$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5970F06CA08311EA984D590DC4F9AE02.roa File: 5970F06CA08311EA984D590DC4F9AE02.roa (raw, json) Hash identifier: EwEE9/5gmNZTCy1amscaIzjvtu3HA+jIbh55U8rBRUQ= Subject key identifier: 73:E3:E3:08:4F:A7:01:46:3F:CB:DB:85:1F:DC:94:A6:9F:B4:FF:1D Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Certificate serial: 091C Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5970F06CA08311EA984D590DC4F9AE02.roa Signing time: Thu 04 Apr 2024 22:00:36 +0000 ROA not before: Thu 04 Apr 2024 22:00:36 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 9513 IP address blocks: 203.83.64.0/18 maxlen: 18 203.83.64.0/19 maxlen: 19 203.83.65.0/24 maxlen: 24 203.83.72.0/22 maxlen: 22 203.83.72.0/24 maxlen: 24 203.83.73.0/24 maxlen: 24 203.83.74.0/24 maxlen: 24 203.83.75.0/24 maxlen: 24 203.83.78.0/23 maxlen: 23 203.83.84.0/24 maxlen: 24 203.83.96.0/19 maxlen: 19 203.83.96.0/22 maxlen: 22 203.83.110.0/24 maxlen: 24 203.83.111.0/24 maxlen: 24 203.83.114.0/23 maxlen: 23 203.83.116.0/22 maxlen: 22 203.83.116.0/23 maxlen: 23 203.83.118.0/24 maxlen: 24 203.168.128.0/19 maxlen: 20 203.168.132.0/24 maxlen: 24 203.168.133.0/24 maxlen: 24 203.168.134.0/23 maxlen: 23 203.168.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 May 2024 20:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2332 (0x91c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7 Validity Not Before: Apr 4 22:00:36 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=660f2304-6d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:93:58:2a:2c:01:16:1a:d1:22:42:8e:14:1f: 9c:49:28:be:92:51:07:6a:a7:1e:ca:08:5d:5a:4c: 12:aa:13:e6:d4:12:7c:1e:cb:03:4c:aa:40:3e:66: 3c:4a:a0:41:77:7a:33:8c:12:51:71:1e:af:30:59: 08:30:7f:e5:8d:d4:ed:ea:18:42:c4:27:bc:3a:73: 69:52:39:62:cf:dd:82:b9:86:1d:8b:02:2d:19:8b: 08:8b:c0:c7:34:cb:96:0d:7b:4d:16:6a:24:c4:28: ec:71:1c:26:38:f8:7e:b3:df:28:9a:88:af:7a:80: b3:1d:75:51:56:c3:12:b4:4b:91:5e:7e:c3:ab:20: c9:ff:c8:a4:57:cf:d3:8c:e0:72:1a:ab:82:73:8a: 9a:10:28:60:b2:45:7d:5a:a2:8a:c6:0e:43:69:2a: a4:42:09:28:ee:a8:67:6e:e0:fc:e4:d7:c9:d9:07: 2c:6a:94:e8:17:c6:86:2b:51:e3:9a:6e:cc:f1:55: 3c:b4:72:09:26:a8:0f:56:32:1c:91:8b:42:9c:93: d0:7b:2e:dc:0f:0e:58:f3:22:1a:0b:46:9d:1e:6f: 4e:d1:2d:79:7f:0e:fb:75:8f:8b:a8:a6:ef:70:24: 94:ef:40:7d:cb:92:65:3e:2c:6f:cc:1e:3b:7c:bf: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E3:E3:08:4F:A7:01:46:3F:CB:DB:85:1F:DC:94:A6:9F:B4:FF:1D X509v3 Authority Key Identifier: keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/5970F06CA08311EA984D590DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.83.64.0/18 203.168.128.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:ad:01:57:5f:b5:1c:33:38:7a:18:33:bb:c0:d9:3f:d2:d5: 40:b1:9b:e3:17:fd:6f:f7:a5:ff:02:4a:0f:ec:78:4b:68:2b: f4:cf:ab:a3:0b:0a:79:5b:ba:a4:c8:88:63:36:81:04:d8:78: e1:03:b7:84:59:5e:fb:33:b6:8c:99:9e:68:40:aa:18:79:a8: 28:d0:18:16:62:a1:70:28:22:e4:6e:68:71:6a:64:46:11:f0: f8:55:f4:08:dd:2f:96:ff:5a:c3:56:c1:cc:18:64:2b:0b:2d: 12:5b:4e:a6:42:77:0f:8b:d3:44:a1:e8:60:8b:43:3b:cc:ae: d3:a7:0d:e7:c7:28:8e:8e:76:cf:31:aa:fd:1f:a7:36:97:ca: b0:d8:f3:ce:d7:77:af:32:b0:52:41:c2:1e:0a:7c:cb:1a:00: 55:2a:9d:28:44:4a:ac:4e:14:27:cd:8e:13:12:b7:70:c8:f1: 91:b7:b1:85:20:11:48:ef:93:5b:91:6d:e9:4d:5f:03:42:64: e1:8d:ac:9a:b4:e2:52:6c:4e:6c:55:74:14:f4:22:47:d9:26: a3:38:8b:0a:2d:82:66:23:19:fd:92:f9:72:af:08:2f:49:ba: b1:60:12:d7:3e:44:7a:06:4d:21:b6:a1:a7:de:05:ab:47:ba: 5c:ca:2a:ba -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICCRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw MzQ4QzQ2QTcwHhcNMjQwNDA0MjIwMDM2WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02NjBmMjMwNC02ZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJNYKiwBFhrRIkKOFB+cSSi+klEHaqceyghdWkwSqhPm1BJ8HssDTKpAPmY8 SqBBd3ozjBJRcR6vMFkIMH/ljdTt6hhCxCe8OnNpUjliz92CuYYdiwItGYsIi8DH NMuWDXtNFmokxCjscRwmOPh+s98omoiveoCzHXVRVsMStEuRXn7DqyDJ/8ikV8/T jOByGquCc4qaEChgskV9WqKKxg5DaSqkQgko7qhnbuD85NfJ2QcsapToF8aGK1Hj mm7M8VU8tHIJJqgPVjIckYtCnJPQey7cDw5Y8yIaC0adHm9O0S15fw77dY+LqKbv cCSU70B9y5JlPixvzB47fL+iEwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHPj4whP pwFGP8vbhR/clKaftP8dMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNTk3MEYwNkNB MDgzMTFFQTk4NEQ1OTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAbLU0ADBAXLqIAwDQYJKoZIhvcNAQELBQADggEBAIytAVdf tRwzOHoYM7vA2T/S1UCxm+MX/W/3pf8CSg/seEtoK/TPq6MLCnlbuqTIiGM2gQTY eOEDt4RZXvsztoyZnmhAqhh5qCjQGBZioXAoIuRuaHFqZEYR8PhV9AjdL5b/WsNW wcwYZCsLLRJbTqZCdw+L00Sh6GCLQzvMrtOnDefHKI6Ods8xqv0fpzaXyrDY887X d68ysFJBwh4KfMsaAFUqnShESqxOFCfNjhMSt3DI8ZG3sYUgEUjvk1uRbelNXwNC ZOGNrJq04lJsTmxVdBT0IkfZJqM4iwotgmYjGf2S+XKvCC9JurFgEtc+RHoGTSG2 oafeBatHulzKKro= -----END CERTIFICATE-----Generated at Mon May 6 22:40:54 2024 by rpki-client on console-ams.rpki-client.org