$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa File: 3DAD522E1D7611EB8673F476C4F9AE02.roa (raw, json) Hash identifier: e5b3DDJ+5AdBpB+VVjYybf9HAu4lpvnirB8lehNH2gE= Subject key identifier: 77:96:20:6F:56:A7:24:C3:F0:65:28:21:2C:1B:75:26:C0:65:49:12 Certificate issuer: /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Certificate serial: 0746 Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa Signing time: Wed 06 Nov 2024 21:20:00 +0000 ROA not before: Wed 06 Nov 2024 21:20:00 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 17452 IP address blocks: 202.91.160.0/20 maxlen: 20 202.91.160.0/24 maxlen: 24 202.91.161.0/24 maxlen: 24 202.91.162.0/24 maxlen: 24 202.91.163.0/24 maxlen: 24 202.91.164.0/24 maxlen: 24 202.91.165.0/24 maxlen: 24 202.91.166.0/24 maxlen: 24 202.91.167.0/24 maxlen: 24 202.91.168.0/24 maxlen: 24 202.91.169.0/24 maxlen: 24 202.91.170.0/24 maxlen: 24 202.91.171.0/24 maxlen: 24 202.91.172.0/24 maxlen: 24 202.91.173.0/24 maxlen: 24 202.91.174.0/24 maxlen: 24 202.91.175.0/24 maxlen: 24 2401:2880::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1862 (0x746) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3 Validity Not Before: Nov 6 21:20:00 2024 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=672bdd80-d45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:0c:41:1a:15:0d:d5:f2:67:80:a2:0d:81: b6:77:32:38:fe:22:7a:ad:0e:1a:2a:eb:84:a5:e6: 9a:4b:f5:85:31:b4:da:18:97:bc:13:16:90:19:bd: a8:fa:f1:2d:f3:a2:0a:10:f2:fb:66:38:77:32:5c: ab:9c:de:67:ac:1a:4b:29:f8:ff:ff:ac:81:14:f8: 43:85:f7:ea:75:e6:94:da:f8:8e:8c:15:5b:bc:74: a0:f7:1e:53:53:7d:10:b7:65:79:90:a4:5a:e5:49: 8c:bd:ee:ef:dd:6b:06:9f:48:ff:b6:57:31:d4:5e: 9d:40:d8:c5:6b:7b:8b:99:73:30:3c:e4:b6:2b:7d: 3f:2e:48:66:98:a0:0d:30:a9:eb:8e:2a:97:28:2a: ad:bb:8b:16:3e:4e:ae:d3:3a:ba:59:31:84:22:8f: 51:43:0d:c5:ce:92:b6:5d:75:50:45:86:bd:2d:c2: 2a:8f:d8:75:04:08:e8:7f:42:71:54:40:26:8c:51: ed:3b:eb:61:22:24:c3:2b:40:fe:29:72:8a:79:19: 59:f9:b1:12:a5:2c:1f:ea:db:c4:e8:64:c2:7b:fb: 65:72:c2:33:38:2b:f7:95:c1:6e:c2:0f:7b:e9:cd: b2:7f:fe:67:a5:d1:15:2c:ca:0d:d7:9b:36:64:0b: cc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:96:20:6F:56:A7:24:C3:F0:65:28:21:2C:1B:75:26:C0:65:49:12 X509v3 Authority Key Identifier: keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/3DAD522E1D7611EB8673F476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.91.160.0/20 IPv6: 2401:2880::/32 Signature Algorithm: sha256WithRSAEncryption 95:21:4f:b6:13:ea:57:e0:57:25:6a:f3:ac:26:11:05:23:12: 99:08:e5:2d:80:9e:d4:e7:a5:cf:f2:2b:0b:0f:12:f0:7a:dd: 7e:1d:48:f6:7a:5c:e6:58:77:41:d9:19:b2:98:b6:e4:e8:87: a1:7f:f2:86:fb:b4:90:b4:1e:79:c6:df:2d:bb:3a:54:2e:f5: 8a:b8:9d:2f:a3:75:87:6d:2c:19:76:ab:40:60:57:2a:a3:df: 75:13:6f:d8:43:c3:7e:ec:6f:29:85:3a:63:87:a5:4f:74:e4: d4:40:66:d9:30:f5:ea:a2:60:b2:51:d5:c1:83:87:af:6f:1d: 03:7f:24:c4:74:62:fd:14:e6:cb:f1:29:4d:a3:74:68:5f:27: 5a:d7:b1:c8:e6:a2:f0:b2:3e:a9:de:c8:6f:55:60:9c:4e:94: 5e:b0:9c:8b:42:fc:6d:d7:ff:ec:15:61:a0:05:dd:e0:c0:0f: 07:77:29:75:47:66:83:72:c1:5c:ab:83:b4:7b:39:3b:f9:0d: 45:14:1f:2a:2d:bb:40:da:7e:1b:27:72:0c:1d:90:da:7f:ad: 19:2f:b6:85:3c:b2:17:12:5f:8c:01:c1:10:e9:a8:36:04:c7: f3:e5:e7:15:d3:d6:0c:09:b9:52:79:f3:c7:47:1d:52:fd:2d: 1f:88:86:5d -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4NTMxMTAvBgNVBAUTKEUwRjNDRkJERkE3RDA3NDI3NEZBNzQ5RDQwMjlDRUUz NTg4Rjc3QzMwHhcNMjQxMTA2MjEyMDAwWhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzJiZGQ4MC1kNDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuMMQRoVDdXyZ4CiDYG2dzI4/iJ6rQ4aKuuEpeaaS/WFMbTaGJe8ExaQGb2o +vEt86IKEPL7Zjh3MlyrnN5nrBpLKfj//6yBFPhDhffqdeaU2viOjBVbvHSg9x5T U30Qt2V5kKRa5UmMve7v3WsGn0j/tlcx1F6dQNjFa3uLmXMwPOS2K30/LkhmmKAN MKnrjiqXKCqtu4sWPk6u0zq6WTGEIo9RQw3FzpK2XXVQRYa9LcIqj9h1BAjof0Jx VEAmjFHtO+thIiTDK0D+KXKKeRlZ+bESpSwf6tvE6GTCe/tlcsIzOCv3lcFuwg97 6c2yf/5npdEVLMoN15s2ZAvMmQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHeWIG9W pyTD8GUoISwbdSbAZUkSMB8GA1UdIwQYMBaAFODzz736fQdCdPp0nUApzuNYj3fD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg1My81Qjk0MzkwRTA0 NDExMUVCOTFDNDNFNDVDNEY5QUUwMi80UFBQdmZwOUIwSjAtblNkUUNuTzQxaVBk OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRQUFB2ZnA5QjBKMC1uU2RRQ25PNDFpUGQ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDA4NTMvNUI5NDM5MEUwNDQxMTFFQjkxQzQzRTQ1QzRGOUFFMDIvM0RBRDUyMkUx RDc2MTFFQjg2NzNGNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBATKW6AwDQQCAAIwBwMFACQBKIAwDQYJKoZIhvcNAQELBQAD ggEBAJUhT7YT6lfgVyVq86wmEQUjEpkI5S2AntTnpc/yKwsPEvB63X4dSPZ6XOZY d0HZGbKYtuToh6F/8ob7tJC0HnnG3y27OlQu9Yq4nS+jdYdtLBl2q0BgVyqj33UT b9hDw37sbymFOmOHpU905NRAZtkw9eqiYLJR1cGDh69vHQN/JMR0Yv0U5svxKU2j dGhfJ1rXscjmovCyPqneyG9VYJxOlF6wnItC/G3X/+wVYaAF3eDADwd3KXVHZoNy wVyrg7R7OTv5DUUUHyotu0DafhsncgwdkNp/rRkvtoU8shcSX4wBwRDpqDYEx/Pl 5xXT1gwJuVJ588dHHVL9LR+Ihl0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:07:59 2024 by rpki-client on console-ams.rpki-client.org