$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/6E46B2C6E71011EC8842E149C4F9AE02.roa File: 6E46B2C6E71011EC8842E149C4F9AE02.roa (raw, json) Hash identifier: Ju5O5eXRTt70AOKhqg0udmOiPpW2IX57wxWEIplZ+J0= Subject key identifier: 75:DE:1E:7F:C1:9A:F8:CC:48:92:D1:08:A2:0F:13:88:4C:24:58:35 Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Certificate serial: 335D Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/6E46B2C6E71011EC8842E149C4F9AE02.roa Signing time: Mon 28 Aug 2023 14:50:37 +0000 ROA not before: Mon 28 Aug 2023 14:50:37 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 3758 IP address blocks: 111.65.100.0/24 maxlen: 24 111.65.101.0/24 maxlen: 24 111.65.102.0/23 maxlen: 23 111.65.104.0/21 maxlen: 21 111.65.108.0/22 maxlen: 22 111.65.112.0/20 maxlen: 20 202.78.52.0/22 maxlen: 22 202.78.55.0/24 maxlen: 24 2400:1c00:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13149 (0x335d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503 Validity Not Before: Aug 28 14:50:37 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64ecb43d-61c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:4d:4f:da:d9:ec:a5:06:3a:5f:bb:aa:ad: 09:60:e0:0d:93:5a:7c:66:d7:ad:e3:d9:3c:c4:40: d9:98:eb:8f:f8:45:3f:70:9a:64:93:73:51:c1:bd: 85:52:02:05:bd:56:d2:e6:fe:49:29:a6:93:4a:e6: bb:d4:17:a8:74:e6:ff:83:2e:c2:23:39:0a:9f:22: 23:27:04:3c:18:d6:3c:f2:34:8f:c4:95:78:04:3f: 81:55:50:80:00:57:74:09:2c:0e:7a:18:cd:04:c2: 72:54:ad:ee:6f:bd:ba:f0:2a:b4:ee:9c:6f:4c:b5: 1a:a2:ae:bc:c7:6a:ff:02:64:bb:25:e6:a1:6b:dc: 67:36:ed:b5:a7:97:20:5e:42:a6:74:d1:72:b5:68: 35:72:99:33:8f:00:d4:37:f8:3f:7a:7a:08:cc:33: f8:78:ee:8b:ab:d6:ca:6a:6a:b4:11:9c:8d:b0:72: 7a:e0:db:57:99:b9:39:e0:43:a4:1f:ff:d0:c0:a0: f9:d7:8c:c6:ad:c8:3b:99:35:b9:ab:80:7c:03:15: 6d:79:e2:8f:c8:49:33:ce:29:31:c3:d4:f7:54:69: 07:ce:77:20:04:99:e8:b9:e6:79:74:ff:9c:cc:bd: 84:cc:6c:4d:08:46:b1:fc:be:02:fd:ff:c4:3e:95: b0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DE:1E:7F:C1:9A:F8:CC:48:92:D1:08:A2:0F:13:88:4C:24:58:35 X509v3 Authority Key Identifier: keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/6E46B2C6E71011EC8842E149C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.65.100.0-111.65.127.255 202.78.52.0/22 IPv6: 2400:1c00:13::/48 Signature Algorithm: sha256WithRSAEncryption 9f:3b:61:c8:c8:49:c5:81:4d:b2:ff:fc:00:25:35:73:d8:aa: 71:f7:58:ed:c3:b4:b4:d2:0e:56:dc:61:78:ac:c1:3b:ac:75: 35:55:11:91:f8:d7:cd:d2:33:f7:8a:43:30:57:5d:2b:d7:bc: 0c:7c:55:e4:db:71:a2:e9:c2:64:54:d8:06:0d:f9:0b:5f:52: 68:26:37:d2:4d:e0:a2:7f:0f:e7:9b:24:de:8a:25:58:6a:03: 05:cb:14:b1:1e:30:b7:bc:d9:5c:7f:6e:08:c9:e2:ff:c9:ae: 22:bf:63:a1:50:a4:09:c2:a2:6e:d5:2b:bc:21:b6:a0:c3:1a: 20:22:c4:30:69:5a:03:05:9f:02:6c:28:2d:c4:63:f2:b4:68: 83:1f:c5:0f:66:1a:cd:4c:5e:d0:d2:c7:42:6a:ed:af:36:a2: d4:4b:48:39:7b:0e:06:ab:88:76:74:34:d3:7e:38:76:c7:48: 06:b6:c8:9f:8f:11:9f:fa:ce:c1:e8:0d:36:a5:65:12:f9:7e: 0a:08:76:34:b8:c9:55:5e:99:35:00:5a:c8:65:43:cc:f4:04: 12:6d:a0:a4:61:5c:67:e9:7b:7c:52:e9:33:ef:c3:ac:b6:b7: a8:ca:85:5e:c0:cb:ec:20:aa:76:70:5e:76:cf:c9:02:bd:96: ff:4f:c5:55 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgICM10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5 RkZCNTY1MDMwHhcNMjMwODI4MTQ1MDM3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGVjYjQzZC02MWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu65NT9rZ7KUGOl+7qq0JYOANk1p8Ztet49k8xEDZmOuP+EU/cJpkk3NRwb2F UgIFvVbS5v5JKaaTSua71BeodOb/gy7CIzkKnyIjJwQ8GNY88jSPxJV4BD+BVVCA AFd0CSwOehjNBMJyVK3ub7268Cq07pxvTLUaoq68x2r/AmS7Jeaha9xnNu21p5cg XkKmdNFytWg1cpkzjwDUN/g/enoIzDP4eO6Lq9bKamq0EZyNsHJ64NtXmbk54EOk H//QwKD514zGrcg7mTW5q4B8AxVteeKPyEkzzikxw9T3VGkHzncgBJnoueZ5dP+c zL2EzGxNCEax/L4C/f/EPpWwswIDAQABo4ICtDCCArAwHQYDVR0OBBYEFHXeHn/B mvjMSJLRCKIPE4hMJFg1MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE0OEYvOEM4MUE4NTYxRDhEMTFFMjg2NkM1MEVCMDhCMDJDRDIvNkU0NkIyQzZF NzEwMTFFQzg4NDJFMTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPgYIKwYBBQUHAQcBAf8E LzAtMBoEAgABMBQwDAMEAm9BZAMEB29BAAMEAspONDAPBAIAAjAJAwcAJAAcAAAT MA0GCSqGSIb3DQEBCwUAA4IBAQCfO2HIyEnFgU2y//wAJTVz2Kpx91jtw7S00g5W 3GF4rME7rHU1VRGR+NfN0jP3ikMwV10r17wMfFXk23Gi6cJkVNgGDfkLX1JoJjfS TeCifw/nmyTeiiVYagMFyxSxHjC3vNlcf24IyeL/ya4iv2OhUKQJwqJu1Su8Ibag wxogIsQwaVoDBZ8CbCgtxGPytGiDH8UPZhrNTF7Q0sdCau2vNqLUS0g5ew4Gq4h2 dDTTfjh2x0gGtsifjxGf+s7B6A02pWUS+X4KCHY0uMlVXpk1AFrIZUPM9AQSbaCk YVxn6Xt8Uukz78OstreoyoVewMvsIKp2cF52z8kCvZb/T8VV -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:36 2024 by rpki-client on console-fra.rpki-client.org