$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/93713A1442F311EDA8889068C4F9AE02.roa File: 93713A1442F311EDA8889068C4F9AE02.roa (raw, json) Hash identifier: waf1h7ik7ZrcqnGRBQpJf5+RrdOOjf+DIh3oNjWsVkk= Subject key identifier: 4C:57:F9:26:0E:86:23:FB:F2:52:BB:C9:35:8C:76:75:D3:21:1A:EF Certificate issuer: /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Certificate serial: 0D73 Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/93713A1442F311EDA8889068C4F9AE02.roa Signing time: Thu 04 Jan 2024 18:36:28 +0000 ROA not before: Thu 04 Jan 2024 18:36:28 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134809 IP address blocks: 43.230.96.0/22 maxlen: 22 103.13.74.0/24 maxlen: 24 120.138.80.0/20 maxlen: 20 163.47.88.0/22 maxlen: 22 221.133.32.0/21 maxlen: 21 221.133.40.0/21 maxlen: 21 223.27.128.0/20 maxlen: 20 2001:df7:6400::/48 maxlen: 48 2402:9a00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 19:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0 Validity Not Before: Jan 4 18:36:28 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6596faac-82a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:13:28:1c:15:a9:cd:5a:d6:8f:7e:65:ed: 3f:c9:6b:dc:ee:7a:c1:fe:e2:17:10:c6:5d:bb:06: dc:d5:c1:f9:11:24:52:27:d8:93:b9:fd:cd:e4:37: 04:75:f5:c7:8d:3b:85:2d:db:cd:10:d2:ee:c9:30: 69:6f:51:b3:c6:b7:93:d1:2d:55:06:b9:0f:40:f9: 8a:0d:27:0f:15:97:87:f6:88:61:99:7e:78:5f:45: d6:af:9b:15:36:ff:64:71:63:a3:74:00:9a:be:97: fe:c7:65:29:c5:e4:c8:ae:6c:dd:14:f1:3c:2f:a5: b0:e2:30:67:b5:68:bf:c8:29:b2:7c:30:4a:92:b3: fb:e5:4b:bc:d9:e8:2e:f0:2e:86:0a:31:63:d7:8f: 3b:a1:69:28:66:25:d7:d4:3c:54:7e:fd:6d:1f:60: 50:3c:11:f4:c0:03:71:23:22:e5:65:4b:08:68:e3: 35:5b:f6:ee:29:42:69:47:c8:71:d2:b3:44:90:81: 9f:85:b5:d8:e7:43:0a:3d:06:60:a1:34:4b:10:fe: 9d:bc:de:2f:dd:da:1f:07:3b:2a:23:fc:ea:75:8d: 5f:93:ea:b3:e2:38:c7:c0:27:5f:37:20:8f:f2:8f: 2a:8c:d3:c9:c6:1c:42:8a:89:2c:ff:0e:3a:15:d7: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:57:F9:26:0E:86:23:FB:F2:52:BB:C9:35:8C:76:75:D3:21:1A:EF X509v3 Authority Key Identifier: keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/93713A1442F311EDA8889068C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.96.0/22 103.13.74.0/24 120.138.80.0/20 163.47.88.0/22 221.133.32.0/20 223.27.128.0/20 IPv6: 2001:df7:6400::/48 2402:9a00::/32 Signature Algorithm: sha256WithRSAEncryption 90:d0:0d:fb:72:96:fa:ce:bc:e1:32:14:0d:c3:79:4c:0c:e8: ee:95:99:e0:96:36:fa:d8:c7:da:24:b9:3c:c3:99:ef:86:ba: 8d:b8:dd:e0:21:6d:9d:81:b0:a2:1a:0d:de:ff:bc:aa:63:0a: 9d:09:df:ad:a6:0d:90:4b:49:0b:23:8b:cd:c7:6d:8a:1a:c0: 75:00:4e:55:77:fc:5d:d5:ec:ff:6e:a6:70:25:e4:ed:55:51: e6:11:44:48:53:0c:35:60:c2:42:6c:65:4f:c5:66:84:43:8b: 89:54:9e:5e:cc:a1:b2:4e:a1:d3:ef:76:24:2c:62:cb:e7:9a: e2:f6:68:1d:91:4b:ac:52:a9:7a:40:26:05:dd:1f:23:49:75: 92:49:39:7d:3c:11:39:df:81:3b:cc:61:ef:9f:12:48:24:0e: 0d:c8:39:f1:0b:4a:1e:99:09:0d:94:9a:f9:50:97:b7:e1:ef: 54:0d:d1:00:87:b7:b3:25:ce:56:00:9f:cb:9b:24:ea:90:d8: 7a:9f:01:46:bf:04:9a:3e:8f:ba:ec:3a:62:dd:59:9f:11:74: db:8d:b3:c7:ef:b9:f5:3e:38:9d:5f:e1:9a:2d:cc:a8:80:40: 0d:11:14:49:ee:af:0c:c1:fb:e8:60:28:6c:77:d0:49:63:14: 36:7a:bd:4f -----BEGIN CERTIFICATE----- MIIFpzCCBI+gAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTUxRDcxMTAvBgNVBAUTKDExMzYxOEIwRDQxMDY4MkFDMDZBOTAxRDY1QkI5QUM5 NTVFRDg5RTAwHhcNMjQwMTA0MTgzNjI4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2ZmFhYy04MmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDUTKBwVqc1a1o9+Ze0/yWvc7nrB/uIXEMZduwbc1cH5ESRSJ9iTuf3N5DcE dfXHjTuFLdvNENLuyTBpb1GzxreT0S1VBrkPQPmKDScPFZeH9ohhmX54X0XWr5sV Nv9kcWOjdACavpf+x2UpxeTIrmzdFPE8L6Ww4jBntWi/yCmyfDBKkrP75Uu82egu 8C6GCjFj1487oWkoZiXX1DxUfv1tH2BQPBH0wANxIyLlZUsIaOM1W/buKUJpR8hx 0rNEkIGfhbXY50MKPQZgoTRLEP6dvN4v3dofBzsqI/zqdY1fk+qz4jjHwCdfNyCP 8o8qjNPJxhxCioks/w46FdcG5QIDAQABo4ICyzCCAscwHQYDVR0OBBYEFExX+SYO hiP78lK7yTWMdnXTIRrvMB8GA1UdIwQYMBaAFBE2GLDUEGgqwGqQHWW7mslV7Yng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTFENy82OEYwOTI5MjlF MkYxMUU5QjJFNTI4MEFDNEY5QUUwMi9FVFlZc05RUWFDckFhcEFkWmJ1YXlWWHRp ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUWVlzTlFRYUNyQWFwQWRaYnVheVZYdGllQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTUxRDcvNjhGMDkyOTI5RTJGMTFFOUIyRTUyODBBQzRGOUFFMDIvOTM3MTNBMTQ0 MkYzMTFFREE4ODg5MDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwVQYIKwYBBQUHAQcBAf8E RjBEMCoEAgABMCQDBAIr5mADBABnDUoDBAR4ilADBAKjL1gDBATdhSADBATfG4Aw FgQCAAIwEAMHACABDfdkAAMFACQCmgAwDQYJKoZIhvcNAQELBQADggEBAJDQDfty lvrOvOEyFA3DeUwM6O6VmeCWNvrYx9okuTzDme+Guo243eAhbZ2BsKIaDd7/vKpj Cp0J362mDZBLSQsji83HbYoawHUATlV3/F3V7P9upnAl5O1VUeYRREhTDDVgwkJs ZU/FZoRDi4lUnl7MobJOodPvdiQsYsvnmuL2aB2RS6xSqXpAJgXdHyNJdZJJOX08 ETnfgTvMYe+fEkgkDg3IOfELSh6ZCQ2UmvlQl7fh71QN0QCHt7MlzlYAn8ubJOqQ 2HqfAUa/BJo+j7rsOmLdWZ8RdNuNs8fvufU+OJ1f4ZotzKiAQA0RFEnurwzB++hg KGx30EljFDZ6vU8= -----END CERTIFICATE-----Generated at Fri May 31 20:34:03 2024 by rpki-client on console-ams.rpki-client.org