$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/94584738031A11ED934E3D58C4F9AE02.roa File: 94584738031A11ED934E3D58C4F9AE02.roa (raw, json) Hash identifier: XEcInF/4DluT/tcvLCcSWynq7+tP3kZx9jXwQt73Rj4= Subject key identifier: 58:DF:BC:AB:E9:A4:81:44:37:82:27:C9:A6:EB:8F:09:75:83:93:D2 Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 0126 Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/94584738031A11ED934E3D58C4F9AE02.roa Signing time: Sat 27 May 2023 06:14:37 +0000 ROA not before: Sat 27 May 2023 06:14:37 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 23727 IP address blocks: 202.94.32.0/20 maxlen: 20 203.24.63.0/24 maxlen: 24 203.27.44.0/24 maxlen: 24 203.29.208.0/23 maxlen: 23 203.55.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 May 2024 04:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: May 27 06:14:37 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64719fcd-af2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:04:7d:10:4e:44:49:94:51:d4:ff:e4:89: ae:91:36:f9:09:af:8c:b8:fb:e0:cd:f0:f5:c6:99: 7f:db:a5:dd:b7:83:8b:6b:49:ef:7c:3e:6b:cc:1b: 70:4c:50:13:36:f4:ae:13:be:40:d0:02:5c:1a:1b: 5f:09:32:41:ac:48:e9:e6:ff:2f:99:45:21:7e:e9: ff:b9:94:46:f9:d2:6f:d6:22:0d:89:85:59:66:78: 6b:fc:2c:e5:74:13:71:d6:f4:f4:6c:4c:e5:bf:96: a3:16:77:95:ea:d3:61:2f:6d:c6:ad:31:fb:c8:ba: 0e:7d:3c:78:b7:96:b4:8d:a8:82:c7:0f:c5:21:11: 99:99:3f:20:ec:4f:3f:6d:29:d3:68:fb:12:1e:f3: 68:80:6b:9f:72:99:6b:8f:b4:7f:52:6a:05:ca:7d: 88:04:07:ed:d6:e6:ff:be:62:86:ba:11:1f:f3:91: d2:ea:56:19:1c:26:ed:02:73:d8:0b:60:71:a1:1f: e5:76:f7:ae:4f:ac:45:67:5e:bb:0d:7f:5c:9f:2e: 78:84:c5:58:41:60:47:31:b3:0d:78:48:32:bc:fe: 48:cd:c0:5a:f7:5d:9f:ca:33:a5:1b:66:57:d1:a6: 2b:bb:a0:90:45:22:75:14:c8:fc:6e:c4:26:bc:5d: b0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:BC:AB:E9:A4:81:44:37:82:27:C9:A6:EB:8F:09:75:83:93:D2 X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/94584738031A11ED934E3D58C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.94.32.0/20 203.24.63.0/24 203.27.44.0/24 203.29.208.0/23 203.55.134.0/23 Signature Algorithm: sha256WithRSAEncryption 24:c2:1f:c2:24:b9:c5:9d:9c:66:e7:be:b3:4f:1d:42:16:8f: 98:58:49:90:14:4a:52:24:bd:95:ca:a5:e3:45:23:b3:31:13: e3:8c:00:bb:ee:d6:f0:d8:1e:7d:9f:38:7b:b5:45:2f:55:fb: f1:f9:01:92:e1:52:66:33:d9:bc:12:65:09:22:14:84:d8:04: 9a:eb:81:a7:f4:df:2e:bf:78:d4:e7:70:05:4b:a9:e9:9e:03: 2f:22:41:a0:8a:1a:be:d9:94:6d:22:7f:9a:d6:16:a8:33:7b: 13:ea:bf:59:76:0f:5b:00:ea:c9:49:1f:7c:14:01:94:eb:a7: 76:83:cd:56:e0:34:14:a7:c8:00:59:eb:0e:45:10:11:56:d0: 1a:c4:a1:95:d3:e5:ad:e4:8f:c6:55:4b:74:20:e7:07:0e:55: 2b:79:6e:da:31:60:18:cd:7f:82:59:ca:1a:0a:d1:08:70:5f: 60:f5:11:8f:bd:ac:b4:e8:f0:66:08:23:36:f3:65:05:ce:b1: d2:da:af:1d:7e:b2:d5:0b:7b:80:46:da:8e:99:54:7b:dc:9d: b1:25:49:f1:c2:7c:ea:25:c2:0f:f9:51:07:f8:e1:ef:30:65: fd:7f:7e:45:de:64:e9:be:ce:85:47:fc:fb:61:56:96:a2:65: 8b:58:b5:ea -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjMwNTI3MDYxNDM3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDcxOWZjZC1hZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBsEfRBOREmUUdT/5ImukTb5Ca+MuPvgzfD1xpl/26Xdt4OLa0nvfD5rzBtw TFATNvSuE75A0AJcGhtfCTJBrEjp5v8vmUUhfun/uZRG+dJv1iINiYVZZnhr/Czl dBNx1vT0bEzlv5ajFneV6tNhL23GrTH7yLoOfTx4t5a0jaiCxw/FIRGZmT8g7E8/ bSnTaPsSHvNogGufcplrj7R/UmoFyn2IBAft1ub/vmKGuhEf85HS6lYZHCbtAnPY C2BxoR/ldveuT6xFZ167DX9cny54hMVYQWBHMbMNeEgyvP5IzcBa912fyjOlG2ZX 0aYru6CQRSJ1FMj8bsQmvF2whwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFjfvKvp pIFEN4Inyabrjwl1g5PSMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU1NzcvOTAzRTRDNzgwMzE2MTFFRDkwRjg4NDRGQzRGOUFFMDIvOTQ1ODQ3Mzgw MzFBMTFFRDkzNEUzRDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBATKXiADBADLGD8DBADLGywDBAHLHdADBAHLN4YwDQYJKoZI hvcNAQELBQADggEBACTCH8IkucWdnGbnvrNPHUIWj5hYSZAUSlIkvZXKpeNFI7Mx E+OMALvu1vDYHn2fOHu1RS9V+/H5AZLhUmYz2bwSZQkiFITYBJrrgaf03y6/eNTn cAVLqemeAy8iQaCKGr7ZlG0if5rWFqgzexPqv1l2D1sA6slJH3wUAZTrp3aDzVbg NBSnyABZ6w5FEBFW0BrEoZXT5a3kj8ZVS3Qg5wcOVSt5btoxYBjNf4JZyhoK0Qhw X2D1EY+9rLTo8GYIIzbzZQXOsdLarx1+stULe4BG2o6ZVHvcnbElSfHCfOolwg/5 UQf44e8wZf1/fkXeZOm+zoVH/PthVpaiZYtYteo= -----END CERTIFICATE-----Generated at Mon May 13 07:29:59 2024 by rpki-client on console-fra.rpki-client.org