$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/B6C4F8787A5911EDB8C4E04FC4F9AE02.roa File: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (raw, json) Hash identifier: KyJK9T3ePPU2nyDMiWpfHVl65dIpgfxV39oqdgnNreQ= Subject key identifier: 61:C9:25:91:6A:0D:32:8C:E5:6D:97:C2:33:3F:02:F0:AE:DF:4E:DB Certificate issuer: /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Certificate serial: E9 Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/B6C4F8787A5911EDB8C4E04FC4F9AE02.roa Signing time: Wed 21 Feb 2024 04:56:34 +0000 ROA not before: Wed 21 Feb 2024 04:56:34 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 9555 IP address blocks: 152.91.0.0/16 maxlen: 17 152.91.8.0/24 maxlen: 24 152.91.9.0/24 maxlen: 24 152.91.45.0/24 maxlen: 24 152.91.69.0/24 maxlen: 24 152.91.79.0/24 maxlen: 24 152.91.80.0/24 maxlen: 24 152.91.81.0/24 maxlen: 24 152.91.82.0/24 maxlen: 24 152.91.89.0/24 maxlen: 24 152.91.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336 Validity Not Before: Feb 21 04:56:34 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65d58281-6216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a2:80:e3:be:36:0b:5e:fc:71:bb:df:b2:ad: 59:80:25:3a:46:1e:7d:df:5a:2d:df:26:36:eb:f4: 36:03:d0:04:d1:15:15:7e:af:17:dd:ed:8c:76:51: 4e:68:41:66:a1:04:99:9e:75:01:33:c7:0a:1c:78: 71:c4:c6:52:c3:9d:d3:c5:e4:77:7c:ae:86:73:cb: 28:b9:34:f3:e9:30:e3:f4:50:3b:96:a7:df:b7:9e: 5f:3d:87:5d:6f:21:40:55:49:08:88:a0:d2:f1:c4: b5:f0:09:a5:9f:2b:69:38:34:3a:1e:de:32:e9:18: df:16:19:76:0c:f7:a2:d8:e2:cf:b1:c8:71:f6:64: a9:9b:82:c0:89:62:76:f1:36:fe:c2:55:33:3f:8d: 7f:93:d8:12:1d:51:36:ff:cb:3e:1e:a4:8c:bb:39: 34:18:51:48:b1:f6:52:1d:5b:bf:2f:fb:35:f3:6c: f8:ee:bd:2e:f9:1b:aa:c2:9e:67:c3:16:7f:01:8d: 17:da:90:2c:74:6d:47:93:71:4b:2d:88:97:73:f3: 03:a5:0e:be:96:d3:b6:56:1d:8d:0b:33:55:82:3f: 64:07:6e:2e:46:38:8b:e8:b2:cf:36:e8:cc:d8:7e: dd:ca:4c:f2:a6:fa:53:62:8d:7a:6b:7c:28:e2:9a: 70:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C9:25:91:6A:0D:32:8C:E5:6D:97:C2:33:3F:02:F0:AE:DF:4E:DB X509v3 Authority Key Identifier: keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/B6C4F8787A5911EDB8C4E04FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 152.91.0.0/16 Signature Algorithm: sha256WithRSAEncryption bc:97:2f:df:77:da:45:e3:cd:d1:ab:b1:9f:e0:88:69:a1:ad: 87:05:e5:28:3d:1c:29:ff:8c:27:b2:c9:6c:bb:c7:89:8b:2d: cb:e0:bb:5c:70:ab:ea:35:92:f9:c9:6f:6e:ae:3e:d2:17:c1: 95:14:ce:c4:bf:54:96:4a:0c:ac:71:0b:a0:8c:f6:b5:e2:93: d7:b3:80:71:44:8d:a2:82:cc:72:e5:d2:82:09:06:d6:a0:11: 71:d7:5d:99:98:c5:f6:e3:4f:02:47:51:48:81:8d:66:15:d7: 09:1c:5f:e2:6f:71:6d:7c:cc:fb:34:75:ee:13:c8:3d:16:c2: 2d:85:a5:57:a6:33:36:cf:78:f2:58:ea:82:9a:c8:8d:68:4c: 5b:a5:07:0e:14:9e:9e:c5:ac:6e:6a:63:4d:55:8a:5b:6c:74: 83:1a:56:fd:c8:77:ac:2b:7a:bd:ba:e4:1f:b4:d0:27:2e:60: 5a:f9:3d:45:2f:95:52:7e:90:16:69:82:be:22:49:80:28:52: 33:04:62:be:ca:ed:e2:d9:03:09:c3:eb:74:f8:01:e8:11:ab: f7:f4:6a:04:af:0a:52:51:0a:fe:9a:e9:b6:09:24:3c:dd:24: 65:34:e9:74:23:9d:dc:a7:66:c3:cf:0a:c3:be:00:fc:ec:51: 98:62:52:0b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1 Q0UzRTIzMzYwHhcNMjQwMjIxMDQ1NjM0WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWQ1ODI4MS02MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnaKA4742C178cbvfsq1ZgCU6Rh5931ot3yY26/Q2A9AE0RUVfq8X3e2MdlFO aEFmoQSZnnUBM8cKHHhxxMZSw53TxeR3fK6Gc8souTTz6TDj9FA7lqfft55fPYdd byFAVUkIiKDS8cS18AmlnytpODQ6Ht4y6RjfFhl2DPei2OLPschx9mSpm4LAiWJ2 8Tb+wlUzP41/k9gSHVE2/8s+HqSMuzk0GFFIsfZSHVu/L/s182z47r0u+Ruqwp5n wxZ/AY0X2pAsdG1Hk3FLLYiXc/MDpQ6+ltO2Vh2NCzNVgj9kB24uRjiL6LLPNujM 2H7dykzypvpTYo16a3wo4ppwZwIDAQABo4IClDCCApAwHQYDVR0OBBYEFGHJJZFq DTKM5W2XwjM/AvCu307bMB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEQwQUEvMkM3NUZFQzg3QTNDMTFFRDg2MUIyOTMzQzRGOUFFMDIvQjZDNEY4Nzg3 QTU5MTFFREI4QzRFMDRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCYWzANBgkqhkiG9w0BAQsFAAOCAQEAvJcv33faRePN0aux n+CIaaGthwXlKD0cKf+MJ7LJbLvHiYsty+C7XHCr6jWS+clvbq4+0hfBlRTOxL9U lkoMrHELoIz2teKT17OAcUSNooLMcuXSggkG1qARcdddmZjF9uNPAkdRSIGNZhXX CRxf4m9xbXzM+zR17hPIPRbCLYWlV6YzNs948ljqgprIjWhMW6UHDhSensWsbmpj TVWKW2x0gxpW/ch3rCt6vbrkH7TQJy5gWvk9RS+VUn6QFmmCviJJgChSMwRivsrt 4tkDCcPrdPgB6BGr9/RqBK8KUlEK/prptgkkPN0kZTTpdCOd3Kdmw88Kw74A/OxR mGJSCw== -----END CERTIFICATE-----Generated at Tue May 21 06:20:24 2024 by rpki-client on console-ams.rpki-client.org