$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/3A888D52169211EFA5AAE55DC4F9AE02.roa File: 3A888D52169211EFA5AAE55DC4F9AE02.roa (raw, json) Hash identifier: y5vzdVwz2vO4UUjqXhgJrAbkJMOOhUCaiYsAl7OwvQo= Subject key identifier: 7C:36:02:38:E4:D5:49:71:00:8E:90:77:10:D5:14:3C:2F:C1:B3:66 Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: 05 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/3A888D52169211EFA5AAE55DC4F9AE02.roa Signing time: Mon 20 May 2024 10:17:58 +0000 ROA not before: Mon 20 May 2024 10:17:58 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132384 IP address blocks: 167.219.50.0/23 maxlen: 24 167.219.52.0/23 maxlen: 24 167.219.54.0/24 maxlen: 24 167.219.56.0/23 maxlen: 24 167.219.58.0/24 maxlen: 24 167.219.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Nov 2024 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: May 20 10:17:58 2024 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=664b2355-03ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:94:89:aa:1e:c3:79:20:53:81:b2:18:2a: cc:a5:94:eb:7d:03:7f:2f:b9:10:14:ef:e0:dc:34: 5a:4c:c7:bf:9a:06:f9:6e:36:14:3a:27:43:03:82: 17:49:ea:59:c2:2c:45:0a:d6:36:f4:b1:82:48:99: 37:6e:6d:8e:dc:7d:e6:d9:d2:bb:40:49:39:31:20: 4c:70:4c:b8:81:0d:16:a1:3e:1b:aa:da:25:a7:5e: b9:e9:21:48:3d:b5:a1:9b:c3:bc:ba:c1:6a:ec:50: b5:f7:f0:94:73:f4:03:d5:8e:0a:52:78:d4:40:2a: cc:e4:6a:75:d7:09:b9:27:17:2e:0d:b1:8f:a0:8b: 42:e6:4c:2e:ce:19:8c:92:2c:cc:39:38:43:2e:03: c0:36:1b:0d:d4:d7:36:f0:6d:68:95:94:27:13:d9: f7:b2:76:00:bf:5b:a1:e8:63:02:56:fd:f9:60:b6: f8:92:bb:5e:ec:00:8c:18:8d:9a:8c:0d:ae:33:ce: d6:a1:58:1a:42:cc:a4:f0:e5:c8:6e:80:b0:08:e6: 44:ea:39:ae:8b:02:f9:c4:42:c5:70:80:62:6f:cd: 03:d4:22:0b:10:ec:4d:7a:9a:97:31:c1:24:e4:a6: 7f:ee:95:4f:04:80:af:86:7f:cf:60:01:40:98:a4: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:36:02:38:E4:D5:49:71:00:8E:90:77:10:D5:14:3C:2F:C1:B3:66 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/3A888D52169211EFA5AAE55DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.219.50.0-167.219.54.255 167.219.56.0-167.219.58.255 167.219.62.0/23 Signature Algorithm: sha256WithRSAEncryption b5:f1:18:76:5c:44:f6:dd:47:1c:b2:5e:8f:8a:b7:4b:6a:d3: 71:b4:0e:00:80:ba:f3:a8:06:e7:5e:8e:b2:85:ee:6a:1b:b4: ab:3e:34:c1:df:6c:22:f5:91:44:8a:9a:8f:d6:2c:1e:df:06: d1:03:3f:61:8c:f4:87:f7:bc:8d:49:a5:4f:f2:16:ea:d1:33: 32:36:1b:f4:4c:5d:b5:7e:02:e6:a3:43:a9:d9:51:3f:3b:26: 7a:4e:dd:c5:c0:a3:5f:a7:4f:95:b6:0f:67:80:10:3a:ac:95: cf:9e:d7:31:55:27:73:32:54:65:dc:6c:cd:1e:3e:dd:e3:8a: 0b:d0:f1:ef:e1:c6:16:04:7c:16:12:2d:4b:a7:0e:46:e8:80: 61:c5:0f:1e:bc:3c:e8:11:7c:04:74:1f:5c:4b:ed:0e:50:c5: 24:3f:f4:98:4f:47:1b:17:72:0a:df:dc:cb:49:0e:7a:32:13: ac:df:7f:ac:61:23:26:10:27:a0:a6:a0:26:64:ff:0e:1c:54: 88:f6:61:18:7c:38:7f:32:ee:a3:b5:2a:07:78:55:62:34:02: f2:35:bf:ed:05:7f:ff:8b:ff:94:07:3e:ea:3f:a6:21:a7:33: fc:24:20:65:65:30:91:9e:e7:df:d2:b3:46:0f:58:cf:e6:eb: 5b:b1:be:cf -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB REQ2NDExMC8GA1UEBRMoRkNBOTM1NUMxQUJFNDA0RjNGM0NGNTE5MkZEMzRCMTI1 QTAwQkYxQjAeFw0yNDA1MjAxMDE3NThaFw0yNzEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NGIyMzU1LTAzYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVYpSJqh7DeSBTgbIYKsyllOt9A38vuRAU7+DcNFpMx7+aBvluNhQ6J0MDghdJ 6lnCLEUK1jb0sYJImTdubY7cfebZ0rtASTkxIExwTLiBDRahPhuq2iWnXrnpIUg9 taGbw7y6wWrsULX38JRz9APVjgpSeNRAKszkanXXCbknFy4NsY+gi0LmTC7OGYyS LMw5OEMuA8A2Gw3U1zbwbWiVlCcT2feydgC/W6HoYwJW/flgtviSu17sAIwYjZqM Da4zztahWBpCzKTw5chugLAI5kTqOa6LAvnEQsVwgGJvzQPUIgsQ7E16mpcxwSTk pn/ulU8EgK+Gf89gAUCYpEQxAgMBAAGjggKxMIICrTAdBgNVHQ4EFgQUfDYCOOTV SXEAjpB3ENUUPC/Bs2YwHwYDVR0jBBgwFoAU/Kk1XBq+QE8/PPUZL9NLEloAvxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFERDY0LzRFQjJCNDI4MTM0 QjExRUY5NDQyNEQzREM0RjlBRTAyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0trMVhCcS1RRThfUFBVWkw5TkxFbG9BdnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REQ2NC80RUIyQjQyODEzNEIxMUVGOTQ0MjREM0RDNEY5QUUwMi8zQTg4OEQ1MjE2 OTIxMUVGQTVBQUU1NURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA7BggrBgEFBQcBBwEB/wQs MCowKAQCAAEwIjAMAwQBp9syAwQAp9s2MAwDBAOn2zgDBACn2zoDBAGn2z4wDQYJ KoZIhvcNAQELBQADggEBALXxGHZcRPbdRxyyXo+Kt0tq03G0DgCAuvOoBudejrKF 7mobtKs+NMHfbCL1kUSKmo/WLB7fBtEDP2GM9If3vI1JpU/yFurRMzI2G/RMXbV+ AuajQ6nZUT87JnpO3cXAo1+nT5W2D2eAEDqslc+e1zFVJ3MyVGXcbM0ePt3jigvQ 8e/hxhYEfBYSLUunDkbogGHFDx68POgRfAR0H1xL7Q5QxSQ/9JhPRxsXcgrf3MtJ DnoyE6zff6xhIyYQJ6CmoCZk/w4cVIj2YRh8OH8y7qO1Kgd4VWI0AvI1v+0Ff/+L /5QHPuo/piGnM/wkIGVlMJGe59/Ss0YPWM/m61uxvs8= -----END CERTIFICATE-----Generated at Fri Nov 15 05:45:19 2024 by rpki-client on console-ams.rpki-client.org