$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/465DBB30BA8811EAAF996D39C4F9AE02.roa File: 465DBB30BA8811EAAF996D39C4F9AE02.roa (raw, json) Hash identifier: du/ABNiztJ+wl4AYQemdjr1Syqe2MqjRsEOHqvNS/Lw= Subject key identifier: F9:C6:A2:FA:93:3F:0F:6F:80:46:7B:81:1A:28:46:72:28:52:DC:F2 Certificate issuer: /CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Certificate serial: 0808 Authority key identifier: 47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/465DBB30BA8811EAAF996D39C4F9AE02.roa Signing time: Fri 31 May 2024 07:47:38 +0000 ROA not before: Fri 31 May 2024 07:47:38 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 137280 IP address blocks: 104.250.32.0/23 maxlen: 23 104.250.32.0/24 maxlen: 24 104.250.33.0/24 maxlen: 24 104.250.34.0/23 maxlen: 23 104.250.38.0/23 maxlen: 23 104.250.40.0/23 maxlen: 23 104.250.42.0/23 maxlen: 23 104.250.44.0/24 maxlen: 24 104.250.46.0/23 maxlen: 23 104.250.48.0/23 maxlen: 23 104.250.50.0/23 maxlen: 23 104.250.52.0/22 maxlen: 22 104.250.56.0/22 maxlen: 22 104.250.56.0/23 maxlen: 23 104.250.58.0/23 maxlen: 23 104.250.60.0/23 maxlen: 23 104.250.60.0/24 maxlen: 24 104.250.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 18:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8BA/serialNumber=470A93449E611FA9AD05A289D6188220B5FCFC3A Validity Not Before: May 31 07:47:38 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=6659809a-5686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:1e:90:56:e4:92:7d:5b:a1:65:1d:f5:b6: 84:2c:b7:20:64:7e:5a:4a:2c:53:5f:92:2c:41:d8: 91:1e:c6:b7:79:67:e1:ac:40:74:2d:e4:1c:5f:f3: 81:18:22:ca:ed:d9:a6:3b:18:f3:0d:e9:71:8a:7a: 13:b6:f2:ad:2f:48:ee:97:3d:eb:55:f1:50:6b:9e: b5:f8:1d:72:3e:fa:53:ba:aa:7c:15:ed:64:db:2c: 89:60:3d:32:50:ae:2c:20:d1:9b:b8:c6:53:03:44: 85:d4:52:71:9e:20:c7:15:c6:c2:90:9a:36:0a:f6: 79:57:c9:17:dd:57:d9:09:b6:0d:b8:0d:93:b7:49: bd:12:19:d9:d7:35:c6:30:dd:47:93:15:1a:1f:40: 92:4a:6a:d6:ac:59:fa:f7:61:87:23:1e:e2:72:41: 9f:58:c4:8a:69:6e:8b:ef:c4:94:54:d3:0d:cf:2b: 0f:13:c0:bc:f4:3b:47:6f:92:db:a1:af:a8:3e:39: 91:87:0e:f5:d6:31:1e:22:15:21:05:ba:21:37:8f: 6f:a7:24:41:97:c8:a8:30:98:c9:53:e5:5c:ac:76: d1:87:2a:7b:bc:98:9f:13:88:52:87:93:a4:95:c8: ba:55:a5:c0:96:0d:62:c5:20:29:96:82:ce:f2:bf: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C6:A2:FA:93:3F:0F:6F:80:46:7B:81:1A:28:46:72:28:52:DC:F2 X509v3 Authority Key Identifier: keyid:47:0A:93:44:9E:61:1F:A9:AD:05:A2:89:D6:18:82:20:B5:FC:FC:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwqTRJ5hH6mtBaKJ1hiCILX8_Do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8BA/2B732E70BA8511EABA838E30C4F9AE02/465DBB30BA8811EAAF996D39C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 104.250.32.0/22 104.250.38.0-104.250.44.255 104.250.46.0-104.250.63.255 Signature Algorithm: sha256WithRSAEncryption a9:dc:8e:6a:38:f1:c7:57:e6:54:12:bd:5a:73:26:ca:13:ce: d6:97:19:58:f6:42:45:c3:1e:ac:20:34:89:e6:48:cd:5a:90: 1e:0e:9e:e2:2e:ff:2b:b3:7f:0e:ab:5e:01:03:c2:a5:23:c0: 05:bb:ec:bb:fa:8d:0d:cf:af:5c:03:c0:8d:0d:f2:71:1c:a0: 7a:db:b9:b4:04:8c:88:2a:96:59:78:29:ec:b5:05:e9:3d:bd: 7a:95:63:f1:0c:78:60:a1:3d:c6:7d:00:6a:8f:54:a8:56:d4: f1:00:ec:6d:a7:8e:84:76:41:27:a5:71:39:8a:e2:c4:b6:b4: ca:c8:81:86:3d:f8:8e:78:b1:e1:d6:7c:e5:ed:8a:59:ba:22: 4a:79:97:5a:a3:30:1f:8e:4a:77:72:a9:97:ca:e0:92:83:ae: 43:18:60:25:54:24:90:65:cf:17:5c:fc:1a:a8:03:39:9a:63: 42:be:74:01:17:9e:14:67:24:9d:81:ea:be:00:4b:22:ee:5e: 68:bc:5a:af:e8:1c:02:59:29:5c:d4:7c:86:8c:49:e0:c2:64: 6f:9a:a9:80:a2:25:dc:13:a6:5b:75:a9:b5:86:19:5e:e7:12: 96:56:04:ea:b7:02:ed:d3:fb:8a:74:e5:e9:a7:1c:8e:03:8b: f2:b7:c4:e3 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QkExMTAvBgNVBAUTKDQ3MEE5MzQ0OUU2MTFGQTlBRDA1QTI4OUQ2MTg4MjIw QjVGQ0ZDM0EwHhcNMjQwNTMxMDc0NzM4WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjU5ODA5YS01Njg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKsekFbkkn1boWUd9baELLcgZH5aSixTX5IsQdiRHsa3eWfhrEB0LeQcX/OB GCLK7dmmOxjzDelxinoTtvKtL0julz3rVfFQa561+B1yPvpTuqp8Fe1k2yyJYD0y UK4sINGbuMZTA0SF1FJxniDHFcbCkJo2CvZ5V8kX3VfZCbYNuA2Tt0m9EhnZ1zXG MN1HkxUaH0CSSmrWrFn692GHIx7ickGfWMSKaW6L78SUVNMNzysPE8C89DtHb5Lb oa+oPjmRhw711jEeIhUhBbohN49vpyRBl8ioMJjJU+VcrHbRhyp7vJifE4hSh5Ok lci6VaXAlg1ixSAploLO8r87rQIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFPnGovqT Pw9vgEZ7gRooRnIoUtzyMB8GA1UdIwQYMBaAFEcKk0SeYR+prQWiidYYgiC1/Pw6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhCQS8yQjczMkU3MEJB ODUxMUVBQkE4MzhFMzBDNEY5QUUwMi9Sd3FUUko1aEg2bXRCYUtKMWhpQ0lMWDhf RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J3cVRSSjVoSDZtdEJhS0oxaGlDSUxYOF9Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0I4QkEvMkI3MzJFNzBCQTg1MTFFQUJBODM4RTMwQzRGOUFFMDIvNDY1REJCMzBC QTg4MTFFQUFGOTk2RDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOwYIKwYBBQUHAQcBAf8E LDAqMCgEAgABMCIDBAJo+iAwDAMEAWj6JgMEAGj6LDAMAwQBaPouAwQGaPoAMA0G CSqGSIb3DQEBCwUAA4IBAQCp3I5qOPHHV+ZUEr1acybKE87WlxlY9kJFwx6sIDSJ 5kjNWpAeDp7iLv8rs38Oq14BA8KlI8AFu+y7+o0Nz69cA8CNDfJxHKB627m0BIyI KpZZeCnstQXpPb16lWPxDHhgoT3GfQBqj1SoVtTxAOxtp46EdkEnpXE5iuLEtrTK yIGGPfiOeLHh1nzl7YpZuiJKeZdaozAfjkp3cqmXyuCSg65DGGAlVCSQZc8XXPwa qAM5mmNCvnQBF54UZySdgeq+AEsi7l5ovFqv6BwCWSlc1HyGjEngwmRvmqmAoiXc E6Zbdam1hhle5xKWVgTqtwLt0/uKdOXppxyOA4vyt8Tj -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:28 2024 by rpki-client on console-ams.rpki-client.org