$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/544F13A6B78111EF84611770C4F9AE02.roa File: 544F13A6B78111EF84611770C4F9AE02.roa (raw, json) Hash identifier: b+cobkm/t+8VplbAM/uAvE/ze4s0B8PJ3bqKjF7kQOA= Subject key identifier: EF:E8:24:EC:D1:51:4C:E0:91:83:C0:41:81:47:0E:FD:93:D6:C3:99 Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D Certificate serial: 013F Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/544F13A6B78111EF84611770C4F9AE02.roa Signing time: Wed 11 Dec 2024 05:32:36 +0000 ROA not before: Wed 11 Dec 2024 05:32:36 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 136393 IP address blocks: 96.30.64.0/21 maxlen: 21 96.30.64.0/22 maxlen: 23 96.30.64.0/24 maxlen: 24 96.30.68.0/23 maxlen: 23 96.30.70.0/23 maxlen: 23 96.30.72.0/23 maxlen: 23 96.30.79.0/24 maxlen: 24 96.30.84.0/22 maxlen: 23 96.30.100.0/22 maxlen: 23 96.30.107.0/24 maxlen: 24 96.30.108.0/23 maxlen: 23 96.30.111.0/24 maxlen: 24 146.88.36.0/22 maxlen: 22 146.88.36.0/24 maxlen: 24 146.88.37.0/24 maxlen: 24 146.88.38.0/23 maxlen: 23 146.88.42.0/23 maxlen: 23 146.88.44.0/22 maxlen: 23 146.88.52.0/22 maxlen: 24 161.82.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919536C Validity Not Before: Dec 11 05:32:36 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=675923f4-1aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:d8:37:dd:ab:47:c9:64:18:cf:51:7b:12: 84:68:ca:aa:5b:b9:8e:41:04:e1:af:ee:12:63:91: 2b:77:86:45:2e:35:51:9b:d0:10:ef:4d:b7:fb:f1: 4a:74:49:4f:5d:c7:63:8a:1a:d4:7b:b8:04:e0:a4: 83:ed:bd:8d:a3:69:ca:30:30:21:c9:0d:b3:b1:31: cf:9c:b3:c4:63:b4:7d:f4:99:19:21:2e:35:d3:4c: 90:87:dc:d3:84:80:a2:e7:54:e5:4b:17:b6:4c:e5: 59:c5:e2:2c:66:ae:18:09:57:3c:ed:0c:7d:44:10: fb:ba:81:90:4a:47:4c:dd:95:48:f2:1c:19:6d:4a: f4:80:5a:35:44:00:a2:d2:d5:bf:d3:33:49:cd:ac: 86:92:03:8e:31:e1:9c:37:1c:8c:4b:b1:93:78:34: 8e:59:f0:56:c6:fb:50:dd:7c:fb:19:48:0a:bd:f3: 13:9c:1a:9e:9c:07:21:9c:9b:a0:e7:e4:63:fc:13: d3:a8:c4:7c:10:65:2f:97:88:1f:66:15:ee:c1:25: 4f:5d:33:89:57:68:2f:37:9c:93:c9:c6:45:92:07: 25:4e:22:6a:e2:fb:e9:e7:a8:d0:bc:09:00:02:2e: 84:8f:5c:e3:ba:47:2c:5c:52:20:55:f6:d6:16:9b: cc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:24:EC:D1:51:4C:E0:91:83:C0:41:81:47:0E:FD:93:D6:C3:99 X509v3 Authority Key Identifier: keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/544F13A6B78111EF84611770C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 96.30.64.0-96.30.73.255 96.30.79.0/24 96.30.84.0/22 96.30.100.0/22 96.30.107.0-96.30.109.255 96.30.111.0/24 146.88.36.0/22 146.88.42.0-146.88.47.255 146.88.52.0/22 161.82.186.0/23 Signature Algorithm: sha256WithRSAEncryption 26:88:dc:d4:2f:22:43:7f:19:24:13:6c:b5:c6:44:6f:66:7b: 93:69:8e:af:f5:45:91:a7:5e:7f:02:8b:85:64:06:4f:1c:45: a4:d9:98:2e:1d:0f:6a:ff:ee:63:0d:8c:4e:3e:b5:40:8d:67: 0e:cf:44:1d:c9:df:b3:0b:c1:8f:15:3c:2c:08:a9:da:9b:3d: 52:e4:9d:f7:89:95:45:c4:1a:0c:50:e2:61:07:4f:f9:38:61: 62:ea:04:3d:74:09:c2:a0:3f:a9:78:31:ca:5d:99:a9:75:9b: 27:e6:de:19:a7:69:7c:24:b0:eb:73:cf:b8:e8:d5:e9:97:02: 1d:63:59:0f:ac:6d:7e:65:d5:62:f4:46:fa:8c:fb:55:28:0b: d7:bc:59:20:f2:73:11:de:db:d5:a7:1b:7e:43:86:1c:46:69: 2d:0b:3e:6e:f7:bf:36:7e:03:20:c6:4e:99:df:b9:58:d3:83: 82:e4:79:5e:97:c3:1f:7f:8c:d1:44:c5:75:4f:30:6d:8b:e4: 7a:af:3e:b5:6f:b4:9c:90:5d:a2:f1:5d:77:03:89:03:19:85: 27:ee:6e:d9:9c:da:c3:ed:60:be:c6:6a:34:f0:b8:c5:e3:ee: 0d:69:67:a7:c4:c8:d1:83:fd:1d:2a:59:36:91:a6:ca:a9:e1: 35:25:2e:91 -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3 NThGNkFFMUQwHhcNMjQxMjExMDUzMjM2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzU5MjNmNC0xYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHPYN92rR8lkGM9RexKEaMqqW7mOQQThr+4SY5Erd4ZFLjVRm9AQ7023+/FK dElPXcdjihrUe7gE4KSD7b2No2nKMDAhyQ2zsTHPnLPEY7R99JkZIS4100yQh9zT hICi51TlSxe2TOVZxeIsZq4YCVc87Qx9RBD7uoGQSkdM3ZVI8hwZbUr0gFo1RACi 0tW/0zNJzayGkgOOMeGcNxyMS7GTeDSOWfBWxvtQ3Xz7GUgKvfMTnBqenAchnJug 5+Rj/BPTqMR8EGUvl4gfZhXuwSVPXTOJV2gvN5yTycZFkgclTiJq4vvp56jQvAkA Ai6Ej1zjukcsXFIgVfbWFpvMwQIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFO/oJOzR UUzgkYPAQYFHDv2T1sOZMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2 NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTUzNkMvNzVCOThCRjAzNjYwMTFFRTg4RTBGNTMwQzRGOUFFMDIvNTQ0RjEzQTZC NzgxMTFFRjg0NjExNzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbQYIKwYBBQUHAQcBAf8E XjBcMFoEAgABMFQwDAMEBmAeQAMEAWAeSAMEAGAeTwMEAmAeVAMEAmAeZDAMAwQA YB5rAwQBYB5sAwQAYB5vAwQCklgkMAwDBAGSWCoDBASSWCADBAKSWDQDBAGhUrow DQYJKoZIhvcNAQELBQADggEBACaI3NQvIkN/GSQTbLXGRG9me5Npjq/1RZGnXn8C i4VkBk8cRaTZmC4dD2r/7mMNjE4+tUCNZw7PRB3J37MLwY8VPCwIqdqbPVLknfeJ lUXEGgxQ4mEHT/k4YWLqBD10CcKgP6l4Mcpdmal1myfm3hmnaXwksOtzz7jo1emX Ah1jWQ+sbX5l1WL0RvqM+1UoC9e8WSDycxHe29WnG35DhhxGaS0LPm73vzZ+AyDG TpnfuVjTg4LkeV6Xwx9/jNFExXVPMG2L5HqvPrVvtJyQXaLxXXcDiQMZhSfubtmc 2sPtYL7GajTwuMXj7g1pZ6fEyNGD/R0qWTaRpsqp4TUlLpE= -----END CERTIFICATE-----Generated at Wed Feb 19 20:46:23 2025 by rpki-client