$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa File: 91BF097EC3D311ED97604930C4F9AE02.roa (raw, json) Hash identifier: /M7+piMPOPhUTDcudWJxz5ie0Sidydekv+i3whPmR6U= Subject key identifier: 4D:D2:B8:EB:2D:CD:7A:53:77:9A:E3:98:60:69:76:0E:0D:BD:02:88 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: 7539 Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa Signing time: Fri 07 Jul 2023 12:11:26 +0000 ROA not before: Fri 07 Jul 2023 12:11:26 +0000 ROA not after: Mon 01 Jul 2024 00:00:00 +0000 asID: 150596 IP address blocks: 45.123.9.0/24 maxlen: 24 45.123.11.0/24 maxlen: 24 103.38.200.0/24 maxlen: 24 103.38.201.0/24 maxlen: 24 103.110.180.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 15:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30009 (0x7539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: Jul 7 12:11:26 2023 GMT Not After : Jul 1 00:00:00 2024 GMT Subject: CN=64a800ee-1e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:53:94:82:c0:f8:f4:d6:e2:df:24:a3:0d: 19:f7:b8:c9:1b:6a:4a:7c:7c:d5:fc:59:40:b9:b9: 97:db:b8:dc:38:2a:31:09:a3:1e:34:a3:9f:83:88: 2a:43:8e:c2:99:30:aa:d7:71:f1:20:96:8d:c9:c6: cb:d0:3e:e8:d0:62:63:c0:12:c1:03:3f:69:da:00: 1a:de:38:a4:d1:8a:8e:90:6e:94:25:1d:80:63:92: 99:6f:eb:60:70:44:e5:19:df:d9:6e:c9:c6:82:48: 91:a9:2a:d4:57:91:9f:8f:a4:d8:77:40:c7:c6:72: 44:e3:11:75:96:e8:22:3e:91:49:b1:c4:13:46:ca: 5c:79:68:dd:aa:b7:b2:28:b9:04:7a:9f:31:13:b2: d4:64:56:1e:41:67:eb:e6:ea:48:9c:7e:ae:30:94: b7:9d:fb:35:04:e4:59:bc:ba:19:00:b3:a1:35:c9: 6a:18:dc:57:5f:71:0f:a4:a4:c6:be:f7:d5:ef:05: a8:92:a0:ee:ca:a1:4c:69:d0:ff:a0:14:50:b0:7b: 67:73:33:be:49:93:13:70:94:5d:ff:bc:92:73:23: 8b:25:0a:5f:7c:51:b2:b5:eb:6a:93:91:8e:78:4e: 3b:11:b9:2d:3e:43:1f:89:24:ff:b2:c2:b3:f6:98: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D2:B8:EB:2D:CD:7A:53:77:9A:E3:98:60:69:76:0E:0D:BD:02:88 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/91BF097EC3D311ED97604930C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.123.9.0/24 45.123.11.0/24 103.38.200.0/23 103.110.180.0/23 Signature Algorithm: sha256WithRSAEncryption 00:e2:2b:5f:a8:77:d3:f6:36:ef:d9:df:6d:97:81:3e:7f:70: b1:65:f0:d1:f2:50:a4:41:17:8c:ff:f4:57:b4:de:ec:12:d6: 4b:23:e5:94:c3:fe:4a:04:03:f8:42:8f:fc:65:53:30:b1:66: 6b:d9:20:a3:15:83:13:05:f7:65:cf:2f:18:8c:a3:8b:95:7f: 09:17:2a:a8:fd:ef:a3:63:12:27:2c:a9:38:95:98:d7:fc:2e: 75:f0:b1:7f:ad:c4:f2:a4:34:c3:55:45:15:e3:30:fe:b1:86: 1a:c0:ba:b7:fb:8f:da:36:ca:3b:f3:05:1a:4f:37:72:b8:86: a2:2f:9a:99:bb:20:26:3a:a2:4e:4a:f5:70:29:0f:09:cf:99: 2a:fd:79:bd:25:6e:8d:04:96:d2:a6:70:e5:b6:85:67:f3:ca: 25:0d:a8:8f:3c:b8:6f:04:b2:cb:f3:4c:bb:83:90:68:a5:db: 6a:d2:5e:db:41:c5:b3:32:b9:98:44:8b:e0:b2:f2:41:b0:b4: d3:ad:43:b6:83:0a:52:95:c4:e5:75:5a:2c:d9:e5:8a:c7:86: c8:53:21:5d:57:23:a5:b7:17:68:a6:43:1e:cc:49:c4:f5:cf: 03:a9:18:49:cd:97:ba:88:1d:d6:36:7d:87:11:3f:c9:5d:de: 69:9a:cc:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICdTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz RTNBQkM4MjMwHhcNMjMwNzA3MTIxMTI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGE4MDBlZS0xZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQlTlILA+PTW4t8kow0Z97jJG2pKfHzV/FlAubmX27jcOCoxCaMeNKOfg4gq Q47CmTCq13HxIJaNycbL0D7o0GJjwBLBAz9p2gAa3jik0YqOkG6UJR2AY5KZb+tg cETlGd/ZbsnGgkiRqSrUV5Gfj6TYd0DHxnJE4xF1lugiPpFJscQTRspceWjdqrey KLkEep8xE7LUZFYeQWfr5upInH6uMJS3nfs1BORZvLoZALOhNclqGNxXX3EPpKTG vvfV7wWokqDuyqFMadD/oBRQsHtnczO+SZMTcJRd/7yScyOLJQpffFGytetqk5GO eE47EbktPkMfiST/ssKz9pgYLQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFE3SuOst zXpTd5rjmGBpdg4NvQKIMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTFCRjA5N0VD M0QzMTFFRDk3NjA0OTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAAtewkDBAAtewsDBAFnJsgDBAFnbrQwDQYJKoZIhvcNAQEL BQADggEBAADiK1+od9P2Nu/Z322XgT5/cLFl8NHyUKRBF4z/9Fe03uwS1ksj5ZTD /koEA/hCj/xlUzCxZmvZIKMVgxMF92XPLxiMo4uVfwkXKqj976NjEicsqTiVmNf8 LnXwsX+txPKkNMNVRRXjMP6xhhrAurf7j9o2yjvzBRpPN3K4hqIvmpm7ICY6ok5K 9XApDwnPmSr9eb0lbo0EltKmcOW2hWfzyiUNqI88uG8EssvzTLuDkGil22rSXttB xbMyuZhEi+Cy8kGwtNOtQ7aDClKVxOV1WizZ5YrHhshTIV1XI6W3F2imQx7MScT1 zwOpGEnNl7qIHdY2fYcRP8ld3mmazAo= -----END CERTIFICATE-----Generated at Sat Apr 27 10:19:39 2024 by rpki-client on console-ams.rpki-client.org