$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/00EDEFD4B45411EDA65D8845C4F9AE02.roa File: 00EDEFD4B45411EDA65D8845C4F9AE02.roa (raw, json) Hash identifier: p+IiBi8p41Xaw/zr8LzUyZCn1S4agZdJFYBd3Xe6JKs= Subject key identifier: AF:34:71:04:F6:89:A1:3D:47:75:8D:97:A3:B1:C1:7A:9D:FA:6D:E1 Certificate issuer: /CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Certificate serial: 3405 Authority key identifier: 1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/00EDEFD4B45411EDA65D8845C4F9AE02.roa Signing time: Mon 22 Apr 2024 14:50:46 +0000 ROA not before: Mon 22 Apr 2024 14:50:46 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 24391 IP address blocks: 202.60.62.0/23 maxlen: 23 202.91.136.0/23 maxlen: 23 202.91.138.0/23 maxlen: 23 202.91.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 14:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13317 (0x3405) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0770/serialNumber=1D6225AD943ECA389FA4B66C1974351E34C428FB Validity Not Before: Apr 22 14:50:46 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66267946-f325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:31:9e:40:54:a4:fa:bf:5c:da:b2:88:c7:b5: 98:ea:48:c7:5c:cb:eb:97:11:6e:60:08:3e:32:b2: 13:31:0e:ba:3f:9f:07:e8:0c:77:4f:82:b2:f8:78: 65:c1:8f:78:a6:a2:ac:22:6d:c9:52:5a:dd:04:ac: 99:15:cb:c2:34:24:b8:8c:4d:88:2c:45:c3:5b:e9: 3a:2d:2f:6b:24:a6:9c:fd:0a:7c:de:35:f0:0b:0c: 69:e8:db:00:d3:40:6e:97:e7:21:e8:e2:b2:5e:80: f8:71:18:c7:37:e3:58:6e:96:65:05:da:55:48:6c: aa:aa:d5:8c:dc:2e:80:70:0f:e8:e4:4d:be:ab:a5: 6b:e3:cf:7d:ce:1e:fb:de:8e:17:96:83:52:fd:4f: 1c:1b:b3:6a:5a:20:a4:a7:16:ce:b9:69:a1:39:0a: 1a:78:0f:86:1c:68:a1:e5:1a:51:1b:17:65:d3:b7: 0e:8d:01:34:b8:48:f3:de:39:9b:9b:b3:66:5e:ec: 2d:8f:5b:e0:c7:5a:2b:6d:85:d0:1a:0d:9d:ce:3e: 2d:a6:bd:01:85:09:c1:f6:d5:a9:25:ec:32:9c:a8: 5c:cc:aa:72:e1:60:bc:f0:0c:be:76:df:c6:21:2a: 45:49:d1:28:37:77:51:59:32:46:26:51:af:14:11: d2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:71:04:F6:89:A1:3D:47:75:8D:97:A3:B1:C1:7A:9D:FA:6D:E1 X509v3 Authority Key Identifier: keyid:1D:62:25:AD:94:3E:CA:38:9F:A4:B6:6C:19:74:35:1E:34:C4:28:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HWIlrZQ-yjifpLZsGXQ1HjTEKPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0770/C33683B61D8E11E28A9B57ED08B02CD2/00EDEFD4B45411EDA65D8845C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.60.62.0/23 202.91.136.0-202.91.141.255 Signature Algorithm: sha256WithRSAEncryption 28:1f:46:6b:76:1b:c5:d4:d9:d7:81:53:04:d5:97:ed:13:5a: b1:a9:96:fe:98:bd:d7:6a:87:bc:af:89:fb:ce:33:bd:e1:71: 2a:c6:4b:cf:69:73:29:0e:fd:2b:a9:7d:99:4e:34:27:9c:c9: b5:03:6b:af:cb:58:1c:73:7d:80:af:9a:4f:65:b2:f3:b1:db: 2d:e4:fb:a8:2d:c5:91:49:29:ed:3a:ab:30:1c:eb:ce:ff:a9: 5d:5c:88:4d:88:70:99:5d:b6:8a:a7:24:87:0c:6f:1f:b6:61: 52:71:9c:27:49:e6:51:85:1d:9b:7a:a8:da:4a:61:0a:ba:2d: 23:1d:3a:b7:23:cd:a4:e4:ff:04:89:b3:1c:a2:a4:19:60:7f: d4:4f:ec:08:8c:e0:6f:f3:94:bd:ae:2c:da:38:e1:87:5e:f0: 1b:33:6d:05:51:3e:cf:00:a5:06:88:01:5a:b2:5c:2f:42:99: 88:f4:61:d3:7f:a4:1b:5c:1e:e2:34:0c:d2:c3:50:80:fe:d8: 34:4b:d4:f4:e0:2c:29:c7:99:60:17:70:d2:7d:0b:25:d7:dc: ad:4b:bb:29:8c:90:29:15:97:a4:46:07:c3:5d:47:d2:cb:4b: aa:ec:f7:0b:28:61:4b:21:50:ee:41:09:b9:a1:6d:96:4d:e0: 8c:30:8a:0d -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICNAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA3NzAxMTAvBgNVBAUTKDFENjIyNUFEOTQzRUNBMzg5RkE0QjY2QzE5NzQzNTFF MzRDNDI4RkIwHhcNMjQwNDIyMTQ1MDQ2WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjI2Nzk0Ni1mMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjGeQFSk+r9c2rKIx7WY6kjHXMvrlxFuYAg+MrITMQ66P58H6Ax3T4Ky+Hhl wY94pqKsIm3JUlrdBKyZFcvCNCS4jE2ILEXDW+k6LS9rJKac/Qp83jXwCwxp6NsA 00Bul+ch6OKyXoD4cRjHN+NYbpZlBdpVSGyqqtWM3C6AcA/o5E2+q6Vr4899zh77 3o4XloNS/U8cG7NqWiCkpxbOuWmhOQoaeA+GHGih5RpRGxdl07cOjQE0uEjz3jmb m7NmXuwtj1vgx1orbYXQGg2dzj4tpr0BhQnB9tWpJewynKhczKpy4WC88Ay+dt/G ISpFSdEoN3dRWTJGJlGvFBHSkQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFK80cQT2 iaE9R3WNl6OxwXqd+m3hMB8GA1UdIwQYMBaAFB1iJa2UPso4n6S2bBl0NR40xCj7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDc3MC9DMzM2ODNCNjFE OEUxMUUyOEE5QjU3RUQwOEIwMkNEMi9IV0lsclpRLXlqaWZwTFpzR1hRMUhqVEVL UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hXSWxyWlEteWppZnBMWnNHWFExSGpURUtQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjA3NzAvQzMzNjgzQjYxRDhFMTFFMjhBOUI1N0VEMDhCMDJDRDIvMDBFREVGRDRC NDU0MTFFREE2NUQ4ODQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAHKPD4wDAMEA8pbiAMEAcpbjDANBgkqhkiG9w0BAQsFAAOC AQEAKB9Ga3YbxdTZ14FTBNWX7RNasamW/pi912qHvK+J+84zveFxKsZLz2lzKQ79 K6l9mU40J5zJtQNrr8tYHHN9gK+aT2Wy87HbLeT7qC3FkUkp7TqrMBzrzv+pXVyI TYhwmV22iqckhwxvH7ZhUnGcJ0nmUYUdm3qo2kphCrotIx06tyPNpOT/BImzHKKk GWB/1E/sCIzgb/OUva4s2jjhh17wGzNtBVE+zwClBogBWrJcL0KZiPRh03+kG1we 4jQM0sNQgP7YNEvU9OAsKceZYBdw0n0LJdfcrUu7KYyQKRWXpEYHw11H0stLquz3 CyhhSyFQ7kEJuaFtlk3gjDCKDQ== -----END CERTIFICATE-----Generated at Fri May 24 18:23:58 2024 by rpki-client on console-ams.rpki-client.org