$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa File: D93DA9C0C93411ED9A315E3DC4F9AE02.roa (raw, json) Hash identifier: PeMHG2kjw6Ed5lpNaffaw1mRmUp0ccjZSdKgNxwPk14= Subject key identifier: BE:60:7C:D7:76:A9:4E:D0:1F:2A:47:AE:3A:FC:8B:6C:EF:9B:97:D4 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4181 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa Signing time: Mon 01 Jan 2024 13:23:14 +0000 ROA not before: Mon 01 Jan 2024 13:23:14 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 150828 IP address blocks: 36.50.232.0/24 maxlen: 24 36.50.233.0/24 maxlen: 24 103.116.8.0/23 maxlen: 23 103.252.122.0/24 maxlen: 24 103.252.123.0/24 maxlen: 24 2400:eca0::/48 maxlen: 48 2401:4ae0::/48 maxlen: 48 2401:5e20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16769 (0x4181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jan 1 13:23:14 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6592bcc2-e7fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:77:61:f5:51:46:bb:8c:b3:c8:d3:70:fd:a5: 79:8a:61:92:87:db:17:ac:6a:72:ad:9f:49:27:b0: 6e:67:5d:fb:c2:fe:12:61:5d:74:a8:a8:94:b0:76: 39:4f:3b:af:c1:c8:1b:c4:7a:59:9b:20:1a:d7:2f: f4:ed:11:d0:57:ed:00:4e:cf:0a:10:c6:eb:2a:f0: 08:14:5f:fd:65:a3:ee:4f:5b:42:dd:85:cb:b0:5e: c8:ec:ad:4e:85:f6:1c:85:0b:10:25:20:22:54:40: 58:98:03:ab:08:38:9b:54:b1:48:8e:de:7b:b2:ef: 0e:b2:9b:f8:11:4c:b1:0b:a1:81:09:2e:85:2f:2f: 33:68:bf:78:2e:a2:48:7a:8a:c8:86:1c:da:ff:fe: 0d:96:9c:1d:87:85:da:f5:ec:ed:fa:05:e5:22:30: 33:ab:ae:a3:b6:78:6d:33:38:3d:2f:4f:95:67:fd: c7:e1:2c:c8:72:62:a0:db:33:37:9f:34:2e:7f:9c: 32:ff:91:32:11:31:9c:e6:30:6c:03:4a:5a:3f:56: d6:e4:68:3e:0d:20:ba:89:f1:18:99:99:49:4b:8a: cd:55:50:d9:e3:e6:d2:da:a8:6b:ce:9a:a6:54:56: 86:0d:1e:66:a3:c5:78:cf:1e:0c:34:78:d4:e4:b3: 0f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:60:7C:D7:76:A9:4E:D0:1F:2A:47:AE:3A:FC:8B:6C:EF:9B:97:D4 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D93DA9C0C93411ED9A315E3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.232.0/23 103.116.8.0/23 103.252.122.0/23 IPv6: 2400:eca0::/48 2401:4ae0::/48 2401:5e20::/48 Signature Algorithm: sha256WithRSAEncryption 9f:df:70:5a:ea:e6:bf:b2:6d:84:28:14:a0:85:ec:57:fe:c4: 71:ba:ad:c8:8c:56:ac:86:90:51:34:72:8a:58:22:ee:1a:48: 67:0e:af:7a:1f:a2:70:ac:8f:c3:32:77:30:8b:3a:74:64:04: 05:86:04:05:78:3e:7e:33:f7:bd:57:00:ca:b5:ef:93:c9:d8: 5a:a3:18:ee:76:88:69:65:94:de:5c:e2:d3:f1:f3:f3:17:89: 70:b4:eb:cf:df:1c:87:c8:bd:fe:72:37:a0:b9:9f:72:04:a9: 97:fa:a8:fc:12:08:bc:39:48:b1:09:60:e0:18:7f:f4:e7:af: ff:1f:59:4b:f4:df:15:58:10:d4:ea:42:9a:78:fe:aa:6a:51: 0f:fc:2d:5e:d6:fd:26:b2:0b:7c:a6:8b:b3:37:a2:be:96:7c: ca:ad:df:65:80:40:c8:0d:7b:2a:2e:cb:0e:a9:27:4e:9c:54: 47:6a:e6:95:34:cd:90:4b:d6:51:9e:60:c9:77:e7:79:32:7f: 17:4e:36:33:03:32:3f:3d:4f:78:28:5b:ea:66:38:f5:55:e0: d8:48:95:9a:8c:1b:bb:18:3a:d3:4d:c2:41:e3:ec:70:0f:f5: c4:6b:c4:5c:06:53:75:61:79:77:c0:4c:7f:52:19:0d:f6:bf: 0a:2f:bf:19 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICQYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjQwMTAxMTMyMzE0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTkyYmNjMi1lN2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ndh9VFGu4yzyNNw/aV5imGSh9sXrGpyrZ9JJ7BuZ137wv4SYV10qKiUsHY5 TzuvwcgbxHpZmyAa1y/07RHQV+0ATs8KEMbrKvAIFF/9ZaPuT1tC3YXLsF7I7K1O hfYchQsQJSAiVEBYmAOrCDibVLFIjt57su8Ospv4EUyxC6GBCS6FLy8zaL94LqJI eorIhhza//4Nlpwdh4Xa9ezt+gXlIjAzq66jtnhtMzg9L0+VZ/3H4SzIcmKg2zM3 nzQuf5wy/5EyETGc5jBsA0paP1bW5Gg+DSC6ifEYmZlJS4rNVVDZ4+bS2qhrzpqm VFaGDR5mo8V4zx4MNHjU5LMPnQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFL5gfNd2 qU7QHypHrjr8i2zvm5fUMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDkzREE5QzBD OTM0MTFFRDlBMzE1RTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MBgEAgABMBIDBAEkMugDBAFndAgDBAFn/HowIQQCAAIwGwMHACQA7KAAAAMH ACQBSuAAAAMHACQBXiAAADANBgkqhkiG9w0BAQsFAAOCAQEAn99wWurmv7JthCgU oIXsV/7EcbqtyIxWrIaQUTRyilgi7hpIZw6veh+icKyPwzJ3MIs6dGQEBYYEBXg+ fjP3vVcAyrXvk8nYWqMY7naIaWWU3lzi0/Hz8xeJcLTrz98ch8i9/nI3oLmfcgSp l/qo/BIIvDlIsQlg4Bh/9Oev/x9ZS/TfFVgQ1OpCmnj+qmpRD/wtXtb9JrILfKaL szeivpZ8yq3fZYBAyA17Ki7LDqknTpxUR2rmlTTNkEvWUZ5gyXfneTJ/F042MwMy Pz1PeChb6mY49VXg2EiVmowbuxg6003CQePscA/1xGvEXAZTdWF5d8BMf1IZDfa/ Ci+/GQ== -----END CERTIFICATE-----Generated at Fri May 31 16:41:41 2024 by rpki-client on console-ams.rpki-client.org