$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa File: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (raw, json) Hash identifier: knanjKHlyrjF7vjsmUcV7GPw77UwfPcv9tpn5QgFxWQ= Subject key identifier: 91:3F:1D:78:4A:64:A8:C4:15:28:E2:C1:EB:51:DE:54:CC:61:91:F7 Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Certificate serial: 0409 Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa Signing time: Sat 09 Dec 2023 01:53:48 +0000 ROA not before: Sat 09 Dec 2023 01:53:48 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 134927 IP address blocks: 36.255.200.0/22 maxlen: 22 36.255.200.0/24 maxlen: 24 36.255.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 02:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3 Validity Not Before: Dec 9 01:53:48 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=6573c8ac-164b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:55:30:b5:e2:b7:0b:a6:b6:3b:5b:58:d8: d3:e7:9d:48:b5:36:8d:ca:ee:d6:59:6d:18:3c:24: e0:86:ac:36:23:2e:89:20:6b:f9:a5:c1:27:23:10: c6:9e:9b:a4:3b:42:03:d0:87:25:b0:ca:6c:34:04: c4:bc:1f:ed:bb:1b:b2:2c:55:0e:af:18:b2:5f:7f: ee:77:ee:64:39:a5:d9:a6:66:0d:10:dd:21:a4:38: 7a:fa:a1:b2:40:66:43:15:44:39:0e:ae:90:f2:b0: 82:74:b2:56:d5:3a:94:e0:f1:46:fb:c1:54:6b:a4: 02:7e:12:7e:9d:92:30:39:c0:82:ef:65:ae:ad:98: 94:b5:5a:55:92:84:3f:8b:a1:7a:aa:f3:32:73:05: cb:4d:8f:f4:11:b8:83:94:7c:77:1d:ca:4c:5d:c5: e9:8d:88:c0:37:82:55:2e:69:44:a7:43:f9:ae:b1: 99:89:f9:3c:2a:f6:08:85:7b:e9:f5:86:aa:cc:65: 92:74:de:7c:c5:93:af:ab:27:37:7f:40:5e:79:7a: 59:2f:23:60:89:76:19:db:99:90:df:cc:9d:93:33: b2:f4:4b:42:8f:f7:af:c8:89:83:29:6a:9c:59:1c: b2:fe:11:25:36:6d:2a:b7:91:c8:87:30:fd:2e:e5: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3F:1D:78:4A:64:A8:C4:15:28:E2:C1:EB:51:DE:54:CC:61:91:F7 X509v3 Authority Key Identifier: keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/0BD4BBC2716911EDA03D4A50C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.255.200.0/22 Signature Algorithm: sha256WithRSAEncryption 33:c2:b6:d7:81:84:6c:95:ab:d3:1e:7b:ea:52:0e:4d:9e:55: 16:10:6b:cc:75:b6:12:22:6f:e0:93:89:0d:ec:47:1b:42:ed: 89:99:a3:ed:8a:99:c7:b9:f3:cb:8b:c2:b8:32:01:e2:dd:b9: 87:80:a6:0a:1b:1d:f6:9a:3d:ea:a5:d7:ba:57:57:0e:6d:e7: c0:ce:01:9b:bf:0b:f7:2f:76:09:ca:38:fe:4c:4f:2f:8f:04: 85:48:ae:00:ef:1d:3b:85:8e:79:be:bf:a7:ca:a2:7d:ea:b3: b5:4f:bd:37:5a:e0:22:6a:f7:2d:e3:e2:4c:32:ac:32:5e:2d: bf:1a:47:34:01:ff:77:e1:90:de:ea:6b:72:56:2a:d9:51:93: 70:40:8f:04:0d:02:39:87:e5:4c:4a:f6:d6:94:0d:7d:83:44: ac:5b:f8:19:ac:ad:7e:35:48:f7:50:8c:ac:39:52:4b:21:9e: dc:53:66:b4:b4:74:81:27:8a:b7:5c:80:5d:a9:a5:a4:2c:b6: f6:b9:07:11:8c:1c:ec:2d:b6:d3:96:97:7c:21:87:24:07:c7: f0:76:d0:62:97:c4:f5:1f:bb:ce:ee:e0:bf:ea:2b:d1:a0:91: b7:0f:08:a1:dc:23:b8:64:79:9a:22:6a:65:8b:b7:f9:1e:c7: 92:2e:d2:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3 RDc0MTQ3RjMwHhcNMjMxMjA5MDE1MzQ4WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTczYzhhYy0xNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSdVMLXitwumtjtbWNjT551ItTaNyu7WWW0YPCTghqw2Iy6JIGv5pcEnIxDG npukO0ID0IclsMpsNATEvB/tuxuyLFUOrxiyX3/ud+5kOaXZpmYNEN0hpDh6+qGy QGZDFUQ5Dq6Q8rCCdLJW1TqU4PFG+8FUa6QCfhJ+nZIwOcCC72WurZiUtVpVkoQ/ i6F6qvMycwXLTY/0EbiDlHx3HcpMXcXpjYjAN4JVLmlEp0P5rrGZifk8KvYIhXvp 9YaqzGWSdN58xZOvqyc3f0BeeXpZLyNgiXYZ25mQ38ydkzOy9EtCj/evyImDKWqc WRyy/hElNm0qt5HIhzD9LuVO5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJE/HXhK ZKjEFSjiwetR3lTMYZH3MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMEJENEJCQzI3 MTY5MTFFREEwM0Q0QTUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAIk/8gwDQYJKoZIhvcNAQELBQADggEBADPCtteBhGyVq9Me e+pSDk2eVRYQa8x1thIib+CTiQ3sRxtC7YmZo+2Kmce588uLwrgyAeLduYeApgob HfaaPeql17pXVw5t58DOAZu/C/cvdgnKOP5MTy+PBIVIrgDvHTuFjnm+v6fKon3q s7VPvTda4CJq9y3j4kwyrDJeLb8aRzQB/3fhkN7qa3JWKtlRk3BAjwQNAjmH5UxK 9taUDX2DRKxb+BmsrX41SPdQjKw5UkshntxTZrS0dIEnirdcgF2ppaQstva5BxGM HOwtttOWl3whhyQHx/B20GKXxPUfu87u4L/qK9GgkbcPCKHcI7hkeZoiamWLt/ke x5Iu0tc= -----END CERTIFICATE-----Generated at Fri May 17 03:52:22 2024 by rpki-client on console-ams.rpki-client.org