$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6D457B6E5E0B11EE80A52770C4F9AE02.roa File: 6D457B6E5E0B11EE80A52770C4F9AE02.roa (raw, json) Hash identifier: 2efs1VJgcpjQRP2ZDAmth9UGyv/hckqc/WOdA0h5bXA= Subject key identifier: F1:34:EF:61:E1:29:58:29:5A:3A:79:B5:8D:7A:E6:D3:48:18:AF:9A Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 0D55 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6D457B6E5E0B11EE80A52770C4F9AE02.roa Signing time: Thu 28 Sep 2023 14:29:26 +0000 ROA not before: Thu 28 Sep 2023 14:29:26 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 7018 IP address blocks: 43.254.12.0/22 maxlen: 24 115.167.68.0/22 maxlen: 24 115.167.108.0/22 maxlen: 24 175.110.76.0/22 maxlen: 24 175.110.92.0/22 maxlen: 24 175.110.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 19:31:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3413 (0xd55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Sep 28 14:29:26 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=65158dc6-51dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1f:39:37:8b:e4:af:7e:3c:e0:9b:c5:89:cd: 74:01:78:9d:af:41:ea:45:54:9e:18:87:73:78:a2: 96:7b:b0:b6:db:f7:48:fa:9a:08:d1:25:9d:3a:a2: 26:2d:3d:ef:b4:87:04:e1:06:5c:65:ee:bf:4f:8d: ad:e3:82:a0:e4:02:f4:8f:d5:ee:5b:f5:87:20:75: a3:1c:2d:77:b1:fb:d6:eb:f8:34:f7:b1:a2:46:3d: 87:a2:5f:2c:3e:42:ef:85:9b:bf:6f:fe:e6:96:4a: 06:4c:d3:e0:ee:a2:e3:9a:a1:a8:bd:d4:23:9f:35: bc:c8:de:96:74:31:62:ad:f0:64:e5:ff:ba:61:0a: 1c:6d:df:31:43:7c:e4:94:eb:86:12:32:13:ed:fd: db:04:50:8f:07:ac:61:41:62:92:69:f0:a8:2c:85: 9d:0e:e6:fd:e7:4b:f6:60:cf:47:e4:c1:6f:19:61: dc:ca:ec:9d:8e:2e:09:8a:9c:62:1a:ff:87:15:40: 66:77:82:d6:b8:b3:14:2e:ed:a0:fb:de:72:90:f4: 5a:1b:04:45:f9:ba:de:6c:50:c9:60:4e:19:e1:2d: 41:b8:01:80:54:a4:23:6a:0e:9a:39:e4:9e:da:55: f1:ff:f2:48:73:cd:38:af:8c:2d:72:16:aa:5d:29: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:34:EF:61:E1:29:58:29:5A:3A:79:B5:8D:7A:E6:D3:48:18:AF:9A X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6D457B6E5E0B11EE80A52770C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.12.0/22 115.167.68.0/22 115.167.108.0/22 175.110.76.0/22 175.110.92.0/22 175.110.98.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:75:1b:cd:93:ee:f5:fe:2c:31:66:7d:7c:e3:69:8d:2f:bd: 13:99:40:b2:63:e0:88:66:1a:34:84:8c:97:97:33:50:2c:1f: ab:bd:07:e5:83:d2:12:89:ee:41:f0:cd:83:97:89:ee:d9:1d: c4:3a:d0:5f:ee:77:27:5a:9e:9b:52:1b:3c:e7:3b:f2:99:b7: 54:12:23:72:c5:6c:12:7a:ae:8b:87:e9:38:8a:de:3a:79:5e: e1:d0:40:af:6e:af:ea:03:a5:77:43:25:eb:4b:c5:3f:f4:5d: a5:51:c5:f7:e9:31:f0:e6:5c:8f:ce:97:35:d7:2d:f5:dc:19: 69:a5:fc:54:10:5e:07:b5:71:27:f1:50:ef:36:d8:52:02:1f: 47:00:1a:fb:98:74:32:bd:ca:c1:a9:eb:1f:59:b7:14:4b:1b: 36:e9:ec:4a:db:5d:6a:70:87:7d:ae:54:96:8b:ac:f1:e7:eb: 64:42:fe:e3:a2:3b:8f:aa:ba:c5:ba:07:cc:8a:ba:fe:34:5a: 94:86:75:a6:93:ae:bb:1a:e5:d0:59:1e:3b:76:d2:28:c7:2d: 00:5e:63:70:90:c8:27:e9:1a:ef:52:73:70:be:cb:6f:ea:85: 29:dd:3c:4a:50:08:21:c2:3e:cd:1a:de:4b:8c:82:3c:98:0c: 19:9a:a3:fe -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgICDVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjMwOTI4MTQyOTI2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1OGRjNi01MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h85N4vkr3484JvFic10AXidr0HqRVSeGIdzeKKWe7C22/dI+poI0SWdOqIm LT3vtIcE4QZcZe6/T42t44Kg5AL0j9XuW/WHIHWjHC13sfvW6/g097GiRj2Hol8s PkLvhZu/b/7mlkoGTNPg7qLjmqGovdQjnzW8yN6WdDFirfBk5f+6YQocbd8xQ3zk lOuGEjIT7f3bBFCPB6xhQWKSafCoLIWdDub950v2YM9H5MFvGWHcyuydji4Jipxi Gv+HFUBmd4LWuLMULu2g+95ykPRaGwRF+brebFDJYE4Z4S1BuAGAVKQjag6aOeSe 2lXx//JIc804r4wtchaqXSlpYwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFPE072Hh KVgpWjp5tY165tNIGK+aMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkQ0NTdCNkU1 RTBCMTFFRTgwQTUyNzcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E LjAsMCoEAgABMCQDBAIr/gwDBAJzp0QDBAJzp2wDBAKvbkwDBAKvblwDBACvbmIw DQYJKoZIhvcNAQELBQADggEBAFt1G82T7vX+LDFmfXzjaY0vvROZQLJj4IhmGjSE jJeXM1AsH6u9B+WD0hKJ7kHwzYOXie7ZHcQ60F/udydanptSGzznO/KZt1QSI3LF bBJ6rouH6TiK3jp5XuHQQK9ur+oDpXdDJetLxT/0XaVRxffpMfDmXI/OlzXXLfXc GWml/FQQXge1cSfxUO822FICH0cAGvuYdDK9ysGp6x9ZtxRLGzbp7ErbXWpwh32u VJaLrPHn62RC/uOiO4+qusW6B8yKuv40WpSGdaaTrrsa5dBZHjt20ijHLQBeY3CQ yCfpGu9Sc3C+y2/qhSndPEpQCCHCPs0a3kuMgjyYDBmao/4= -----END CERTIFICATE-----Generated at Wed May 1 20:49:15 2024 by rpki-client on console-ams.rpki-client.org