$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/C886095278C311EAA3BED75BC4F9AE02.roa File: C886095278C311EAA3BED75BC4F9AE02.roa (raw, json) Hash identifier: Di2G05FwQKygoTKVJG1Uh/tXeWy32o6iEy7ljEGwMSg= Subject key identifier: 27:B7:95:BF:FC:98:7B:97:15:CB:90:2E:3F:95:40:D1:B4:E1:A4:49 Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 093C Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/C886095278C311EAA3BED75BC4F9AE02.roa Signing time: Thu 30 May 2024 22:17:43 +0000 ROA not before: Thu 30 May 2024 22:17:43 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 135420 IP address blocks: 45.249.184.0/22 maxlen: 22 45.249.184.0/24 maxlen: 24 45.249.185.0/24 maxlen: 24 45.249.186.0/24 maxlen: 24 45.249.187.0/24 maxlen: 24 103.218.188.0/22 maxlen: 22 103.218.188.0/24 maxlen: 24 103.218.189.0/24 maxlen: 24 103.218.190.0/24 maxlen: 24 103.218.191.0/24 maxlen: 24 2402:48c0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2364 (0x93c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: May 30 22:17:43 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6658fb07-fbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:34:6d:e5:0e:c5:da:70:ba:3d:20:e8:fd:37: e4:26:bc:47:6c:18:9d:3d:bc:97:c7:a4:d1:c1:4b: 8f:64:ac:f0:8f:17:6f:61:6f:20:8f:a9:85:d1:2d: 39:fa:ed:b5:83:6e:b8:44:c1:56:47:59:25:2b:00: bf:b8:ca:0d:59:07:b1:1b:a8:7e:a8:d1:f9:2a:9b: 63:b7:85:12:87:95:3d:53:7a:f5:b8:85:f3:59:c4: 27:88:eb:b3:41:7d:a9:13:90:c4:92:8d:b0:13:ba: 4f:db:e9:24:0a:32:3f:85:a7:c5:2a:f8:b8:de:86: 49:ec:e6:d1:da:46:d8:51:43:24:9f:17:fc:a4:23: 86:de:82:90:0d:55:39:8b:0a:e4:f4:aa:23:6e:13: 01:de:bd:71:fb:62:db:41:be:13:f9:23:5b:86:4f: 8f:ca:ae:c7:f4:02:8c:3d:54:34:da:67:aa:8d:b9: e0:24:a2:43:1a:fe:c6:ef:44:3e:9e:a7:90:d6:59: 41:3a:d6:fb:73:35:46:79:45:a3:29:a6:78:66:1c: b0:8f:29:51:59:1e:b3:d8:44:5d:64:06:fe:13:66: 91:b2:6b:bc:4a:95:c4:61:0e:1a:84:c8:34:2c:37: d8:91:3c:22:fe:ff:d2:23:2f:ea:6a:7c:8e:3f:75: 79:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B7:95:BF:FC:98:7B:97:15:CB:90:2E:3F:95:40:D1:B4:E1:A4:49 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/C886095278C311EAA3BED75BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.249.184.0/22 103.218.188.0/22 IPv6: 2402:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:d8:00:b5:a4:e8:98:31:5c:14:94:e1:c0:77:36:2c:3d:3f: 03:4e:6f:92:f9:46:bc:ef:2b:ce:47:d9:e1:be:5f:1d:5f:a5: 41:fc:6b:00:d2:55:b3:bd:76:50:59:56:6c:a1:db:e5:91:15: c4:59:e2:0b:80:3a:55:e1:34:11:cc:68:94:25:e8:a2:b0:cf: bb:71:0c:32:e4:d8:24:89:a1:35:1b:19:5e:63:28:e2:59:63: 0e:1a:e7:23:af:84:32:7b:80:15:a0:e8:59:b3:35:62:52:ca: fe:3a:86:e4:dd:5e:0d:c5:0c:4b:d5:94:93:6d:01:b2:04:55: 70:6c:01:d9:b8:45:10:ca:b1:ad:06:44:37:2c:8c:89:06:ee: b7:2f:a8:df:49:9d:32:91:60:22:b9:64:6c:18:ba:d7:6f:41: ff:43:d2:76:dd:1e:00:37:2a:ef:f5:84:3e:45:0e:20:1d:69: 2b:24:e1:75:4c:a0:45:32:9f:e8:26:30:89:3d:d0:3c:85:c3: 9f:4b:f3:39:ba:2b:a0:21:bc:82:f4:1d:db:71:25:1d:0c:bf: 51:35:da:b2:36:99:b0:2d:af:17:9e:91:7c:dc:cc:db:e0:ec: 73:18:fe:df:b4:76:5e:c1:ba:62:e2:b0:1f:5c:ee:69:69:77: 4b:0e:7a:63 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCTwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjQwNTMwMjIxNzQzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU4ZmIwNy1mYmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTRt5Q7F2nC6PSDo/TfkJrxHbBidPbyXx6TRwUuPZKzwjxdvYW8gj6mF0S05 +u21g264RMFWR1klKwC/uMoNWQexG6h+qNH5Kptjt4USh5U9U3r1uIXzWcQniOuz QX2pE5DEko2wE7pP2+kkCjI/hafFKvi43oZJ7ObR2kbYUUMknxf8pCOG3oKQDVU5 iwrk9KojbhMB3r1x+2LbQb4T+SNbhk+Pyq7H9AKMPVQ02meqjbngJKJDGv7G70Q+ nqeQ1llBOtb7czVGeUWjKaZ4ZhywjylRWR6z2ERdZAb+E2aRsmu8SpXEYQ4ahMg0 LDfYkTwi/v/SIy/qanyOP3V5rQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCe3lb/8 mHuXFcuQLj+VQNG04aRJMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjBGM0YvMDkzNzNBRDY3OEMyMTFFQUJENzcyMzU5QzRGOUFFMDIvQzg4NjA5NTI3 OEMzMTFFQUEzQkVENzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIt+bgDBAJn2rwwDQQCAAIwBwMFACQCSMAwDQYJKoZIhvcN AQELBQADggEBAD/YALWk6JgxXBSU4cB3Niw9PwNOb5L5RrzvK85H2eG+Xx1fpUH8 awDSVbO9dlBZVmyh2+WRFcRZ4guAOlXhNBHMaJQl6KKwz7txDDLk2CSJoTUbGV5j KOJZYw4a5yOvhDJ7gBWg6FmzNWJSyv46huTdXg3FDEvVlJNtAbIEVXBsAdm4RRDK sa0GRDcsjIkG7rcvqN9JnTKRYCK5ZGwYutdvQf9D0nbdHgA3Ku/1hD5FDiAdaSsk 4XVMoEUyn+gmMIk90DyFw59L8zm6K6AhvIL0HdtxJR0Mv1E12rI2mbAtrxeekXzc zNvg7HMY/t+0dl7BumLisB9c7mlpd0sOemM= -----END CERTIFICATE-----Generated at Fri May 31 22:56:58 2024 by rpki-client on console-fra.rpki-client.org