$ rpki-client -vvf rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/E04A9328B4D811EE8D717F53C4F9AE02.roa File: E04A9328B4D811EE8D717F53C4F9AE02.roa (raw, json) Hash identifier: 5zODivf8sbJgHQ3E/z3Vvs3cv2XV+cjnyyBItciy88c= Subject key identifier: D4:C3:C1:ED:5B:AB:8C:DD:91:21:DB:4C:F8:A6:04:92:A7:12:22:63 Certificate issuer: /CN=A91268DC/serialNumber=C1B440EAB44AA587908016E9BD4B32FDE13F44CC Certificate serial: 9C Authority key identifier: C1:B4:40:EA:B4:4A:A5:87:90:80:16:E9:BD:4B:32:FD:E1:3F:44:CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbRA6rRKpYeQgBbpvUsy_eE_RMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/E04A9328B4D811EE8D717F53C4F9AE02.roa Signing time: Fri 17 May 2024 07:53:47 +0000 ROA not before: Fri 17 May 2024 07:53:47 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 7616 IP address blocks: 203.130.128.0/19 maxlen: 20 203.147.16.0/20 maxlen: 21 203.147.32.0/20 maxlen: 21 203.147.48.0/20 maxlen: 20 203.147.54.0/24 maxlen: 24 203.156.48.0/20 maxlen: 20 203.156.64.0/20 maxlen: 20 203.156.80.0/20 maxlen: 20 203.156.128.0/18 maxlen: 19 2403:bf00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/wbRA6rRKpYeQgBbpvUsy_eE_RMw.crl rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/wbRA6rRKpYeQgBbpvUsy_eE_RMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbRA6rRKpYeQgBbpvUsy_eE_RMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 07:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91268DC/serialNumber=C1B440EAB44AA587908016E9BD4B32FDE13F44CC Validity Not Before: May 17 07:53:47 2024 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=66470d0b-e55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e0:c0:f6:83:93:81:ca:9f:40:50:a2:54:54: c0:59:14:9d:c2:cd:e8:bd:e8:a1:29:41:58:f0:81: 0e:11:d5:be:0f:05:5a:4c:82:16:bf:a5:5a:31:d1: 2e:ee:c8:ed:cb:bf:78:38:98:ec:13:ac:8f:c4:fd: 13:fe:b8:60:bf:7d:55:6e:79:98:ab:87:54:ff:42: 62:b1:2d:2f:55:63:2d:f8:ad:47:90:53:31:67:ea: e3:cf:67:96:86:e5:51:1e:28:6a:d0:e9:71:eb:5b: 47:3f:ab:4a:dd:81:0d:cb:3b:ed:59:39:9d:a2:69: bd:a1:61:bc:b5:51:93:7d:89:18:8b:89:e2:eb:42: 80:09:87:93:f8:ff:ed:78:19:b8:2d:34:79:0d:bf: 25:77:bd:ec:9e:e2:21:86:9d:2f:87:97:7f:89:f4: ae:17:22:90:47:3e:2b:ac:0e:95:e0:07:1e:c0:c4: 69:cf:b4:e0:bd:d9:1e:9a:e8:1d:12:ce:e7:e8:cc: be:f9:47:59:65:ee:71:3e:87:f1:d2:c5:21:02:5c: a8:de:b7:e7:ad:9d:32:36:96:70:fc:30:10:b8:ae: 20:8c:45:a6:d8:4a:b8:a5:1f:9e:62:99:07:44:c9: 11:27:bd:1a:9e:fb:33:29:e5:db:4c:c1:13:08:fa: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C3:C1:ED:5B:AB:8C:DD:91:21:DB:4C:F8:A6:04:92:A7:12:22:63 X509v3 Authority Key Identifier: keyid:C1:B4:40:EA:B4:4A:A5:87:90:80:16:E9:BD:4B:32:FD:E1:3F:44:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/wbRA6rRKpYeQgBbpvUsy_eE_RMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wbRA6rRKpYeQgBbpvUsy_eE_RMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91268DC/D438C2EC461211EEBDF7946CC4F9AE02/E04A9328B4D811EE8D717F53C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.130.128.0/19 203.147.16.0-203.147.63.255 203.156.48.0-203.156.95.255 203.156.128.0/18 IPv6: 2403:bf00::/32 Signature Algorithm: sha256WithRSAEncryption a3:31:3a:4f:73:72:84:e3:26:7c:6e:f5:08:c4:8c:4f:8e:6a: d8:6e:cb:11:ab:e9:06:c7:5a:59:f7:b5:9c:cf:ca:12:69:cd: 88:96:b4:82:f9:01:e5:e4:4a:97:7a:e5:14:41:5b:74:1a:d8: a8:92:75:d4:d0:05:c9:7d:92:27:16:95:3e:0e:75:4f:de:5a: 26:73:b9:ea:c8:ec:eb:1f:2b:dd:ac:ff:a8:6d:0a:1b:34:a4: 18:ed:33:c8:ed:0c:76:b8:87:1e:08:23:48:2d:09:e8:d3:05: b1:15:36:69:91:81:6a:12:95:82:58:c0:03:16:5a:12:86:5f: 9e:75:45:35:ee:e0:e8:2e:74:19:c7:69:11:8f:8b:91:a4:9e: 68:3f:94:e6:7a:77:97:77:3e:d6:e4:a0:94:02:8e:56:82:8d: 2a:51:dd:87:2a:02:10:89:1f:1b:5a:cf:55:bf:0b:f1:b6:d8: 55:9b:f9:83:11:5d:4a:3e:bf:5e:5d:2c:7d:9a:fa:8e:4a:23: 41:a9:dc:b4:bd:b7:30:ab:09:b6:2f:b8:98:72:6d:00:b2:43: 83:d9:c9:c1:40:24:b4:9e:ff:7a:4b:f1:6a:18:e8:89:4d:4d: 95:f5:3d:8b:5b:47:80:45:8d:3d:29:71:c1:27:f1:07:75:98: 69:06:a7:09 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY4REMxMTAvBgNVBAUTKEMxQjQ0MEVBQjQ0QUE1ODc5MDgwMTZFOUJENEIzMkZE RTEzRjQ0Q0MwHhcNMjQwNTE3MDc1MzQ3WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ3MGQwYi1lNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+DA9oOTgcqfQFCiVFTAWRSdws3oveihKUFY8IEOEdW+DwVaTIIWv6VaMdEu 7sjty794OJjsE6yPxP0T/rhgv31VbnmYq4dU/0JisS0vVWMt+K1HkFMxZ+rjz2eW huVRHihq0Olx61tHP6tK3YENyzvtWTmdomm9oWG8tVGTfYkYi4ni60KACYeT+P/t eBm4LTR5Db8ld73snuIhhp0vh5d/ifSuFyKQRz4rrA6V4AcewMRpz7Tgvdkemugd Es7n6My++UdZZe5xPofx0sUhAlyo3rfnrZ0yNpZw/DAQuK4gjEWm2Eq4pR+eYpkH RMkRJ70anvszKeXbTMETCPrDYQIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFNTDwe1b q4zdkSHbTPimBJKnEiJjMB8GA1UdIwQYMBaAFMG0QOq0SqWHkIAW6b1LMv3hP0TM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjhEQy9ENDM4QzJFQzQ2 MTIxMUVFQkRGNzk0NkNDNEY5QUUwMi93YlJBNnJSS3BZZVFnQmJwdlVzeV9lRV9S TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diUkE2clJLcFllUWdCYnB2VXN5X2VFX1JNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjY4REMvRDQzOEMyRUM0NjEyMTFFRUJERjc5NDZDQzRGOUFFMDIvRTA0QTkzMjhC NEQ4MTFFRThENzE3RjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUAYIKwYBBQUHAQcBAf8E QTA/MC4EAgABMCgDBAXLgoAwDAMEBMuTEAMEBsuTADAMAwQEy5wwAwQFy5xAAwQG y5yAMA0EAgACMAcDBQAkA78AMA0GCSqGSIb3DQEBCwUAA4IBAQCjMTpPc3KE4yZ8 bvUIxIxPjmrYbssRq+kGx1pZ97Wcz8oSac2IlrSC+QHl5EqXeuUUQVt0GtioknXU 0AXJfZInFpU+DnVP3lomc7nqyOzrHyvdrP+obQobNKQY7TPI7Qx2uIceCCNILQno 0wWxFTZpkYFqEpWCWMADFloShl+edUU17uDoLnQZx2kRj4uRpJ5oP5TmeneXdz7W 5KCUAo5Wgo0qUd2HKgIQiR8bWs9VvwvxtthVm/mDEV1KPr9eXSx9mvqOSiNBqdy0 vbcwqwm2L7iYcm0AskOD2cnBQCS0nv96S/FqGOiJTU2V9T2LW0eARY09KXHBJ/EH dZhpBqcJ -----END CERTIFICATE-----Generated at Fri May 31 08:38:29 2024 by rpki-client on console-fra.rpki-client.org