$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4EF3836CF11C11EB8CA9C866C4F9AE02.roa File: 4EF3836CF11C11EB8CA9C866C4F9AE02.roa (raw, json) Hash identifier: gr0W30lQyWPhNAdF+h9Ul0cwBOIMKd+tEg7EdHsI9Yg= Subject key identifier: 28:81:95:16:2C:09:38:50:88:B1:D4:E5:B4:36:FF:8D:73:81:86:71 Certificate issuer: /CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Certificate serial: 104E Authority key identifier: 37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4EF3836CF11C11EB8CA9C866C4F9AE02.roa Signing time: Sat 28 Oct 2023 18:05:33 +0000 ROA not before: Sat 28 Oct 2023 18:05:33 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 4773 IP address blocks: 27.104.128.0/18 maxlen: 18 43.245.104.0/22 maxlen: 22 43.245.106.0/24 maxlen: 24 175.156.128.0/19 maxlen: 19 2401:7400:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 May 2024 02:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4174 (0x104e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE/serialNumber=371273CFD8C2C908B691D6BEA175E8DE82BD439A Validity Not Before: Oct 28 18:05:33 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=653d4d6d-28db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d3:96:1b:ec:64:da:c8:11:17:eb:cc:3e:75: b6:e1:09:25:28:7c:64:0e:a7:f5:18:78:30:4d:a7: 74:a0:e5:08:42:26:54:1a:a6:33:a2:2a:41:ad:49: ee:f0:30:d3:c1:aa:cc:29:d2:bc:ea:65:ca:4f:9e: 9d:30:ad:96:e0:c0:82:c5:de:0a:97:a4:2e:50:47: 28:b8:dc:cb:4a:f2:99:2d:1b:af:a8:8b:bc:1c:b7: fe:15:b6:57:69:37:1c:1d:0c:cf:6f:8b:54:12:cb: cf:06:94:2e:8d:2a:c6:83:bb:37:d1:4d:26:09:36: 90:8d:27:34:0e:77:45:c4:83:54:48:a6:8e:5e:6c: f4:cf:2b:15:d1:6d:1b:8c:62:64:d1:e7:b7:09:ef: 03:4c:80:99:9a:0b:af:6b:44:bb:bb:c5:7e:61:bc: 78:04:0f:2a:8e:95:6b:7e:0f:be:ad:22:6f:77:88: 8e:2a:0b:86:8a:5a:a6:ea:6f:57:96:fe:04:fc:3d: 99:bb:50:04:e2:ec:72:c0:be:3c:03:35:d7:66:dd: 08:3d:ec:9e:e0:cc:14:d2:45:19:c7:bf:28:e8:8b: f3:48:16:f1:f3:f8:1f:25:10:ad:ce:71:73:31:39: b5:7c:fb:eb:23:e3:a8:30:6f:20:cb:28:d2:f3:21: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:81:95:16:2C:09:38:50:88:B1:D4:E5:B4:36:FF:8D:73:81:86:71 X509v3 Authority Key Identifier: keyid:37:12:73:CF:D8:C2:C9:08:B6:91:D6:BE:A1:75:E8:DE:82:BD:43:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/NxJzz9jCyQi2kda-oXXo3oK9Q5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NxJzz9jCyQi2kda-oXXo3oK9Q5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/CEE3D71804E111E98EA7D872C4F9AE02/4EF3836CF11C11EB8CA9C866C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.104.128.0/18 43.245.104.0/22 175.156.128.0/19 IPv6: 2401:7400:1000::/48 Signature Algorithm: sha256WithRSAEncryption 60:a8:6e:ed:c0:16:9a:6c:ce:ee:67:e8:94:09:d6:bb:85:91: 7b:29:01:79:a4:b1:e2:30:29:54:af:5b:b9:b0:27:8d:86:49: 81:41:55:41:af:b5:a0:ba:3f:2c:0d:ab:04:4f:67:ee:0e:18: eb:36:9e:27:f1:26:df:83:ae:6b:1b:bb:ef:c4:a2:b4:a2:f4: 72:b0:fd:37:3c:82:15:6b:c8:55:fb:8a:30:be:d1:14:ef:6b: 5b:f2:0c:44:66:4f:5f:9c:cc:be:b6:a0:5d:a2:80:42:bf:1c: da:e4:ee:af:f2:26:7c:54:b0:bf:ff:0d:84:af:cb:96:06:10: e6:e7:55:56:2e:3a:4c:6c:ed:e2:a9:57:c7:8f:f0:5c:9a:4d: 83:e0:23:44:1f:ec:82:22:3c:1e:69:3f:0d:fc:76:23:bc:32: 5b:6d:8b:83:7d:dc:e0:66:f8:93:85:cb:38:9e:e2:90:ac:e3: 2a:21:3e:79:36:de:53:a3:f5:91:95:93:53:3c:41:3c:f5:05: 86:57:0c:f5:73:d3:dd:9c:31:6f:4e:19:6f:90:4e:9d:a5:b6: bc:f5:ac:0b:51:92:11:b2:04:45:13:f7:37:ac:7a:cb:29:60: fd:9a:b8:78:9c:fd:78:13:76:9e:a2:9d:d6:44:14:c8:77:f9: 80:94:da:6c -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICEE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDM3MTI3M0NGRDhDMkM5MDhCNjkxRDZCRUExNzVFOERF ODJCRDQzOUEwHhcNMjMxMDI4MTgwNTMzWhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTNkNGQ2ZC0yOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtOWG+xk2sgRF+vMPnW24QklKHxkDqf1GHgwTad0oOUIQiZUGqYzoipBrUnu 8DDTwarMKdK86mXKT56dMK2W4MCCxd4Kl6QuUEcouNzLSvKZLRuvqIu8HLf+FbZX aTccHQzPb4tUEsvPBpQujSrGg7s30U0mCTaQjSc0DndFxINUSKaOXmz0zysV0W0b jGJk0ee3Ce8DTICZmguva0S7u8V+Ybx4BA8qjpVrfg++rSJvd4iOKguGilqm6m9X lv4E/D2Zu1AE4uxywL48AzXXZt0IPeye4MwU0kUZx78o6IvzSBbx8/gfJRCtznFz MTm1fPvrI+OoMG8gyyjS8yHn6wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCiBlRYs CThQiLHU5bQ2/41zgYZxMB8GA1UdIwQYMBaAFDcSc8/YwskItpHWvqF16N6CvUOa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DRUUzRDcxODA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9OeEp6ejlqQ3lRaTJrZGEtb1hYbzNvSzlR NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL054Snp6OWpDeVFpMmtkYS1vWFhvM29LOVE1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU3REUvQ0VFM0Q3MTgwNEUxMTFFOThFQTdEODcyQzRGOUFFMDIvNEVGMzgzNkNG MTFDMTFFQjhDQTlDODY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAYbaIADBAIr9WgDBAWvnIAwDwQCAAIwCQMHACQBdAAQADAN BgkqhkiG9w0BAQsFAAOCAQEAYKhu7cAWmmzO7mfolAnWu4WReykBeaSx4jApVK9b ubAnjYZJgUFVQa+1oLo/LA2rBE9n7g4Y6zaeJ/Em34Ouaxu778SitKL0crD9NzyC FWvIVfuKML7RFO9rW/IMRGZPX5zMvragXaKAQr8c2uTur/ImfFSwv/8NhK/LlgYQ 5udVVi46TGzt4qlXx4/wXJpNg+AjRB/sgiI8Hmk/Dfx2I7wyW22Lg33c4Gb4k4XL OJ7ikKzjKiE+eTbeU6P1kZWTUzxBPPUFhlcM9XPT3Zwxb04Zb5BOnaW2vPWsC1GS EbIERRP3N6x6yylg/Zq4eJz9eBN2nqKd1kQUyHf5gJTabA== -----END CERTIFICATE-----Generated at Fri May 10 20:05:37 2024 by rpki-client on console-fra.rpki-client.org