$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa File: 3DAD522E1D7611EB8673F476C4F9AE02.roa (raw, json) Hash identifier: IQQb6DziartSVBk4Hd3tXu8H3VCQ+FxAn5xOzQPEAVg= Subject key identifier: D7:9C:D4:9A:E4:DD:4C:24:54:01:C5:1D:52:B5:06:05:C1:93:85:E9 Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Certificate serial: 0682 Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa Signing time: Thu 02 Nov 2023 22:50:18 +0000 ROA not before: Thu 02 Nov 2023 22:50:18 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 17452 IP address blocks: 202.91.160.0/20 maxlen: 20 202.91.160.0/24 maxlen: 24 202.91.161.0/24 maxlen: 24 202.91.162.0/24 maxlen: 24 202.91.163.0/24 maxlen: 24 202.91.164.0/24 maxlen: 24 202.91.165.0/24 maxlen: 24 202.91.166.0/24 maxlen: 24 202.91.167.0/24 maxlen: 24 202.91.168.0/24 maxlen: 24 202.91.169.0/24 maxlen: 24 202.91.170.0/24 maxlen: 24 202.91.171.0/24 maxlen: 24 202.91.172.0/24 maxlen: 24 202.91.173.0/24 maxlen: 24 202.91.174.0/24 maxlen: 24 202.91.175.0/24 maxlen: 24 2401:2880::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 May 2024 22:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Validity Not Before: Nov 2 22:50:18 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654427aa-cafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:88:c8:71:d2:16:57:9d:e9:ec:e0:8a:88:1f: d6:98:16:cb:cf:1c:0f:be:49:c8:84:5e:76:fb:09: 5d:36:08:3b:ff:c8:fc:82:d2:95:23:98:5d:96:c1: 54:ef:c2:36:ff:42:cf:93:6b:fc:e5:43:82:bf:06: 30:12:27:fa:73:06:43:df:fd:58:1f:46:50:6f:c3: d5:68:29:63:45:01:94:b7:20:21:56:26:2c:92:d0: 4b:23:9c:f2:5a:0c:2b:6a:e0:3f:fd:4d:b4:fc:26: 35:04:54:96:c2:83:4c:7d:de:61:78:00:2c:23:f5: ab:67:07:d6:14:d0:34:ce:3e:9e:e6:66:d2:d0:52: c3:ff:71:62:24:92:5e:79:44:eb:73:1e:1f:c9:d3: cf:4d:47:76:74:61:77:6f:43:55:9f:46:f6:4d:60: 01:af:b5:96:d4:84:45:84:86:25:23:59:5d:9c:41: 44:28:e8:94:e7:ab:35:dc:cc:0e:4a:2d:98:d7:51: 0f:65:ee:7c:0e:40:d7:64:bb:9c:8a:21:87:ba:24: 6d:2a:72:df:aa:ab:07:04:08:39:53:01:47:00:8f: 1f:d1:de:ab:81:51:10:d5:83:e6:60:9b:6b:da:1c: 8c:83:cc:b1:92:dd:88:87:d2:d6:01:ac:9d:df:e3: 3c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9C:D4:9A:E4:DD:4C:24:54:01:C5:1D:52:B5:06:05:C1:93:85:E9 X509v3 Authority Key Identifier: keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.91.160.0/20 IPv6: 2401:2880::/32 Signature Algorithm: sha256WithRSAEncryption 0d:c6:f9:10:a8:6b:c5:7c:c4:0a:a1:ab:1a:83:23:23:6e:32: fd:0b:5b:df:3e:65:53:4f:cc:a6:48:fc:a8:31:83:0b:48:86: 8d:21:5c:11:09:b3:66:bd:8f:b3:8c:9c:39:1e:d9:81:c4:ca: 89:45:6c:b6:ad:84:20:e5:c5:38:f1:94:45:37:d3:8f:77:07: 47:a3:16:eb:7f:05:8b:ca:a3:b7:95:ad:4a:0b:6c:b7:3e:59: ef:0b:1d:3f:18:99:e6:07:5d:bc:88:46:b7:a0:76:af:92:96: b8:4d:2c:70:d3:57:d5:20:15:5a:62:2b:63:15:98:8b:a8:72: 42:26:f1:ee:f2:09:b5:d6:ae:81:49:1e:cd:f6:10:c9:f9:fb: 51:20:d5:85:35:0d:de:6a:73:e6:5e:ac:35:8d:6e:01:d5:92: 03:cb:8f:0b:d3:86:ce:83:dd:0a:ed:60:f7:0d:0d:34:5c:60: 08:8c:ba:8d:c9:80:8f:1a:02:fe:a5:fb:b3:30:79:f5:d1:85: 24:cc:b8:e7:d9:ac:01:1b:94:52:c3:44:c4:17:e8:c3:ce:4a: 52:a4:71:72:5d:87:d3:52:59:aa:2b:49:7e:36:31:fd:d8:59: 7b:0f:c6:41:8d:91:57:03:41:c9:b1:f4:4c:88:07:74:5b:b2: 11:f1:01:a7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz NTg4Rjc3QzMwHhcNMjMxMTAyMjI1MDE4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ0MjdhYS1jYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ojIcdIWV53p7OCKiB/WmBbLzxwPvknIhF52+wldNgg7/8j8gtKVI5hdlsFU 78I2/0LPk2v85UOCvwYwEif6cwZD3/1YH0ZQb8PVaCljRQGUtyAhViYsktBLI5zy WgwrauA//U20/CY1BFSWwoNMfd5heAAsI/WrZwfWFNA0zj6e5mbS0FLD/3FiJJJe eUTrcx4fydPPTUd2dGF3b0NVn0b2TWABr7WW1IRFhIYlI1ldnEFEKOiU56s13MwO Si2Y11EPZe58DkDXZLuciiGHuiRtKnLfqqsHBAg5UwFHAI8f0d6rgVEQ1YPmYJtr 2hyMg8yxkt2Ih9LWAayd3+M8fwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFNec1Jrk 3UwkVAHFHVK1BgXBk4XpMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0 NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA4NTMvNUI5NDM5MEUwNDQxMTFFQjkxQzQzRTQ1QzRGOUFFMDIvM0RBRDUyMkUx RDc2MTFFQjg2NzNGNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBATKW6AwDQQCAAIwBwMFACQBKIAwDQYJKoZIhvcNAQELBQAD ggEBAA3G+RCoa8V8xAqhqxqDIyNuMv0LW98+ZVNPzKZI/KgxgwtIho0hXBEJs2a9 j7OMnDke2YHEyolFbLathCDlxTjxlEU30493B0ejFut/BYvKo7eVrUoLbLc+We8L HT8YmeYHXbyIRregdq+SlrhNLHDTV9UgFVpiK2MVmIuockIm8e7yCbXWroFJHs32 EMn5+1Eg1YU1Dd5qc+ZerDWNbgHVkgPLjwvThs6D3QrtYPcNDTRcYAiMuo3JgI8a Av6l+7MwefXRhSTMuOfZrAEblFLDRMQX6MPOSlKkcXJdh9NSWaorSX42Mf3YWXsP xkGNkVcDQcmx9EyIB3RbshHxAac= -----END CERTIFICATE-----Generated at Thu May 23 02:40:35 2024 by rpki-client on console-ams.rpki-client.org