$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa File: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: loYpUv1Um4itP1DhkO9J2kLAAlsHj9PiATnSulDl9Us= Subject key identifier: 30:47:47:45:29:91:78:EA:74:B4:56:29:26:BC:9B:35:F2:54:37:83 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 014D Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa Signing time: Sun 31 Mar 2024 05:07:04 +0000 ROA not before: Sun 31 Mar 2024 05:07:04 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 132621 IP address blocks: 140.168.244.0/22 maxlen: 22 140.168.244.0/24 maxlen: 24 140.168.245.0/24 maxlen: 24 140.168.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Mar 31 05:07:04 2024 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6608ef78-04fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:f7:f1:75:ed:91:fa:1c:58:7c:3c:b9:4f: 17:57:fa:8b:98:49:df:df:cd:4b:93:3d:f6:b8:7b: a4:7f:92:50:73:c1:2e:20:88:70:86:ea:62:38:f4: a3:be:ee:a8:1d:78:84:ce:0e:af:d4:34:5d:f1:53: 16:8f:47:7b:75:78:7f:16:aa:80:0a:5d:5d:c2:44: 57:ca:84:52:3d:96:75:f4:a4:12:0f:4f:aa:a6:72: 11:c1:04:2f:6b:e1:13:5f:bb:00:f8:59:cf:9b:03: 30:f6:b4:16:83:4c:61:e1:13:51:87:b7:ec:79:c9: cb:1e:4d:fd:27:6d:60:41:17:d2:98:b5:8c:7c:45: 40:ed:54:0f:63:28:4d:fc:49:e6:b6:7c:12:c2:61: bf:e2:47:5f:4f:01:c0:dd:97:0a:e5:6f:a3:a6:e8: e3:79:61:b2:0d:4e:53:89:bc:1c:b5:9e:56:3e:29: 18:75:43:6e:04:d6:fd:43:c3:45:32:ba:0d:c0:45: 28:0a:13:7a:6e:eb:8d:6d:85:b6:79:f7:f4:b5:5d: 6e:0d:62:93:d2:42:b1:a2:ac:12:69:68:95:f9:4d: 73:81:5e:64:45:17:cf:32:10:1f:04:09:42:82:89: 41:d5:8b:90:f8:2a:0f:b7:a0:35:18:5d:7d:da:9d: 95:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:47:47:45:29:91:78:EA:74:B4:56:29:26:BC:9B:35:F2:54:37:83 X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/2DDA16845B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.244.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:c3:be:d7:09:95:16:77:1a:ed:df:28:b9:68:e1:ed:cb:a7: 6f:32:e1:f7:b3:d6:b0:1d:2c:eb:a8:82:92:fa:d9:6a:60:ce: c7:33:aa:33:0a:b4:ec:53:57:24:31:37:82:c9:2c:44:0d:7c: 92:bd:f8:ed:ff:1f:94:3a:50:90:42:41:7e:48:57:70:3a:bb: 66:90:01:f6:b7:e9:63:1f:02:8e:74:0e:e1:46:07:c2:91:99: b1:db:07:f6:24:e8:4d:5e:d0:2c:6c:b6:cb:33:a2:c3:ee:96: c9:2a:44:76:38:29:92:ef:88:94:cd:a6:37:e6:c7:bf:aa:56: 47:a8:8e:f5:bc:80:bf:9a:14:97:23:76:7b:e7:26:ee:35:10: 27:2b:d4:b1:fd:3a:83:53:63:53:41:d4:fd:21:70:01:8e:9a: 4c:3a:ce:4d:df:27:80:69:4e:b1:9c:d0:48:5e:3c:6f:36:84: 8b:29:5a:fb:2c:b5:f4:70:66:8c:d9:cf:70:a9:3e:96:cd:cd: 4f:be:10:46:66:fd:e4:c4:5a:d3:55:12:8a:d4:c6:18:05:66: ef:d8:b6:0e:42:75:bd:bb:ab:62:79:08:74:43:10:34:c7:69: 1e:29:f7:6c:71:9b:74:6c:8b:97:eb:30:45:71:74:bb:e4:99: 4f:30:82:f0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjQwMzMxMDUwNzA0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjA4ZWY3OC0wNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7T38XXtkfocWHw8uU8XV/qLmEnf381Lkz32uHukf5JQc8EuIIhwhupiOPSj vu6oHXiEzg6v1DRd8VMWj0d7dXh/FqqACl1dwkRXyoRSPZZ19KQSD0+qpnIRwQQv a+ETX7sA+FnPmwMw9rQWg0xh4RNRh7fsecnLHk39J21gQRfSmLWMfEVA7VQPYyhN /EnmtnwSwmG/4kdfTwHA3ZcK5W+jpujjeWGyDU5TibwctZ5WPikYdUNuBNb9Q8NF MroNwEUoChN6buuNbYW2eff0tV1uDWKT0kKxoqwSaWiV+U1zgV5kRRfPMhAfBAlC golB1YuQ+CoPt6A1GF192p2VWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDBHR0Up kXjqdLRWKSa8mzXyVDeDMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMkREQTE2ODQ1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKMqPQwDQYJKoZIhvcNAQELBQADggEBABrDvtcJlRZ3Gu3f KLlo4e3Lp28y4fez1rAdLOuogpL62WpgzsczqjMKtOxTVyQxN4LJLEQNfJK9+O3/ H5Q6UJBCQX5IV3A6u2aQAfa36WMfAo50DuFGB8KRmbHbB/Yk6E1e0CxstsszosPu lskqRHY4KZLviJTNpjfmx7+qVkeojvW8gL+aFJcjdnvnJu41ECcr1LH9OoNTY1NB 1P0hcAGOmkw6zk3fJ4BpTrGc0EhePG82hIspWvsstfRwZozZz3CpPpbNzU++EEZm /eTEWtNVEorUxhgFZu/Ytg5Cdb27q2J5CHRDEDTHaR4p92xxm3Rsi5frMEVxdLvk mU8wgvA= -----END CERTIFICATE-----Generated at Fri May 17 06:46:26 2024 by rpki-client on console-ams.rpki-client.org