$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/341F127A553C11E78691D52BC4F9AE02.roa File: 341F127A553C11E78691D52BC4F9AE02.roa (raw, json) Hash identifier: 8X+x3LlikAlMNq0qZjdxxF001f12N0qrp8xYT/hgJaw= Subject key identifier: 04:7A:AF:68:32:D8:B9:5A:38:EA:D4:6E:84:70:14:DD:49:7D:BE:99 Certificate issuer: /CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14 Certificate serial: 24AD Authority key identifier: 87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/341F127A553C11E78691D52BC4F9AE02.roa Signing time: Fri 28 Jul 2023 16:12:29 +0000 ROA not before: Fri 28 Jul 2023 16:12:29 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 38071 IP address blocks: 58.147.168.0/21 maxlen: 24 223.27.80.0/20 maxlen: 24 2401:7b40::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9389 (0x24ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5030/serialNumber=8769B952F9C8006757929F06997CDE5B1E448F14 Validity Not Before: Jul 28 16:12:29 2023 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=64c3e8ed-f244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:fa:76:c2:be:93:b0:85:70:d1:5b:46:42: 25:5e:17:5e:ff:c9:30:f9:9b:6a:d7:d9:20:05:10: de:eb:a2:d3:62:5d:2e:f2:85:ae:41:38:c5:d9:f1: 43:ff:9e:3e:8a:93:9c:99:46:1b:90:b8:74:45:4e: 22:a5:c0:ee:f7:98:ce:b7:31:f3:2a:23:b2:cb:10: 21:a0:79:04:87:e6:9d:59:f0:34:66:e1:3f:81:eb: 49:a0:f8:87:2d:b0:d2:4e:9e:25:60:8b:b6:57:0e: d5:82:af:aa:70:0c:78:29:cf:a1:18:8d:40:8f:1d: d7:4a:ee:21:4e:1b:e2:07:a3:17:64:0c:53:36:31: cd:a8:dd:12:e4:cc:31:5c:c6:73:d5:ab:eb:63:23: 7e:2a:ec:ee:5d:7e:63:b3:f9:36:8b:71:81:8b:c3: 65:ff:ad:4e:af:85:cd:5f:38:2b:f8:92:77:7e:a9: 24:58:44:19:81:a1:6f:e5:24:f8:4a:0c:d8:9f:9d: c1:3a:90:b6:82:29:d4:fc:56:6d:27:28:ed:b5:be: 01:7a:d4:28:79:e1:0c:05:9b:3a:bb:61:80:5d:b4: 25:09:16:f9:3e:68:8e:1a:90:68:02:d8:25:bd:52: 3a:da:42:1d:6b:59:81:94:0b:c3:f8:b8:2b:1a:06: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7A:AF:68:32:D8:B9:5A:38:EA:D4:6E:84:70:14:DD:49:7D:BE:99 X509v3 Authority Key Identifier: keyid:87:69:B9:52:F9:C8:00:67:57:92:9F:06:99:7C:DE:5B:1E:44:8F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2m5UvnIAGdXkp8GmXzeWx5EjxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5030/CE6A3F10FD2A11E4B74FEA42C4F9AE02/341F127A553C11E78691D52BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.147.168.0/21 223.27.80.0/20 IPv6: 2401:7b40::/32 Signature Algorithm: sha256WithRSAEncryption 2e:d6:9e:45:26:1e:cd:30:51:5f:49:25:d2:d5:52:c9:1a:c3: 76:6d:e1:41:1d:5b:14:20:6a:5e:8e:bc:a1:5d:b4:45:43:3c: e0:69:e4:82:7f:1c:24:36:34:94:ae:5e:5d:cf:57:9e:8f:8f: 62:0f:9a:aa:d4:c6:3f:c2:c7:5b:1e:a0:12:02:cc:65:cb:12: c0:df:f2:1e:52:3a:61:a8:25:18:f9:49:cd:3c:66:ba:e7:07: 6c:fb:47:66:d1:0a:c1:c2:00:fc:07:35:61:94:b2:f2:54:dc: b0:56:07:da:89:4d:50:81:46:f6:cd:f3:cd:7d:75:84:85:c0: f6:6a:bf:da:21:b1:a0:0c:22:34:87:b6:3b:a7:67:af:e5:23: 4a:c4:a1:98:1f:a9:03:05:5b:70:b6:31:47:5f:fb:fa:39:e8: a1:53:a3:51:17:98:b7:ce:fc:84:c1:b5:fd:38:58:0b:65:b9: 8c:a8:f9:d6:d9:7d:c3:99:2f:a6:96:27:c4:d5:af:b8:24:d6: 9b:16:d4:4f:07:6b:32:21:aa:39:a8:63:d0:93:7e:14:c1:89: 45:7d:d6:88:dc:eb:d1:4d:f3:9c:42:c4:9b:ba:21:53:cb:12: 45:90:da:1d:28:a3:8c:47:4a:43:10:b9:90:9a:07:73:83:2e: fd:61:42:6a -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICJK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwMzAxMTAvBgNVBAUTKDg3NjlCOTUyRjlDODAwNjc1NzkyOUYwNjk5N0NERTVC MUU0NDhGMTQwHhcNMjMwNzI4MTYxMjI5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGMzZThlZC1mMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02r6dsK+k7CFcNFbRkIlXhde/8kw+Ztq19kgBRDe66LTYl0u8oWuQTjF2fFD /54+ipOcmUYbkLh0RU4ipcDu95jOtzHzKiOyyxAhoHkEh+adWfA0ZuE/getJoPiH LbDSTp4lYIu2Vw7Vgq+qcAx4Kc+hGI1Ajx3XSu4hThviB6MXZAxTNjHNqN0S5Mwx XMZz1avrYyN+KuzuXX5js/k2i3GBi8Nl/61Or4XNXzgr+JJ3fqkkWEQZgaFv5ST4 SgzYn53BOpC2ginU/FZtJyjttb4BetQoeeEMBZs6u2GAXbQlCRb5PmiOGpBoAtgl vVI62kIda1mBlAvD+LgrGgY5jwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAR6r2gy 2LlaOOrUboRwFN1Jfb6ZMB8GA1UdIwQYMBaAFIdpuVL5yABnV5KfBpl83lseRI8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTAzMC9DRTZBM0YxMEZE MkExMUU0Qjc0RkVBNDJDNEY5QUUwMi9oMm01VXZuSUFHZFhrcDhHbVh6ZVd4NUVq eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gybTVVdm5JQUdkWGtwOEdtWHplV3g1RWp4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTUwMzAvQ0U2QTNGMTBGRDJBMTFFNEI3NEZFQTQyQzRGOUFFMDIvMzQxRjEyN0E1 NTNDMTFFNzg2OTFENTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAM6k6gDBATfG1AwDQQCAAIwBwMFACQBe0AwDQYJKoZIhvcN AQELBQADggEBAC7WnkUmHs0wUV9JJdLVUskaw3Zt4UEdWxQgal6OvKFdtEVDPOBp 5IJ/HCQ2NJSuXl3PV56Pj2IPmqrUxj/Cx1seoBICzGXLEsDf8h5SOmGoJRj5Sc08 ZrrnB2z7R2bRCsHCAPwHNWGUsvJU3LBWB9qJTVCBRvbN8819dYSFwPZqv9ohsaAM IjSHtjunZ6/lI0rEoZgfqQMFW3C2MUdf+/o56KFTo1EXmLfO/ITBtf04WAtluYyo +dbZfcOZL6aWJ8TVr7gk1psW1E8HazIhqjmoY9CTfhTBiUV91ojc69FN85xCxJu6 IVPLEkWQ2h0oo4xHSkMQuZCaB3ODLv1hQmo= -----END CERTIFICATE-----Generated at Sat May 18 17:20:34 2024 by rpki-client on console-ams.rpki-client.org