$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/92AD525E999311EA9369A12CC4F9AE02.roa File: 92AD525E999311EA9369A12CC4F9AE02.roa (raw, json) Hash identifier: DW2xS6rZtGbemPlryb5FJDW//rJRxC2WTKqVFZK9p+w= Subject key identifier: D0:A9:84:F7:23:51:5A:7A:0F:3F:26:61:BF:9F:84:DF:9C:16:BB:B9 Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 0E5F Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/92AD525E999311EA9369A12CC4F9AE02.roa Signing time: Sat 02 Sep 2023 18:05:31 +0000 ROA not before: Sat 02 Sep 2023 18:05:31 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 63689 IP address blocks: 45.114.236.0/22 maxlen: 24 103.71.24.0/24 maxlen: 24 103.90.51.0/24 maxlen: 24 103.90.56.0/23 maxlen: 24 2401:d640::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3679 (0xe5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Sep 2 18:05:31 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=64f3796b-92c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:f7:b3:c0:6b:f6:c9:d1:19:4b:0f:42:58: 13:27:a8:6f:41:78:2b:1b:6e:15:d4:64:6a:84:fd: bb:17:ef:b1:9a:3d:5d:d3:da:63:9e:ef:12:c3:50: 5c:ed:11:d8:c6:aa:e9:25:8b:e8:66:f9:aa:6a:05: 4d:f2:72:be:63:f4:50:52:51:a6:8b:19:ae:fc:62: b6:e0:81:f7:f5:d3:7d:d8:6e:07:fd:13:66:cd:a6: 2c:ba:39:a4:2a:75:ff:f4:c3:c8:1d:71:d7:32:12: c4:74:cd:e7:a1:4f:92:f7:6d:ac:17:2c:d0:04:27: 4a:9e:96:10:3d:5a:b8:b9:2f:0a:60:ce:99:03:8b: 1a:95:cc:f6:28:9d:e0:df:66:c6:f5:31:48:63:22: c8:39:11:d7:1c:a6:13:f5:6b:3a:4d:24:ff:2c:39: 0c:c5:6e:8f:95:11:f4:8f:d7:75:03:1f:8f:55:e4: f5:26:72:60:83:0b:d0:1c:61:58:30:bd:7c:56:a2: c6:fa:4a:74:41:78:53:e9:1c:56:74:35:80:0b:bd: df:84:65:de:86:27:f0:51:a5:da:13:1f:5f:84:81: 49:60:40:0e:f8:24:66:8d:4d:86:ce:d3:bc:03:f1: 5f:6c:c5:70:a5:01:8b:26:be:6d:73:b0:10:04:a7: 1a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A9:84:F7:23:51:5A:7A:0F:3F:26:61:BF:9F:84:DF:9C:16:BB:B9 X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/92AD525E999311EA9369A12CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.236.0/22 103.71.24.0/24 103.90.51.0/24 103.90.56.0/23 IPv6: 2401:d640::/32 Signature Algorithm: sha256WithRSAEncryption 5e:b3:dd:e0:d6:20:09:17:59:79:44:99:dd:63:84:a5:d5:26: 2f:ee:c9:41:fb:be:34:04:0f:81:9e:af:2a:c7:12:b0:1f:cb: af:18:d5:7b:0e:84:3a:9b:be:e9:09:1f:c1:61:64:e9:4b:86: 91:4c:a4:39:5d:0f:ee:f4:35:0e:32:22:f5:fe:6a:3d:bc:b5: 5e:73:84:6e:30:f6:b6:51:d2:9c:20:ec:e4:f0:1e:35:68:bd: e9:32:33:55:f3:a5:72:c9:7c:3d:53:9a:e6:95:1d:a3:69:fc: 8a:a0:4a:ca:61:15:c2:dc:53:58:53:8f:94:bc:9c:e5:97:13: f4:d6:e9:3d:7e:d8:69:57:af:e5:fb:2f:26:9c:e1:e2:2a:b3: 53:e5:b8:07:cc:69:ef:0f:6c:45:52:c4:e4:21:8c:85:44:23: 22:5e:60:a3:bc:bf:52:aa:23:d1:e4:07:1a:de:b8:2a:03:41: b4:e1:2f:fa:87:5f:ca:bb:d6:03:be:64:34:66:94:44:f9:69: f3:3a:c0:62:39:6b:2e:68:47:4d:e7:9d:3b:65:8a:20:ea:f5: e6:f2:77:4c:06:b3:e8:97:ad:b6:26:5d:9c:e5:dc:ca:8a:f7: 0b:9c:01:ca:33:11:fa:fd:67:b0:98:8c:f0:58:f9:5f:71:22: d0:08:fa:48 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjMwOTAyMTgwNTMxWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGYzNzk2Yi05MmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr73s8Br9snRGUsPQlgTJ6hvQXgrG24V1GRqhP27F++xmj1d09pjnu8Sw1Bc 7RHYxqrpJYvoZvmqagVN8nK+Y/RQUlGmixmu/GK24IH39dN92G4H/RNmzaYsujmk KnX/9MPIHXHXMhLEdM3noU+S922sFyzQBCdKnpYQPVq4uS8KYM6ZA4salcz2KJ3g 32bG9TFIYyLIORHXHKYT9Ws6TST/LDkMxW6PlRH0j9d1Ax+PVeT1JnJggwvQHGFY ML18VqLG+kp0QXhT6RxWdDWAC73fhGXehifwUaXaEx9fhIFJYEAO+CRmjU2GztO8 A/FfbMVwpQGLJr5tc7AQBKcaWwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFNCphPcj UVp6Dz8mYb+fhN+cFru5MB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY3RDEvNkNCQzlCNDA2MTFEMTFFOUIwMTJEQjM3QzRGOUFFMDIvOTJBRDUyNUU5 OTkzMTFFQTkzNjlBMTJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAItcuwDBABnRxgDBABnWjMDBAFnWjgwDQQCAAIwBwMFACQB 1kAwDQYJKoZIhvcNAQELBQADggEBAF6z3eDWIAkXWXlEmd1jhKXVJi/uyUH7vjQE D4GeryrHErAfy68Y1XsOhDqbvukJH8FhZOlLhpFMpDldD+70NQ4yIvX+aj28tV5z hG4w9rZR0pwg7OTwHjVovekyM1XzpXLJfD1TmuaVHaNp/IqgSsphFcLcU1hTj5S8 nOWXE/TW6T1+2GlXr+X7Lyac4eIqs1PluAfMae8PbEVSxOQhjIVEIyJeYKO8v1Kq I9HkBxreuCoDQbThL/qHX8q71gO+ZDRmlET5afM6wGI5ay5oR03nnTtliiDq9eby d0wGs+iXrbYmXZzl3MqK9wucAcozEfr9Z7CYjPBY+V9xItAI+kg= -----END CERTIFICATE-----Generated at Fri May 31 19:47:52 2024 by rpki-client on console-fra.rpki-client.org