$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa File: 710575A2635611ED90FD8A69C4F9AE02.roa (raw, json) Hash identifier: C8MKsyPVWAimK6phH4+d0OSiM41QQRf2a7Iq+R3FboQ= Subject key identifier: 05:B0:21:19:6D:1A:9F:D1:40:3D:3D:21:49:21:CB:CC:82:E1:A8:40 Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Certificate serial: 07A6 Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa Signing time: Sat 04 May 2024 17:25:14 +0000 ROA not before: Sat 04 May 2024 17:25:14 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 134116 IP address blocks: 45.114.88.0/22 maxlen: 22 45.114.88.0/23 maxlen: 23 45.114.88.0/24 maxlen: 24 45.114.89.0/24 maxlen: 24 45.114.90.0/23 maxlen: 23 45.114.90.0/24 maxlen: 24 45.114.91.0/24 maxlen: 24 103.54.40.0/22 maxlen: 22 103.54.40.0/23 maxlen: 23 103.54.40.0/24 maxlen: 24 103.54.41.0/24 maxlen: 24 103.54.42.0/23 maxlen: 23 103.54.42.0/24 maxlen: 24 103.54.43.0/24 maxlen: 24 2402:3280::/32 maxlen: 32 2402:3280::/34 maxlen: 40 2402:3280::/128 maxlen: 128 2402:3280:4000::/34 maxlen: 40 2402:3280:8000::/34 maxlen: 40 2402:3280:c000::/34 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Validity Not Before: May 4 17:25:14 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66366f7a-decb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:00:4d:2b:16:2b:94:fb:1e:3b:20:a6:be:a1: 33:28:68:7b:b2:87:b9:59:ad:cf:f1:17:76:17:cb: 6c:ac:16:10:9b:88:84:88:ab:f1:d8:d5:68:09:43: 18:ba:ea:18:43:63:c2:e4:f6:ca:f8:9b:be:c9:e3: e6:15:4a:9a:fa:3f:46:7f:b3:70:b3:8f:a5:7e:26: d6:fa:bb:92:ae:44:3e:ce:b1:3e:42:3d:35:34:7f: 9f:2d:a0:8a:cc:d5:b6:b7:4c:8c:a7:74:9e:30:44: 84:32:ce:a3:9a:2f:0d:0d:60:40:02:20:c0:04:1f: f9:d1:16:84:8e:1a:51:ed:eb:24:b4:96:a2:f7:43: 62:32:cf:39:bf:4f:c2:03:b5:2f:1d:ab:42:1d:6e: c2:eb:69:f1:5b:70:57:dd:69:b0:2c:0b:73:48:b4: a2:41:03:37:37:97:87:2d:33:a3:67:3e:53:30:7e: b1:39:3d:db:90:97:6d:cf:76:c0:16:01:19:36:5c: 66:37:f3:82:a0:5d:3f:76:ca:e0:9e:a2:df:d1:21: 57:c2:49:44:b4:d3:89:5e:cb:1c:32:b4:67:89:1d: 0c:58:1b:36:a5:14:2f:35:fa:c8:37:e9:1e:a1:11: 51:08:6d:8d:88:13:80:74:74:32:b0:63:f9:46:c1: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B0:21:19:6D:1A:9F:D1:40:3D:3D:21:49:21:CB:CC:82:E1:A8:40 X509v3 Authority Key Identifier: keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.88.0/22 103.54.40.0/22 IPv6: 2402:3280::/32 Signature Algorithm: sha256WithRSAEncryption 4b:f7:2f:d5:fb:12:f1:9d:e6:90:1a:d9:12:52:53:83:ac:7d: 38:9a:aa:fa:a7:0a:14:90:8e:ae:8c:9d:69:9a:f0:f6:3e:3d: 99:bc:f3:15:c2:3b:fd:e4:df:ff:31:c4:20:ac:9c:36:d7:fd: c1:0f:ed:4e:54:62:c2:f8:23:b3:47:89:fc:6a:30:4d:38:86: 42:00:98:bf:6f:fa:0a:fc:cf:e6:b5:f2:f8:c6:0b:37:3b:14: 91:b4:c3:8f:63:db:89:fd:28:7c:4c:43:49:9e:6a:7a:e1:1f: e3:61:91:89:02:96:9f:c3:5c:6b:ec:ce:86:26:9b:64:6d:05: 48:79:d4:30:9e:f6:06:83:83:ab:5f:d0:11:bf:ed:4b:49:48: 3e:ef:21:fe:93:fb:e5:4a:11:72:52:3b:08:08:59:d0:4c:59: ec:7e:96:31:7b:f2:7e:17:8e:25:be:0b:b9:6d:f7:b7:78:34: 2b:9b:33:2b:aa:8a:0c:25:1e:9f:1c:41:00:39:3c:66:2c:f3: f0:41:e5:44:fa:a9:9d:50:a7:be:2f:bd:72:68:ea:04:dd:cf: a0:38:0a:f1:d9:66:2b:43:ae:eb:2b:54:b6:7f:c2:d1:bb:a8: d1:aa:35:4c:46:ae:d5:e1:03:0e:c0:ea:ce:9c:90:d8:3e:c8: 4d:af:76:b9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDhBQzc5RUIyRUI3RjZCNTdBRERFMUNCQTQwM0M2RTU4 MjM2RDM0NDUwHhcNMjQwNTA0MTcyNTE0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjM2NmY3YS1kZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugBNKxYrlPseOyCmvqEzKGh7soe5Wa3P8Rd2F8tsrBYQm4iEiKvx2NVoCUMY uuoYQ2PC5PbK+Ju+yePmFUqa+j9Gf7Nws4+lfibW+ruSrkQ+zrE+Qj01NH+fLaCK zNW2t0yMp3SeMESEMs6jmi8NDWBAAiDABB/50RaEjhpR7esktJai90NiMs85v0/C A7UvHatCHW7C62nxW3BX3WmwLAtzSLSiQQM3N5eHLTOjZz5TMH6xOT3bkJdtz3bA FgEZNlxmN/OCoF0/dsrgnqLf0SFXwklEtNOJXsscMrRniR0MWBs2pRQvNfrIN+ke oRFRCG2NiBOAdHQysGP5RsHwEwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAWwIRlt Gp/RQD09IUkhy8yC4ahAMB8GA1UdIwQYMBaAFIrHnrLrf2tXrd4cukA8blgjbTRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2ExZXQzaHk2UUR4dVdDTnRO RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lzZWVzdXRfYTFldDNoeTZRRHh1V0NOdE5FVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYwMjYvMDMyOEE4NUNEREUwMTFFN0IyODEwNzU3QzRGOUFFMDIvNzEwNTc1QTI2 MzU2MTFFRDkwRkQ4QTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItclgDBAJnNigwDQQCAAIwBwMFACQCMoAwDQYJKoZIhvcN AQELBQADggEBAEv3L9X7EvGd5pAa2RJSU4OsfTiaqvqnChSQjq6MnWma8PY+PZm8 8xXCO/3k3/8xxCCsnDbX/cEP7U5UYsL4I7NHifxqME04hkIAmL9v+gr8z+a18vjG Czc7FJG0w49j24n9KHxMQ0meanrhH+NhkYkClp/DXGvszoYmm2RtBUh51DCe9gaD g6tf0BG/7UtJSD7vIf6T++VKEXJSOwgIWdBMWex+ljF78n4XjiW+C7lt97d4NCub MyuqigwlHp8cQQA5PGYs8/BB5UT6qZ1Qp74vvXJo6gTdz6A4CvHZZitDrusrVLZ/ wtG7qNGqNUxGrtXhAw7A6s6ckNg+yE2vdrk= -----END CERTIFICATE-----Generated at Fri May 10 19:18:45 2024 by rpki-client on console-ams.rpki-client.org