$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa File: C0E4891CCE1511EDAA593314C4F9AE02.roa (raw, json) Hash identifier: 6tZbYsUjA9QnA2QljvKLF+kT75Dt5lCFA8uw3/tvobs= Subject key identifier: 23:06:B3:80:DB:1A:F0:75:E6:84:C4:06:65:7F:88:E7:44:17:59:2D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F1B Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa Signing time: Tue 12 Sep 2023 02:43:58 +0000 ROA not before: Tue 12 Sep 2023 02:43:58 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 55313 IP address blocks: 27.118.16.0/20 maxlen: 24 45.126.92.0/22 maxlen: 24 103.245.148.0/22 maxlen: 24 2400:9bc0::/32 maxlen: 32 2400:9bc0::/48 maxlen: 48 2400:9bc0:1::/48 maxlen: 48 2400:9bc0:2::/48 maxlen: 48 2400:9bc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16155 (0x3f1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:43:58 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd06d-cece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:6a:4a:82:aa:db:aa:05:ff:bd:7c:e0:64: 6b:43:cb:67:42:e4:dd:d4:7e:21:a0:49:88:0d:a5: bd:a4:1d:13:d2:18:6e:9d:01:9a:e4:24:7d:fd:0d: 6a:10:85:fe:dc:96:1a:8d:30:58:35:47:da:88:a3: 92:a4:74:dd:cb:b2:3e:24:de:46:5a:4a:6b:ab:34: 2b:18:ec:9a:74:60:14:84:21:09:b6:02:21:2d:13: 4b:a7:12:3c:bc:a7:1e:a9:3e:b1:60:4a:13:79:44: 50:ff:b8:86:e7:6e:b3:76:78:51:59:06:fe:08:f1: d2:00:ec:88:1d:d1:9d:75:96:cf:6b:5d:57:3c:49: db:a9:22:31:79:fd:28:76:7c:8f:d3:68:35:0e:4b: c5:8d:bd:24:cb:a7:af:85:4b:bd:bd:95:33:82:e3: f9:ae:44:83:5c:27:99:e2:c0:2f:da:57:a3:1f:8c: 87:93:b0:26:c5:d4:c1:3e:12:23:d3:fa:af:2d:11: 7c:f6:57:b1:b5:46:0f:c8:3d:52:1d:c0:86:44:34: f1:97:f7:b5:3e:3b:7b:43:e3:51:e1:01:51:a1:98: 44:75:37:67:9a:42:c1:3f:8f:e8:3a:db:de:53:c3: 45:70:cb:60:c7:6e:58:18:5a:13:01:39:8a:09:9c: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:06:B3:80:DB:1A:F0:75:E6:84:C4:06:65:7F:88:E7:44:17:59:2D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C0E4891CCE1511EDAA593314C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.118.16.0/20 45.126.92.0/22 103.245.148.0/22 IPv6: 2400:9bc0::/32 Signature Algorithm: sha256WithRSAEncryption 90:6e:2c:34:0a:18:78:82:d8:2c:46:77:d6:f2:bb:c2:7b:d5: ea:28:1a:ed:41:01:53:a1:3d:70:4d:f3:10:7f:11:ae:ed:4e: 2a:90:bd:f0:d7:91:7d:df:f5:d0:c6:63:62:cc:00:64:2a:e0: be:a6:28:da:ba:cf:4e:6a:98:fe:4c:c6:df:ad:aa:ba:40:a1: 7c:fe:dd:e8:41:53:77:d2:da:ee:ac:82:21:bd:5a:44:ed:a4: 19:a8:d3:06:a2:eb:11:bb:bc:88:a4:63:47:91:84:6c:1e:75: 83:98:2d:80:1f:d8:57:cd:28:77:b5:94:50:24:56:c8:5e:1c: 2b:bb:a2:65:30:c7:29:eb:2a:19:83:de:27:e9:01:09:5b:4e: 8d:31:ea:bf:2e:ff:46:48:9b:56:ae:3c:c3:42:86:11:e1:81: 6a:bc:be:67:71:ee:0a:c9:76:fc:33:3c:14:f8:fc:b7:27:4e: 20:be:8c:f1:c4:5d:ed:19:c7:61:fc:ca:6d:3b:4f:d6:96:54: 65:71:f1:b2:41:20:68:3f:38:16:78:c3:8d:b4:91:79:b4:3e: 49:2a:95:d1:0d:00:62:72:60:21:15:11:59:7d:75:e2:07:99: 26:62:2f:e0:dd:02:9c:ae:29:dd:07:97:1b:5b:6e:3c:2d:bc: 1f:b1:8b:59 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICPxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0MzU4WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA2ZC1jZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSFqSoKq26oF/7184GRrQ8tnQuTd1H4hoEmIDaW9pB0T0hhunQGa5CR9/Q1q EIX+3JYajTBYNUfaiKOSpHTdy7I+JN5GWkprqzQrGOyadGAUhCEJtgIhLRNLpxI8 vKceqT6xYEoTeURQ/7iG526zdnhRWQb+CPHSAOyIHdGddZbPa11XPEnbqSIxef0o dnyP02g1DkvFjb0ky6evhUu9vZUzguP5rkSDXCeZ4sAv2lejH4yHk7AmxdTBPhIj 0/qvLRF89lextUYPyD1SHcCGRDTxl/e1Pjt7Q+NR4QFRoZhEdTdnmkLBP4/oOtve U8NFcMtgx25YGFoTATmKCZyi4wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCMGs4Db GvB15oTEBmV/iOdEF1ktMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzBFNDg5MUND RTE1MTFFREFBNTkzMzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAQbdhADBAItflwDBAJn9ZQwDQQCAAIwBwMFACQAm8AwDQYJ KoZIhvcNAQELBQADggEBAJBuLDQKGHiC2CxGd9byu8J71eooGu1BAVOhPXBN8xB/ Ea7tTiqQvfDXkX3f9dDGY2LMAGQq4L6mKNq6z05qmP5Mxt+tqrpAoXz+3ehBU3fS 2u6sgiG9WkTtpBmo0wai6xG7vIikY0eRhGwedYOYLYAf2FfNKHe1lFAkVsheHCu7 omUwxynrKhmD3ifpAQlbTo0x6r8u/0ZIm1auPMNChhHhgWq8vmdx7grJdvwzPBT4 /LcnTiC+jPHEXe0Zx2H8ym07T9aWVGVx8bJBIGg/OBZ4w420kXm0PkkqldENAGJy YCEVEVl9deIHmSZiL+DdApyuKd0HlxtbbjwtvB+xi1k= -----END CERTIFICATE-----Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org