$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa File: 9DC06B6E36A211E893BF3061C4F9AE02.roa (raw, json) Hash identifier: w5zPHT/MnklfAHwgONGX9qlk6vPsgxlPKR5J+9H6c/I= Subject key identifier: EF:E7:CA:C0:5D:64:41:EF:70:FF:56:98:2A:1C:BB:B5:22:F6:C1:E7 Certificate issuer: /CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Certificate serial: 1C80 Authority key identifier: 32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa Signing time: Fri 15 Mar 2024 15:08:49 +0000 ROA not before: Fri 15 Mar 2024 15:08:49 +0000 ROA not after: Mon 30 Sep 2024 00:00:00 +0000 asID: 59374 IP address blocks: 43.255.240.0/22 maxlen: 22 43.255.240.0/24 maxlen: 24 43.255.241.0/24 maxlen: 24 43.255.242.0/24 maxlen: 24 43.255.243.0/24 maxlen: 24 103.233.192.0/22 maxlen: 22 103.233.192.0/24 maxlen: 24 103.233.193.0/24 maxlen: 24 103.233.194.0/24 maxlen: 24 103.233.195.0/24 maxlen: 24 160.238.12.0/22 maxlen: 22 160.238.12.0/24 maxlen: 24 160.238.13.0/24 maxlen: 24 160.238.14.0/24 maxlen: 24 160.238.15.0/24 maxlen: 24 2401:1a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 16:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7296 (0x1c80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF095/serialNumber=32F26CF39F9FBCA7F31F5395F88DD97D9470D197 Validity Not Before: Mar 15 15:08:49 2024 GMT Not After : Sep 30 00:00:00 2024 GMT Subject: CN=65f46481-0c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:a0:a6:34:ce:b5:a8:6c:68:95:46:1f:ce: 77:67:be:92:46:a8:96:11:0b:b1:43:7d:68:86:84: 58:93:a9:ea:e4:7b:f6:f3:4e:d4:2f:e5:24:2c:80: 84:c4:31:9d:7a:bd:e7:e1:64:23:d1:52:8e:51:a3: 44:37:83:51:3f:81:02:35:bc:52:1c:6a:af:2a:f0: e8:56:75:83:30:3e:3f:9b:b4:cd:9b:65:f5:1c:1d: e7:2b:a0:42:fe:48:f0:e6:a3:2a:74:e7:fa:fa:6f: 01:b2:de:e7:a7:d8:f2:18:2d:7b:fe:53:eb:42:f3: 00:d3:2d:d9:e0:38:4c:3b:76:11:54:e2:c1:f3:88: c8:f8:51:31:0d:64:6e:9e:af:de:36:23:c0:ab:25: 49:c4:66:cb:25:b3:3c:61:2f:29:f8:e9:b3:76:5f: 5a:85:61:42:11:2a:c9:c5:93:c7:37:0e:e0:fc:02: 31:78:46:1c:91:19:c6:cf:4a:a5:eb:50:f4:8a:6d: b6:d4:f6:3f:49:64:16:02:94:b0:64:0f:a9:a6:11: a8:07:c1:fa:ab:8d:4c:9d:f3:0d:d0:d9:83:c8:83: 9b:c9:1c:dd:d2:ba:da:73:00:2b:a6:88:b9:70:ad: 52:4b:eb:8c:d5:51:da:e3:b0:49:97:a5:ef:f6:7c: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E7:CA:C0:5D:64:41:EF:70:FF:56:98:2A:1C:BB:B5:22:F6:C1:E7 X509v3 Authority Key Identifier: keyid:32:F2:6C:F3:9F:9F:BC:A7:F3:1F:53:95:F8:8D:D9:7D:94:70:D1:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MvJs85-fvKfzH1OV-I3ZfZRw0Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF095/8C899A42AB5611E6B329C484C4F9AE02/9DC06B6E36A211E893BF3061C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.240.0/22 103.233.192.0/22 160.238.12.0/22 IPv6: 2401:1a80::/32 Signature Algorithm: sha256WithRSAEncryption 9e:ad:c8:80:de:ef:27:61:07:ed:04:23:ec:b5:cc:d1:85:9f: de:45:c3:f9:f0:71:bd:a9:29:49:4d:c6:32:f8:34:db:26:ae: 70:50:94:9d:da:a3:85:3d:42:aa:5c:6a:ab:1a:5a:ab:3d:17: f3:7a:26:94:26:e7:48:e9:33:c9:01:86:ce:e9:1c:85:03:eb: b6:54:8d:c6:71:41:e7:e0:68:54:ec:3c:ed:4d:45:b1:4d:db: e5:ce:19:3f:f5:52:bb:d0:26:63:15:68:99:62:bc:b9:88:ac: b0:ca:41:c6:56:e5:5a:a6:24:fb:f7:25:14:d5:b9:ab:e2:4b: e1:b6:7d:4e:80:e4:80:84:3a:37:b4:24:3a:c4:a8:1f:1e:c1: 2f:e4:54:03:b3:74:b2:d3:fc:4e:68:69:cc:88:ec:b7:ed:b1: 63:1b:5f:33:6d:a4:37:70:4b:c8:9c:a7:97:e9:d6:bf:e0:78: 99:08:2d:e0:71:32:f7:60:0f:82:72:53:a0:d8:36:86:0e:99: 33:e0:a5:18:84:5d:cf:c5:22:72:9a:c0:24:cf:ed:00:71:89: c9:71:29:b1:a0:d2:ff:9c:b1:40:e4:bd:39:d4:b8:35:b4:e8: 33:ed:c9:48:92:f2:c7:41:40:ee:e7:e0:d6:5c:56:e4:c7:d7: 22:2b:26:b4 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICHIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwOTUxMTAvBgNVBAUTKDMyRjI2Q0YzOUY5RkJDQTdGMzFGNTM5NUY4OEREOTdE OTQ3MEQxOTcwHhcNMjQwMzE1MTUwODQ5WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY0NjQ4MS0wYzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdagpjTOtahsaJVGH853Z76SRqiWEQuxQ31ohoRYk6nq5Hv2807UL+UkLICE xDGder3n4WQj0VKOUaNEN4NRP4ECNbxSHGqvKvDoVnWDMD4/m7TNm2X1HB3nK6BC /kjw5qMqdOf6+m8Bst7np9jyGC17/lPrQvMA0y3Z4DhMO3YRVOLB84jI+FExDWRu nq/eNiPAqyVJxGbLJbM8YS8p+Omzdl9ahWFCESrJxZPHNw7g/AIxeEYckRnGz0ql 61D0im221PY/SWQWApSwZA+pphGoB8H6q41MnfMN0NmDyIObyRzd0rracwArpoi5 cK1SS+uM1VHa47BJl6Xv9ny9hwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFO/nysBd ZEHvcP9WmCocu7Ui9sHnMB8GA1UdIwQYMBaAFDLybPOfn7yn8x9TlfiN2X2UcNGX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjA5NS84Qzg5OUE0MkFC NTYxMUU2QjMyOUM0ODRDNEY5QUUwMi9NdkpzODUtZnZLZnpIMU9WLUkzWmZaUncw WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL012SnM4NS1mdktmekgxT1YtSTNaZlpSdzBaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYwOTUvOEM4OTlBNDJBQjU2MTFFNkIzMjlDNDg0QzRGOUFFMDIvOURDMDZCNkUz NkEyMTFFODkzQkYzMDYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr//ADBAJn6cADBAKg7gwwDQQCAAIwBwMFACQBGoAwDQYJ KoZIhvcNAQELBQADggEBAJ6tyIDe7ydhB+0EI+y1zNGFn95Fw/nwcb2pKUlNxjL4 NNsmrnBQlJ3ao4U9QqpcaqsaWqs9F/N6JpQm50jpM8kBhs7pHIUD67ZUjcZxQefg aFTsPO1NRbFN2+XOGT/1UrvQJmMVaJlivLmIrLDKQcZW5VqmJPv3JRTVuaviS+G2 fU6A5ICEOje0JDrEqB8ewS/kVAOzdLLT/E5oacyI7LftsWMbXzNtpDdwS8icp5fp 1r/geJkILeBxMvdgD4JyU6DYNoYOmTPgpRiEXc/FInKawCTP7QBxiclxKbGg0v+c sUDkvTnUuDW06DPtyUiS8sdBQO7n4NZcVuTH1yIrJrQ= -----END CERTIFICATE-----Generated at Tue May 28 19:33:33 2024 by rpki-client on console-ams.rpki-client.org