$ rpki-client -vvf rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa File: 7CAFA5C44CA711EC9D22716BC4F9AE02.roa (raw, json) Hash identifier: +bj/ZNSY6hTVTCkm8LSZ4yEUy24oCPBrauh+B0YBifE= Subject key identifier: C4:D8:39:17:88:91:D1:AE:30:51:C9:5C:AE:46:A9:CA:42:6C:56:C8 Certificate issuer: /CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Certificate serial: 0313 Authority key identifier: C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa Signing time: Wed 09 Aug 2023 01:42:49 +0000 ROA not before: Wed 09 Aug 2023 01:42:49 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 22552 IP address blocks: 45.121.136.0/22 maxlen: 24 103.61.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:38:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91188F4/serialNumber=C962A1EFB1D685EA9F0E85B41766828F6A13EFE5 Validity Not Before: Aug 9 01:42:49 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64d2ef18-6011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:20:01:ad:47:97:29:bf:fc:d9:90:f1:d5: e7:65:1a:3e:dc:f7:c2:09:22:c9:ca:74:b6:69:2b: 78:11:39:3c:cb:55:37:08:6f:a8:94:0e:bb:b6:14: 50:72:01:1f:95:05:c6:d9:05:47:ed:43:bc:5d:6a: e8:09:4a:47:ab:16:67:7a:08:39:78:fe:a1:3b:94: 25:ec:a6:08:51:c4:03:80:10:8d:5c:ac:f4:32:e9: b5:3c:7b:8d:70:80:4e:e4:73:b0:02:9e:1b:92:9f: 45:65:fd:0a:18:95:8f:e0:d5:3e:92:ee:c0:90:dc: 53:d4:a3:ae:26:94:13:63:cc:bd:b2:51:ee:43:cd: e7:42:8f:f4:a2:d3:64:1c:12:a4:43:8e:9c:6c:90: 01:83:e4:28:a2:db:8b:58:47:24:08:31:2b:39:88: 74:34:ff:68:31:91:76:f3:cd:91:b0:4c:6b:ab:1a: c0:91:ff:b1:0f:71:bf:1c:b2:7c:4c:68:92:bb:1f: 4a:67:72:60:04:54:07:97:70:11:4c:ac:ac:ca:6d: 99:6a:ef:66:be:7f:da:d8:aa:55:de:ba:a6:03:78: 53:7c:1b:72:51:3d:5f:5a:ec:0c:c5:c0:1d:09:37: 3a:0d:94:b4:76:c7:75:df:b4:85:56:7a:bc:c3:35: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D8:39:17:88:91:D1:AE:30:51:C9:5C:AE:46:A9:CA:42:6C:56:C8 X509v3 Authority Key Identifier: keyid:C9:62:A1:EF:B1:D6:85:EA:9F:0E:85:B4:17:66:82:8F:6A:13:EF:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/yWKh77HWheqfDoW0F2aCj2oT7-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yWKh77HWheqfDoW0F2aCj2oT7-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188F4/928DB0F64CA311EC823A8965C4F9AE02/7CAFA5C44CA711EC9D22716BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.136.0/22 103.61.236.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:18:05:ef:67:0e:d3:db:81:fa:cd:32:08:21:14:ee:09:be: ce:d3:b1:fd:b8:c0:b3:6d:99:35:da:35:de:1c:8f:d9:8b:6f: db:5c:33:a6:f5:48:6d:a4:55:85:c7:1f:7f:d6:0d:a7:7f:b9: ea:44:bf:6e:e8:da:ba:ca:0d:64:a5:7b:61:c9:ee:2d:d8:cb: bb:07:53:bc:d9:4d:30:6e:de:23:52:ca:d8:05:35:9f:f4:7f: ba:79:6a:0d:38:36:e1:1f:1f:f1:64:64:d1:f7:ca:a9:f6:cb: cb:5f:18:77:3c:85:67:d0:ed:c9:5d:12:39:fa:ff:04:fc:04: e1:ca:70:1d:7d:5e:21:e7:85:fa:b7:7f:cd:25:75:9b:df:92: 16:c5:cc:2a:e2:14:f2:f5:cb:ff:7a:06:07:2d:55:b0:d7:d4: 72:f6:8e:06:20:f6:ad:16:8f:8f:21:cf:14:ab:7f:99:ba:1e: 72:e0:dc:ac:5f:d9:71:48:d7:65:f1:d6:b9:c2:26:c0:4c:f0: 69:48:05:63:b0:0b:fc:73:6b:8e:78:bf:61:50:b5:ac:ff:68: d6:48:96:1f:f0:0b:a3:18:49:b7:74:ee:16:89:80:14:f2:66: 7d:d2:17:b0:ce:9c:17:56:5b:6c:c3:a9:85:f7:6b:ce:cc:7a: 9d:7b:18:78 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4RjQxMTAvBgNVBAUTKEM5NjJBMUVGQjFENjg1RUE5RjBFODVCNDE3NjY4MjhG NkExM0VGRTUwHhcNMjMwODA5MDE0MjQ5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGQyZWYxOC02MDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXQgAa1Hlym//NmQ8dXnZRo+3PfCCSLJynS2aSt4ETk8y1U3CG+olA67thRQ cgEflQXG2QVH7UO8XWroCUpHqxZnegg5eP6hO5Ql7KYIUcQDgBCNXKz0Mum1PHuN cIBO5HOwAp4bkp9FZf0KGJWP4NU+ku7AkNxT1KOuJpQTY8y9slHuQ83nQo/0otNk HBKkQ46cbJABg+QootuLWEckCDErOYh0NP9oMZF2882RsExrqxrAkf+xD3G/HLJ8 TGiSux9KZ3JgBFQHl3ARTKysym2Zau9mvn/a2KpV3rqmA3hTfBtyUT1fWuwMxcAd CTc6DZS0dsd137SFVnq8wzVVNQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFMTYOReI kdGuMFHJXK5GqcpCbFbIMB8GA1UdIwQYMBaAFMlioe+x1oXqnw6FtBdmgo9qE+/l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODhGNC85MjhEQjBGNjRD QTMxMUVDODIzQTg5NjVDNEY5QUUwMi95V0toNzdIV2hlcWZEb1cwRjJhQ2oyb1Q3 LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lXS2g3N0hXaGVxZkRvVzBGMmFDajJvVDctVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg4RjQvOTI4REIwRjY0Q0EzMTFFQzgyM0E4OTY1QzRGOUFFMDIvN0NBRkE1QzQ0 Q0E3MTFFQzlEMjI3MTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIteYgDBAJnPewwDQYJKoZIhvcNAQELBQADggEBAC4YBe9n DtPbgfrNMgghFO4Jvs7Tsf24wLNtmTXaNd4cj9mLb9tcM6b1SG2kVYXHH3/WDad/ uepEv27o2rrKDWSle2HJ7i3Yy7sHU7zZTTBu3iNSytgFNZ/0f7p5ag04NuEfH/Fk ZNH3yqn2y8tfGHc8hWfQ7cldEjn6/wT8BOHKcB19XiHnhfq3f80ldZvfkhbFzCri FPL1y/96BgctVbDX1HL2jgYg9q0Wj48hzxSrf5m6HnLg3Kxf2XFI12Xx1rnCJsBM 8GlIBWOwC/xza454v2FQtaz/aNZIlh/wC6MYSbd07haJgBTyZn3SF7DOnBdWW2zD qYX3a87Mep17GHg= -----END CERTIFICATE-----Generated at Mon May 27 05:03:45 2024 by rpki-client on console-ams.rpki-client.org