$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa File: A2EBCE92083011EF82AFFD44C4F9AE02.roa (raw, json) Hash identifier: JyPsyPYWBJTtp9cL7rdJiQchZcAK1LENWk53awZsjUc= Subject key identifier: E0:B9:C0:F1:56:5E:30:58:EA:D6:50:D9:54:66:21:32:F6:FD:04:90 Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: 25 Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa Signing time: Thu 02 May 2024 03:04:06 +0000 ROA not before: Thu 02 May 2024 03:04:06 +0000 ROA not after: Wed 28 May 2025 00:00:00 +0000 asID: 45652 IP address blocks: 43.252.120.0/22 maxlen: 24 103.233.80.0/22 maxlen: 24 110.34.139.0/24 maxlen: 24 110.34.158.0/24 maxlen: 24 110.34.162.0/24 maxlen: 24 110.34.164.0/24 maxlen: 24 110.34.166.0/24 maxlen: 24 110.34.180.0/23 maxlen: 24 110.34.183.0/24 maxlen: 24 110.34.184.0/23 maxlen: 24 110.34.186.0/23 maxlen: 24 110.34.188.0/23 maxlen: 24 110.34.190.0/23 maxlen: 24 110.34.220.0/22 maxlen: 24 2401:4a40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Oct 2024 05:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: May 2 03:04:06 2024 GMT Not After : May 28 00:00:00 2025 GMT Subject: CN=663302a5-a1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:61:6a:db:a4:e8:dd:d5:34:06:d7:18:65:f6: f7:71:a1:b7:a6:6c:96:1d:c6:85:0c:cb:68:00:8d: 62:5d:46:d8:ff:ce:2b:9b:fc:da:85:1e:db:7c:f7: 59:c9:d9:a4:8e:cd:fe:29:4d:b2:e4:73:38:ff:bd: a8:3a:03:7c:dd:f7:2e:3f:de:7e:33:8d:4b:17:12: 07:58:39:92:9e:fd:e7:c4:0c:43:01:01:0e:b6:bc: b0:ba:53:ca:48:d3:f9:a1:ef:b3:cb:12:86:03:b4: d9:12:20:23:78:18:28:88:f0:5a:e2:36:20:39:e3: 3b:33:d9:27:c7:69:cf:b1:d3:0d:9c:3f:dc:5f:f9: fa:25:4b:8a:df:05:d3:8c:79:0b:28:0b:c6:26:3c: ef:47:67:c4:da:1a:11:2b:08:2c:86:5e:b4:85:92: 7c:a8:02:2d:24:80:cc:4d:cb:df:1f:9d:09:0a:d2: c2:50:08:a3:61:da:25:5d:f9:63:6f:67:64:47:da: e9:82:70:45:4b:0e:2e:bb:d5:33:9f:a7:64:2a:fc: 6b:c5:77:47:37:03:ae:00:8d:e7:5a:8f:17:7b:8b: 72:c4:dd:26:ae:3d:9d:75:59:29:56:fd:c1:35:89: 7b:e9:c0:63:14:27:6a:b0:de:45:91:bf:a9:d9:90: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B9:C0:F1:56:5E:30:58:EA:D6:50:D9:54:66:21:32:F6:FD:04:90 X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.120.0/22 103.233.80.0/22 110.34.139.0/24 110.34.158.0/24 110.34.162.0/24 110.34.164.0/24 110.34.166.0/24 110.34.180.0/23 110.34.183.0-110.34.191.255 110.34.220.0/22 IPv6: 2401:4a40::/32 Signature Algorithm: sha256WithRSAEncryption c2:59:21:72:59:00:73:c0:e4:56:7f:50:fb:36:a4:a4:f8:12: 53:bd:47:0b:61:54:cb:dc:b0:6a:28:0d:b6:68:2f:e8:e0:13: 57:d5:3e:d8:86:e5:23:70:1c:c7:fb:47:9d:62:54:68:17:74: 32:0a:f9:b5:bb:66:bc:69:78:33:7b:e7:7d:19:cb:a2:11:30: 01:3f:c7:99:ce:ba:95:fc:36:39:24:df:8d:61:35:ec:bb:4c: 76:80:bc:ee:29:df:f9:85:bb:50:e6:5a:66:48:08:4e:fb:1c: 44:21:bd:20:47:c1:a0:88:8d:ca:d1:b1:e7:a5:7a:74:87:1b: 34:45:60:5a:07:5d:b7:56:30:45:fe:4e:1b:9b:a8:dd:54:bf: 00:51:db:cc:0e:3b:d7:0f:2c:1e:5c:a4:f7:d3:ea:39:86:e2: 95:c0:67:06:6f:51:48:3d:2f:e3:1f:53:e0:67:04:84:60:1c: a3:eb:f3:1a:8f:a2:68:4e:ce:df:5a:20:6e:32:46:76:88:48: 2a:0e:31:19:eb:93:bf:83:51:cb:ae:0b:fc:ea:b5:8d:a4:14: f4:47:38:44:58:c3:e2:4d:e3:91:9c:46:f1:7d:ea:61:0a:2d: 40:e8:f1:4c:6b:f9:76:16:f3:3a:db:8b:d0:98:fe:ba:45:ce: a8:52:13:43 -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzUzMjExMC8GA1UEBRMoQkNBQjNFNzZGODRFRDQzNzQyRjJBMDgxMjQyNzA4RTc5 OUNFMUI1RjAeFw0yNDA1MDIwMzA0MDZaFw0yNTA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY2MzMwMmE1LWExYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnYWrbpOjd1TQG1xhl9vdxobembJYdxoUMy2gAjWJdRtj/ziub/NqFHtt891nJ 2aSOzf4pTbLkczj/vag6A3zd9y4/3n4zjUsXEgdYOZKe/efEDEMBAQ62vLC6U8pI 0/mh77PLEoYDtNkSICN4GCiI8FriNiA54zsz2SfHac+x0w2cP9xf+folS4rfBdOM eQsoC8YmPO9HZ8TaGhErCCyGXrSFknyoAi0kgMxNy98fnQkK0sJQCKNh2iVd+WNv Z2RH2umCcEVLDi671TOfp2Qq/GvFd0c3A64Ajedajxd7i3LE3SauPZ11WSlW/cE1 iXvpwGMUJ2qw3kWRv6nZkCzJAgMBAAGjggLiMIIC3jAdBgNVHQ4EFgQU4LnA8VZe MFjq1lDZVGYhMvb9BJAwHwYDVR0jBBgwFoAUvKs+dvhO1DdC8qCBJCcI55nOG18w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNTMyL0RBQTBEMEI0MDM3 RTExRUY4NTIwRTc1OEM0RjlBRTAyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cx OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdktzLWR2aE8xRGRDOHFDQkpDY0k1NW5PRzE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzUzMi9EQUEwRDBCNDAzN0UxMUVGODUyMEU3NThDNEY5QUUwMi9BMkVCQ0U5MjA4 MzAxMUVGODJBRkZENDRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDBsBggrBgEFBQcBBwEB/wRd MFswSgQCAAEwRAMEAiv8eAMEAmfpUAMEAG4iiwMEAG4ingMEAG4iogMEAG4ipAME AG4ipgMEAW4itDAMAwQAbiK3AwQGbiKAAwQCbiLcMA0EAgACMAcDBQAkAUpAMA0G CSqGSIb3DQEBCwUAA4IBAQDCWSFyWQBzwORWf1D7NqSk+BJTvUcLYVTL3LBqKA22 aC/o4BNX1T7YhuUjcBzH+0edYlRoF3QyCvm1u2a8aXgze+d9GcuiETABP8eZzrqV /DY5JN+NYTXsu0x2gLzuKd/5hbtQ5lpmSAhO+xxEIb0gR8GgiI3K0bHnpXp0hxs0 RWBaB123VjBF/k4bm6jdVL8AUdvMDjvXDyweXKT30+o5huKVwGcGb1FIPS/jH1Pg ZwSEYByj6/Maj6JoTs7fWiBuMkZ2iEgqDjEZ65O/g1HLrgv86rWNpBT0RzhEWMPi TeORnEbxfephCi1A6PFMa/l2FvM624vQmP66Rc6oUhND -----END CERTIFICATE-----Generated at Fri Sep 27 07:40:30 2024 by rpki-client on console-fra.rpki-client.org