$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/93957C3A25B211ECB5356475C4F9AE02.roa File: 93957C3A25B211ECB5356475C4F9AE02.roa (raw, json) Hash identifier: rxXFLYO2jOx+4E1gXwptPALsOETYyiBrkxClqr3viBA= Subject key identifier: C7:48:33:BE:41:F4:7D:83:4F:03:A4:49:E3:5E:5C:8E:94:A1:18:69 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 239D Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/93957C3A25B211ECB5356475C4F9AE02.roa Signing time: Tue 16 Jan 2024 16:12:40 +0000 ROA not before: Tue 16 Jan 2024 16:12:40 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 3758 IP address blocks: 202.176.192.0/19 maxlen: 24 203.208.224.0/19 maxlen: 24 2404:5800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 16:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9117 (0x239d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Jan 16 16:12:40 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65a6aaf8-5d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:92:95:e5:5c:8f:f0:62:a5:dc:7b:2e:6a: 42:ac:04:62:c9:c7:be:d4:cb:cd:30:55:78:c9:b9: 2c:ce:03:aa:0c:eb:8c:d6:99:29:84:f8:d1:d6:70: b6:c5:d5:08:d2:20:00:de:c7:62:2e:6d:1b:a2:96: 10:ec:cb:87:e5:eb:fe:3a:02:c0:f7:9f:f3:6f:99: 36:e2:59:39:c5:f4:ab:03:45:c5:f0:a4:97:48:94: c3:75:84:bf:29:a3:7c:89:be:38:9d:57:14:36:fc: 36:96:64:dd:fa:b4:12:c9:ff:95:fc:8e:4a:dd:7a: 87:9f:e0:72:4f:ba:dd:e0:09:36:12:36:7a:54:c2: 15:d9:91:9c:3b:40:08:5e:89:b3:6f:1d:4c:49:42: 28:61:24:5f:c9:8a:a5:77:61:4d:7e:71:fc:21:21: d0:a9:d6:df:c9:99:71:65:49:a8:6c:d9:27:16:64: 3a:bf:05:60:ab:1b:a9:a3:3e:a7:a5:c4:eb:05:ad: 1b:fd:12:60:1f:ea:bd:73:1b:d0:0b:40:02:cb:b1: e1:ce:7c:6a:0f:7c:2a:87:32:eb:6e:4d:c2:0a:a4: f4:7b:4e:1e:cf:67:a7:8b:07:d7:11:fa:46:38:59: 11:8a:a0:41:ea:e4:b5:e0:ce:db:7f:f2:d1:91:57: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:48:33:BE:41:F4:7D:83:4F:03:A4:49:E3:5E:5C:8E:94:A1:18:69 X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/93957C3A25B211ECB5356475C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.176.192.0/19 203.208.224.0/19 IPv6: 2404:5800::/32 Signature Algorithm: sha256WithRSAEncryption ac:93:ed:6f:b7:aa:4a:34:2e:d7:1b:32:94:83:2b:ec:a7:4e: e2:cf:27:d9:86:2c:84:58:b7:45:a8:05:0e:be:7d:c6:10:45: 41:11:f3:fa:4f:d7:3d:f9:94:64:c5:66:ba:d3:b4:d1:2f:1a: 28:8a:b3:e7:8d:8e:b9:9c:57:ea:3b:f4:e2:b7:8a:7e:a7:d3: 1e:7f:61:5a:4c:92:be:16:7e:57:a0:a0:43:0b:b2:f3:da:c3: 79:80:ba:3c:25:5f:2d:54:16:b9:a0:cd:ea:9c:91:18:70:72: b4:fd:47:76:5e:8b:d0:46:9c:19:39:9b:ad:72:a6:17:53:1d: f1:ac:5b:23:e3:81:88:11:2b:52:7e:28:0d:29:d0:4e:e8:4d: d3:e9:3f:3b:c1:58:13:93:28:47:6a:37:7d:80:be:1a:4d:34: 96:74:ab:0f:f5:be:c6:4f:9f:03:3a:fc:4d:f8:1a:30:54:c1: d5:9b:2c:82:d4:61:2b:7e:da:e2:4e:83:32:97:e5:37:17:c9: c2:9e:6e:2b:57:62:3f:3d:59:87:30:d5:62:5d:6d:ee:6c:5e: 23:38:51:60:ae:67:d5:af:30:53:69:22:bd:04:78:2b:a5:fa: d0:4f:97:c0:8b:83:bf:be:9d:25:96:e6:09:5f:42:32:65:ef: a8:6c:8a:e4 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICI50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjQwMTE2MTYxMjQwWhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWE2YWFmOC01ZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTySleVcj/Bipdx7LmpCrARiyce+1MvNMFV4ybkszgOqDOuM1pkphPjR1nC2 xdUI0iAA3sdiLm0bopYQ7MuH5ev+OgLA95/zb5k24lk5xfSrA0XF8KSXSJTDdYS/ KaN8ib44nVcUNvw2lmTd+rQSyf+V/I5K3XqHn+ByT7rd4Ak2EjZ6VMIV2ZGcO0AI Xomzbx1MSUIoYSRfyYqld2FNfnH8ISHQqdbfyZlxZUmobNknFmQ6vwVgqxupoz6n pcTrBa0b/RJgH+q9cxvQC0ACy7HhznxqD3wqhzLrbk3CCqT0e04ez2eniwfXEfpG OFkRiqBB6uS14M7bf/LRkVfNRwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMdIM75B 9H2DTwOkSeNeXI6UoRhpMB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjkxNkEvMUQ3QUQwQkE0NThEMTFFNUIzOTU3QTc5QzRGOUFFMDIvOTM5NTdDM0Ey NUIyMTFFQ0I1MzU2NDc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAXKsMADBAXL0OAwDQQCAAIwBwMFACQEWAAwDQYJKoZIhvcN AQELBQADggEBAKyT7W+3qko0LtcbMpSDK+ynTuLPJ9mGLIRYt0WoBQ6+fcYQRUER 8/pP1z35lGTFZrrTtNEvGiiKs+eNjrmcV+o79OK3in6n0x5/YVpMkr4WflegoEML svPaw3mAujwlXy1UFrmgzeqckRhwcrT9R3Zei9BGnBk5m61yphdTHfGsWyPjgYgR K1J+KA0p0E7oTdPpPzvBWBOTKEdqN32AvhpNNJZ0qw/1vsZPnwM6/E34GjBUwdWb LILUYSt+2uJOgzKX5TcXycKebitXYj89WYcw1WJdbe5sXiM4UWCuZ9WvMFNpIr0E eCul+tBPl8CLg7++nSWW5glfQjJl76hsiuQ= -----END CERTIFICATE-----Generated at Fri May 31 20:34:20 2024 by rpki-client on console-ams.rpki-client.org