$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa File: AEEA3AE45BF611E984E25E54C4F9AE02.roa (raw, json) Hash identifier: GP4xUsIduNh2HeQhVqr04ctEFbTYTxQ87e01idrQ4Gs= Subject key identifier: 2D:57:5F:53:6D:9F:34:EF:3A:4C:06:71:40:A1:41:6F:61:64:85:03 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 24DD Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa Signing time: Sat 30 Sep 2023 16:12:44 +0000 ROA not before: Sat 30 Sep 2023 16:12:44 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 17724 IP address blocks: 111.84.16.0/24 maxlen: 24 111.84.20.0/24 maxlen: 24 111.84.52.0/23 maxlen: 24 111.84.54.0/23 maxlen: 24 111.84.178.0/23 maxlen: 24 111.84.180.0/23 maxlen: 24 202.91.16.0/23 maxlen: 24 202.91.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9437 (0x24dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 30 16:12:44 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=651848fc-b314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:51:d6:9e:cf:5d:7e:ac:8a:7a:fe:f6:79: 42:d2:54:95:03:ba:d0:f6:d7:a1:66:97:2b:31:6a: 5c:3d:66:f9:7b:da:34:05:a3:6c:70:a9:ac:e0:ba: 97:54:3b:60:06:1b:32:10:20:57:b2:66:1a:2b:41: f2:74:db:69:dc:b2:f1:25:01:fe:7c:a8:ab:a1:5f: ef:73:aa:eb:4a:ec:b1:c1:e7:0d:80:5c:21:fd:63: 80:47:2b:e8:90:28:44:08:a5:05:f8:81:8d:3c:07: c9:d8:60:5e:ec:e4:7b:86:cd:8a:2e:d8:62:57:31: de:4c:6d:0d:b4:0b:91:01:7e:52:d0:ce:40:64:e8: 1c:fa:e9:33:34:83:be:8f:ff:1c:3c:66:85:03:13: 7b:f4:55:1c:72:18:a4:19:c2:46:42:2f:f2:18:d8: aa:77:54:06:75:cd:c2:5d:4b:19:8b:48:8c:e0:d4: fa:e5:97:2a:3c:2d:b6:d5:f7:94:dd:a2:98:9d:e7: 2a:60:a4:a3:5a:fb:39:ed:df:00:c2:94:b9:8a:a3: fa:a7:fc:f8:c5:78:ce:dc:24:cb:5e:bc:fb:cd:80: de:02:c0:a5:43:eb:94:9a:23:bf:54:ae:85:d5:53: 8e:ef:6c:53:fd:bf:83:79:5a:8d:d0:1d:40:78:04: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:57:5F:53:6D:9F:34:EF:3A:4C:06:71:40:A1:41:6F:61:64:85:03 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/AEEA3AE45BF611E984E25E54C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 111.84.16.0/24 111.84.20.0/24 111.84.52.0/22 111.84.178.0-111.84.181.255 202.91.16.0/23 202.91.20.0/22 Signature Algorithm: sha256WithRSAEncryption a5:9c:64:e7:9f:71:e9:70:e7:ee:dc:93:6d:de:9d:ec:7a:67: 4e:38:77:09:e9:0d:7d:13:5d:b1:d5:71:cc:87:72:cc:57:17: 1d:a0:c7:f9:96:d6:2d:df:bc:87:76:9a:35:c9:31:7b:6b:3e: 9b:ae:0a:2d:75:28:b7:31:8b:c5:20:eb:1b:eb:cb:57:fc:5f: e5:e0:d9:ed:a2:34:83:89:c9:89:05:39:61:f3:30:40:4c:86: 79:08:3b:db:30:62:07:1f:2e:25:43:7c:18:14:a5:73:5d:e4: 41:5e:8b:ff:60:9b:a2:8c:fc:9b:b4:c2:6e:b1:89:a1:4d:09: 9e:d8:4f:8d:2a:7f:ef:d6:aa:ec:f2:ea:1e:54:35:3e:5d:9c: c1:11:a8:ed:80:8f:66:9a:64:8f:84:15:58:42:95:ef:08:7f: 44:a6:24:12:fb:e0:04:4a:19:64:fb:c2:bf:7b:b7:a1:4a:db: f1:10:3b:e0:90:4f:e2:90:e3:62:40:92:aa:b6:93:86:d8:a7: 2f:b8:02:ed:78:85:d1:26:6d:77:23:49:57:bf:1e:a6:36:3f: 78:3c:a7:49:62:6f:5b:f4:7b:00:a2:3e:37:a7:79:47:aa:1e: d3:d1:b5:90:a2:92:cd:d7:3d:8e:b2:d9:8e:da:71:9e:30:b6: ee:8a:02:59 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgICJN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjMwOTMwMTYxMjQ0WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE4NDhmYy1iMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ5R1p7PXX6sinr+9nlC0lSVA7rQ9tehZpcrMWpcPWb5e9o0BaNscKms4LqX VDtgBhsyECBXsmYaK0HydNtp3LLxJQH+fKiroV/vc6rrSuyxwecNgFwh/WOARyvo kChECKUF+IGNPAfJ2GBe7OR7hs2KLthiVzHeTG0NtAuRAX5S0M5AZOgc+ukzNIO+ j/8cPGaFAxN79FUcchikGcJGQi/yGNiqd1QGdc3CXUsZi0iM4NT65ZcqPC221feU 3aKYnecqYKSjWvs57d8AwpS5iqP6p/z4xXjO3CTLXrz7zYDeAsClQ+uUmiO/VK6F 1VOO72xT/b+DeVqN0B1AeAQryQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFC1XX1Nt nzTvOkwGcUChQW9hZIUDMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQUVFQTNBRTQ1 QkY2MTFFOTg0RTI1RTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRQYIKwYBBQUHAQcBAf8E NjA0MDIEAgABMCwDBABvVBADBABvVBQDBAJvVDQwDAMEAW9UsgMEAW9UtAMEAcpb EAMEAspbFDANBgkqhkiG9w0BAQsFAAOCAQEApZxk559x6XDn7tyTbd6d7HpnTjh3 CekNfRNdsdVxzIdyzFcXHaDH+ZbWLd+8h3aaNckxe2s+m64KLXUotzGLxSDrG+vL V/xf5eDZ7aI0g4nJiQU5YfMwQEyGeQg72zBiBx8uJUN8GBSlc13kQV6L/2Cbooz8 m7TCbrGJoU0JnthPjSp/79aq7PLqHlQ1Pl2cwRGo7YCPZppkj4QVWEKV7wh/RKYk EvvgBEoZZPvCv3u3oUrb8RA74JBP4pDjYkCSqraThtinL7gC7XiF0SZtdyNJV78e pjY/eDynSWJvW/R7AKI+N6d5R6oe09G1kKKSzdc9jrLZjtpxnjC27ooCWQ== -----END CERTIFICATE-----Generated at Wed May 8 18:14:38 2024 by rpki-client on console-fra.rpki-client.org