$ rpki-client -vvf rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/04D9406602CF11EE83CAF94FC4F9AE02.roa File: 04D9406602CF11EE83CAF94FC4F9AE02.roa (raw, json) Hash identifier: A5NNPWnzjWBDS4nx3zi01uXejCUGbyaqo9Uq4IjSDig= Subject key identifier: B6:F4:50:33:8A:12:C7:65:47:42:F3:C9:6D:7E:11:9D:1F:9E:A2:ED Certificate issuer: /CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Certificate serial: 0C9E Authority key identifier: C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/04D9406602CF11EE83CAF94FC4F9AE02.roa Signing time: Sun 04 Jun 2023 11:57:46 +0000 ROA not before: Sun 04 Jun 2023 11:57:46 +0000 ROA not after: Wed 29 May 2024 00:00:00 +0000 asID: 18230 IP address blocks: 59.152.0.0/20 maxlen: 20 59.152.0.0/24 maxlen: 24 59.152.1.0/24 maxlen: 24 59.152.2.0/24 maxlen: 24 59.152.5.0/24 maxlen: 24 59.152.8.0/24 maxlen: 24 59.152.9.0/24 maxlen: 24 59.152.10.0/24 maxlen: 24 59.152.12.0/24 maxlen: 24 59.152.13.0/24 maxlen: 24 59.152.15.0/24 maxlen: 24 2404:1b40::/32 maxlen: 32 2404:1b40::/48 maxlen: 48 2404:1b40:1::/48 maxlen: 48 2404:1b40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Jul 2023 17:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3230 (0xc9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B06C/serialNumber=C83493C0297CCB58D2837946D6063F14A7DEE986 Validity Not Before: Jun 4 11:57:46 2023 GMT Not After : May 29 00:00:00 2024 GMT Subject: CN=647c7c3a-7f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0c:dc:4e:63:22:b7:07:f1:2f:99:a7:00:8c: 6d:2a:6a:b2:21:e5:fb:1c:61:b7:43:6a:ed:ac:72: db:9b:b4:51:1b:2a:49:ee:5b:5a:df:31:21:27:c9: 4c:6c:00:c3:35:92:ce:1c:ef:66:e3:84:89:58:88: cd:b1:e6:25:92:5f:54:07:a9:6a:66:30:f2:94:e9: ee:d2:49:a8:9f:09:62:45:a6:89:af:30:d7:06:37: 88:eb:ed:7b:16:8b:fa:12:49:c4:d1:51:c9:a9:34: e1:9b:1e:f9:9c:9f:dd:7f:f8:15:de:9d:21:76:1e: ce:ed:98:3f:3f:21:cf:1d:6d:0f:6a:24:bf:2e:00: a5:ca:18:74:08:f6:c7:f3:45:55:1a:8a:c4:2e:0e: 9a:49:0b:47:20:da:75:da:fc:50:49:19:01:76:e2: 03:09:d3:c1:8a:70:67:99:b9:2a:33:3c:9c:32:4e: 6c:cf:6e:de:36:46:e2:0a:3e:f2:5a:87:9a:94:74: a4:e0:93:96:7b:49:52:4f:b5:b3:fa:fd:ca:60:fe: 22:5f:7a:d1:4b:b3:21:33:84:ba:b5:c0:0f:0e:53: 67:d4:11:f5:ef:2d:16:9c:e3:66:e0:20:76:72:73: 8a:29:c7:eb:29:92:ca:5a:b8:01:b5:f5:d0:03:42: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F4:50:33:8A:12:C7:65:47:42:F3:C9:6D:7E:11:9D:1F:9E:A2:ED X509v3 Authority Key Identifier: keyid:C8:34:93:C0:29:7C:CB:58:D2:83:79:46:D6:06:3F:14:A7:DE:E9:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/yDSTwCl8y1jSg3lG1gY_FKfe6YY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDSTwCl8y1jSg3lG1gY_FKfe6YY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B06C/E9D62E74FEAE11E8910D4D66C4F9AE02/04D9406602CF11EE83CAF94FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.152.0.0/20 IPv6: 2404:1b40::/32 Signature Algorithm: sha256WithRSAEncryption a5:fc:0e:e5:3e:a7:bb:e3:29:a7:13:27:8a:0d:56:59:e7:80: b4:5a:a5:82:98:7a:50:3f:63:83:7f:24:8e:59:85:4c:47:34: e8:51:5a:13:91:bc:5e:17:8a:a4:50:62:49:d7:94:99:dc:39: 25:53:b5:e1:2a:75:73:30:10:a8:ea:1a:70:e8:35:8b:af:cd: 1d:fe:a1:80:a9:f4:b4:0e:e9:09:11:b1:3c:19:ee:c2:08:75: b2:bc:dd:dd:b1:b9:4f:87:58:1a:1b:37:84:35:23:c9:a3:4f: 54:43:eb:3f:eb:ed:90:b4:b5:9b:1a:d7:ee:fb:50:c5:54:8b: e7:58:61:2d:fd:68:81:32:a6:cd:f0:0d:27:7f:b6:29:3d:3f: 34:37:c6:5e:2c:54:1b:58:6a:e3:9e:9b:9e:21:7d:2e:6e:d0: af:24:ad:49:df:e2:43:3a:2f:5a:8d:35:c5:20:92:39:fa:b4: c1:9c:3d:b1:05:51:00:69:2c:5c:95:04:cb:c0:2f:e3:b7:d3: 0d:51:71:c9:55:44:c8:bd:0b:7e:f6:44:1e:4a:7b:ba:47:c7: c8:47:e4:b4:f5:ec:27:78:0d:9b:cb:21:65:60:96:d0:81:3f: e1:36:17:30:0b:f2:eb:b0:f0:e7:f7:26:60:4e:3b:4e:94:bb: da:6e:2a:59 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIwNkMxMTAvBgNVBAUTKEM4MzQ5M0MwMjk3Q0NCNThEMjgzNzk0NkQ2MDYzRjE0 QTdERUU5ODYwHhcNMjMwNjA0MTE1NzQ2WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD VQQDEw02NDdjN2MzYS03ZjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQzcTmMitwfxL5mnAIxtKmqyIeX7HGG3Q2rtrHLbm7RRGypJ7lta3zEhJ8lM bADDNZLOHO9m44SJWIjNseYlkl9UB6lqZjDylOnu0kmonwliRaaJrzDXBjeI6+17 Fov6EknE0VHJqTThmx75nJ/df/gV3p0hdh7O7Zg/PyHPHW0PaiS/LgClyhh0CPbH 80VVGorELg6aSQtHINp12vxQSRkBduIDCdPBinBnmbkqMzycMk5sz27eNkbiCj7y WoealHSk4JOWe0lST7Wz+v3KYP4iX3rRS7MhM4S6tcAPDlNn1BH17y0WnONm4CB2 cnOKKcfrKZLKWrgBtfXQA0KfLwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLb0UDOK EsdlR0LzyW1+EZ0fnqLtMB8GA1UdIwQYMBaAFMg0k8ApfMtY0oN5RtYGPxSn3umG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjA2Qy9FOUQ2MkU3NEZF QUUxMUU4OTEwRDRENjZDNEY5QUUwMi95RFNUd0NsOHkxalNnM2xHMWdZX0ZLZmU2 WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEU1R3Q2w4eTFqU2czbEcxZ1lfRktmZTZZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUIwNkMvRTlENjJFNzRGRUFFMTFFODkxMEQ0RDY2QzRGOUFFMDIvMDREOTQwNjYw MkNGMTFFRTgzQ0FGOTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAQ7mAAwDQQCAAIwBwMFACQEG0AwDQYJKoZIhvcNAQELBQAD ggEBAKX8DuU+p7vjKacTJ4oNVlnngLRapYKYelA/Y4N/JI5ZhUxHNOhRWhORvF4X iqRQYknXlJncOSVTteEqdXMwEKjqGnDoNYuvzR3+oYCp9LQO6QkRsTwZ7sIIdbK8 3d2xuU+HWBobN4Q1I8mjT1RD6z/r7ZC0tZsa1+77UMVUi+dYYS39aIEyps3wDSd/ tik9PzQ3xl4sVBtYauOem54hfS5u0K8krUnf4kM6L1qNNcUgkjn6tMGcPbEFUQBp LFyVBMvAL+O30w1RcclVRMi9C372RB5Ke7pHx8hH5LT17Cd4DZvLIWVgltCBP+E2 FzAL8uuw8Of3JmBOO06Uu9puKlk= -----END CERTIFICATE-----Generated at Wed Jul 19 23:22:57 2023 by rpki-client on console-ams.rpki-client.org