$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/93215346C57811EA8440684AC4F9AE02.roa File: 93215346C57811EA8440684AC4F9AE02.roa (raw, json) Hash identifier: aQwUipFelnXNZZsX8ffdswm2bvUoYzaPrvgd4Hz86Uc= Subject key identifier: E5:B5:BA:2D:9E:65:28:AB:35:23:9D:B2:50:33:00:66:27:F2:4E:83 Certificate issuer: /CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Certificate serial: 3414 Authority key identifier: C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/93215346C57811EA8440684AC4F9AE02.roa Signing time: Tue 11 Jun 2024 08:00:13 +0000 ROA not before: Tue 11 Jun 2024 08:00:13 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 132873 IP address blocks: 203.124.190.0/24 maxlen: 24 203.124.191.0/24 maxlen: 24 2401:401::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 14:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13332 (0x3414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF59C/serialNumber=C1296FFAD34F29F04E0EFAD5D9244C02A7D87D8D Validity Not Before: Jun 11 08:00:13 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6668040d-c102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:b2:b3:49:52:7c:1d:b4:b4:20:72:e2:a6: b3:b7:8a:40:39:f1:e4:73:94:40:35:a7:0a:a6:00: 8f:e5:c5:05:0c:4a:27:4e:b2:66:9a:dd:54:f3:35: 0e:61:86:67:c3:ea:df:94:61:30:2b:a9:83:20:f7: 07:28:ce:ec:8b:fc:9e:54:60:00:f4:f6:62:04:18: ad:24:b7:f6:27:0d:c2:b6:5d:35:0f:0f:d3:c7:d3: 59:5f:cc:f7:4c:77:a7:c2:6c:6e:c7:27:17:a1:63: 68:f4:a3:3c:6f:71:f7:4e:7b:fe:b9:a5:60:d1:99: 2f:b9:8c:c9:72:b3:c5:40:fd:3e:a2:f3:0a:45:6d: 0c:bc:8e:a8:3b:77:1a:1e:72:37:a3:c7:36:b8:80: f1:39:11:43:fe:49:58:65:06:4d:05:e7:ed:e9:33: 83:fb:db:9c:c8:d4:12:a8:7f:b2:21:c8:fb:06:19: 9d:5b:ad:fd:72:1b:ff:d7:ce:4e:67:c8:8c:c1:dc: 71:15:d6:92:ff:44:e1:fb:6c:7f:d0:26:77:16:3c: e4:2e:c8:38:22:79:64:41:dc:80:51:27:fb:f2:57: f7:5a:66:3d:d4:0f:f1:59:1b:c5:5b:73:b0:a4:90: ab:a2:ab:de:68:19:33:48:95:ed:9e:35:90:b7:61: c6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B5:BA:2D:9E:65:28:AB:35:23:9D:B2:50:33:00:66:27:F2:4E:83 X509v3 Authority Key Identifier: keyid:C1:29:6F:FA:D3:4F:29:F0:4E:0E:FA:D5:D9:24:4C:02:A7:D8:7D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/wSlv-tNPKfBODvrV2SRMAqfYfY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSlv-tNPKfBODvrV2SRMAqfYfY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF59C/735DC4D61D8D11E29A7543EB08B02CD2/93215346C57811EA8440684AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.124.190.0/23 IPv6: 2401:401::/32 Signature Algorithm: sha256WithRSAEncryption 20:6f:a9:7a:d1:44:cb:d5:d0:72:7e:da:09:44:c4:7c:b5:33: 44:b3:58:fb:7f:bc:dc:fe:d3:ba:d5:eb:ae:c2:64:4a:69:fd: 10:f5:45:42:7d:82:81:80:cb:bc:b7:e9:fe:cb:31:02:6c:67: 2e:e5:83:a1:1f:0a:5f:24:74:08:e7:ed:b7:c1:5f:9f:40:62: 5e:a1:6e:97:0a:02:c2:49:95:1e:1a:8a:32:45:29:6a:49:03: 51:6f:48:b0:92:ab:c3:59:b7:96:32:73:c6:67:81:b5:30:de: cd:2b:4f:24:a8:bc:c9:65:b9:0b:32:25:0f:cd:52:68:c5:a7: 92:52:28:2e:ed:b7:99:08:3f:31:7a:9a:d3:b8:46:69:bd:dd: 6c:13:f4:f8:ed:a2:de:29:a3:98:d0:7c:1f:6a:ab:a9:ac:ab: 34:eb:7d:04:fa:d4:2c:da:33:df:9d:7d:28:a4:d5:4a:84:c1: a7:55:61:98:3d:92:ce:b0:d1:87:fc:b0:98:2a:85:46:43:c0: 6d:97:93:75:5c:67:4d:0c:f9:31:f2:d8:34:d4:5e:c8:4a:59: d6:dc:c8:03:0b:c7:1f:8a:37:52:8a:41:26:75:47:ca:aa:e0: 10:60:00:b3:44:29:58:c9:16:38:0d:a4:1a:d7:2f:d0:7a:02: f7:b3:d0:4a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICNBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1OUMxMTAvBgNVBAUTKEMxMjk2RkZBRDM0RjI5RjA0RTBFRkFENUQ5MjQ0QzAy QTdEODdEOEQwHhcNMjQwNjExMDgwMDEzWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjY4MDQwZC1jMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmTays0lSfB20tCBy4qazt4pAOfHkc5RANacKpgCP5cUFDEonTrJmmt1U8zUO YYZnw+rflGEwK6mDIPcHKM7si/yeVGAA9PZiBBitJLf2Jw3Ctl01Dw/Tx9NZX8z3 THenwmxuxycXoWNo9KM8b3H3Tnv+uaVg0ZkvuYzJcrPFQP0+ovMKRW0MvI6oO3ca HnI3o8c2uIDxORFD/klYZQZNBeft6TOD+9ucyNQSqH+yIcj7BhmdW639chv/185O Z8iMwdxxFdaS/0Th+2x/0CZ3FjzkLsg4InlkQdyAUSf78lf3WmY91A/xWRvFW3Ow pJCroqveaBkzSJXtnjWQt2HGtQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOW1ui2e ZSirNSOdslAzAGYn8k6DMB8GA1UdIwQYMBaAFMEpb/rTTynwTg761dkkTAKn2H2N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjU5Qy83MzVEQzRENjFE OEQxMUUyOUE3NTQzRUIwOEIwMkNEMi93U2x2LXROUEtmQk9EdnJWMlNSTUFxZllm WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dTbHYtdE5QS2ZCT0R2clYyU1JNQXFmWWZZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY1OUMvNzM1REM0RDYxRDhEMTFFMjlBNzU0M0VCMDhCMDJDRDIvOTMyMTUzNDZD NTc4MTFFQTg0NDA2ODRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAHLfL4wDQQCAAIwBwMFACQBBAEwDQYJKoZIhvcNAQELBQAD ggEBACBvqXrRRMvV0HJ+2glExHy1M0SzWPt/vNz+07rV667CZEpp/RD1RUJ9goGA y7y36f7LMQJsZy7lg6EfCl8kdAjn7bfBX59AYl6hbpcKAsJJlR4aijJFKWpJA1Fv SLCSq8NZt5Yyc8ZngbUw3s0rTySovMlluQsyJQ/NUmjFp5JSKC7tt5kIPzF6mtO4 Rmm93WwT9Pjtot4po5jQfB9qq6msqzTrfQT61CzaM9+dfSik1UqEwadVYZg9ks6w 0Yf8sJgqhUZDwG2Xk3VcZ00M+THy2DTUXshKWdbcyAMLxx+KN1KKQSZ1R8qq4BBg ALNEKVjJFjgNpBrXL9B6Avez0Eo= -----END CERTIFICATE-----Generated at Fri Nov 22 16:50:03 2024 by rpki-client on console-ams.rpki-client.org