$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/CF41132A1DE811EB9DE34963C4F9AE02.roa File: CF41132A1DE811EB9DE34963C4F9AE02.roa (raw, json) Hash identifier: v+PWzJgXc4iOcMO+HLBQvAjbF+2vNU91oAxZApqu0vg= Subject key identifier: EE:AF:CA:75:E2:8B:DE:79:BC:DC:BF:B4:6F:47:A8:82:6A:B3:74:2D Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 0682 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/CF41132A1DE811EB9DE34963C4F9AE02.roa Signing time: Thu 31 Aug 2023 22:29:34 +0000 ROA not before: Thu 31 Aug 2023 22:29:34 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 135407 IP address blocks: 110.93.223.0/24 maxlen: 24 110.93.226.0/24 maxlen: 24 110.93.227.0/24 maxlen: 24 110.93.228.0/24 maxlen: 24 110.93.230.0/24 maxlen: 24 110.93.236.0/24 maxlen: 24 110.93.237.0/24 maxlen: 24 110.93.240.0/24 maxlen: 24 110.93.244.0/24 maxlen: 24 110.93.245.0/24 maxlen: 24 110.93.246.0/24 maxlen: 24 110.93.247.0/24 maxlen: 24 117.20.29.0/24 maxlen: 24 119.63.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Jun 2024 23:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Aug 31 22:29:34 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64f1144e-3946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:13:be:06:df:9a:8c:07:c2:59:cf:90:5d:f9: 4c:a9:bc:c2:aa:eb:4b:5c:a7:2c:d1:9b:14:c6:f5: 92:1b:c8:56:e7:e6:ce:c7:7b:ab:fc:78:88:f5:38: 3d:05:37:23:38:22:89:f2:52:82:67:45:d8:46:fe: d5:66:82:0e:34:12:44:9a:e1:b6:8e:ce:3b:10:7f: 3d:86:c7:18:5b:25:1f:1b:b9:e3:fe:5d:ca:49:ec: 77:eb:1c:10:e0:9d:d2:29:81:26:ca:fb:7c:cf:fc: 9f:39:b2:80:a1:9d:25:0c:34:cf:95:ff:5f:87:4f: 39:47:d7:f5:13:c3:d3:e2:67:8d:cc:15:e0:77:56: 49:ea:cd:f3:aa:c4:13:15:e8:90:38:1e:29:d7:c6: 06:e3:42:da:aa:9b:59:a7:b6:12:8e:54:a9:d8:a9: 05:49:93:bb:da:ed:0f:e1:28:ed:8d:48:a5:e1:17: e9:e4:aa:c7:52:39:bb:1c:1d:38:3c:66:71:4e:22: 6f:8d:35:60:b3:f2:68:5f:44:ce:bf:6f:6c:70:88: f4:b2:b2:27:1e:1e:ac:c1:a1:29:91:96:b3:52:50: 9e:22:89:99:c0:1b:03:fd:22:19:dc:d2:bb:06:24: 5e:ee:7f:a9:36:ed:d7:dd:ab:5f:05:c3:12:0f:27: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AF:CA:75:E2:8B:DE:79:BC:DC:BF:B4:6F:47:A8:82:6A:B3:74:2D X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/CF41132A1DE811EB9DE34963C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.93.223.0/24 110.93.226.0-110.93.228.255 110.93.230.0/24 110.93.236.0/23 110.93.240.0/24 110.93.244.0/22 117.20.29.0/24 119.63.139.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:60:8d:af:39:11:25:7a:79:e5:a6:fa:98:27:8a:c0:e7:d5: 70:4f:47:fa:1a:c1:18:51:02:94:09:6d:9f:80:d8:c7:a4:c9: 92:e5:28:65:36:eb:44:fb:1c:ce:51:02:9f:d5:b3:d0:ea:dc: a4:09:ee:3a:d2:8b:f6:c3:88:da:68:c9:81:f1:2e:49:c7:0f: 7f:4f:9e:5a:55:bf:36:91:c1:89:d5:a0:5f:6f:1d:1b:89:ca: af:aa:cb:72:c7:3d:4c:05:fa:d5:04:fb:bc:be:1a:7b:03:b2: 1e:4a:bf:93:ed:32:bf:3e:d4:b8:48:79:a1:b2:80:6d:26:b9: 3d:b9:50:87:59:48:01:84:17:b6:a6:62:01:34:04:6f:44:e1: 91:a4:93:3c:69:e9:b8:10:93:cd:49:69:fa:86:78:16:45:04: 43:4b:5f:04:c4:db:8f:eb:d0:27:92:fc:a1:6b:62:f2:ee:e0: e0:80:b3:c8:f9:aa:0d:55:be:42:c9:19:d6:b4:f0:9f:84:c6: 78:63:da:47:8e:a8:3c:92:ce:39:68:96:fa:ee:26:e0:84:83: eb:22:1a:e4:75:47:36:a1:eb:6a:f4:a4:77:14:c6:49:ee:da: 00:63:00:7b:de:35:e5:f7:49:a0:ca:8e:5d:4e:03:42:a6:a8: 6f:84:68:ed -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjMwODMxMjIyOTM0WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYxMTQ0ZS0zOTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBO+Bt+ajAfCWc+QXflMqbzCqutLXKcs0ZsUxvWSG8hW5+bOx3ur/HiI9Tg9 BTcjOCKJ8lKCZ0XYRv7VZoIONBJEmuG2js47EH89hscYWyUfG7nj/l3KSex36xwQ 4J3SKYEmyvt8z/yfObKAoZ0lDDTPlf9fh085R9f1E8PT4meNzBXgd1ZJ6s3zqsQT FeiQOB4p18YG40LaqptZp7YSjlSp2KkFSZO72u0P4SjtjUil4Rfp5KrHUjm7HB04 PGZxTiJvjTVgs/JoX0TOv29scIj0srInHh6swaEpkZazUlCeIomZwBsD/SIZ3NK7 BiRe7n+pNu3X3atfBcMSDyc12QIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFO6vynXi i955vNy/tG9HqIJqs3QtMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvQ0Y0MTEzMkEx REU4MTFFQjlERTM0OTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUQYIKwYBBQUHAQcBAf8E QjBAMD4EAgABMDgDBABuXd8wDAMEAW5d4gMEAG5d5AMEAG5d5gMEAW5d7AMEAG5d 8AMEAm5d9AMEAHUUHQMEAHc/izANBgkqhkiG9w0BAQsFAAOCAQEAPmCNrzkRJXp5 5ab6mCeKwOfVcE9H+hrBGFEClAltn4DYx6TJkuUoZTbrRPsczlECn9Wz0OrcpAnu OtKL9sOI2mjJgfEuSccPf0+eWlW/NpHBidWgX28dG4nKr6rLcsc9TAX61QT7vL4a ewOyHkq/k+0yvz7UuEh5obKAbSa5PblQh1lIAYQXtqZiATQEb0ThkaSTPGnpuBCT zUlp+oZ4FkUEQ0tfBMTbj+vQJ5L8oWti8u7g4ICzyPmqDVW+QskZ1rTwn4TGeGPa R46oPJLOOWiW+u4m4ISD6yIa5HVHNqHravSkdxTGSe7aAGMAe9415fdJoMqOXU4D Qqaob4Ro7Q== -----END CERTIFICATE-----Generated at Sat Jun 15 02:44:50 2024 by rpki-client on console-ams.rpki-client.org