$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa File: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (raw, json) Hash identifier: qrOVzHUnQpUjj2NXO2uI9c1Lmn26rV+B/0QYiSJpTNM= Subject key identifier: B3:9A:2B:F2:81:55:B0:83:43:D8:3B:DA:2D:E4:4F:74:B8:CF:49:4E Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Certificate serial: 0802 Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa Signing time: Thu 18 Apr 2024 22:00:48 +0000 ROA not before: Thu 18 Apr 2024 22:00:48 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 45918 IP address blocks: 116.193.10.0/23 maxlen: 23 116.193.12.0/23 maxlen: 23 116.193.14.0/23 maxlen: 23 116.193.14.0/24 maxlen: 24 116.193.15.0/24 maxlen: 24 2401:9100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 May 2024 21:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Validity Not Before: Apr 18 22:00:48 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6621980f-10f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:91:5d:53:60:c3:71:73:f6:68:9f:82:33: c1:1c:8e:6b:e9:ec:36:b3:01:a1:ec:8c:84:ef:55: e7:b7:d7:71:6c:00:b7:f0:4f:e2:af:74:49:65:67: 89:03:f0:21:ae:d3:58:77:94:6a:0b:dc:e3:f3:fb: 33:bb:f0:6f:8a:e5:78:e0:6e:03:92:b7:56:2a:76: ec:e9:f4:4f:85:bf:42:e3:ce:a6:d3:fa:9e:04:18: 08:6a:bf:91:bd:a6:82:d3:e8:1c:bb:45:fc:af:07: 1b:17:5e:d9:c0:f0:c0:ba:9b:ea:98:52:cb:d1:8f: 6a:89:17:ee:b9:eb:24:1c:65:45:14:fa:0d:78:44: 04:8c:28:b1:ff:b9:07:69:0b:e4:20:a9:9b:0a:c2: 97:03:e8:01:da:93:07:8a:e4:c3:82:94:ca:49:0e: c5:93:f5:4c:07:88:ae:0b:7e:ed:42:07:42:58:7c: 72:ea:09:8e:ae:4d:78:a3:4c:58:b3:95:23:03:3a: d4:76:d7:f2:e2:e0:da:ef:18:7c:9d:35:36:47:26: 27:c7:8e:ce:ac:fc:46:c9:40:9a:56:38:16:d7:b6: fc:1d:85:35:53:ed:5d:65:12:84:84:a2:c9:39:3a: b2:57:63:81:09:36:e7:17:51:5b:9a:30:99:e6:8a: a9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9A:2B:F2:81:55:B0:83:43:D8:3B:DA:2D:E4:4F:74:B8:CF:49:4E X509v3 Authority Key Identifier: keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.10.0-116.193.15.255 IPv6: 2401:9100::/32 Signature Algorithm: sha256WithRSAEncryption 25:23:9b:5c:a7:0e:af:5b:fe:30:46:3b:ec:2a:4c:7c:6b:ef: df:97:77:0b:dc:1f:c3:07:e1:1a:41:0d:af:6c:fa:be:4d:cd: d2:6b:14:68:a2:12:4b:f3:e0:ed:01:3c:f5:04:9f:e3:46:57: 56:0d:94:cc:92:15:e5:05:dd:1e:cb:69:20:2a:1b:6f:bd:25: c0:c5:52:ef:e4:6c:70:43:4d:95:5d:7c:6d:59:02:1d:45:e2: 74:d0:a6:12:8d:52:80:23:8d:df:e2:3d:ed:d6:2d:1c:ed:f9: d5:83:43:b8:c5:27:70:ed:17:8c:12:14:c1:f3:25:20:fc:11: 6e:3c:9a:9a:cc:dd:21:11:ec:18:45:15:f6:f1:7a:5a:3b:aa: 0c:67:75:06:50:5e:fc:6e:06:90:f3:a9:cc:60:ed:a5:14:75: 55:79:cb:1c:8f:cf:5e:6a:b5:93:09:fc:7f:a0:6e:d6:e9:ab: e4:d2:69:a7:b7:fa:be:ca:6f:6c:63:59:db:eb:df:14:a0:47: 06:8d:20:94:69:b4:3e:e3:88:c3:53:4c:49:5e:e2:84:ab:08: 55:a4:31:e0:a8:fc:eb:f9:e7:2a:e6:aa:47:7d:97:5b:82:81: e8:92:e1:a1:87:1a:2c:5e:cc:6b:a9:e6:38:64:68:2a:9c:72: 2a:f8:a1:8d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1MzAxMTAvBgNVBAUTKERGOEE0RTYxMTdCQ0EzNjg5NDBENjhFOTg1NDc5OEI5 NjY2MDlERDQwHhcNMjQwNDE4MjIwMDQ4WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjIxOTgwZi0xMGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAseGRXVNgw3Fz9mifgjPBHI5r6ew2swGh7IyE71Xnt9dxbAC38E/ir3RJZWeJ A/AhrtNYd5RqC9zj8/szu/BviuV44G4DkrdWKnbs6fRPhb9C486m0/qeBBgIar+R vaaC0+gcu0X8rwcbF17ZwPDAupvqmFLL0Y9qiRfuueskHGVFFPoNeEQEjCix/7kH aQvkIKmbCsKXA+gB2pMHiuTDgpTKSQ7Fk/VMB4iuC37tQgdCWHxy6gmOrk14o0xY s5UjAzrUdtfy4uDa7xh8nTU2RyYnx47OrPxGyUCaVjgW17b8HYU1U+1dZRKEhKLJ OTqyV2OBCTbnF1FbmjCZ5oqprwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFLOaK/KB VbCDQ9g72i3kT3S4z0lOMB8GA1UdIwQYMBaAFN+KTmEXvKNolA1o6YVHmLlmYJ3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODUzMC8xOEY2NkQ4NkIx RTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8yaVVEV2pwaFVlWXVXWmdu ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0cE9ZUmU4bzJpVURXanBoVWVZdVdaZ25kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzg1MzAvMThGNjZEODZCMUU2MTFFQUFBOTEzMzVBQzRGOUFFMDIvOUJEMzBDNUVC MUU3MTFFQTg2RUZGRDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAXTBCgMEBHTBADANBAIAAjAHAwUAJAGRADANBgkqhkiG 9w0BAQsFAAOCAQEAJSObXKcOr1v+MEY77CpMfGvv35d3C9wfwwfhGkENr2z6vk3N 0msUaKISS/Pg7QE89QSf40ZXVg2UzJIV5QXdHstpICobb70lwMVS7+RscENNlV18 bVkCHUXidNCmEo1SgCON3+I97dYtHO351YNDuMUncO0XjBIUwfMlIPwRbjyamszd IRHsGEUV9vF6WjuqDGd1BlBe/G4GkPOpzGDtpRR1VXnLHI/PXmq1kwn8f6Bu1umr 5NJpp7f6vspvbGNZ2+vfFKBHBo0glGm0PuOIw1NMSV7ihKsIVaQx4Kj86/nnKuaq R32XW4KB6JLhoYcaLF7Ma6nmOGRoKpxyKvihjQ== -----END CERTIFICATE-----Generated at Tue May 14 23:01:11 2024 by rpki-client on console-fra.rpki-client.org