$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/4216609C2F2D11EDBADDCA86C4F9AE02.roa File: 4216609C2F2D11EDBADDCA86C4F9AE02.roa (raw, json) Hash identifier: EaQk/mYfVhBhENE6Nbjb64ms28Qv3Z+wbmLkEEnHdJ8= Subject key identifier: AD:07:F0:F7:CE:DF:FC:3F:ED:52:40:2C:2C:D8:D0:23:5F:46:F1:53 Certificate issuer: /CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Certificate serial: 0874 Authority key identifier: 08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/4216609C2F2D11EDBADDCA86C4F9AE02.roa Signing time: Sun 05 Mar 2023 00:48:21 +0000 ROA not before: Sun 05 Mar 2023 00:48:21 +0000 ROA not after: Sun 30 Jul 2023 00:00:00 +0000 asID: 58895 IP address blocks: 103.92.20.0/22 maxlen: 22 103.92.20.0/24 maxlen: 24 103.92.21.0/24 maxlen: 24 103.92.22.0/24 maxlen: 24 103.92.23.0/24 maxlen: 24 103.203.44.0/22 maxlen: 22 103.203.44.0/24 maxlen: 24 103.203.45.0/24 maxlen: 24 103.203.46.0/24 maxlen: 24 103.203.47.0/24 maxlen: 24 116.213.32.0/24 maxlen: 24 116.213.33.0/24 maxlen: 24 116.213.34.0/24 maxlen: 24 116.213.35.0/24 maxlen: 24 123.253.92.0/22 maxlen: 22 123.253.92.0/24 maxlen: 24 123.253.93.0/24 maxlen: 24 123.253.94.0/24 maxlen: 24 123.253.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 May 2023 22:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1FCC/serialNumber=08D256D426CA2171FCE817C64523F832A36917BD Validity Not Before: Mar 5 00:48:21 2023 GMT Not After : Jul 30 00:00:00 2023 GMT Subject: CN=6403e6d4-23fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9f:56:5d:96:5c:b4:37:41:ea:9f:2d:49:37: bf:ef:f7:16:1a:d6:3d:d0:b3:42:fa:c8:ba:f4:ca: 24:b4:43:64:eb:1b:66:e5:e3:02:14:3f:39:3d:fc: 86:41:ae:5e:7f:84:e8:7c:ad:13:bc:e5:53:c5:f7: e2:9f:92:f4:7b:db:39:24:3a:96:c8:c1:46:88:24: 6e:cb:90:e7:11:84:c8:26:67:f6:71:8b:b4:4a:c4: 98:9a:07:a3:80:64:57:5a:b0:02:65:2b:9d:eb:d8: 42:53:fa:c6:1f:ea:5d:3d:0f:28:f5:34:10:d8:05: 73:d1:fb:68:d4:51:bd:5f:e7:08:fc:f6:fb:f4:db: 35:5b:fa:60:ac:ae:3a:e2:ae:11:d5:8d:cf:3b:a1: ec:db:96:e4:c3:c9:fa:f7:50:cf:88:04:55:89:3b: a6:1e:a8:23:45:10:5c:23:f5:f3:09:6f:01:4f:2d: 30:27:40:42:db:5c:85:92:23:c3:4d:89:41:03:f9: 79:f6:5c:dd:8b:7b:eb:c5:c3:07:96:f4:f8:84:e8: 43:16:ac:cb:23:c4:d4:2f:e1:76:8a:e6:1a:d5:41: 12:9e:43:4f:c9:5a:88:ec:fe:05:1e:73:bb:c7:3c: b4:46:b9:68:57:e3:c5:c4:6e:52:0f:7b:ea:53:c8: e8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:07:F0:F7:CE:DF:FC:3F:ED:52:40:2C:2C:D8:D0:23:5F:46:F1:53 X509v3 Authority Key Identifier: keyid:08:D2:56:D4:26:CA:21:71:FC:E8:17:C6:45:23:F8:32:A3:69:17:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/CNJW1CbKIXH86BfGRSP4MqNpF70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNJW1CbKIXH86BfGRSP4MqNpF70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FCC/CDBC5986730911EAA8820030C4F9AE02/4216609C2F2D11EDBADDCA86C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.20.0/22 103.203.44.0/22 116.213.32.0/22 123.253.92.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:de:3e:b7:53:79:bb:b7:ba:6e:66:e7:99:cc:55:fa:77:9f: 2e:2d:d3:8f:1e:3d:95:ea:e2:b0:93:de:10:7e:e4:a2:fc:5b: c5:d2:c9:31:87:61:83:2e:c8:97:07:cd:e4:52:fa:93:40:e8: ea:66:a7:e7:50:bc:fd:e5:99:4c:3d:ea:f7:e9:7f:2c:36:c4: 4d:2c:88:bb:fa:aa:f8:0a:6e:fb:31:a4:b2:fa:f4:ce:bc:51: 77:92:48:f9:c8:5a:18:12:5b:75:c1:5f:69:7f:e7:a4:48:0a: e3:33:ac:09:62:f3:9a:db:cd:d0:f3:0d:1b:bc:8c:65:6b:0f: 25:86:c7:e1:0e:54:2b:8a:d3:15:9e:c9:c5:23:2d:4e:a2:ba: c0:9b:5e:0d:b1:00:66:c3:d1:f3:24:37:03:a2:1f:1e:4f:65: 54:4b:2c:10:bb:ed:f5:fa:84:a8:7d:33:c9:f1:ae:3b:0a:c8: 52:11:e3:dc:bc:bb:13:b4:50:aa:51:31:e3:e5:37:a6:67:4c: 02:3c:df:48:47:f6:ab:58:55:58:7e:6e:01:85:bf:15:1c:35: 0f:fd:4a:8a:4f:62:b5:e0:7f:75:6b:de:44:8a:36:bb:18:51: 78:78:7e:ac:64:54:28:53:8d:5c:d1:33:f1:a0:fc:a7:2c:ca: 38:66:4f:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFGQ0MxMTAvBgNVBAUTKDA4RDI1NkQ0MjZDQTIxNzFGQ0U4MTdDNjQ1MjNGODMy QTM2OTE3QkQwHhcNMjMwMzA1MDA0ODIxWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDAzZTZkNC0yM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3J9WXZZctDdB6p8tSTe/7/cWGtY90LNC+si69MoktENk6xtm5eMCFD85PfyG Qa5ef4TofK0TvOVTxffin5L0e9s5JDqWyMFGiCRuy5DnEYTIJmf2cYu0SsSYmgej gGRXWrACZSud69hCU/rGH+pdPQ8o9TQQ2AVz0fto1FG9X+cI/Pb79Ns1W/pgrK46 4q4R1Y3PO6Hs25bkw8n691DPiARViTumHqgjRRBcI/XzCW8BTy0wJ0BC21yFkiPD TYlBA/l59lzdi3vrxcMHlvT4hOhDFqzLI8TUL+F2iuYa1UESnkNPyVqI7P4FHnO7 xzy0RrloV+PFxG5SD3vqU8joPwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFK0H8PfO 3/w/7VJALCzY0CNfRvFTMB8GA1UdIwQYMBaAFAjSVtQmyiFx/OgXxkUj+DKjaRe9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUZDQy9DREJDNTk4Njcz MDkxMUVBQTg4MjAwMzBDNEY5QUUwMi9DTkpXMUNiS0lYSDg2QmZHUlNQNE1xTnBG NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOSlcxQ2JLSVhIODZCZkdSU1A0TXFOcEY3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFGQ0MvQ0RCQzU5ODY3MzA5MTFFQUE4ODIwMDMwQzRGOUFFMDIvNDIxNjYwOUMy RjJEMTFFREJBRERDQTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAJnXBQDBAJnyywDBAJ01SADBAJ7/VwwDQYJKoZIhvcNAQEL BQADggEBAGzePrdTebu3um5m55nMVfp3ny4t048ePZXq4rCT3hB+5KL8W8XSyTGH YYMuyJcHzeRS+pNA6Opmp+dQvP3lmUw96vfpfyw2xE0siLv6qvgKbvsxpLL69M68 UXeSSPnIWhgSW3XBX2l/56RICuMzrAli85rbzdDzDRu8jGVrDyWGx+EOVCuK0xWe ycUjLU6iusCbXg2xAGbD0fMkNwOiHx5PZVRLLBC77fX6hKh9M8nxrjsKyFIR49y8 uxO0UKpRMePlN6ZnTAI830hH9qtYVVh+bgGFvxUcNQ/9SopPYrXgf3Vr3kSKNrsY UXh4fqxkVChTjVzRM/Gg/KcsyjhmT1s= -----END CERTIFICATE-----Generated at Wed May 3 13:19:26 2023 by rpki-client on console-ams.rpki-client.org