$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa File: 5E0B2804158811EEA0660D12C4F9AE02.roa (raw, json) Hash identifier: HWHRnqC1a0H3SGc60fLUgFgxYUnWe0xctbvL2o7N144= Subject key identifier: 48:41:2D:52:20:19:01:ED:54:32:CC:46:AB:6A:89:91:D7:00:B4:3A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 0216 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa Signing time: Wed 13 Sep 2023 02:44:21 +0000 ROA not before: Wed 13 Sep 2023 02:44:21 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 55424 IP address blocks: 117.104.224.0/21 maxlen: 24 175.106.32.0/22 maxlen: 22 175.106.32.0/24 maxlen: 24 175.106.33.0/24 maxlen: 24 175.106.34.0/24 maxlen: 24 175.106.35.0/24 maxlen: 24 175.106.40.0/23 maxlen: 24 175.106.57.0/24 maxlen: 24 175.106.58.0/24 maxlen: 24 175.106.59.0/24 maxlen: 24 175.106.60.0/24 maxlen: 24 175.106.61.0/24 maxlen: 24 175.106.62.0/24 maxlen: 24 175.106.63.0/24 maxlen: 24 2400:3080::/32 maxlen: 32 2400:3080::/45 maxlen: 45 2400:3080:8::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 02:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Sep 13 02:44:21 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65012205-7756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d4:a3:44:95:12:9f:f9:ce:92:9f:cc:07:cb: ea:61:f9:da:f0:95:f8:d7:bd:76:c6:b4:49:be:af: cb:66:2b:5e:25:24:ad:d2:44:bb:d0:6f:29:f3:4f: 72:fc:b5:94:fd:44:85:2f:89:cc:9d:84:31:fd:a4: 1b:5e:77:4f:52:f5:ba:e0:41:fe:b0:19:aa:46:d9: 6b:b3:59:81:ed:7c:51:c3:47:7a:a0:ab:f1:70:cb: f8:a9:e2:35:9f:a3:6f:55:9c:9f:15:a9:7b:c0:57: 18:dc:89:8f:2a:7e:48:9e:e5:8e:a2:4b:a1:6e:1b: 35:dc:72:78:b6:73:e3:91:52:0f:6d:0b:90:77:46: cf:67:68:6e:0d:cf:c5:d0:e5:66:85:48:cc:fa:52: a0:61:d2:74:46:52:7d:8f:ca:7a:8d:6c:41:7e:a9: 3d:a6:71:fa:bd:7f:44:6a:0c:40:62:08:fd:ec:3c: 5c:f9:9f:7c:ef:26:27:1f:83:1c:7b:ff:67:52:bf: 80:d0:d6:86:7a:61:ed:7d:fe:fe:9e:ed:06:79:74: e7:cf:c7:70:0b:00:1f:c4:42:20:d3:aa:22:5b:41: 47:5e:5e:a6:d9:7e:0c:87:9b:39:a7:8e:ae:c5:bc: 86:39:4a:09:21:34:15:53:68:89:fc:23:c9:53:4d: 48:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:41:2D:52:20:19:01:ED:54:32:CC:46:AB:6A:89:91:D7:00:B4:3A X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/5E0B2804158811EEA0660D12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.104.224.0/21 175.106.32.0/22 175.106.40.0/23 175.106.57.0-175.106.63.255 IPv6: 2400:3080::/32 Signature Algorithm: sha256WithRSAEncryption 76:59:4c:ad:5e:3d:e5:1c:00:f9:c2:09:ec:75:cd:a2:ec:82: 5b:55:25:cd:d3:b6:88:4b:db:f4:71:91:76:37:d9:13:90:32: b9:93:8b:d6:18:92:03:35:1d:08:22:f4:c1:de:12:3a:d0:24: e5:aa:e0:df:8d:97:07:aa:c3:7d:37:9f:d4:99:36:79:84:a2: a1:71:32:56:08:21:c6:7f:96:46:05:ef:50:06:14:66:15:0b: 3e:02:e5:00:a3:98:16:cf:fe:44:23:54:d0:ac:a5:7d:ef:4a: fd:ae:bf:4f:50:ff:2b:02:a0:04:1b:04:6c:54:62:db:66:7c: 83:8d:26:28:ac:a5:33:bc:1f:0c:16:1c:16:1f:78:b6:23:03: 22:e2:3b:78:30:51:24:cf:16:92:60:00:c4:85:ba:33:f8:20: 93:8e:4b:50:83:37:84:c1:ec:5e:7b:fc:39:a1:41:33:c9:1e: a3:92:48:0e:e4:c9:be:4f:da:e0:97:d1:2e:41:7d:a9:10:91: ba:64:2f:2b:9b:bb:bb:88:05:a7:22:a0:b2:1b:9e:0d:02:41: 08:ef:c6:de:c3:71:1f:0a:d0:8f:14:9a:44:83:d7:0e:ae:99: 6e:81:19:c0:43:7f:5f:8f:13:25:df:b5:d8:c5:91:77:e6:45: 86:0f:5a:33 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjMwOTEzMDI0NDIxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTAxMjIwNS03NzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dSjRJUSn/nOkp/MB8vqYfna8JX41712xrRJvq/LZiteJSSt0kS70G8p809y /LWU/USFL4nMnYQx/aQbXndPUvW64EH+sBmqRtlrs1mB7XxRw0d6oKvxcMv4qeI1 n6NvVZyfFal7wFcY3ImPKn5InuWOokuhbhs13HJ4tnPjkVIPbQuQd0bPZ2huDc/F 0OVmhUjM+lKgYdJ0RlJ9j8p6jWxBfqk9pnH6vX9EagxAYgj97Dxc+Z987yYnH4Mc e/9nUr+A0NaGemHtff7+nu0GeXTnz8dwCwAfxEIg06oiW0FHXl6m2X4Mh5s5p46u xbyGOUoJITQVU2iJ/CPJU01IfQIDAQABo4ICvjCCArowHQYDVR0OBBYEFEhBLVIg GQHtVDLMRqtqiZHXALQ6MB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzAxMzgvNjNBNEQxQkNDNDdBMTFFQzhCMzQ0OTY0QzRGOUFFMDIvNUUwQjI4MDQx NTg4MTFFRUEwNjYwRDEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MCYEAgABMCADBAN1aOADBAKvaiADBAGvaigwDAMEAK9qOQMEBq9qADANBAIA AjAHAwUAJAAwgDANBgkqhkiG9w0BAQsFAAOCAQEAdllMrV495RwA+cIJ7HXNouyC W1UlzdO2iEvb9HGRdjfZE5AyuZOL1hiSAzUdCCL0wd4SOtAk5arg342XB6rDfTef 1Jk2eYSioXEyVgghxn+WRgXvUAYUZhULPgLlAKOYFs/+RCNU0Kylfe9K/a6/T1D/ KwKgBBsEbFRi22Z8g40mKKylM7wfDBYcFh94tiMDIuI7eDBRJM8WkmAAxIW6M/gg k45LUIM3hMHsXnv8OaFBM8keo5JIDuTJvk/a4JfRLkF9qRCRumQvK5u7u4gFpyKg shueDQJBCO/G3sNxHwrQjxSaRIPXDq6ZboEZwEN/X48TJd+12MWRd+ZFhg9aMw== -----END CERTIFICATE-----Generated at Mon May 27 05:03:48 2024 by rpki-client on console-ams.rpki-client.org