$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa File: D68289BE984B11ECB04DAB38C4F9AE02.roa (raw, json) Hash identifier: 0gxNTMeRk0FZXFUFm3TqARct7ccARqhdMl770N275VY= Subject key identifier: 57:68:84:B0:4A:14:AB:34:90:96:BD:12:4A:03:0C:E8:97:30:39:1F Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Certificate serial: 0B38 Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa Signing time: Thu 30 Nov 2023 20:33:57 +0000 ROA not before: Thu 30 Nov 2023 20:33:57 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 10148 IP address blocks: 45.113.232.0/22 maxlen: 22 103.6.252.0/22 maxlen: 22 103.12.108.0/22 maxlen: 24 115.146.80.0/20 maxlen: 20 203.0.40.0/24 maxlen: 24 203.5.64.0/21 maxlen: 21 203.21.130.0/23 maxlen: 24 203.62.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Jun 2024 19:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04 Validity Not Before: Nov 30 20:33:57 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=6568f1b5-7615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:4c:6f:81:0b:c2:8e:37:ac:77:71:22:a6: d7:46:71:90:0c:05:2c:5f:d6:3b:55:ec:b3:df:37: dc:7b:a8:fb:b1:e3:bb:c2:8f:32:8f:b9:f7:a4:97: 43:c0:2c:7a:2e:df:f3:18:0e:42:97:e7:93:39:65: 7c:39:ba:73:dc:6c:93:77:29:ed:48:16:2d:31:d7: 22:fc:dd:59:c8:15:0e:5e:fb:d8:89:aa:a8:61:5b: 37:33:2a:37:f7:66:49:75:f3:38:b1:71:b6:9f:03: 78:d2:31:61:46:3e:ca:e7:5a:4a:4c:05:f2:1e:ce: f1:84:e7:d7:d3:8f:78:98:1f:3a:40:65:40:e1:d4: 16:04:8f:47:19:a7:db:1a:56:61:e0:74:ec:1a:52: 2f:ea:03:52:32:0f:11:18:93:00:0d:de:61:02:d1: 7f:ab:c6:92:ad:cf:d8:55:02:70:ba:06:aa:56:8c: d2:b9:16:66:6c:41:9f:5d:78:aa:2b:d8:bf:d9:db: d4:62:ef:72:a9:b7:2f:f1:55:42:69:e4:bb:f8:38: ff:1b:60:68:06:35:fb:9b:9d:1c:d5:19:67:60:fb: a5:26:3a:ef:a3:ad:61:a3:94:67:bb:48:81:88:6c: a7:00:1f:09:bc:ed:ab:83:ce:6f:2c:36:aa:ef:f5: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:84:B0:4A:14:AB:34:90:96:BD:12:4A:03:0C:E8:97:30:39:1F X509v3 Authority Key Identifier: keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/D68289BE984B11ECB04DAB38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.113.232.0/22 103.6.252.0/22 103.12.108.0/22 115.146.80.0/20 203.0.40.0/24 203.5.64.0/21 203.21.130.0/23 203.62.232.0/23 Signature Algorithm: sha256WithRSAEncryption 51:32:ce:9b:e4:87:d5:e8:d1:5d:ac:f8:8f:3a:f5:0a:3f:f8: 50:69:87:da:3d:a6:4c:38:c7:3e:5a:28:a5:9a:30:46:17:28: f9:b0:2b:94:f1:c0:69:e7:8c:a6:ee:0f:4a:c6:ae:fb:ec:e8: 35:1f:68:c5:3c:ce:1a:6a:f4:30:3e:77:ae:d8:45:1f:8f:98: af:35:cf:3a:64:c6:41:89:18:c6:96:6a:95:9d:df:04:28:df: df:bb:31:b5:49:50:62:7f:6f:dc:03:09:c1:a9:a5:00:0f:21: 71:73:82:37:43:de:ed:19:77:59:7d:39:6d:ee:5c:14:90:40: 96:27:80:c6:10:24:84:60:07:c2:85:fd:45:7d:d5:bf:12:be: 33:27:bf:16:47:ee:bc:14:19:3e:b3:67:4b:28:84:c2:38:a8: 19:d1:82:34:48:80:00:0b:66:b9:b1:ec:e6:6b:a7:2f:a6:b0: 01:37:3b:0e:28:a4:7a:ff:db:a6:75:25:64:a3:7b:7d:0d:59: 05:b3:17:70:7b:28:db:00:ac:90:78:69:b2:82:69:db:ca:7b: 4d:3d:c7:32:e8:bb:bd:97:4f:f2:01:7d:72:47:d8:27:62:9c: 05:9a:8d:72:0a:91:17:02:d4:7d:4f:fa:bd:24:c6:7a:e1:85: b0:c1:c8:7e -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKDc3MDZEMDg4RTkyMURFOEIwMUVCQkEwNjIwMUQwNDE1 MEU4NjREMDQwHhcNMjMxMTMwMjAzMzU3WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTY4ZjFiNS03NjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDRMb4ELwo43rHdxIqbXRnGQDAUsX9Y7Veyz3zfce6j7seO7wo8yj7n3pJdD wCx6Lt/zGA5Cl+eTOWV8Obpz3GyTdyntSBYtMdci/N1ZyBUOXvvYiaqoYVs3Myo3 92ZJdfM4sXG2nwN40jFhRj7K51pKTAXyHs7xhOfX0494mB86QGVA4dQWBI9HGafb GlZh4HTsGlIv6gNSMg8RGJMADd5hAtF/q8aSrc/YVQJwugaqVozSuRZmbEGfXXiq K9i/2dvUYu9yqbcv8VVCaeS7+Dj/G2BoBjX7m50c1RlnYPulJjrvo61ho5Rnu0iB iGynAB8JvO2rg85vLDaq7/XRfwIDAQABo4ICvzCCArswHQYDVR0OBBYEFFdohLBK FKs0kJa9EkoDDOiXMDkfMB8GA1UdIwQYMBaAFHcG0IjpId6LAeu6BiAdBBUOhk0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82RTc0OTUxMDA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9kd2JRaU9raDNvc0I2N29HSUIwRUZRNkdU UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3YlFpT2toM29zQjY3b0dJQjBFRlE2R1RRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU3QkEvNkU3NDk1MTAwNEVCMTFFQUE3MkZBMzYzQzRGOUFFMDIvRDY4Mjg5QkU5 ODRCMTFFQ0IwNERBQjM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAItcegDBAJnBvwDBAJnDGwDBARzklADBADLACgDBAPLBUAD BAHLFYIDBAHLPugwDQYJKoZIhvcNAQELBQADggEBAFEyzpvkh9Xo0V2s+I869Qo/ +FBph9o9pkw4xz5aKKWaMEYXKPmwK5TxwGnnjKbuD0rGrvvs6DUfaMU8zhpq9DA+ d67YRR+PmK81zzpkxkGJGMaWapWd3wQo39+7MbVJUGJ/b9wDCcGppQAPIXFzgjdD 3u0Zd1l9OW3uXBSQQJYngMYQJIRgB8KF/UV91b8SvjMnvxZH7rwUGT6zZ0sohMI4 qBnRgjRIgAALZrmx7OZrpy+msAE3Ow4opHr/26Z1JWSje30NWQWzF3B7KNsArJB4 abKCadvKe009xzLou72XT/IBfXJH2CdinAWajXIKkRcC1H1P+r0kxnrhhbDByH4= -----END CERTIFICATE-----Generated at Sun May 26 23:05:28 2024 by rpki-client on console-ams.rpki-client.org