$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/56F161A6E4E911EEBC24E249C4F9AE02.roa File: 56F161A6E4E911EEBC24E249C4F9AE02.roa (raw, json) Hash identifier: E5p0L4s5yLaJ1iajf72Hbp/+FA1uGcyIYQEUg1n7rWc= Subject key identifier: 1B:D3:7B:CE:A3:38:87:0A:B1:01:BA:93:F4:9C:23:AE:0A:17:10:76 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 12B7 Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/56F161A6E4E911EEBC24E249C4F9AE02.roa Signing time: Mon 18 Mar 2024 05:37:10 +0000 ROA not before: Mon 18 Mar 2024 05:37:10 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 10204 IP address blocks: 103.229.32.0/22 maxlen: 24 203.115.192.0/18 maxlen: 18 203.115.192.0/19 maxlen: 24 203.115.224.0/19 maxlen: 23 203.115.224.0/20 maxlen: 24 203.115.240.0/23 maxlen: 24 203.115.242.0/24 maxlen: 24 203.115.244.0/22 maxlen: 24 203.115.248.0/21 maxlen: 24 2001:c18::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 17:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4791 (0x12b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Mar 18 05:37:10 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65f7d306-6bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:c5:16:1e:68:88:87:b3:1f:49:3c:c0:f4: 2a:55:27:35:b3:76:0e:75:84:18:37:33:f6:27:16: 4f:19:32:ea:cc:dc:a4:c6:90:e1:e6:1d:44:66:e9: 17:6d:90:54:d1:23:e6:14:25:5c:9d:cb:de:ad:61: e4:56:7c:d7:1d:86:21:e3:b7:41:11:8c:af:19:8e: 55:ba:5e:45:d3:38:4b:61:1c:99:50:61:83:4a:e2: 70:b0:19:fb:85:2b:50:71:19:4f:72:95:a9:3b:67: d8:ec:50:5b:3b:64:13:96:1d:27:60:7c:fb:05:ef: b4:c9:f2:23:dd:7e:c5:d8:fc:98:d6:3c:0d:c8:fa: 21:53:62:dc:28:03:81:cf:ea:03:df:bb:ed:20:05: 38:a6:27:6e:84:71:d6:6f:e2:15:82:35:8e:be:b2: 5b:4c:c4:b0:98:eb:ff:75:8b:ba:20:bf:1c:34:32: 41:b7:d4:45:9c:fa:65:f6:89:a2:6f:cb:62:bc:93: 74:e8:5d:ce:ac:ba:55:51:7b:b2:38:46:b1:97:c5: de:11:a7:5a:14:dc:1f:4c:4f:4f:98:e3:b8:2b:07: c3:5d:ea:9b:d6:38:08:10:40:6e:28:b0:c0:21:50: 9a:8a:98:4c:12:cc:a1:b7:ee:7d:25:b9:cc:8e:b2: 71:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D3:7B:CE:A3:38:87:0A:B1:01:BA:93:F4:9C:23:AE:0A:17:10:76 X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/56F161A6E4E911EEBC24E249C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.229.32.0/22 203.115.192.0/18 IPv6: 2001:c18::/32 Signature Algorithm: sha256WithRSAEncryption c1:0c:59:cf:1d:9f:4b:a1:54:41:2d:23:a3:41:44:e7:5a:4b: b1:30:9e:23:3f:8f:72:fe:61:3d:7b:43:fc:b9:b3:10:2b:01: 09:ad:f8:45:a7:c4:5f:7b:bb:f6:77:02:68:f8:9a:0d:74:3b: 35:2a:10:ee:e0:08:7d:c7:93:1c:89:88:ba:1c:bb:5d:b7:93: aa:78:28:f6:56:1f:bb:f8:0d:9b:8b:9c:72:dc:1d:b8:01:25: 5c:c3:5d:61:0b:13:30:2b:f5:0b:ff:b7:bd:81:75:0b:84:23: bd:54:42:42:ea:84:9e:08:22:b1:33:7c:05:70:fd:df:e6:96: 42:fe:28:d3:83:02:16:2c:ec:e3:79:a8:66:1e:52:c6:b7:85: 34:04:86:18:f7:14:45:c9:14:9a:f3:37:50:9a:c2:63:3b:fa: 69:fe:66:36:e4:ba:17:1b:8d:bd:88:be:c1:9f:34:66:06:68: cc:ee:a6:85:f3:6d:83:32:7a:b1:30:35:66:97:8a:21:70:78: 7d:6e:94:c1:86:dc:38:31:8c:59:4d:d4:6a:37:f7:1a:8e:12: 90:eb:22:46:d7:15:4a:cf:de:51:69:84:ad:77:6a:10:61:7f: 1e:8b:77:16:19:17:0a:9e:b4:14:7d:7d:bd:d9:5f:26:e0:bb: 32:59:6f:01 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICErcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjQwMzE4MDUzNzEwWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWY3ZDMwNi02YmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ3FFh5oiIezH0k8wPQqVSc1s3YOdYQYNzP2JxZPGTLqzNykxpDh5h1EZukX bZBU0SPmFCVcncverWHkVnzXHYYh47dBEYyvGY5Vul5F0zhLYRyZUGGDSuJwsBn7 hStQcRlPcpWpO2fY7FBbO2QTlh0nYHz7Be+0yfIj3X7F2PyY1jwNyPohU2LcKAOB z+oD37vtIAU4piduhHHWb+IVgjWOvrJbTMSwmOv/dYu6IL8cNDJBt9RFnPpl9omi b8tivJN06F3OrLpVUXuyOEaxl8XeEadaFNwfTE9PmOO4KwfDXeqb1jgIEEBuKLDA IVCaiphMEsyht+59JbnMjrJxJQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBvTe86j OIcKsQG6k/ScI64KFxB2MB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFEQjgvMTZDQkMwNTRBMTFFMTFFODlFNjM2NzEwQzRGOUFFMDIvNTZGMTYxQTZF NEU5MTFFRUJDMjRFMjQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn5SADBAbLc8AwDQQCAAIwBwMFACABDBgwDQYJKoZIhvcN AQELBQADggEBAMEMWc8dn0uhVEEtI6NBROdaS7EwniM/j3L+YT17Q/y5sxArAQmt +EWnxF97u/Z3Amj4mg10OzUqEO7gCH3HkxyJiLocu123k6p4KPZWH7v4DZuLnHLc HbgBJVzDXWELEzAr9Qv/t72BdQuEI71UQkLqhJ4IIrEzfAVw/d/mlkL+KNODAhYs 7ON5qGYeUsa3hTQEhhj3FEXJFJrzN1CawmM7+mn+Zjbkuhcbjb2IvsGfNGYGaMzu poXzbYMyerEwNWaXiiFweH1ulMGG3DgxjFlN1Go39xqOEpDrIkbXFUrP3lFphK13 ahBhfx6LdxYZFwqetBR9fb3ZXybguzJZbwE= -----END CERTIFICATE-----Generated at Mon May 20 19:59:48 2024 by rpki-client on console-ams.rpki-client.org