$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/945922AECEBA11EDBBFD9E28C4F9AE02.roa File: 945922AECEBA11EDBBFD9E28C4F9AE02.roa (raw, json) Hash identifier: YM59NrW9H4UJvcLpw3cpsrcplsTUtR8tSQfAh5D2VVY= Subject key identifier: 86:8B:B4:F6:5F:60:D3:50:BC:59:C1:81:2B:C7:BB:59:BC:FD:A3:D1 Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Certificate serial: 346C Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/945922AECEBA11EDBBFD9E28C4F9AE02.roa Signing time: Thu 04 Jan 2024 14:50:31 +0000 ROA not before: Thu 04 Jan 2024 14:50:31 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 138985 IP address blocks: 116.90.106.0/24 maxlen: 24 116.90.107.0/24 maxlen: 24 116.90.108.0/24 maxlen: 24 116.90.109.0/24 maxlen: 24 202.69.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13420 (0x346c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34 Validity Not Before: Jan 4 14:50:31 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6596c5b6-4fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:5e:f7:53:5a:6f:3b:2a:26:56:87:48:d4: 60:23:2b:f2:01:51:e3:62:56:1c:5b:70:18:2f:c7: 4a:f7:e3:f9:d9:c0:2a:79:9f:37:33:d3:d0:b5:55: 32:2e:2b:1b:c0:ab:c7:bb:59:27:24:d0:59:7e:6a: 46:68:d8:a9:42:f3:04:c7:7a:1f:33:bd:d4:40:c5: 2c:55:84:6a:f3:91:c6:b9:9a:e8:f6:ff:62:79:16: 50:2a:dd:1b:2a:68:ba:9b:e8:f5:f7:ac:49:35:bb: 9d:ee:d4:b4:11:66:59:be:12:e2:bf:39:de:e6:43: bb:0b:b6:b0:57:05:d7:7a:18:bd:7c:d0:d2:7b:23: 35:38:9a:15:99:67:92:68:7f:53:90:80:e8:f3:8a: 0c:ad:90:9d:f1:da:9f:18:26:fc:6e:b9:a8:4f:eb: b5:9c:02:0a:01:32:39:45:65:f2:6d:6d:79:fa:4c: 7e:c8:47:b1:89:7c:93:a2:0c:b0:45:10:07:e4:58: a9:17:48:ce:2b:ff:28:da:b3:b1:73:f5:30:f5:2b: 58:1e:d0:f0:e8:22:33:60:9a:8b:61:1e:79:98:72: bd:38:24:c5:f5:c2:c3:58:f3:4a:ed:67:0c:f0:68: f4:d7:f8:26:49:0b:87:60:70:aa:10:d3:2d:28:2c: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8B:B4:F6:5F:60:D3:50:BC:59:C1:81:2B:C7:BB:59:BC:FD:A3:D1 X509v3 Authority Key Identifier: keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/945922AECEBA11EDBBFD9E28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.90.106.0-116.90.109.255 202.69.42.0/24 Signature Algorithm: sha256WithRSAEncryption 82:93:4f:2e:f3:29:b5:95:c8:66:d2:bd:5b:c6:64:cf:28:17: 5f:d7:f0:f7:ba:58:e3:b6:68:e8:1a:3a:52:98:61:23:91:29: c9:7f:61:fc:c5:7d:6d:44:c3:94:bb:43:aa:a4:44:02:01:04: 1a:6c:43:26:0d:59:b2:71:7e:7b:22:a7:ff:ae:7e:12:99:f0: f8:66:b4:a9:c2:3f:4b:48:c4:d1:a2:fc:a8:0c:d8:a6:8d:82: 4a:a5:49:60:27:a4:f9:5a:09:94:2d:11:94:98:fa:63:56:f3: fe:74:bb:a6:c4:6b:0e:1f:c4:c9:d0:89:58:a8:30:42:86:27: f3:d7:8d:3b:3a:a3:1a:9e:97:9d:b1:5e:0e:7c:12:f9:44:43: da:b4:7f:48:f4:30:5c:a4:47:3a:30:c0:40:11:5b:13:87:7a: fb:eb:37:22:14:2c:b4:12:8f:40:6d:76:35:f0:c7:f6:d7:c9: 9c:f7:2e:75:6e:58:96:1f:c0:f8:1a:c1:79:f3:cc:28:da:13: a6:9e:1f:ca:cb:21:41:27:de:d6:65:8d:2b:71:49:51:d0:bf: 2c:c7:51:fd:7a:00:89:4a:6e:39:2d:b6:8a:56:a8:1a:f7:66: 88:2a:dd:eb:83:6f:5b:76:93:e3:72:1c:c8:0b:01:e3:19:97: 45:a1:c8:bb -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICNGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx NkQxNTdCMzQwHhcNMjQwMTA0MTQ1MDMxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTk2YzViNi00ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZFe91NabzsqJlaHSNRgIyvyAVHjYlYcW3AYL8dK9+P52cAqeZ83M9PQtVUy LisbwKvHu1knJNBZfmpGaNipQvMEx3ofM73UQMUsVYRq85HGuZro9v9ieRZQKt0b Kmi6m+j196xJNbud7tS0EWZZvhLivzne5kO7C7awVwXXehi9fNDSeyM1OJoVmWeS aH9TkIDo84oMrZCd8dqfGCb8brmoT+u1nAIKATI5RWXybW15+kx+yEexiXyTogyw RRAH5FipF0jOK/8o2rOxc/Uw9StYHtDw6CIzYJqLYR55mHK9OCTF9cLDWPNK7WcM 8Gj01/gmSQuHYHCqENMtKCxIIQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFIaLtPZf YNNQvFnBgSvHu1m8/aPRMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvOTQ1OTIyQUVD RUJBMTFFREJCRkQ5RTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQwDAMEAXRaagMEAXRabAMEAMpFKjANBgkqhkiG9w0BAQsFAAOC AQEAgpNPLvMptZXIZtK9W8ZkzygXX9fw97pY47Zo6Bo6UphhI5EpyX9h/MV9bUTD lLtDqqREAgEEGmxDJg1ZsnF+eyKn/65+Epnw+Ga0qcI/S0jE0aL8qAzYpo2CSqVJ YCek+VoJlC0RlJj6Y1bz/nS7psRrDh/EydCJWKgwQoYn89eNOzqjGp6XnbFeDnwS +URD2rR/SPQwXKRHOjDAQBFbE4d6++s3IhQstBKPQG12NfDH9tfJnPcudW5Ylh/A +BrBefPMKNoTpp4fysshQSfe1mWNK3FJUdC/LMdR/XoAiUpuOS22ilaoGvdmiCrd 64NvW3aT43IcyAsB4xmXRaHIuw== -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org