$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa File: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (raw, json) Hash identifier: yRSzHrzurf6XSOu6xC9tCIXU5IVd5pxNWSd3g3cqSyI= Subject key identifier: 86:C8:E5:E6:A0:8B:54:26:70:29:7B:55:38:37:11:CB:A8:69:0C:94 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: 41 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa Signing time: Sat 31 Aug 2024 08:08:59 +0000 ROA not before: Sat 31 Aug 2024 08:08:59 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 55649 IP address blocks: 43.242.140.0/22 maxlen: 22 43.242.140.0/24 maxlen: 24 43.242.141.0/24 maxlen: 24 43.242.142.0/24 maxlen: 24 43.242.143.0/24 maxlen: 24 103.38.28.0/22 maxlen: 22 103.38.28.0/24 maxlen: 24 103.38.29.0/24 maxlen: 24 103.38.30.0/24 maxlen: 24 103.38.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Sep 2024 04:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Aug 31 08:08:59 2024 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=66d2cf9b-7f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:5b:35:8c:c2:d9:03:66:fb:b0:46:14:fc: cc:c3:80:9d:fe:a2:0f:61:54:c0:96:29:2c:7b:d1: 2b:51:d8:ac:f4:ad:a9:f5:dd:52:09:e1:52:1d:f1: e1:70:6b:f9:75:e9:c8:dd:2b:8d:30:c2:03:70:d5: 98:d3:76:d0:ab:62:f6:d3:a2:1d:3d:32:b3:ce:01: 65:0a:0d:aa:eb:a7:12:f3:12:f7:ce:eb:6c:cb:f8: 24:9c:50:76:62:f6:45:a5:45:c0:7f:fc:cd:47:f5: 31:00:24:5b:50:23:52:3b:a8:d9:8a:bb:32:21:c9: c6:0f:b3:ca:71:7a:22:ae:87:e4:02:11:66:8f:07: 39:bc:52:d4:44:25:5d:77:cd:66:dc:8c:a9:20:f2: 86:3d:91:8b:33:92:62:ae:0f:3e:c2:8a:b5:83:35: 46:ac:8a:78:5a:ab:cd:c2:3a:6e:32:a2:36:08:6c: dc:4b:98:0e:1e:c2:3a:3d:a9:d9:1c:f9:12:13:3f: c2:5b:e6:e4:85:9e:c0:7c:c7:f9:8b:eb:47:f3:22: 9e:29:06:26:9b:40:36:36:c0:e3:24:4f:d6:55:c0: 1f:70:20:5c:9c:bb:f4:62:ca:e1:ef:87:47:5c:64: a3:af:57:ab:97:eb:61:42:fe:ec:db:3e:1b:5e:90: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C8:E5:E6:A0:8B:54:26:70:29:7B:55:38:37:11:CB:A8:69:0C:94 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/56CBAF060CEE11EF80CB5642C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.242.140.0/22 103.38.28.0/22 Signature Algorithm: sha256WithRSAEncryption 02:c3:b9:61:4a:02:d0:ca:bc:b5:07:ae:2f:4a:eb:a6:fb:51: 73:2a:23:7f:41:ff:29:25:3a:f8:2c:05:17:f7:fe:2c:4d:3a: d6:2a:51:44:6a:78:61:15:ad:e2:2e:1b:84:5c:1d:96:b9:c2: 08:6c:ec:44:5a:2a:00:1e:2f:64:28:75:84:b6:29:cc:27:f2: 06:7b:20:f2:cb:2f:31:13:be:3d:7c:e2:0b:42:c4:c8:a1:7a: 0f:d7:af:3a:66:01:05:ab:84:8c:56:75:c3:b3:12:40:45:09: 61:81:96:34:87:f2:60:fd:9f:55:f0:47:38:85:47:63:8f:75: 43:42:11:c8:10:45:a0:f3:95:fd:36:fe:dc:97:ab:cf:1e:26: 68:b5:0a:26:7b:39:5e:0f:8b:33:60:1b:30:a8:36:b1:f2:e8: db:e2:bc:a2:b7:4a:77:fc:ec:3d:29:19:68:b9:6b:af:4e:e3: 10:82:bd:d4:04:5c:96:f1:b0:d2:33:2a:3d:47:b2:e9:9e:f6: 98:5d:5b:d5:3b:4f:1f:9d:89:32:43:69:04:3a:d3:35:f2:51: dc:b6:49:38:84:80:49:9d:4e:83:c0:71:66:89:ab:a7:45:92: a1:9d:c2:38:46:79:39:78:5a:c4:2c:cc:8a:b8:d7:e1:9e:b7: 6f:fa:56:26 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NEUyQjExMC8GA1UEBRMoNEIzQjlEOTMwNTg4MEZGNjZCN0YxRTRDOTBGRjk4NzUy ODg2MzgxMTAeFw0yNDA4MzEwODA4NTlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY2ZDJjZjliLTdmNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXEVs1jMLZA2b7sEYU/MzDgJ3+og9hVMCWKSx70StR2Kz0ran13VIJ4VId8eFw a/l16cjdK40wwgNw1ZjTdtCrYvbToh09MrPOAWUKDarrpxLzEvfO62zL+CScUHZi 9kWlRcB//M1H9TEAJFtQI1I7qNmKuzIhycYPs8pxeiKuh+QCEWaPBzm8UtREJV13 zWbcjKkg8oY9kYszkmKuDz7CirWDNUasinhaq83COm4yojYIbNxLmA4ewjo9qdkc +RITP8Jb5uSFnsB8x/mL60fzIp4pBiabQDY2wOMkT9ZVwB9wIFycu/RiyuHvh0dc ZKOvV6uX62FC/uzbPhtekMvnAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUhsjl5qCL VCZwKXtVODcRy6hpDJQwHwYDVR0jBBgwFoAUSzudkwWID/Zrfx5MkP+YdSiGOBEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTJCL0Y4MzZCREVDMENF QzExRUY5RjgxRjYzRkM0RjlBRTAyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09C RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU3p1ZGt3V0lEX1pyZng1TWtQLVlkU2lHT0JFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi81NkNCQUYwNjBD RUUxMUVGODBDQjU2NDJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAivyjAMEAmcmHDANBgkqhkiG9w0BAQsFAAOCAQEAAsO5YUoC 0Mq8tQeuL0rrpvtRcyojf0H/KSU6+CwFF/f+LE061ipRRGp4YRWt4i4bhFwdlrnC CGzsRFoqAB4vZCh1hLYpzCfyBnsg8ssvMRO+PXziC0LEyKF6D9evOmYBBauEjFZ1 w7MSQEUJYYGWNIfyYP2fVfBHOIVHY491Q0IRyBBFoPOV/Tb+3Jerzx4maLUKJns5 Xg+LM2AbMKg2sfLo2+K8ordKd/zsPSkZaLlrr07jEIK91ARclvGw0jMqPUey6Z72 mF1b1TtPH52JMkNpBDrTNfJR3LZJOISASZ1Og8BxZomrp0WSoZ3COEZ5OXhaxCzM irjX4Z63b/pWJg== -----END CERTIFICATE-----Generated at Tue Sep 17 08:12:28 2024 by rpki-client on console-ams.rpki-client.org