$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/A264F35C8BAC11E7AFBAB71AC4F9AE02.roa File: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (raw, json) Hash identifier: +5YNfegr0aeFYU1zjDr+2ZPXVIvdnERfdvdcdTrCvKE= Subject key identifier: 16:70:A2:70:4F:D8:3F:A9:02:62:C0:6D:E6:B9:8B:04:80:0E:43:D4 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1C37 Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/A264F35C8BAC11E7AFBAB71AC4F9AE02.roa Signing time: Sat 30 Sep 2023 16:33:32 +0000 ROA not before: Sat 30 Sep 2023 16:33:32 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 41690 IP address blocks: 45.126.164.0/22 maxlen: 24 103.195.32.0/22 maxlen: 24 2401:af40::/32 maxlen: 32 2401:af40::/48 maxlen: 48 2401:af40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7223 (0x1c37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Validity Not Before: Sep 30 16:33:32 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65184ddc-da2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:c1:21:67:02:bd:54:d8:6d:27:e2:f1:3f: c5:94:3d:06:cb:eb:7c:00:f1:5c:43:ea:5d:10:ac: 4a:cc:97:0d:26:a8:0e:41:20:38:fa:bf:ce:b6:b1: d3:d2:5f:83:08:82:a1:bf:cc:28:0a:34:c2:a7:7c: 79:93:29:24:44:e9:45:ce:c2:27:49:64:e9:7e:09: 5c:55:4c:e6:97:35:34:11:7b:2d:14:5e:c6:ee:f6: 77:cc:56:2d:e6:11:a5:4e:44:f6:b9:81:e9:e1:22: 58:75:8f:eb:cd:b1:0e:c5:c3:d9:f9:ca:17:0f:1e: 96:1c:6b:9c:0e:2e:dc:ec:53:f5:46:11:11:32:3a: 33:66:50:f1:6e:72:64:18:e3:2e:85:da:fe:31:29: d4:c0:03:04:9d:ae:e2:3d:26:d8:32:cb:c5:a9:a8: b8:32:30:37:c3:9f:c5:f4:c4:91:b8:c1:23:14:15: b9:c6:5b:eb:6d:c3:03:3c:5c:9a:d9:b5:69:ed:e4: d3:16:cd:9c:72:62:f6:73:e8:af:79:11:14:80:91: 3e:55:01:ce:0d:42:82:09:03:9c:b6:29:ae:33:f3: a3:5e:ac:46:50:6c:44:a0:28:9f:fb:9d:2c:29:81: 53:e1:eb:06:f6:31:de:6c:a9:ab:0f:e1:0a:59:80: 13:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:70:A2:70:4F:D8:3F:A9:02:62:C0:6D:E6:B9:8B:04:80:0E:43:D4 X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/A264F35C8BAC11E7AFBAB71AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.164.0/22 103.195.32.0/22 IPv6: 2401:af40::/32 Signature Algorithm: sha256WithRSAEncryption 7f:5b:49:f5:44:cc:0d:c6:9b:d6:8d:26:ba:5f:90:67:9c:af: 38:73:06:96:19:65:84:04:3a:90:7e:a0:15:bd:6b:df:f1:89: 9f:27:4c:85:c7:46:08:8a:b4:47:f8:38:ed:28:82:ab:96:fb: 1b:ff:80:4f:dd:e4:0f:80:43:a9:55:23:24:1c:fb:83:51:41: 1d:b8:93:e1:a4:a1:e3:a6:6e:c2:e2:b9:5e:ce:a8:c8:11:a1: 5e:f1:df:3a:2d:c0:a8:38:89:a9:7b:dd:6f:e5:90:a6:e1:fb: 74:fb:b3:9a:8a:7a:fe:06:22:34:be:ee:9a:32:7a:7a:2a:f6: 8b:a6:72:67:b0:d8:e8:5a:af:c2:e9:1c:a0:08:5f:86:bb:51: 3d:cd:b6:5c:b0:af:b6:a9:0a:34:7b:72:97:0b:57:3a:f8:02: e9:ea:83:eb:3e:64:c3:d1:d8:39:27:32:f8:57:75:d7:cb:ae: 9d:e1:e2:91:64:1d:a2:29:58:82:62:50:1f:d0:d8:fb:16:4c: fe:5a:9f:8b:b8:0f:fc:fa:51:6d:38:74:f2:28:61:f1:c1:10: d9:de:54:2a:1a:03:3f:7b:1a:5f:cb:c5:53:87:32:10:85:ac: 9c:9e:37:9c:10:f5:0b:cd:55:a2:b1:68:02:5a:be:93:17:c9: e8:cf:84:8e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICHDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjMwOTMwMTYzMzMyWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4NGRkYy1kYTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuXBIWcCvVTYbSfi8T/FlD0Gy+t8APFcQ+pdEKxKzJcNJqgOQSA4+r/OtrHT 0l+DCIKhv8woCjTCp3x5kykkROlFzsInSWTpfglcVUzmlzU0EXstFF7G7vZ3zFYt 5hGlTkT2uYHp4SJYdY/rzbEOxcPZ+coXDx6WHGucDi7c7FP1RhERMjozZlDxbnJk GOMuhdr+MSnUwAMEna7iPSbYMsvFqai4MjA3w5/F9MSRuMEjFBW5xlvrbcMDPFya 2bVp7eTTFs2ccmL2c+iveREUgJE+VQHODUKCCQOctimuM/OjXqxGUGxEoCif+50s KYFT4esG9jHebKmrD+EKWYATiwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBZwonBP 2D+pAmLAbea5iwSADkPUMB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE2QjUvQ0E2QTU1RUNBQTVBMTFFNkJEQzZCNzdGQzRGOUFFMDIvQTI2NEYzNUM4 QkFDMTFFN0FGQkFCNzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItfqQDBAJnwyAwDQQCAAIwBwMFACQBr0AwDQYJKoZIhvcN AQELBQADggEBAH9bSfVEzA3Gm9aNJrpfkGecrzhzBpYZZYQEOpB+oBW9a9/xiZ8n TIXHRgiKtEf4OO0ogquW+xv/gE/d5A+AQ6lVIyQc+4NRQR24k+GkoeOmbsLiuV7O qMgRoV7x3zotwKg4ial73W/lkKbh+3T7s5qKev4GIjS+7poyenoq9oumcmew2Oha r8LpHKAIX4a7UT3Ntlywr7apCjR7cpcLVzr4Aunqg+s+ZMPR2DknMvhXddfLrp3h 4pFkHaIpWIJiUB/Q2PsWTP5an4u4D/z6UW04dPIoYfHBENneVCoaAz97Gl/LxVOH MhCFrJyeN5wQ9QvNVaKxaAJavpMXyejPhI4= -----END CERTIFICATE-----Generated at Thu May 16 17:51:51 2024 by rpki-client on console-ams.rpki-client.org