$ rpki-client -vvf rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/1D86F90A988D11EABE02F23DC4F9AE02.roa File: 1D86F90A988D11EABE02F23DC4F9AE02.roa (raw, json) Hash identifier: eXMB9dV7xihStPr0BmetBSssUWM8QZG3PMbHIo5WHpA= Subject key identifier: 98:03:82:B6:01:10:BA:AC:D9:82:DA:32:C0:70:4B:5A:D8:77:BB:96 Certificate issuer: /CN=A91E60A4/serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C Certificate serial: 0920 Authority key identifier: A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/1D86F90A988D11EABE02F23DC4F9AE02.roa Signing time: Sat 22 Jun 2024 21:13:29 +0000 ROA not before: Sat 22 Jun 2024 21:13:29 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134220 IP address blocks: 45.118.188.0/22 maxlen: 22 45.118.188.0/24 maxlen: 24 45.118.189.0/24 maxlen: 24 45.118.190.0/24 maxlen: 24 45.118.191.0/24 maxlen: 24 103.58.228.0/22 maxlen: 22 103.58.228.0/24 maxlen: 24 103.58.229.0/24 maxlen: 24 103.58.230.0/24 maxlen: 24 103.58.231.0/24 maxlen: 24 103.246.52.0/22 maxlen: 22 103.246.52.0/24 maxlen: 24 103.246.53.0/24 maxlen: 24 103.246.54.0/24 maxlen: 24 103.246.55.0/24 maxlen: 24 2402:6f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.crl rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E60A4/serialNumber=A0038D5F2CCC4AC25EBAF771242E74300FCF782C Validity Not Before: Jun 22 21:13:29 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66773e78-9bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d4:23:a6:7d:d9:85:62:09:44:bf:65:43:a4: a3:75:c1:23:07:70:06:e4:cb:58:22:93:c7:17:ac: 31:b5:c5:7b:5f:09:bc:00:0f:09:48:67:8a:02:af: 86:c4:24:dd:60:2f:38:53:15:28:9c:7e:53:c4:53: cd:11:26:b4:36:4e:5f:23:73:9c:85:a2:cb:5d:26: a1:2d:67:dd:d5:ec:df:20:b4:12:fb:b8:09:18:c2: 21:48:17:b3:79:5c:83:19:ae:1c:e4:4a:0b:cc:6a: 4f:f3:ac:20:5c:2b:c7:fc:7a:2e:35:65:75:59:ae: 28:4d:f9:1f:3f:5b:d4:53:2e:46:ce:a7:09:6b:60: d1:81:32:00:b9:a9:fb:17:86:66:8d:5b:46:de:88: a1:42:3d:e9:ee:1f:fe:39:43:e6:0a:57:2c:e4:7b: 92:df:37:a5:81:e6:1f:dd:52:75:95:57:31:e0:57: da:f2:e8:9d:88:9d:45:96:2c:56:34:6a:bb:1f:f8: d7:96:7c:c0:5b:18:4b:a1:97:7d:2c:3c:dc:ad:1a: 1e:4f:e4:8f:08:ad:f7:13:f7:5d:84:53:32:c0:c2: 67:7e:5c:20:75:32:42:49:37:e1:b6:66:b3:a5:6e: 08:87:f0:1b:74:cb:c5:44:b1:85:5d:9e:f6:64:20: cd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:82:B6:01:10:BA:AC:D9:82:DA:32:C0:70:4B:5A:D8:77:BB:96 X509v3 Authority Key Identifier: keyid:A0:03:8D:5F:2C:CC:4A:C2:5E:BA:F7:71:24:2E:74:30:0F:CF:78:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/oAONXyzMSsJeuvdxJC50MA_PeCw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oAONXyzMSsJeuvdxJC50MA_PeCw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E60A4/6C7140EE829D11EAB78F8B3DC4F9AE02/1D86F90A988D11EABE02F23DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.188.0/22 103.58.228.0/22 103.246.52.0/22 IPv6: 2402:6f80::/32 Signature Algorithm: sha256WithRSAEncryption 16:43:6a:73:3a:e7:34:1b:15:85:05:29:5e:63:bb:0d:00:98: 53:11:1f:88:25:5f:d9:39:54:2b:57:8b:69:66:70:87:94:55: 41:ef:44:36:69:49:3a:39:22:ea:38:f1:9c:05:be:09:d7:a8: 8c:7e:b6:fd:5a:11:cc:c1:07:13:46:99:df:38:8d:e0:e7:aa: 24:bb:5a:7c:15:09:ca:5d:51:77:37:ee:62:8a:2c:0e:af:7c: a3:60:98:d5:72:49:8f:3e:56:7a:95:2e:be:e9:c0:34:57:cf: 9d:d0:f3:d0:bb:4d:0f:98:fa:93:58:fb:38:00:bc:77:1e:26: 5d:0f:bb:2e:a1:cf:14:c5:36:4a:91:44:15:0b:ce:45:1e:e6: 23:fb:ba:72:2a:01:43:3a:a7:7c:c7:95:36:ca:c8:24:ef:ad: 3c:e1:88:a3:22:f2:37:72:4a:34:97:91:7e:cb:3e:52:b3:f7: b4:35:6c:d6:c0:1a:55:6d:11:39:78:50:35:f9:82:6d:d2:ab: a0:9b:67:11:3a:9f:0f:ce:38:59:a3:51:7a:18:d4:97:29:e7: de:1b:e7:fc:64:fe:0a:47:7c:cd:d0:35:a8:b6:5f:8c:f7:08: 4a:cd:d6:d8:68:82:22:e0:4b:41:0e:30:80:83:c0:ae:91:ae: b8:9d:01:32 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwQTQxMTAvBgNVBAUTKEEwMDM4RDVGMkNDQzRBQzI1RUJBRjc3MTI0MkU3NDMw MEZDRjc4MkMwHhcNMjQwNjIyMjExMzI5WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Njc3M2U3OC05YmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dQjpn3ZhWIJRL9lQ6SjdcEjB3AG5MtYIpPHF6wxtcV7Xwm8AA8JSGeKAq+G xCTdYC84UxUonH5TxFPNESa0Nk5fI3OchaLLXSahLWfd1ezfILQS+7gJGMIhSBez eVyDGa4c5EoLzGpP86wgXCvH/HouNWV1Wa4oTfkfP1vUUy5GzqcJa2DRgTIAuan7 F4ZmjVtG3oihQj3p7h/+OUPmClcs5HuS3zelgeYf3VJ1lVcx4Ffa8uidiJ1FlixW NGq7H/jXlnzAWxhLoZd9LDzcrRoeT+SPCK33E/ddhFMywMJnflwgdTJCSTfhtmaz pW4Ih/AbdMvFRLGFXZ72ZCDNEwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJgDgrYB ELqs2YLaMsBwS1rYd7uWMB8GA1UdIwQYMBaAFKADjV8szErCXrr3cSQudDAPz3gs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjBBNC82QzcxNDBFRTgy OUQxMUVBQjc4RjhCM0RDNEY5QUUwMi9vQU9OWHl6TVNzSmV1dmR4SkM1ME1BX1Bl Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29BT05YeXpNU3NKZXV2ZHhKQzUwTUFfUGVDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYwQTQvNkM3MTQwRUU4MjlEMTFFQUI3OEY4QjNEQzRGOUFFMDIvMUQ4NkY5MEE5 ODhEMTFFQUJFMDJGMjNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAItdrwDBAJnOuQDBAJn9jQwDQQCAAIwBwMFACQCb4AwDQYJ KoZIhvcNAQELBQADggEBABZDanM65zQbFYUFKV5juw0AmFMRH4glX9k5VCtXi2lm cIeUVUHvRDZpSTo5Iuo48ZwFvgnXqIx+tv1aEczBBxNGmd84jeDnqiS7WnwVCcpd UXc37mKKLA6vfKNgmNVySY8+VnqVLr7pwDRXz53Q89C7TQ+Y+pNY+zgAvHceJl0P uy6hzxTFNkqRRBULzkUe5iP7unIqAUM6p3zHlTbKyCTvrTzhiKMi8jdySjSXkX7L PlKz97Q1bNbAGlVtETl4UDX5gm3Sq6CbZxE6nw/OOFmjUXoY1Jcp594b5/xk/gpH fM3QNai2X4z3CErN1thogiLgS0EOMICDwK6RrridATI= -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:34 2024 by rpki-client on console-fra.rpki-client.org