$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa File: DF8602D05E5B11ED994E491CC4F9AE02.roa (raw, json) Hash identifier: 2dhQ3K8MGaMwu0r8I8fDfZgoRVZ5dC9imcAxyj18rMs= Subject key identifier: A5:47:62:20:D3:9A:44:89:6E:DD:D6:9C:5E:6D:92:44:D2:40:28:4A Certificate issuer: /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Certificate serial: 3420 Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa Signing time: Wed 18 Oct 2023 14:40:28 +0000 ROA not before: Wed 18 Oct 2023 14:40:28 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 38851 IP address blocks: 58.115.0.0/18 maxlen: 18 58.115.8.0/21 maxlen: 21 58.115.16.0/20 maxlen: 20 58.115.32.0/19 maxlen: 19 58.115.48.0/21 maxlen: 24 58.115.192.0/20 maxlen: 20 203.133.56.0/24 maxlen: 24 203.203.220.0/22 maxlen: 22 203.203.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13344 (0x3420) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752 Validity Not Before: Oct 18 14:40:28 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=652fee5b-d5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:c9:7e:ac:6d:7a:7d:fe:e7:c3:19:44:f5: c5:bc:17:fd:ae:ee:05:e9:96:ba:b4:56:6d:6d:72: 16:c3:a8:b8:64:09:97:24:bf:2d:41:8c:58:1f:25: 5f:98:24:cc:80:4f:f2:b0:c9:0c:6f:fc:ea:6c:fb: f6:c2:05:f2:fc:a1:0a:fe:56:d4:e0:8c:e1:28:2f: 17:d0:10:45:70:d9:64:0e:01:9c:16:4c:86:8a:0c: 6c:14:6e:a1:5b:f0:7f:6b:05:df:e6:66:f6:96:a3: fe:99:a8:77:29:b8:eb:50:6a:4e:5a:4d:27:c6:35: eb:8e:1a:ea:06:52:08:2c:cc:35:2e:fa:41:79:da: 34:ac:ff:67:aa:b7:8a:eb:c3:4d:df:8d:dd:89:fb: aa:08:bc:02:b3:b0:b5:4f:d5:1f:66:a3:50:d9:56: d0:1f:1e:f5:cb:63:32:d1:f0:9a:01:59:82:87:c0: 69:2a:d6:28:d2:d9:04:4c:c8:8e:0b:63:42:0e:7f: c3:04:6b:95:c3:9f:b5:5f:ae:c2:1b:7c:ce:05:2c: dc:d7:77:9d:f6:e9:81:fc:c3:57:69:d0:20:f2:f7: 09:25:b8:26:96:dd:21:d9:26:27:ab:f1:bb:16:9d: 27:59:a0:b3:97:16:c5:a1:45:cd:fa:52:b7:60:64: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:47:62:20:D3:9A:44:89:6E:DD:D6:9C:5E:6D:92:44:D2:40:28:4A X509v3 Authority Key Identifier: keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/DF8602D05E5B11ED994E491CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.115.0.0/18 58.115.192.0/20 203.133.56.0/24 203.203.220.0-203.203.255.255 Signature Algorithm: sha256WithRSAEncryption 04:ff:b6:47:5f:51:12:04:db:d5:ed:0f:bf:a9:8c:65:87:b6: e9:16:69:8b:20:38:22:b9:7d:36:19:67:02:f2:1f:4f:7b:84: 4f:8a:6b:78:25:33:1c:8c:bd:e9:cc:8e:7c:cf:dd:76:46:99: a5:02:f1:ce:ea:95:78:8d:e2:4a:0b:7c:16:a0:99:c5:2a:62: b1:25:af:fe:f8:55:73:75:12:99:16:bd:9c:1a:f7:3d:aa:65: 25:81:3a:41:14:79:82:a6:a7:e9:ff:52:49:01:23:11:eb:46: 0d:8c:8f:43:44:0c:45:3b:49:b6:ad:39:73:f4:7a:11:77:5d: bf:48:e6:24:91:5f:1e:be:a3:cd:1c:d1:7d:f3:ab:1a:a8:6e: aa:ce:94:4c:1e:f4:a1:dc:cb:9e:c3:94:70:37:7d:f3:7a:c9: 5e:ff:1f:a8:21:74:eb:2c:00:8e:c1:7a:a6:ec:26:99:79:4c: 31:4c:58:c5:cf:89:a9:90:bb:79:1e:df:aa:16:c5:69:50:48: 1e:57:f9:74:66:b0:2c:9b:0b:36:7c:04:25:b8:16:9b:16:5a: c2:62:2e:61:d8:c4:6f:fb:e2:4a:24:da:a0:03:d0:9b:70:33: 5a:c6:61:7e:2d:25:ca:b6:a5:82:10:f3:1d:cb:dd:b5:97:5a: 84:51:b8:44 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgICNCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNDcxMTAvBgNVBAUTKDUzOEIwNzZFMEFBREQ4RkFFMjk3MEM5NTQzRTg0OUE5 MEZFNzM3NTIwHhcNMjMxMDE4MTQ0MDI4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTJmZWU1Yi1kNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy17Jfqxten3+58MZRPXFvBf9ru4F6Za6tFZtbXIWw6i4ZAmXJL8tQYxYHyVf mCTMgE/ysMkMb/zqbPv2wgXy/KEK/lbU4IzhKC8X0BBFcNlkDgGcFkyGigxsFG6h W/B/awXf5mb2lqP+mah3KbjrUGpOWk0nxjXrjhrqBlIILMw1LvpBedo0rP9nqreK 68NN343difuqCLwCs7C1T9UfZqNQ2VbQHx71y2My0fCaAVmCh8BpKtYo0tkETMiO C2NCDn/DBGuVw5+1X67CG3zOBSzc13ed9umB/MNXadAg8vcJJbgmlt0h2SYnq/G7 Fp0nWaCzlxbFoUXN+lK3YGRj1wIDAQABo4ICrjCCAqowHQYDVR0OBBYEFKVHYiDT mkSJbt3WnF5tkkTSQChKMB8GA1UdIwQYMBaAFFOLB24Krdj64pcMlUPoSakP5zdS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY0Ny9CNEE4NkMzODFE ODQxMUUyOTY5RkM1REEwOEIwMkNEMi9VNHNIYmdxdDJQcmlsd3lWUS1oSnFRX25O MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0c0hiZ3F0MlByaWx3eVZRLWhKcVFfbk4xSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjZGNDcvQjRBODZDMzgxRDg0MTFFMjk2OUZDNURBMDhCMDJDRDIvREY4NjAyRDA1 RTVCMTFFRDk5NEU0OTFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOAYIKwYBBQUHAQcBAf8E KTAnMCUEAgABMB8DBAY6cwADBAQ6c8ADBADLhTgwCwMEAsvL3AMDAsvIMA0GCSqG SIb3DQEBCwUAA4IBAQAE/7ZHX1ESBNvV7Q+/qYxlh7bpFmmLIDgiuX02GWcC8h9P e4RPimt4JTMcjL3pzI58z912RpmlAvHO6pV4jeJKC3wWoJnFKmKxJa/++FVzdRKZ Fr2cGvc9qmUlgTpBFHmCpqfp/1JJASMR60YNjI9DRAxFO0m2rTlz9HoRd12/SOYk kV8evqPNHNF986saqG6qzpRMHvSh3Muew5RwN33zesle/x+oIXTrLACOwXqm7CaZ eUwxTFjFz4mpkLt5Ht+qFsVpUEgeV/l0ZrAsmws2fAQluBabFlrCYi5h2MRv++JK JNqgA9CbcDNaxmF+LSXKtqWCEPMdy921l1qEUbhE -----END CERTIFICATE-----Generated at Sat May 18 15:58:25 2024 by rpki-client on console-ams.rpki-client.org