$ rpki-client -vvf rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/155B355E414311EE8E969116C4F9AE02.roa File: 155B355E414311EE8E969116C4F9AE02.roa (raw, json) Hash identifier: sOuG1mKnDdJPgZHVhtZK3E39Zwkf1eMZS3Khfg4y11Y= Subject key identifier: C2:30:3F:46:51:20:AB:02:0D:0B:F5:31:0D:C7:12:81:4E:73:E2:46 Certificate issuer: /CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Certificate serial: 09F1 Authority key identifier: 2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/155B355E414311EE8E969116C4F9AE02.roa Signing time: Tue 22 Aug 2023 23:24:47 +0000 ROA not before: Tue 22 Aug 2023 23:24:47 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 17732 IP address blocks: 103.227.20.0/22 maxlen: 24 117.53.160.0/20 maxlen: 24 119.77.0.0/18 maxlen: 24 139.5.172.0/22 maxlen: 24 202.44.98.0/23 maxlen: 24 202.129.128.0/19 maxlen: 24 203.22.104.0/23 maxlen: 24 2001:df1:3a00::/48 maxlen: 48 2404:8600::/32 maxlen: 32 2404:8600::/37 maxlen: 37 2404:8600:4000::/37 maxlen: 37 2404:8600:6000::/37 maxlen: 37 2404:8600:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 19:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2545 (0x9f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918919A/serialNumber=2E5BCBC661AFF1FED58B0FF4B583DCF5EC1A374A Validity Not Before: Aug 22 23:24:47 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64e543bf-e8bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:a9:9d:42:14:ed:7f:fe:a0:13:3c:ff:64: 89:d2:46:da:38:ee:d6:60:1f:f4:48:ba:59:86:3b: 10:48:db:25:27:45:18:29:e4:1b:db:b5:2a:c3:fe: 34:99:ae:33:06:7d:57:fc:2a:90:45:8d:f5:7a:fb: ed:4a:e4:cf:11:ce:87:66:54:ec:bc:d1:24:3c:3c: ff:2f:78:f9:fe:af:13:b3:75:e5:b8:d6:04:c1:79: 91:f6:01:26:5d:71:4b:4c:3c:ab:ef:43:f6:78:28: 0c:87:cc:53:95:6d:ac:9e:23:07:20:fb:0e:42:17: c4:49:6d:47:b2:11:4d:50:93:7e:73:b2:22:09:14: 5a:45:50:08:31:31:1c:bf:f2:85:0f:ad:ab:e9:93: 4d:e6:c4:c8:8e:fd:02:06:8d:32:da:ee:de:8d:d8: 03:b1:2e:bb:f5:b5:5d:8e:8f:0e:48:27:7b:af:aa: b4:55:90:d7:88:50:82:90:ce:14:85:a8:0e:c6:11: e2:ef:63:25:b8:85:dd:06:4e:e6:a2:40:20:97:14: a1:91:59:4a:a2:14:1a:e0:d1:15:94:6b:ea:75:96: c4:f8:00:a9:cb:4d:3a:9f:d3:e8:e1:be:11:39:38: 6f:da:da:c2:13:46:3e:78:46:6b:ab:e4:33:e5:64: bf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:30:3F:46:51:20:AB:02:0D:0B:F5:31:0D:C7:12:81:4E:73:E2:46 X509v3 Authority Key Identifier: keyid:2E:5B:CB:C6:61:AF:F1:FE:D5:8B:0F:F4:B5:83:DC:F5:EC:1A:37:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/LlvLxmGv8f7Viw_0tYPc9ewaN0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LlvLxmGv8f7Viw_0tYPc9ewaN0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918919A/0490909A431B11EAB019772CC4F9AE02/155B355E414311EE8E969116C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.227.20.0/22 117.53.160.0/20 119.77.0.0/18 139.5.172.0/22 202.44.98.0/23 202.129.128.0/19 203.22.104.0/23 IPv6: 2001:df1:3a00::/48 2404:8600::/32 Signature Algorithm: sha256WithRSAEncryption 30:aa:20:7a:77:dd:d0:82:53:dc:c9:2b:83:84:e7:2e:2f:29: 41:65:c2:70:d8:e3:df:ec:da:8e:83:45:5a:b1:ec:5d:19:6d: 4d:94:1c:5d:4a:36:cb:77:7f:f7:a2:88:52:73:1f:d0:2b:cd: b7:ee:22:34:40:05:ed:e2:7e:68:99:90:02:8a:36:77:04:ed: 2c:6b:4c:c5:3f:c8:4b:34:81:84:2d:e5:05:85:00:47:5b:1a: 38:ed:a3:08:5f:fb:cd:92:3e:15:be:2b:1d:1a:64:4e:ee:b4: bc:82:88:d8:22:3c:ce:56:05:85:0b:44:37:b2:4b:2e:33:be: 76:e6:f5:43:97:0d:ef:6d:72:5f:56:78:da:63:ef:77:49:4d: b3:0c:cf:08:70:ce:05:fb:f5:67:0b:15:f0:08:03:80:02:1b: 3a:2f:6a:d1:29:0b:a0:ae:6e:57:0c:c2:c7:f7:58:83:d2:9f: 69:52:7f:c0:d6:6b:5d:e9:67:65:27:df:66:0e:69:7f:2d:90: 4f:d0:82:f5:c7:9f:98:26:bf:ef:8b:95:fd:f0:09:56:f6:4f: 60:c4:33:25:89:c1:5e:84:f0:dc:d4:3f:ba:31:a0:b6:3b:a2: ba:c3:da:fe:56:86:1c:90:5a:7d:15:4c:1a:95:94:e6:76:4a: 8f:92:84:b7 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgICCfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxOUExMTAvBgNVBAUTKDJFNUJDQkM2NjFBRkYxRkVENThCMEZGNEI1ODNEQ0Y1 RUMxQTM3NEEwHhcNMjMwODIyMjMyNDQ3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU1NDNiZi1lOGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYipnUIU7X/+oBM8/2SJ0kbaOO7WYB/0SLpZhjsQSNslJ0UYKeQb27Uqw/40 ma4zBn1X/CqQRY31evvtSuTPEc6HZlTsvNEkPDz/L3j5/q8Ts3XluNYEwXmR9gEm XXFLTDyr70P2eCgMh8xTlW2sniMHIPsOQhfESW1HshFNUJN+c7IiCRRaRVAIMTEc v/KFD62r6ZNN5sTIjv0CBo0y2u7ejdgDsS679bVdjo8OSCd7r6q0VZDXiFCCkM4U hagOxhHi72MluIXdBk7mokAglxShkVlKohQa4NEVlGvqdZbE+ACpy006n9Po4b4R OThv2trCE0Y+eEZrq+Qz5WS/4QIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFMIwP0ZR IKsCDQv1MQ3HEoFOc+JGMB8GA1UdIwQYMBaAFC5by8Zhr/H+1YsP9LWD3PXsGjdK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTE5QS8wNDkwOTA5QTQz MUIxMUVBQjAxOTc3MkNDNEY5QUUwMi9MbHZMeG1HdjhmN1Zpd18wdFlQYzlld2FO MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xsdkx4bUd2OGY3Vml3XzB0WVBjOWV3YU4wby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODkxOUEvMDQ5MDkwOUE0MzFCMTFFQUIwMTk3NzJDQzRGOUFFMDIvMTU1QjM1NUU0 MTQzMTFFRThFOTY5MTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwWwYIKwYBBQUHAQcBAf8E TDBKMDAEAgABMCoDBAJn4xQDBAR1NaADBAZ3TQADBAKLBawDBAHKLGIDBAXKgYAD BAHLFmgwFgQCAAIwEAMHACABDfE6AAMFACQEhgAwDQYJKoZIhvcNAQELBQADggEB ADCqIHp33dCCU9zJK4OE5y4vKUFlwnDY49/s2o6DRVqx7F0ZbU2UHF1KNst3f/ei iFJzH9ArzbfuIjRABe3ifmiZkAKKNncE7SxrTMU/yEs0gYQt5QWFAEdbGjjtowhf +82SPhW+Kx0aZE7utLyCiNgiPM5WBYULRDeySy4zvnbm9UOXDe9tcl9WeNpj73dJ TbMMzwhwzgX79WcLFfAIA4ACGzovatEpC6CublcMwsf3WIPSn2lSf8DWa13pZ2Un 32YOaX8tkE/QgvXHn5gmv++Llf3wCVb2T2DEMyWJwV6E8NzUP7oxoLY7orrD2v5W hhyQWn0VTBqVlOZ2So+ShLc= -----END CERTIFICATE-----Generated at Sat May 4 21:19:29 2024 by rpki-client on console-ams.rpki-client.org