$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B517FDAAC49F11ED8CF0B945C4F9AE02.roa File: B517FDAAC49F11ED8CF0B945C4F9AE02.roa (raw, json) Hash identifier: q+Bp4il3k3Nf2HcSC8fRGkv+SGqRhHOgY4Fo0DshqU8= Subject key identifier: 48:9F:4D:F5:C4:DC:5E:2F:A2:EB:61:F9:39:CB:CF:58:47:04:83:74 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 20B2 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B517FDAAC49F11ED8CF0B945C4F9AE02.roa Signing time: Fri 10 Nov 2023 16:22:58 +0000 ROA not before: Fri 10 Nov 2023 16:22:58 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 134712 IP address blocks: 220.158.204.0/22 maxlen: 22 220.158.204.0/24 maxlen: 24 220.158.205.0/24 maxlen: 24 220.158.206.0/24 maxlen: 24 220.158.207.0/24 maxlen: 24 2405:d340::/32 maxlen: 32 2405:d340::/48 maxlen: 48 2405:d340:1::/48 maxlen: 48 2405:d340:2::/48 maxlen: 48 2405:d340:3::/48 maxlen: 48 2405:d340:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8370 (0x20b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Nov 10 16:22:58 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=654e58e2-7c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:e1:6b:d4:ba:a6:fa:9e:5b:ed:a5:64:69: af:46:91:0e:62:47:70:da:bf:be:92:cd:6d:92:bf: ee:1c:52:28:eb:ca:fd:8f:bb:98:af:f4:3b:5d:99: 6b:71:ea:a9:da:2c:ef:45:d8:f2:d3:7a:a5:96:d6: 67:bd:4b:ab:28:6d:c2:1d:7e:6b:48:f3:93:db:a2: d4:27:36:0d:53:b9:7d:93:a7:25:99:19:9d:b2:9f: 5a:4d:73:c9:d6:37:72:77:b4:8f:d4:2a:62:1f:53: e8:8f:3e:f6:5d:3d:52:c7:6f:4f:ca:67:50:42:43: bb:a2:b0:3e:c2:79:a4:4a:74:68:32:4c:09:fc:bf: dd:b7:d4:ad:15:0c:38:e8:ed:cc:92:24:34:70:70: 12:73:88:43:c5:ef:4a:13:c4:85:cf:59:11:3e:d8: f5:b1:b3:2a:8c:07:2f:fc:75:ff:2e:4d:bf:e9:84: c6:e5:f6:ca:b3:dd:ac:63:4f:72:28:1c:86:98:9d: 7f:d0:b7:f7:55:c0:b6:99:54:d4:ed:3b:f6:18:44: 6f:8f:3a:59:4b:39:dc:35:03:e6:ef:3b:44:63:88: 87:a9:65:97:5c:d3:db:e4:17:2d:50:14:32:c8:53: 7d:7b:43:2f:26:ba:10:a5:b5:1b:ff:24:06:af:ff: 15:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9F:4D:F5:C4:DC:5E:2F:A2:EB:61:F9:39:CB:CF:58:47:04:83:74 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/B517FDAAC49F11ED8CF0B945C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.158.204.0/22 IPv6: 2405:d340::/32 Signature Algorithm: sha256WithRSAEncryption 28:3d:7b:36:0e:b6:eb:cf:7e:7e:1f:d5:4e:5e:ac:f4:88:1b: b6:e9:87:83:b1:ad:44:b4:05:45:b3:f4:8b:47:56:3d:96:6a: 52:95:8c:32:1c:d1:6c:71:14:b1:d8:59:7b:9f:9e:45:d2:1d: ba:78:b7:5e:78:1e:79:63:38:21:ba:57:7a:59:15:94:05:88: 10:14:fd:bb:cf:3b:32:f3:65:d5:15:f7:66:97:95:2e:89:e2: e8:c7:18:ac:6d:39:93:b4:9c:c0:bd:2a:94:57:a8:bd:7f:3d: ef:76:f3:0e:2e:71:92:7b:88:d5:0e:4a:4b:af:3f:1b:5e:76: 7d:47:01:49:e8:ff:80:21:20:5e:c4:c2:25:ba:4f:f3:95:f3: f4:85:07:dd:4b:7b:69:a4:bd:7e:1f:eb:f8:62:fe:0d:3c:02: d4:67:da:b9:85:dc:22:ac:16:ec:d8:76:a1:87:76:1a:5b:4d: 70:61:ad:ab:0c:d9:fe:94:bf:2b:b0:a3:be:92:a7:ed:c7:be: 32:56:92:24:f0:02:28:49:e0:ff:5e:84:8f:f7:11:97:d5:47: 7a:04:b9:3f:50:20:68:7e:e5:f4:74:e1:e7:ee:67:e7:d6:66: 20:f9:6b:67:cd:1d:b2:d1:d9:99:2e:1a:84:cf:71:ad:6c:f9: d6:ab:a5:9a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICILIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjMxMTEwMTYyMjU4WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTRlNThlMi03YzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcnha9S6pvqeW+2lZGmvRpEOYkdw2r++ks1tkr/uHFIo68r9j7uYr/Q7XZlr ceqp2izvRdjy03qlltZnvUurKG3CHX5rSPOT26LUJzYNU7l9k6clmRmdsp9aTXPJ 1jdyd7SP1CpiH1Pojz72XT1Sx29PymdQQkO7orA+wnmkSnRoMkwJ/L/dt9StFQw4 6O3MkiQ0cHASc4hDxe9KE8SFz1kRPtj1sbMqjAcv/HX/Lk2/6YTG5fbKs92sY09y KByGmJ1/0Lf3VcC2mVTU7Tv2GERvjzpZSzncNQPm7ztEY4iHqWWXXNPb5BctUBQy yFN9e0MvJroQpbUb/yQGr/8VbwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEifTfXE 3F4vouth+TnLz1hHBIN0MB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ4NDUvNDAwMTUzQjZEMkVCMTFFNUI0RDE1QTRFQzRGOUFFMDIvQjUxN0ZEQUFD NDlGMTFFRDhDRjBCOTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBALcnswwDQQCAAIwBwMFACQF00AwDQYJKoZIhvcNAQELBQAD ggEBACg9ezYOtuvPfn4f1U5erPSIG7bph4OxrUS0BUWz9ItHVj2WalKVjDIc0Wxx FLHYWXufnkXSHbp4t154HnljOCG6V3pZFZQFiBAU/bvPOzLzZdUV92aXlS6J4ujH GKxtOZO0nMC9KpRXqL1/Pe928w4ucZJ7iNUOSkuvPxtedn1HAUno/4AhIF7EwiW6 T/OV8/SFB91Le2mkvX4f6/hi/g08AtRn2rmF3CKsFuzYdqGHdhpbTXBhrasM2f6U vyuwo76Sp+3HvjJWkiTwAihJ4P9ehI/3EZfVR3oEuT9QIGh+5fR04efuZ+fWZiD5 a2fNHbLR2ZkuGoTPca1s+darpZo= -----END CERTIFICATE-----Generated at Sat May 18 17:20:36 2024 by rpki-client on console-ams.rpki-client.org