$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/95D40AE2497311EAB4873B63C4F9AE02.roa File: 95D40AE2497311EAB4873B63C4F9AE02.roa (raw, json) Hash identifier: 9WdFqtI9mHI9yP7sgXDgPH+DJwytsWCRJ900WsAL5kI= Subject key identifier: 98:D9:B4:95:8C:CD:04:93:B8:4D:64:D0:AC:EF:67:FA:28:16:D4:D9 Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 1019 Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/95D40AE2497311EAB4873B63C4F9AE02.roa Signing time: Sun 04 Jun 2023 18:28:01 +0000 ROA not before: Sun 04 Jun 2023 18:28:01 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 21859 IP address blocks: 45.119.6.0/23 maxlen: 23 45.119.6.0/24 maxlen: 24 45.119.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Apr 2024 17:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4121 (0x1019) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jun 4 18:28:01 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=647cd7b1-d1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:ce:04:80:88:2c:0f:69:df:9c:37:c5:ac: 2b:ee:1d:f2:88:71:46:5f:a8:9a:71:1d:e1:3f:33: 11:df:6e:1b:ba:13:b3:d7:b5:d9:c9:94:49:a2:6f: 86:f5:66:99:b0:c1:1e:1f:81:cd:ee:8c:04:db:71: 94:fd:8c:0b:87:42:49:2d:ff:1f:2f:7f:4c:23:a0: 66:24:15:ae:68:66:c5:ae:cb:01:ae:07:26:fe:70: b7:2e:32:fe:a3:fd:bd:18:ed:8c:88:b9:59:eb:e1: 0e:5d:76:91:c9:27:bc:e0:de:38:99:6a:ff:fc:3f: 6a:1a:56:d6:d0:28:eb:1a:64:37:94:5d:f3:3e:c1: 4e:70:7e:4d:c8:28:02:aa:35:3c:5e:91:23:01:e1: c9:73:e5:95:54:90:df:11:df:2a:5c:7c:25:14:6f: 62:e3:e0:52:ca:d8:9a:3f:56:69:15:83:bb:fe:5c: 09:c8:7c:8b:8f:b7:e6:13:eb:5f:ec:d3:f2:bd:f8: d3:ec:be:16:cc:b3:01:77:72:69:ff:ba:19:44:81: 78:57:22:9e:77:ec:62:78:77:0f:63:5a:7d:a4:7e: ae:17:1c:e0:1e:b1:92:04:01:08:f0:79:ce:04:39: 59:83:55:10:ac:d8:5a:d0:c2:b7:d5:bc:18:4a:e2: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D9:B4:95:8C:CD:04:93:B8:4D:64:D0:AC:EF:67:FA:28:16:D4:D9 X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/95D40AE2497311EAB4873B63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.6.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:f5:0f:af:86:95:50:35:70:ba:16:19:d5:bc:5e:52:07:60: 0d:0e:91:2c:20:bc:44:a4:0d:83:ba:d2:1a:4f:35:2c:57:2f: 21:2a:f5:a9:22:04:e9:5b:3e:83:7f:66:9e:e0:b3:62:5e:17: 61:66:c4:15:f8:ae:5b:13:85:84:16:cb:24:58:51:16:9b:2b: 08:c7:94:0f:fe:dc:e3:81:bf:be:c1:25:37:6b:be:8c:73:ba: 90:08:08:75:48:ab:ee:67:78:95:8f:c6:18:c7:b9:e1:4e:28: ce:22:94:68:f0:21:f4:bb:46:eb:9c:3f:42:36:75:09:0c:d2: 7f:fa:e0:82:48:5e:15:3f:1c:09:7d:ef:71:16:04:ec:80:57: 36:cb:8e:9d:56:c5:54:4b:cb:12:f3:bb:17:71:b7:53:6d:f8: a5:44:7f:bd:71:fd:eb:a2:f2:39:85:f4:72:d8:23:e0:29:b7: 8f:93:6a:6a:31:10:c0:89:4f:ee:6d:3c:14:df:41:05:d7:af: 4f:8d:dc:96:c4:b7:27:0c:e5:27:8d:6a:09:11:c8:74:1c:aa: 39:52:e7:04:27:7f:cd:74:5a:0e:49:ce:c4:0e:1a:dc:54:2b: b1:d7:47:f5:a7:fe:c4:8b:8e:d0:89:2d:0a:73:0c:61:67:c3: 10:86:67:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICEBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjMwNjA0MTgyODAxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDdjZDdiMS1kMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl8vOBICILA9p35w3xawr7h3yiHFGX6iacR3hPzMR324buhOz17XZyZRJom+G 9WaZsMEeH4HN7owE23GU/YwLh0JJLf8fL39MI6BmJBWuaGbFrssBrgcm/nC3LjL+ o/29GO2MiLlZ6+EOXXaRySe84N44mWr//D9qGlbW0CjrGmQ3lF3zPsFOcH5NyCgC qjU8XpEjAeHJc+WVVJDfEd8qXHwlFG9i4+BSytiaP1ZpFYO7/lwJyHyLj7fmE+tf 7NPyvfjT7L4WzLMBd3Jp/7oZRIF4VyKed+xieHcPY1p9pH6uFxzgHrGSBAEI8HnO BDlZg1UQrNha0MK31bwYSuISjQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJjZtJWM zQSTuE1k0KzvZ/ooFtTZMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEyQkMvRUJDRjE2ODIwNEY4MTFFOUJBNTAyNDMxQzRGOUFFMDIvOTVENDBBRTI0 OTczMTFFQUI0ODczQjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAEtdwYwDQYJKoZIhvcNAQELBQADggEBAAz1D6+GlVA1cLoW GdW8XlIHYA0OkSwgvESkDYO60hpPNSxXLyEq9akiBOlbPoN/Zp7gs2JeF2FmxBX4 rlsThYQWyyRYURabKwjHlA/+3OOBv77BJTdrvoxzupAICHVIq+5neJWPxhjHueFO KM4ilGjwIfS7RuucP0I2dQkM0n/64IJIXhU/HAl973EWBOyAVzbLjp1WxVRLyxLz uxdxt1Nt+KVEf71x/eui8jmF9HLYI+Apt4+TamoxEMCJT+5tPBTfQQXXr0+N3JbE tycM5SeNagkRyHQcqjlS5wQnf810Wg5JzsQOGtxUK7HXR/Wn/sSLjtCJLQpzDGFn wxCGZ8I= -----END CERTIFICATE-----Generated at Thu Apr 18 20:34:29 2024 by rpki-client on console-ams.rpki-client.org