$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B6D6EA68092F11EFA8F0875FC4F9AE02.roa File: B6D6EA68092F11EFA8F0875FC4F9AE02.roa (raw, json) Hash identifier: iKwR0RHH9RC8FwDYu70Mv25ehy4SgPXOcLpgPFOYsuc= Subject key identifier: 21:ED:18:B6:2B:B2:22:DD:7E:F9:07:8E:28:06:56:56:75:84:F9:6C Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 1264 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B6D6EA68092F11EFA8F0875FC4F9AE02.roa Signing time: Fri 24 May 2024 22:32:43 +0000 ROA not before: Fri 24 May 2024 22:32:43 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 7029 IP address blocks: 115.167.0.0/24 maxlen: 24 115.167.3.0/24 maxlen: 24 115.167.4.0/24 maxlen: 24 115.167.12.0/22 maxlen: 24 115.167.16.0/22 maxlen: 24 115.167.20.0/22 maxlen: 24 115.167.56.0/22 maxlen: 24 115.167.108.0/22 maxlen: 24 115.167.116.0/22 maxlen: 24 115.167.120.0/22 maxlen: 24 115.167.126.0/24 maxlen: 24 115.167.127.0/24 maxlen: 24 175.110.106.0/24 maxlen: 24 175.110.107.0/24 maxlen: 24 175.110.109.0/24 maxlen: 24 175.110.110.0/24 maxlen: 24 175.110.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 22:53:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4708 (0x1264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: May 24 22:32:43 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6651158b-8732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:f6:ab:6e:af:8b:92:91:3c:30:29:5c:06: bd:af:80:f2:d3:35:cd:0d:c2:a1:8a:ef:3e:21:15: 39:46:ce:d4:cd:d3:35:a8:a9:03:66:90:ab:be:e4: 6a:a6:a9:42:95:89:39:3d:ea:6b:40:f4:83:d4:5f: c7:d0:6b:a5:01:6f:c0:49:da:89:b5:52:cf:47:5a: 84:e4:e7:c1:d1:e4:2d:ef:2e:a4:04:74:21:02:55: ed:50:01:88:fb:b5:35:bc:12:f4:dd:d9:12:c3:40: b1:5d:2d:c8:cd:99:8e:63:81:40:74:fc:fa:5b:a3: 54:e0:fb:c0:f2:a0:f6:a6:a0:7e:ef:30:3a:36:ab: 97:37:bf:9c:b3:15:81:7c:3f:62:9d:e5:f4:5e:73: 4c:c6:7d:4a:72:fa:24:4f:80:e6:ad:10:41:98:38: 32:ba:46:19:dd:c7:50:cb:46:f9:dc:e7:80:d0:d1: 4b:48:b4:21:0a:4e:a8:78:94:55:72:f5:84:47:72: 22:6e:1d:d4:ee:bd:54:38:9a:41:57:bd:c4:d2:cc: 83:f4:b3:a0:71:5c:e3:90:5e:7f:73:14:53:a4:0e: b7:92:e0:68:fd:66:9e:a9:63:6c:2a:60:62:f1:45: 06:5e:cf:98:cf:9c:b6:26:7b:82:a9:17:1b:d8:b4: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:ED:18:B6:2B:B2:22:DD:7E:F9:07:8E:28:06:56:56:75:84:F9:6C X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B6D6EA68092F11EFA8F0875FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.0.0/24 115.167.3.0-115.167.4.255 115.167.12.0-115.167.23.255 115.167.56.0/22 115.167.108.0/22 115.167.116.0-115.167.123.255 115.167.126.0/23 175.110.106.0/23 175.110.109.0-175.110.111.255 Signature Algorithm: sha256WithRSAEncryption 10:d1:26:ad:c6:e3:c1:93:60:34:3d:f6:fc:64:af:8c:a6:c6: 90:c9:9f:1e:64:b1:15:f7:2a:87:a5:79:8e:f2:ed:a8:42:4d: 45:2b:cd:a6:0a:1e:a4:bc:a2:ef:63:96:07:09:9a:8b:f2:d1: ec:5e:ec:97:1e:22:03:e6:dc:b2:78:8f:86:15:d3:8c:db:57: 38:94:fb:17:db:1d:46:9c:18:75:6a:92:73:8e:43:32:2e:17: 86:5e:66:da:56:1b:54:79:bb:f8:86:a3:49:cf:c4:3c:b2:ee: 60:53:18:3c:d8:f6:e7:d1:32:b0:e4:e9:66:e9:31:79:94:12: b3:e7:ca:d3:95:2b:94:75:95:52:47:e1:98:3f:c9:f3:73:aa: b6:61:9d:70:69:7a:52:27:33:5e:76:31:d7:61:8d:99:d6:94: 1c:5b:fc:c2:32:b9:05:8a:4f:59:28:62:3c:69:23:b7:2f:95: 99:95:ce:7f:c6:d7:11:5a:f8:d5:3c:8a:5a:f2:ac:43:55:ae: 26:ef:6b:7f:cf:c6:05:e2:76:71:60:5c:cd:ea:c7:3f:04:03: 98:bf:64:f4:a5:42:09:af:b9:e5:d1:03:43:94:71:ae:2a:51: 5c:6d:2a:7a:8c:72:63:29:20:85:29:97:56:11:79:89:72:62: 87:fd:6a:58 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgICEmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjQwNTI0MjIzMjQzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUxMTU4Yi04NzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5T2q26vi5KRPDApXAa9r4Dy0zXNDcKhiu8+IRU5Rs7UzdM1qKkDZpCrvuRq pqlClYk5PeprQPSD1F/H0GulAW/ASdqJtVLPR1qE5OfB0eQt7y6kBHQhAlXtUAGI +7U1vBL03dkSw0CxXS3IzZmOY4FAdPz6W6NU4PvA8qD2pqB+7zA6NquXN7+csxWB fD9ineX0XnNMxn1KcvokT4DmrRBBmDgyukYZ3cdQy0b53OeA0NFLSLQhCk6oeJRV cvWER3Iibh3U7r1UOJpBV73E0syD9LOgcVzjkF5/cxRTpA63kuBo/WaeqWNsKmBi 8UUGXs+Yz5y2JnuCqRcb2LR8uwIDAQABo4IC5TCCAuEwHQYDVR0OBBYEFCHtGLYr siLdfvkHjigGVlZ1hPlsMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQjZENkVBNjgw OTJGMTFFRkE4RjA4NzVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbwYIKwYBBQUHAQcBAf8E YDBeMFwEAgABMFYDBABzpwAwDAMEAHOnAwMEAHOnBDAMAwQCc6cMAwQDc6cQAwQC c6c4AwQCc6dsMAwDBAJzp3QDBAJzp3gDBAFzp34DBAGvbmowDAMEAK9ubQMEBK9u YDANBgkqhkiG9w0BAQsFAAOCAQEAENEmrcbjwZNgND32/GSvjKbGkMmfHmSxFfcq h6V5jvLtqEJNRSvNpgoepLyi72OWBwmai/LR7F7slx4iA+bcsniPhhXTjNtXOJT7 F9sdRpwYdWqSc45DMi4Xhl5m2lYbVHm7+IajSc/EPLLuYFMYPNj259EysOTpZukx eZQSs+fK05UrlHWVUkfhmD/J83OqtmGdcGl6UiczXnYx12GNmdaUHFv8wjK5BYpP WShiPGkjty+VmZXOf8bXEVr41TyKWvKsQ1WuJu9rf8/GBeJ2cWBczerHPwQDmL9k 9KVCCa+55dEDQ5RxripRXG0qeoxyYykghSmXVhF5iXJih/1qWA== -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:31 2024 by rpki-client on console-ams.rpki-client.org