$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C5FADDCA3C3911ED8A8C856DC4F9AE02.roa File: C5FADDCA3C3911ED8A8C856DC4F9AE02.roa (raw, json) Hash identifier: KZQ3kLeMGj0qNTQqR9b+1BB2UDA948Wc1Xuwr14C8dc= Subject key identifier: 3A:31:07:9B:D9:40:11:77:2E:31:55:4C:99:B0:36:1A:C9:7D:35:41 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 3F41 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C5FADDCA3C3911ED8A8C856DC4F9AE02.roa Signing time: Tue 12 Sep 2023 02:44:31 +0000 ROA not before: Tue 12 Sep 2023 02:44:31 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 7602 IP address blocks: 103.200.60.0/22 maxlen: 24 116.118.0.0/17 maxlen: 24 180.93.0.0/16 maxlen: 24 203.196.24.0/22 maxlen: 24 221.121.0.0/18 maxlen: 24 221.133.0.0/19 maxlen: 24 2402:f800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 01:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16193 (0x3f41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Sep 12 02:44:31 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ffd08f-05aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4f:ad:3c:a0:ee:bd:df:92:ee:e1:b6:4e:05: 2f:e3:08:0e:6e:5f:2c:6b:a3:da:de:4e:c5:db:be: bf:74:dd:e0:6f:63:d3:4e:3d:a6:22:96:ed:00:b2: 67:62:72:41:a4:58:e4:cc:c5:92:6f:07:cc:95:70: 64:69:d2:6e:b2:21:ac:da:f3:1c:6d:98:e9:f0:7e: 54:54:7c:dd:84:f6:80:4e:8f:58:5a:7f:23:89:c4: 58:da:e2:b3:83:12:c6:b2:df:c5:78:37:42:93:19: c3:f1:0c:55:63:7b:09:69:80:f5:b4:86:6a:71:91: 57:c5:5f:61:98:cf:23:16:2a:72:67:17:91:b1:3f: 1e:1f:53:08:0a:b4:19:3d:b5:a4:95:95:66:d2:0e: e6:a7:3e:6d:fd:59:db:74:77:29:07:79:1b:ae:d6: ff:74:a6:4a:5f:26:0f:fe:60:96:2f:0e:29:3b:d0: 2d:68:a3:7b:4e:92:c9:4e:58:ed:40:1e:36:a5:79: 91:f5:19:97:f5:14:d7:a4:38:fa:5c:ee:33:56:7d: 99:2f:2f:ff:83:e0:73:58:42:7f:9b:9e:2a:a0:67: 7f:c2:e7:b2:70:f3:e5:31:fb:4d:df:d5:6e:46:ca: 9e:b8:fb:7e:ff:4c:39:5a:ae:71:88:58:f8:49:0a: 7b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:31:07:9B:D9:40:11:77:2E:31:55:4C:99:B0:36:1A:C9:7D:35:41 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C5FADDCA3C3911ED8A8C856DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.200.60.0/22 116.118.0.0/17 180.93.0.0/16 203.196.24.0/22 221.121.0.0/18 221.133.0.0/19 IPv6: 2402:f800::/32 Signature Algorithm: sha256WithRSAEncryption 1b:e8:09:2f:58:84:fa:27:9c:4d:cc:a5:b0:4a:f5:91:5e:c1: af:be:18:b2:b8:74:61:fe:17:cd:47:f5:17:83:b6:3a:c1:fa: 33:50:55:29:b6:d9:e4:0a:06:b1:1d:32:17:15:be:1f:12:d9: b6:c0:02:f0:ea:07:f4:a8:91:bb:fd:5d:4a:c4:24:13:e7:b8: d7:df:1e:06:7c:8a:23:47:9e:e0:54:8d:e3:22:c3:70:5c:71: 2c:00:68:23:f5:6b:13:ea:00:78:a1:09:ae:85:ff:04:d1:74: 1e:99:76:e2:b5:9d:9b:4c:15:04:39:fb:7f:af:7e:cc:4c:f8: db:b3:c3:f5:fc:7d:f1:03:f8:44:e1:9c:ca:3c:04:43:45:fe: 7c:2d:df:fd:50:51:a2:cd:ec:0e:28:9c:bc:4d:0f:c5:01:31: 62:7f:33:dd:1c:36:b3:48:87:90:3b:5c:83:a1:97:bd:7d:ee: 3d:a9:e9:17:7a:5f:9a:ff:56:ed:f0:de:0d:4d:38:45:c9:e3: 62:38:d8:92:c3:ec:33:ff:bb:4a:4f:2a:a4:d6:8c:28:77:48: 49:65:2f:0f:02:b9:99:69:21:b4:49:e1:90:d6:a7:4e:b9:e3: 6e:18:9e:02:f4:4f:2b:da:f5:18:14:a2:b9:d5:f0:6c:3a:84: d3:07:1d:17 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICP0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjMwOTEyMDI0NDMxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGZmZDA4Zi0wNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU+tPKDuvd+S7uG2TgUv4wgObl8sa6Pa3k7F276/dN3gb2PTTj2mIpbtALJn YnJBpFjkzMWSbwfMlXBkadJusiGs2vMcbZjp8H5UVHzdhPaATo9YWn8jicRY2uKz gxLGst/FeDdCkxnD8QxVY3sJaYD1tIZqcZFXxV9hmM8jFipyZxeRsT8eH1MICrQZ PbWklZVm0g7mpz5t/VnbdHcpB3kbrtb/dKZKXyYP/mCWLw4pO9AtaKN7TpLJTljt QB42pXmR9RmX9RTXpDj6XO4zVn2ZLy//g+BzWEJ/m54qoGd/wueycPPlMftN39Vu RsqeuPt+/0w5Wq5xiFj4SQp7JwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFDoxB5vZ QBF3LjFVTJmwNhrJfTVBMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvQzVGQUREQ0Ez QzM5MTFFRDhBOEM4NTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MCkEAgABMCMDBAJnyDwDBAd0dgADAwC0XQMEAsvEGAMEBt15AAMEBd2FADAN BAIAAjAHAwUAJAL4ADANBgkqhkiG9w0BAQsFAAOCAQEAG+gJL1iE+iecTcylsEr1 kV7Br74Ysrh0Yf4XzUf1F4O2OsH6M1BVKbbZ5AoGsR0yFxW+HxLZtsAC8OoH9KiR u/1dSsQkE+e4198eBnyKI0ee4FSN4yLDcFxxLABoI/VrE+oAeKEJroX/BNF0Hpl2 4rWdm0wVBDn7f69+zEz427PD9fx98QP4ROGcyjwEQ0X+fC3f/VBRos3sDiicvE0P xQExYn8z3Rw2s0iHkDtcg6GXvX3uPanpF3pfmv9W7fDeDU04RcnjYjjYksPsM/+7 Sk8qpNaMKHdISWUvDwK5mWkhtEnhkNanTrnjbhieAvRPK9r1GBSiudXwbDqE0wcd Fw== -----END CERTIFICATE-----Generated at Fri Jun 14 02:48:27 2024 by rpki-client on console-ams.rpki-client.org