$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C37D2CF6EB4C11EE9CC1C80DC4F9AE02.roa File: C37D2CF6EB4C11EE9CC1C80DC4F9AE02.roa (raw, json) Hash identifier: ztAXoU0ZOS/4jg2gjMMRoKdXBG0yGeKkzNU+gkf8s4M= Subject key identifier: 75:57:32:D1:52:33:33:69:CB:8B:09:0E:E4:46:C0:F5:F6:84:32:52 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4249 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C37D2CF6EB4C11EE9CC1C80DC4F9AE02.roa Signing time: Tue 26 Mar 2024 08:46:34 +0000 ROA not before: Tue 26 Mar 2024 08:46:34 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 131392 IP address blocks: 103.18.4.0/22 maxlen: 24 118.27.192.0/19 maxlen: 24 137.59.104.0/22 maxlen: 24 150.95.16.0/22 maxlen: 24 150.95.104.0/21 maxlen: 24 150.95.112.0/21 maxlen: 24 150.95.120.0/21 maxlen: 24 163.44.192.0/22 maxlen: 24 163.44.200.0/24 maxlen: 24 163.44.205.0/24 maxlen: 24 163.44.206.0/23 maxlen: 24 2404:f080::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16969 (0x4249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Mar 26 08:46:34 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=66028b6a-428c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ad:34:6b:c2:f9:81:f9:a6:8f:62:29:95:1c: 0d:2d:48:4f:57:e0:8f:7b:32:bf:37:42:6b:af:4b: aa:26:6b:ae:5d:c2:8a:55:71:e1:5e:6d:9e:91:18: 57:75:4a:30:c5:dd:ef:38:92:89:6c:d8:fc:7a:82: 40:1c:61:b4:db:29:13:7c:66:a5:f1:74:cb:92:42: 3c:cb:31:3a:62:db:ef:2c:14:70:5b:58:8d:51:6d: fb:b7:1e:1e:79:e5:66:1e:0a:bd:f8:e7:7b:89:bd: 41:d1:65:26:8f:24:2a:84:4f:e9:00:19:60:1d:5f: 16:5c:a7:38:e5:22:f8:76:58:c9:73:8d:5f:20:f2: cf:38:7b:1f:4b:11:ba:fe:29:91:35:5c:4f:14:ac: e5:a3:b9:56:33:4e:8a:c5:ee:d5:96:54:cc:25:b6: 03:64:a3:8d:8c:71:6a:b1:ff:46:76:ab:d1:5e:58: 65:16:2d:79:44:14:d5:b1:d2:4d:c8:d5:1c:ba:9c: ef:85:f6:b4:c1:18:04:bb:74:46:9e:0f:ff:02:45: af:96:75:33:00:4a:c2:17:9a:1e:66:d5:ed:1f:22: 1c:4f:05:56:fa:48:e5:a6:7d:29:29:cf:21:81:34: 92:4e:95:cf:2b:85:b3:cb:e6:18:c1:d9:ae:b7:ba: bb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:57:32:D1:52:33:33:69:CB:8B:09:0E:E4:46:C0:F5:F6:84:32:52 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C37D2CF6EB4C11EE9CC1C80DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.18.4.0/22 118.27.192.0/19 137.59.104.0/22 150.95.16.0/22 150.95.104.0-150.95.127.255 163.44.192.0/22 163.44.200.0/24 163.44.205.0-163.44.207.255 IPv6: 2404:f080::/32 Signature Algorithm: sha256WithRSAEncryption 85:f9:d8:f6:d8:1b:fe:c9:f3:f6:40:7f:07:1d:c2:67:a6:fc: c5:3d:58:dc:16:52:0c:00:ca:6f:36:f8:53:53:26:4f:c2:35: ba:32:f4:62:6d:69:59:d1:02:9c:59:e3:ec:59:70:2e:12:36: 69:2c:7a:3a:09:8d:ab:0c:12:8d:ab:3c:0e:4e:31:4d:e6:3f: 8a:4f:9a:d7:9e:fe:3c:50:77:66:87:bc:2b:3b:88:5c:de:06: de:6c:51:d0:91:f3:cd:5b:ed:34:06:e1:8b:57:f6:db:9a:f8: f3:47:ad:89:20:9e:01:3d:22:4d:7f:7a:44:e5:ea:8a:3c:a8: 26:d5:18:a1:af:d5:0f:c8:cc:b4:ff:97:93:f8:f8:38:4c:c5: 86:86:80:18:58:c4:1c:56:63:fa:9b:06:46:9c:7c:a1:7d:96: d9:d1:6f:fc:c3:b2:36:ad:35:a0:cf:73:12:30:33:23:f7:a2: d8:aa:ee:dc:3d:8a:9c:7d:4b:93:72:ef:60:f5:94:e9:06:b4: 14:8d:60:3a:23:b8:f7:d8:79:fc:9e:ab:47:6f:a5:bd:fa:00: 05:be:93:7f:74:4f:ca:9a:f4:81:41:25:71:e1:c0:49:c0:31: 85:29:20:7f:19:ed:09:c3:9c:86:5e:1f:5c:06:22:1c:30:a0: 4b:c9:4b:6b -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgICQkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwMzI2MDg0NjM0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjAyOGI2YS00MjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsK00a8L5gfmmj2IplRwNLUhPV+CPezK/N0Jrr0uqJmuuXcKKVXHhXm2ekRhX dUowxd3vOJKJbNj8eoJAHGG02ykTfGal8XTLkkI8yzE6YtvvLBRwW1iNUW37tx4e eeVmHgq9+Od7ib1B0WUmjyQqhE/pABlgHV8WXKc45SL4dljJc41fIPLPOHsfSxG6 /imRNVxPFKzlo7lWM06Kxe7VllTMJbYDZKONjHFqsf9GdqvRXlhlFi15RBTVsdJN yNUcupzvhfa0wRgEu3RGng//AkWvlnUzAErCF5oeZtXtHyIcTwVW+kjlpn0pKc8h gTSSTpXPK4Wzy+YYwdmut7q75wIDAQABo4IC3jCCAtowHQYDVR0OBBYEFHVXMtFS MzNpy4sJDuRGwPX2hDJSMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzM3RDJDRjZF QjRDMTFFRTlDQzFDODBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaAYIKwYBBQUHAQcBAf8E WTBXMEYEAgABMEADBAJnEgQDBAV2G8ADBAKJO2gDBAKWXxAwDAMEA5ZfaAMEB5Zf AAMEAqMswAMEAKMsyDAMAwQAoyzNAwQEoyzAMA0EAgACMAcDBQAkBPCAMA0GCSqG SIb3DQEBCwUAA4IBAQCF+dj22Bv+yfP2QH8HHcJnpvzFPVjcFlIMAMpvNvhTUyZP wjW6MvRibWlZ0QKcWePsWXAuEjZpLHo6CY2rDBKNqzwOTjFN5j+KT5rXnv48UHdm h7wrO4hc3gbebFHQkfPNW+00BuGLV/bbmvjzR62JIJ4BPSJNf3pE5eqKPKgm1Rih r9UPyMy0/5eT+Pg4TMWGhoAYWMQcVmP6mwZGnHyhfZbZ0W/8w7I2rTWgz3MSMDMj 96LYqu7cPYqcfUuTcu9g9ZTpBrQUjWA6I7j32Hn8nqtHb6W9+gAFvpN/dE/KmvSB QSVx4cBJwDGFKSB/Ge0Jw5yGXh9cBiIcMKBLyUtr -----END CERTIFICATE-----Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org