$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa File: 91A151AA4EB711ECB3446372C4F9AE02.roa (raw, json) Hash identifier: SsWUk8RPMPc6hCanWJa60lTG3mTB4TueBLaHT59ALdo= Subject key identifier: 84:75:65:8D:EA:EF:B5:22:30:88:2D:BD:65:B2:71:54:AF:D0:8C:5F Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 6BB8 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa Signing time: Wed 10 May 2023 16:21:03 +0000 ROA not before: Wed 10 May 2023 16:21:03 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 135256 IP address blocks: 45.248.188.0/22 maxlen: 24 103.217.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27576 (0x6bb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 10 16:21:03 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=645bc46e-55d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8c:a1:5f:ea:d9:33:f0:de:38:7f:a6:a4:97: 47:9e:b0:2b:85:1d:19:84:94:5f:f4:4c:b0:ad:6d: ed:fc:fa:b6:e2:55:9d:54:9d:0e:b2:c6:23:6a:ba: 21:90:8a:bb:78:c2:31:b0:4d:7c:09:6c:71:bf:52: 69:23:85:43:b9:58:bf:e9:53:a4:00:65:20:ca:85: eb:b9:9b:f0:81:61:22:11:c7:4d:e3:ce:b1:5e:ec: 8a:45:2d:9b:f8:07:89:19:02:1d:6b:b2:08:1b:84: 5e:e3:44:98:aa:d3:92:2c:40:43:88:aa:7e:79:b8: b4:85:02:e3:a5:d3:97:af:f5:ac:f7:47:5c:45:c7: 68:82:d9:d1:4c:34:33:9e:a2:eb:78:ad:3c:6f:39: fe:7d:dd:4a:28:7e:d9:59:6c:7e:03:2f:fb:70:2e: 74:2d:7b:f6:de:9e:5b:a0:96:c5:27:92:02:4a:d7: d6:4a:23:e0:4b:91:b3:ec:96:d5:da:9f:8d:41:96: 52:75:65:8e:97:cc:19:7c:50:74:62:93:f7:14:b1: 3a:c4:87:52:2e:37:a2:fb:da:8d:4f:f1:69:1b:53: 56:34:bb:01:fe:a2:db:f9:97:bd:dc:a1:85:ca:5d: f4:2d:35:97:b7:3f:23:92:c3:14:d4:99:70:db:18: de:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:75:65:8D:EA:EF:B5:22:30:88:2D:BD:65:B2:71:54:AF:D0:8C:5F X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91A151AA4EB711ECB3446372C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.248.188.0/22 103.217.148.0/22 Signature Algorithm: sha256WithRSAEncryption 70:a3:db:b1:80:83:94:e6:cc:b0:05:f4:52:10:de:e9:b8:57: 3c:6d:50:88:8b:5a:ac:35:15:dd:5c:6e:b0:a1:80:8f:ed:a3: 08:34:8a:5e:eb:18:b6:7f:fe:c3:c5:12:75:59:7e:e0:51:8d: 2d:22:09:1f:77:f1:13:f2:b9:b1:7d:4b:11:2a:09:72:6e:98: 85:bb:25:4f:a6:00:22:fa:94:62:07:34:ca:7b:94:26:29:0a: 8b:2f:13:dc:b0:38:f7:ce:c3:28:66:89:61:07:6e:71:24:c7: 2d:0d:ec:f6:74:0a:6c:57:a5:71:ff:a6:53:b3:4c:2d:19:71: 2a:08:92:30:e5:b4:c2:02:9e:51:78:e1:1d:b5:61:81:40:0a: cc:64:7b:69:65:e0:1b:41:a4:37:42:aa:1d:02:72:72:5a:14: 83:c8:2e:43:93:8f:f8:6a:63:97:45:aa:2e:af:9d:5e:41:c9: 7e:31:18:20:a2:e0:35:b6:bb:d5:3c:90:9e:7b:df:a5:6b:9d: 53:00:34:99:a9:64:94:88:d1:5b:e8:2b:ec:c5:49:fc:2e:17: b1:9a:c9:6a:b7:77:56:e4:bf:f9:fd:66:1b:44:8e:8a:e7:8f: c5:13:80:13:4d:58:4a:9d:b2:9e:60:a4:ec:af:4a:84:67:5c: b5:2f:59:4d -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICa7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNTEwMTYyMTAzWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NDViYzQ2ZS01NWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4yhX+rZM/DeOH+mpJdHnrArhR0ZhJRf9EywrW3t/Pq24lWdVJ0OssYjaroh kIq7eMIxsE18CWxxv1JpI4VDuVi/6VOkAGUgyoXruZvwgWEiEcdN486xXuyKRS2b +AeJGQIda7IIG4Re40SYqtOSLEBDiKp+ebi0hQLjpdOXr/Ws90dcRcdogtnRTDQz nqLreK08bzn+fd1KKH7ZWWx+Ay/7cC50LXv23p5boJbFJ5ICStfWSiPgS5Gz7JbV 2p+NQZZSdWWOl8wZfFB0YpP3FLE6xIdSLjei+9qNT/FpG1NWNLsB/qLb+Ze93KGF yl30LTWXtz8jksMU1Jlw2xjeQQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIR1ZY3q 77UiMIgtvWWycVSv0IxfMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTFBMTUxQUE0 RUI3MTFFQ0IzNDQ2MzcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIt+LwDBAJn2ZQwDQYJKoZIhvcNAQELBQADggEBAHCj27GA g5TmzLAF9FIQ3um4VzxtUIiLWqw1Fd1cbrChgI/towg0il7rGLZ//sPFEnVZfuBR jS0iCR938RPyubF9SxEqCXJumIW7JU+mACL6lGIHNMp7lCYpCosvE9ywOPfOwyhm iWEHbnEkxy0N7PZ0CmxXpXH/plOzTC0ZcSoIkjDltMICnlF44R21YYFACsxke2ll 4BtBpDdCqh0CcnJaFIPILkOTj/hqY5dFqi6vnV5ByX4xGCCi4DW2u9U8kJ5736Vr nVMANJmpZJSI0VvoK+zFSfwuF7GayWq3d1bkv/n9ZhtEjornj8UTgBNNWEqdsp5g pOyvSoRnXLUvWU0= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org