLFmRsoflRXVFgf9yz cz5NBmf8wn5VAKNZP+V4+jXRRMrH9tLTtk36jvzmaIl8o/gSPmZ/oRW0D7IQinWW 4xzlrkjPxbgsJwWIRRBo3C0I/MDkyj93GJJ8kiTZw3dxnt5OeHwurbIThQOTXhID QCn/pe7duPfpGjoZyIneDmECTIlKfbZb+FxFNb9gC003WWfFVB3R34jyVpV0PaVd UiKjWuzFePQ8cN7rl+X65wFyOpARMaDd3Gl/MYanudE01Wqs+g7UuBrL2t65yIu+ vp+F2tejAdqy/Ph6p5ww3+QCywIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFN2KvrHT RrL3kdEUnhvfSPYBanBdMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQUYwQ0Y3NTJG RTY1MTFFRTkzRDZDQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAZlNQADBAR3D7ADBAV3EeADBAPKl6gDBAPSVugwDQYJKoZI hvcNAQELBQADggEBAKRO8CbLj91ObAUmK7ERgNynTSIGVlbenLXfqgEsJo6LtSow 2r9s9ia2IzTPIxxZAsqXmuRtY8jfiH4cdguFgL2+VDbglPPj/J2PqAIrfcbuNdFC IH/1ROzW1Y5D/H58W8hyCwf5lJX3r0/w1e2EFzWCpTWj2UwTYM2L0MxAv5YX6DfS IzyAj90PzO0oolK/aw0MiN8/rt0VbwIz/fGLAcnBU+LUuDLu6yjSirvGDkWOdU3X oS0hKDkglRSYjB8gVRqyh+1dkjJP9kOfNtYdZXBfO3zhuoqdkHHvOPfradwn1bWO WK2UHbIT9P7bKx4CuOBajyBIjnv1uUvbngwiQtc= -----END CERTIFICATE-----Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org