$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa File: 1A8D09D6DF3211EC97567B3EC4F9AE02.roa (raw, json) Hash identifier: mbcB6foSL63XJV52MSHhlTUw5yYhaiqPy9K1E5KqoyA= Subject key identifier: 57:A7:36:DF:5A:B7:CE:13:84:BB:00:4A:3C:F9:96:6D:F0:C6:0C:91 Certificate issuer: /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Certificate serial: 03A0 Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa Signing time: Thu 27 Jul 2023 02:04:33 +0000 ROA not before: Thu 27 Jul 2023 02:04:33 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 7630 IP address blocks: 58.137.161.0/24 maxlen: 24 203.146.18.0/24 maxlen: 24 203.146.224.0/24 maxlen: 24 203.146.225.0/24 maxlen: 24 210.1.2.0/24 maxlen: 24 210.1.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Jun 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 928 (0x3a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19 Validity Not Before: Jul 27 02:04:33 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c1d0b0-b40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7e:ce:dd:09:41:35:cb:3d:48:af:00:a2:c0: 71:fe:41:d5:b5:c7:7b:47:4b:87:16:0e:b0:46:88: dd:a2:21:c8:30:cf:cf:c5:c5:db:2e:e5:aa:fb:66: f6:cd:7a:06:70:8b:0b:7b:8c:13:18:6f:0c:06:fb: a0:ff:f9:1a:e6:37:13:77:29:2a:ef:b3:d7:b8:e5: 2d:2d:18:ed:87:54:3b:76:39:95:de:a9:69:98:f3: df:7b:f5:a4:43:54:94:a7:7e:77:8c:be:a3:0f:b3: cb:88:74:e0:04:5e:7e:c1:f9:ec:ec:5c:84:83:cf: 38:90:70:5a:b0:2c:df:95:10:ff:64:f8:78:5b:0c: 54:42:d2:c3:fa:3c:05:d2:3d:7f:a3:e6:17:7c:22: b4:f1:58:b6:4f:8f:e5:86:1e:7d:e4:7b:2c:60:a0: b8:ae:92:16:7d:9d:34:e4:ad:f3:4c:d6:7e:16:6a: 40:b6:e7:7d:05:66:06:9b:b4:80:4c:d6:f6:2b:14: f9:51:6d:fa:74:20:45:29:17:1c:92:c7:93:21:22: f2:55:20:4d:7e:4a:37:c7:be:56:bb:66:61:b2:77: b9:a8:90:f9:f9:f9:92:8f:bb:15:7d:b8:e9:bd:e7: 86:e2:49:d6:81:c3:59:ae:9d:d1:ad:e2:d6:cf:82: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A7:36:DF:5A:B7:CE:13:84:BB:00:4A:3C:F9:96:6D:F0:C6:0C:91 X509v3 Authority Key Identifier: keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/1A8D09D6DF3211EC97567B3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.137.161.0/24 203.146.18.0/24 203.146.224.0/23 210.1.2.0/24 210.1.22.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b6:df:b1:60:98:2d:3b:d0:80:fd:69:d5:3c:ad:c9:99:1c: 37:c5:ee:f8:ce:71:53:e2:6c:64:30:cf:76:e3:06:03:c4:06: 96:c1:81:1c:a5:cc:61:28:56:ef:b9:49:d1:47:38:b6:0d:90: 37:79:5c:06:0a:54:11:61:d6:cc:e8:c3:50:8c:53:b4:3f:a4: ce:14:dc:ca:08:ba:b2:ef:19:8a:48:b8:a6:dc:16:67:e4:ce: 6c:d4:45:e7:a1:f8:8e:e4:62:ce:cf:90:a7:d9:01:c7:f8:31: 12:71:3a:15:b6:48:03:cb:d7:86:56:5b:ca:ca:36:ae:c9:10: 23:72:59:ab:b9:cc:da:2b:88:41:f5:56:f6:11:79:26:a1:8b: 26:39:ed:72:ee:71:5d:ad:f3:8c:4a:04:22:ba:44:3d:ca:13: e1:dd:a7:a9:24:8a:ca:9b:c7:5a:b7:cb:7e:e1:0c:87:97:fc: 74:c0:42:6f:ec:9c:58:97:00:de:4b:93:47:f5:a0:d4:89:9e: ee:cb:7f:58:a5:40:dc:ef:9a:fd:41:e4:65:9e:2e:b6:1b:f8: 50:9f:1a:bf:ae:bb:fc:e8:97:9d:1d:a3:11:ed:78:a3:8d:4a: 39:61:a8:de:84:d2:2c:f6:9e:f6:b5:a5:53:46:0a:f8:d7:da: 2a:18:7f:27 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQ0ExMTAvBgNVBAUTKDc3QTIwMUM1OEVCM0I0MjA4QzkxQkE3RUNFRDkzNkU1 OTVFNjFBMTkwHhcNMjMwNzI3MDIwNDMzWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMxZDBiMC1iNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn7O3QlBNcs9SK8AosBx/kHVtcd7R0uHFg6wRojdoiHIMM/PxcXbLuWq+2b2 zXoGcIsLe4wTGG8MBvug//ka5jcTdykq77PXuOUtLRjth1Q7djmV3qlpmPPfe/Wk Q1SUp353jL6jD7PLiHTgBF5+wfns7FyEg884kHBasCzflRD/ZPh4WwxUQtLD+jwF 0j1/o+YXfCK08Vi2T4/lhh595HssYKC4rpIWfZ005K3zTNZ+FmpAtud9BWYGm7SA TNb2KxT5UW36dCBFKRcckseTISLyVSBNfko3x75Wu2Zhsne5qJD5+fmSj7sVfbjp veeG4knWgcNZrp3RreLWz4KKrQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFenNt9a t84ThLsASjz5lm3wxgyRMB8GA1UdIwQYMBaAFHeiAcWOs7QgjJG6fs7ZNuWV5hoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9GNUVEQzdGQzhB NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi9kNklCeFk2enRDQ01rYnAtenRrMjVaWG1H aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2SUJ4WTZ6dENDTWticC16dGsyNVpYbUdoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQ0EvRjVFREM3RkM4QTU3MTFFQzk2RUJDMDE0QzRGOUFFMDIvMUE4RDA5RDZE RjMyMTFFQzk3NTY3QjNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAA6iaEDBADLkhIDBAHLkuADBADSAQIDBADSARYwDQYJKoZI hvcNAQELBQADggEBAAS237FgmC070ID9adU8rcmZHDfF7vjOcVPibGQwz3bjBgPE BpbBgRylzGEoVu+5SdFHOLYNkDd5XAYKVBFh1szow1CMU7Q/pM4U3MoIurLvGYpI uKbcFmfkzmzUReeh+I7kYs7PkKfZAcf4MRJxOhW2SAPL14ZWW8rKNq7JECNyWau5 zNoriEH1VvYReSahiyY57XLucV2t84xKBCK6RD3KE+Hdp6kkisqbx1q3y37hDIeX /HTAQm/snFiXAN5Lk0f1oNSJnu7Lf1ilQNzvmv1B5GWeLrYb+FCfGr+uu/zol50d oxHteKONSjlhqN6E0iz2nva1pVNGCvjX2ioYfyc= -----END CERTIFICATE-----Generated at Sat May 25 04:21:38 2024 by rpki-client on console-fra.rpki-client.org