$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/36023BC6D29D11EAA11F7F51C4F9AE02.roa File: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (raw, json) Hash identifier: xHShd3tlwlxB2nTBnu7DIXCsWddzN3NU74q1kH3c3cw= Subject key identifier: D6:66:ED:40:40:50:97:B0:59:02:BB:24:0B:6D:8F:FE:0B:A3:60:FE Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 072B Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/36023BC6D29D11EAA11F7F51C4F9AE02.roa Signing time: Tue 10 Oct 2023 21:49:05 +0000 ROA not before: Tue 10 Oct 2023 21:49:05 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 17439 IP address blocks: 146.88.24.0/22 maxlen: 24 164.52.192.0/19 maxlen: 24 205.147.96.0/21 maxlen: 24 205.147.108.0/22 maxlen: 24 216.48.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Jun 2024 20:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Oct 10 21:49:05 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=6525c6d1-854b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:d2:15:86:d1:f1:65:5d:67:cb:da:45:5e: 69:77:fd:ff:de:c0:0a:ff:d0:c0:a7:c1:6a:0a:a6: 20:e9:b3:b5:a9:79:15:c6:70:e7:a6:ed:a0:39:7f: aa:fe:8d:ab:48:d5:73:f7:b8:73:6a:c3:98:45:a7: fe:45:e9:1e:59:81:20:b0:64:d0:8d:de:dc:3e:88: b0:ad:ca:b4:e2:dc:4c:a8:6f:82:89:59:7d:00:e0: 37:4b:af:65:61:06:4f:e8:a9:52:6c:ae:71:85:2e: 62:f3:f5:d5:25:54:d6:ea:57:77:db:60:91:eb:6e: a5:ef:c9:18:56:b4:90:6a:95:97:23:ef:bb:9e:6a: ba:b8:21:45:77:1d:fb:fe:9f:f4:f4:e8:11:f4:38: d2:0c:98:cd:1d:a8:e1:a8:9e:dc:5f:db:87:3c:df: 90:83:8f:95:74:7f:84:b8:b1:ba:da:a9:43:4c:dc: 10:7d:ba:ea:13:1a:fe:e7:4f:06:dd:27:b7:32:12: f5:38:b3:bd:9b:da:da:60:e7:ec:a8:3c:e0:d8:f1: de:85:b8:27:c6:a8:7e:70:74:ec:b2:31:0a:8e:bb: ea:9e:3f:d8:d6:27:bc:27:6c:64:db:33:0f:41:c3: d8:a4:75:51:e7:f8:97:c3:a2:53:15:48:9b:9b:c0: 41:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:66:ED:40:40:50:97:B0:59:02:BB:24:0B:6D:8F:FE:0B:A3:60:FE X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/36023BC6D29D11EAA11F7F51C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.88.24.0/22 164.52.192.0/19 205.147.96.0/21 205.147.108.0/22 216.48.176.0/20 Signature Algorithm: sha256WithRSAEncryption 49:a1:e8:f1:27:c0:dd:28:1c:d1:15:5e:22:ba:31:2a:88:8e: 8c:71:73:c7:a7:45:92:2a:af:9d:76:38:20:e6:57:24:cf:09: b8:14:b5:8a:bc:f4:2c:22:ff:8b:7c:91:f6:d8:81:9e:68:a4: 49:18:3c:3d:fe:c8:a7:30:a2:f3:13:06:80:a6:53:91:56:53: eb:a6:e1:ff:92:e1:ed:05:3c:ce:38:6b:2a:76:02:e6:2b:dc: a6:84:24:e3:c7:f9:77:ff:b1:fa:37:96:e5:ef:7c:38:57:02: 2b:6d:d4:99:7a:1f:58:24:3e:48:50:a9:ce:76:e8:e1:af:91: 66:96:7c:9f:f4:59:0b:dc:9c:74:f9:92:0d:2e:2f:56:aa:32: b5:67:ae:f3:bc:1c:59:ff:ef:d2:d5:29:58:e8:ef:18:37:21: d0:15:f5:ad:2e:74:af:3d:99:02:d9:d9:30:e8:da:53:c0:a3: 28:b7:76:a2:5e:ca:43:ed:21:38:95:3d:a9:a1:78:5e:1e:ca: 1b:2f:d7:60:3a:41:0f:6a:79:70:6c:df:a9:c4:00:42:77:74: 28:bc:90:3b:8c:cc:a7:d7:4f:f9:84:6e:14:01:a6:4f:4b:13: 40:ed:af:df:77:f3:a4:e8:e9:44:c9:6c:f9:9f:ed:95:6d:74: d5:09:e2:6f -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjMxMDEwMjE0OTA1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTI1YzZkMS04NTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn3SFYbR8WVdZ8vaRV5pd/3/3sAK/9DAp8FqCqYg6bO1qXkVxnDnpu2gOX+q /o2rSNVz97hzasOYRaf+RekeWYEgsGTQjd7cPoiwrcq04txMqG+CiVl9AOA3S69l YQZP6KlSbK5xhS5i8/XVJVTW6ld322CR626l78kYVrSQapWXI++7nmq6uCFFdx37 /p/09OgR9DjSDJjNHajhqJ7cX9uHPN+Qg4+VdH+EuLG62qlDTNwQfbrqExr+508G 3Se3MhL1OLO9m9raYOfsqDzg2PHehbgnxqh+cHTssjEKjrvqnj/Y1ie8J2xk2zMP QcPYpHVR5/iXw6JTFUibm8BBnQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNZm7UBA UJewWQK7JAttj/4Lo2D+MB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvRTg4M0RGRDZDQzNEMTFFQThCQzQ1QzI5QzRGOUFFMDIvMzYwMjNCQzZE MjlEMTFFQUExMUY3RjUxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAKSWBgDBAWkNMADBAPNk2ADBALNk2wDBATYMLAwDQYJKoZI hvcNAQELBQADggEBAEmh6PEnwN0oHNEVXiK6MSqIjoxxc8enRZIqr512OCDmVyTP CbgUtYq89Cwi/4t8kfbYgZ5opEkYPD3+yKcwovMTBoCmU5FWU+um4f+S4e0FPM44 ayp2AuYr3KaEJOPH+Xf/sfo3luXvfDhXAitt1Jl6H1gkPkhQqc526OGvkWaWfJ/0 WQvcnHT5kg0uL1aqMrVnrvO8HFn/79LVKVjo7xg3IdAV9a0udK89mQLZ2TDo2lPA oyi3dqJeykPtITiVPamheF4eyhsv12A6QQ9qeXBs36nEAEJ3dCi8kDuMzKfXT/mE bhQBpk9LE0Dtr99386To6UTJbPmf7ZVtdNUJ4m8= -----END CERTIFICATE-----Generated at Wed May 29 00:29:11 2024 by rpki-client on console-fra.rpki-client.org