$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2281F220248511EE8673B278C4F9AE02.roa File: 2281F220248511EE8673B278C4F9AE02.roa (raw, json) Hash identifier: EYFjNocK4Ey4MTrufPHv7n1MS53JfNSHaolnWQcyB/k= Subject key identifier: 7D:2F:2D:04:B4:C5:CE:7A:31:C1:15:F4:26:A6:43:4D:57:3F:82:82 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 0C57 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2281F220248511EE8673B278C4F9AE02.roa Signing time: Mon 17 Jul 2023 09:34:32 +0000 ROA not before: Mon 17 Jul 2023 09:34:32 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 38547 IP address blocks: 115.167.2.0/24 maxlen: 24 115.167.72.0/22 maxlen: 24 202.92.16.0/24 maxlen: 24 202.92.17.0/24 maxlen: 24 202.92.23.0/24 maxlen: 24 202.92.24.0/24 maxlen: 24 202.92.24.32/27 maxlen: 27 202.92.25.0/24 maxlen: 24 202.92.26.0/24 maxlen: 24 202.92.27.0/24 maxlen: 24 202.92.28.0/24 maxlen: 24 202.92.29.0/24 maxlen: 24 202.92.30.0/24 maxlen: 24 202.92.31.0/24 maxlen: 24 2400:9560:1::/48 maxlen: 48 2400:9560:5::/48 maxlen: 48 2400:9560:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3159 (0xc57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jul 17 09:34:32 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=64b50b28-dd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:59:19:e7:d3:c2:c7:6c:a4:39:f9:01:d7:0d: 8e:a2:5e:70:88:f0:69:20:1c:a7:f0:72:67:ae:06: ef:04:69:04:25:ee:74:06:06:c0:fc:53:02:68:b6: dc:f1:11:c3:b9:89:de:fd:d9:47:ba:19:cc:ab:2c: f7:be:ec:53:3d:43:55:86:ce:0b:50:df:a4:53:be: 47:fb:a8:5a:5c:c7:96:1c:1b:d8:b2:35:85:e9:8e: c2:8d:1c:17:93:64:42:fb:39:f3:06:f8:eb:2e:b2: 76:93:cc:af:b5:ee:22:c3:17:cc:c5:27:9e:ae:8b: 78:5c:cc:79:8d:5d:cb:73:e0:04:57:07:ca:2d:8f: 5a:03:58:65:6a:af:78:ce:e7:02:62:22:71:b3:e5: ef:95:97:56:7e:8d:d7:be:ab:f1:ec:92:49:7b:d7: 9a:b6:d1:74:bc:90:a5:40:e4:ca:e4:25:85:80:84: f4:4a:58:69:fa:c8:05:80:00:48:79:6d:3f:1a:98: df:65:35:46:2e:69:f6:07:e6:3c:42:5f:20:94:23: a3:3e:ff:74:24:cc:81:20:46:3b:2c:09:21:37:0d: 9e:4c:f7:bf:71:89:84:cf:95:fe:6d:21:c8:f0:ec: 89:e9:22:07:fa:60:45:9b:be:e4:f0:af:69:1d:b0: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:2D:04:B4:C5:CE:7A:31:C1:15:F4:26:A6:43:4D:57:3F:82:82 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2281F220248511EE8673B278C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.2.0/24 115.167.72.0/22 202.92.16.0/23 202.92.23.0-202.92.31.255 IPv6: 2400:9560:1::/48 2400:9560:5::/48 2400:9560:9::/48 Signature Algorithm: sha256WithRSAEncryption 83:56:ea:31:83:9d:5a:2c:dc:2c:e0:25:9b:cd:69:05:a1:94: 02:56:5b:d4:75:d6:7e:c0:0e:7e:82:a9:1e:3b:c7:1f:b0:b7: e8:c6:33:35:44:03:0c:0e:7e:16:bc:97:1b:02:14:51:77:6c: a5:05:d9:cc:11:29:54:e6:3d:6d:bc:72:bb:99:53:49:d9:05: a6:df:66:43:99:39:d6:92:8b:5d:f3:22:d7:97:97:bf:93:e2: 6e:1e:a4:72:96:80:ed:70:d6:a2:4b:30:2b:ce:b9:25:b8:26: 61:d1:1f:f9:d1:4b:08:d3:02:17:c5:a9:78:71:61:18:85:4d: 2e:9e:64:0d:21:f2:b4:7c:9c:87:c2:1c:cf:76:8c:2d:44:3b: c9:ee:fc:a3:1d:35:a1:cb:ff:64:8c:8d:cc:f0:10:95:72:96: b9:84:df:10:1d:e1:83:9a:59:cb:3d:45:48:a6:4a:b8:7e:2d: 16:ba:f3:9b:83:14:4c:55:57:62:e5:fa:55:0e:3c:cc:36:64: 2d:d0:40:c9:bd:39:34:7f:47:29:dc:76:26:6a:49:c2:b6:37: 4d:97:49:28:19:22:8a:a0:16:27:e9:5b:08:57:21:7b:7c:3c: e5:60:8b:f0:d3:5e:68:a8:22:6b:20:6f:17:9c:e9:25:98:e5: 47:d0:3f:8d -----BEGIN CERTIFICATE----- MIIFrjCCBJagAwIBAgICDFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjMwNzE3MDkzNDMyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NGI1MGIyOC1kZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lkZ59PCx2ykOfkB1w2Ool5wiPBpIByn8HJnrgbvBGkEJe50BgbA/FMCaLbc 8RHDuYne/dlHuhnMqyz3vuxTPUNVhs4LUN+kU75H+6haXMeWHBvYsjWF6Y7CjRwX k2RC+znzBvjrLrJ2k8yvte4iwxfMxSeerot4XMx5jV3Lc+AEVwfKLY9aA1hlaq94 zucCYiJxs+XvlZdWfo3Xvqvx7JJJe9eattF0vJClQOTK5CWFgIT0Slhp+sgFgABI eW0/GpjfZTVGLmn2B+Y8Ql8glCOjPv90JMyBIEY7LAkhNw2eTPe/cYmEz5X+bSHI 8OyJ6SIH+mBFm77k8K9pHbCcywIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFH0vLQS0 xc56McEV9CamQ01XP4KCMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMjI4MUYyMjAy NDg1MTFFRTg2NzNCMjc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXAYIKwYBBQUHAQcBAf8E TTBLMCYEAgABMCADBABzpwIDBAJzp0gDBAHKXBAwDAMEAMpcFwMEBcpcADAhBAIA AjAbAwcAJACVYAABAwcAJACVYAAFAwcAJACVYAAJMA0GCSqGSIb3DQEBCwUAA4IB AQCDVuoxg51aLNws4CWbzWkFoZQCVlvUddZ+wA5+gqkeO8cfsLfoxjM1RAMMDn4W vJcbAhRRd2ylBdnMESlU5j1tvHK7mVNJ2QWm32ZDmTnWkotd8yLXl5e/k+JuHqRy loDtcNaiSzArzrkluCZh0R/50UsI0wIXxal4cWEYhU0unmQNIfK0fJyHwhzPdowt RDvJ7vyjHTWhy/9kjI3M8BCVcpa5hN8QHeGDmlnLPUVIpkq4fi0WuvObgxRMVVdi 5fpVDjzMNmQt0EDJvTk0f0cp3HYmaknCtjdNl0koGSKKoBYn6VsIVyF7fDzlYIvw 015oqCJrIG8XnOklmOVH0D+N -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:20 2024 by rpki-client on console-fra.rpki-client.org