$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa File: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (raw, json) Hash identifier: d144T7oMH95RvKY4e89HKTmo5Jmqni2w+fwMwfkyYxg= Subject key identifier: F0:F2:17:57:65:02:62:57:AA:9C:F4:B4:D2:89:3C:73:96:8C:7F:A2 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 338D Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa Signing time: Fri 24 Nov 2023 15:00:49 +0000 ROA not before: Fri 24 Nov 2023 15:00:49 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 38896 IP address blocks: 103.2.144.0/22 maxlen: 24 121.58.184.0/21 maxlen: 24 122.129.96.0/20 maxlen: 24 122.129.112.0/21 maxlen: 24 2402:8600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 14:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13197 (0x338d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Nov 24 15:00:49 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=6560baa0-394e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d5:bb:a4:d7:45:c8:84:32:d1:b8:06:8f:c8: 55:d8:19:e1:eb:86:47:67:d6:3b:73:55:61:77:a6: ab:4d:88:c2:f6:03:59:02:da:a8:f8:2c:c6:bb:37: 08:af:bb:72:34:0e:f8:6e:fe:c5:c4:7d:8d:3f:7c: 85:1a:ac:90:18:40:73:b7:40:eb:75:0f:da:05:87: 64:e0:f9:43:e7:2a:d2:12:28:fe:2b:ed:25:00:5e: 35:e6:33:4c:95:74:76:c0:2e:12:a9:e2:c9:a8:06: 71:2d:f3:ce:18:7c:80:93:e5:18:0b:81:76:6f:51: 17:56:0d:01:cb:e3:b0:3e:7a:6a:9d:61:c5:8a:04: fc:61:33:49:f2:c6:92:3c:d1:6b:e1:18:a4:18:b8: 8f:d0:ac:c8:59:33:61:4b:5e:bc:ac:16:cb:92:79: e0:5d:bb:fe:95:86:a7:87:1b:df:5b:67:fc:4a:37: a5:74:44:97:e9:e9:f1:58:f0:d4:34:ce:a8:3c:f7: 9d:cc:3f:f8:0f:1d:4f:16:a0:46:fb:79:4c:f9:d1: 26:ab:1f:c7:26:37:08:be:a1:7f:44:e8:6f:c7:5d: 1d:18:79:4e:53:49:32:67:b2:3d:9e:dd:66:63:0e: 9b:2e:85:a7:0f:88:bc:04:25:87:4f:d8:28:64:72: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:17:57:65:02:62:57:AA:9C:F4:B4:D2:89:3C:73:96:8C:7F:A2 X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/D55D2990561F11E7B9B5FB2CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.2.144.0/22 121.58.184.0/21 122.129.96.0-122.129.119.255 IPv6: 2402:8600::/32 Signature Algorithm: sha256WithRSAEncryption 2a:7e:34:41:bd:51:fd:07:32:ac:74:4a:87:8b:a9:89:c3:f6: e5:00:b2:30:d9:92:ad:dc:3c:d2:a3:b8:39:a6:33:26:22:6f: 5e:d5:9d:dc:ad:7e:a8:59:f3:e8:41:a8:39:7d:26:ba:b5:d8: 5a:f8:59:72:33:19:f0:c7:25:80:63:4c:31:a5:c9:74:2f:a2: c8:3f:3f:1e:32:99:72:cd:67:94:3c:3f:b3:59:a6:82:e4:dc: a0:1f:79:f6:d0:57:09:ab:08:1a:51:4c:57:0d:a9:fe:5f:49: c4:84:d1:ae:dc:0f:8c:4c:40:20:ca:c1:bb:e5:82:39:8e:71: df:60:c2:eb:30:c1:20:55:b9:83:20:78:77:a7:78:72:dc:f9: 26:7b:ba:45:1c:ae:ee:f8:8d:6b:bf:cf:d6:44:da:39:c1:90: 42:b0:1e:42:6d:61:22:a3:c8:1d:3d:a0:02:8b:35:39:71:fb: c0:11:b8:36:37:fd:0e:16:2f:2a:6a:b4:bd:6b:a1:c1:60:39: a8:69:2e:cf:d7:43:70:d1:02:10:75:14:e0:b2:29:b3:5a:8b: ab:6c:7f:99:56:4a:0a:95:2d:85:f1:3a:da:52:34:d3:17:d3: 14:60:2e:ed:e0:07:c7:0b:6b:39:a0:27:2c:36:07:12:00:11: 49:be:57:0a -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICM40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjMxMTI0MTUwMDQ5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTYwYmFhMC0zOTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9W7pNdFyIQy0bgGj8hV2Bnh64ZHZ9Y7c1Vhd6arTYjC9gNZAtqo+CzGuzcI r7tyNA74bv7FxH2NP3yFGqyQGEBzt0DrdQ/aBYdk4PlD5yrSEij+K+0lAF415jNM lXR2wC4SqeLJqAZxLfPOGHyAk+UYC4F2b1EXVg0By+OwPnpqnWHFigT8YTNJ8saS PNFr4RikGLiP0KzIWTNhS168rBbLknngXbv+lYanhxvfW2f8SjeldESX6enxWPDU NM6oPPedzD/4Dx1PFqBG+3lM+dEmqx/HJjcIvqF/ROhvx10dGHlOU0kyZ7I9nt1m Yw6bLoWnD4i8BCWHT9goZHKlAQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFPDyF1dl AmJXqpz0tNKJPHOWjH+iMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REM4NjYvNkEwREY5QkExRDk2MTFFMkI3QjUwNTdGMDhCMDJDRDIvRDU1RDI5OTA1 NjFGMTFFN0I5QjVGQjJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMCAEAgABMBoDBAJnApADBAN5OrgwDAMEBXqBYAMEA3qBcDANBAIAAjAHAwUA JAKGADANBgkqhkiG9w0BAQsFAAOCAQEAKn40Qb1R/QcyrHRKh4upicP25QCyMNmS rdw80qO4OaYzJiJvXtWd3K1+qFnz6EGoOX0murXYWvhZcjMZ8MclgGNMMaXJdC+i yD8/HjKZcs1nlDw/s1mmguTcoB959tBXCasIGlFMVw2p/l9JxITRrtwPjExAIMrB u+WCOY5x32DC6zDBIFW5gyB4d6d4ctz5Jnu6RRyu7viNa7/P1kTaOcGQQrAeQm1h IqPIHT2gAos1OXH7wBG4Njf9DhYvKmq0vWuhwWA5qGkuz9dDcNECEHUU4LIps1qL q2x/mVZKCpUthfE62lI00xfTFGAu7eAHxwtrOaAnLDYHEgARSb5XCg== -----END CERTIFICATE-----Generated at Fri May 31 17:44:52 2024 by rpki-client on console-fra.rpki-client.org