$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5F8CA20A72D11EFB70AC684C4F9AE02.roa File: B5F8CA20A72D11EFB70AC684C4F9AE02.roa (raw, json) Hash identifier: DJWLipuuboMRe+R9AAq5Gmvx3f0ela2FFQzLIuSK+0Y= Subject key identifier: 39:1D:6F:E2:2B:56:70:6A:0E:15:09:EE:8D:F4:19:AC:61:A4:BD:3A Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 1D9E Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5F8CA20A72D11EFB70AC684C4F9AE02.roa Signing time: Wed 20 Nov 2024 11:03:47 +0000 ROA not before: Wed 20 Nov 2024 11:03:47 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 398704 IP address blocks: 113.203.210.0/24 maxlen: 24 113.203.217.0/24 maxlen: 24 113.203.220.0/24 maxlen: 24 113.203.231.0/24 maxlen: 24 113.203.246.0/24 maxlen: 24 115.167.20.0/22 maxlen: 24 115.167.29.0/24 maxlen: 24 115.167.30.0/24 maxlen: 24 115.167.31.0/24 maxlen: 24 115.167.48.0/24 maxlen: 24 115.167.56.0/22 maxlen: 24 180.178.161.0/24 maxlen: 24 180.178.188.0/24 maxlen: 24 223.29.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7582 (0x1d9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Nov 20 11:03:47 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=673dc213-47e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:88:56:eb:59:a9:ab:fa:3e:01:4f:4a:96:bf: 9d:49:34:36:12:13:f9:27:07:3a:70:37:4b:95:eb: 04:ea:b4:ad:e5:0a:49:f8:15:a0:e4:f5:a8:de:ab: 76:91:e6:cf:81:e9:30:61:be:33:6b:55:85:e7:48: 0c:aa:94:55:a3:8f:75:c2:b0:41:79:5e:0c:7a:71: cb:7a:7c:b9:cd:44:11:36:d6:ed:0e:0f:c6:ad:54: 71:46:5b:0d:e6:af:90:c3:29:26:40:bf:05:08:3d: 93:4b:c1:f0:70:e5:84:be:a7:92:68:ec:0c:ae:e4: 7e:ad:01:fc:d1:46:9d:e2:96:f8:7a:2a:2c:de:3b: 15:4f:a1:93:04:af:0e:8d:8a:eb:3d:92:12:2d:cb: a3:c0:26:07:a7:1a:73:08:05:37:b3:61:d8:3e:27: f0:d1:c2:8f:13:02:9d:05:d0:49:97:82:54:47:9d: 6e:bc:ea:81:9c:04:2e:25:25:db:df:6a:e9:28:55: 31:ea:59:ff:55:68:83:bb:b2:d5:8b:30:8a:4e:c8: 3e:d9:dd:5e:d6:ca:13:c8:4a:8e:20:1e:98:91:c8: 66:c6:3a:95:d1:9d:35:72:26:ab:03:12:96:b0:72: 97:c0:93:d9:c7:2b:86:4e:6b:d9:c2:93:cb:f7:bb: 7a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1D:6F:E2:2B:56:70:6A:0E:15:09:EE:8D:F4:19:AC:61:A4:BD:3A X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5F8CA20A72D11EFB70AC684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 113.203.210.0/24 113.203.217.0/24 113.203.220.0/24 113.203.231.0/24 113.203.246.0/24 115.167.20.0/22 115.167.29.0-115.167.31.255 115.167.48.0/24 115.167.56.0/22 180.178.161.0/24 180.178.188.0/24 223.29.229.0/24 Signature Algorithm: sha256WithRSAEncryption 82:d4:fe:4d:0f:47:dd:d9:de:21:f3:9f:e6:8f:e0:64:50:2d: fc:d4:1d:cf:ee:93:60:6b:ba:54:f1:66:31:89:90:61:b4:f0: fb:09:11:e5:d8:4c:4e:42:9e:a2:ee:0f:10:cf:ec:15:9f:cc: 24:2d:00:5b:29:c7:68:1e:08:ae:19:9f:81:24:ec:49:18:d0: 2a:e4:c7:7a:a6:c6:ca:40:a4:69:4a:8e:e4:cf:87:7e:46:c9: b8:42:69:97:ab:13:00:4b:a6:3c:c2:88:9b:fd:ae:c5:8d:9e: a4:2a:ce:8a:f9:85:50:46:2d:1b:99:bd:b6:04:99:b3:ef:08: a2:af:50:4a:50:a4:5f:85:f5:ad:03:18:f6:b5:99:39:67:55: e3:d3:1c:e7:b3:1c:a3:a7:b7:db:91:43:c4:7c:4f:5b:b3:54: 4e:44:ab:1e:76:15:f9:db:0f:d4:c3:09:d1:31:ad:68:4f:58: b7:76:ff:0e:1a:4c:fa:cc:0a:21:1b:c6:c6:73:19:3a:00:9a: e7:36:03:22:ae:88:de:c9:d0:a0:67:b3:68:5e:44:ec:53:fa: 46:dc:e6:52:06:d9:84:7e:9a:6d:59:c5:01:74:35:56:e5:52: 33:ed:d1:30:21:bc:fb:71:ad:a5:94:5f:1b:1e:8c:45:7c:15: a6:69:0a:9c -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICHZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjQxMTIwMTEwMzQ3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzNkYzIxMy00N2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA84hW61mpq/o+AU9Klr+dSTQ2EhP5Jwc6cDdLlesE6rSt5QpJ+BWg5PWo3qt2 kebPgekwYb4za1WF50gMqpRVo491wrBBeV4MenHLeny5zUQRNtbtDg/GrVRxRlsN 5q+QwykmQL8FCD2TS8HwcOWEvqeSaOwMruR+rQH80Uad4pb4eios3jsVT6GTBK8O jYrrPZISLcujwCYHpxpzCAU3s2HYPifw0cKPEwKdBdBJl4JUR51uvOqBnAQuJSXb 32rpKFUx6ln/VWiDu7LVizCKTsg+2d1e1soTyEqOIB6YkchmxjqV0Z01ciarAxKW sHKXwJPZxyuGTmvZwpPL97t6sQIDAQABo4IC3zCCAtswHQYDVR0OBBYEFDkdb+Ir VnBqDhUJ7o30GaxhpL06MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQjVGOENBMjBB NzJEMTFFRkI3MEFDNjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E WjBYMFYEAgABMFADBABxy9IDBABxy9kDBABxy9wDBABxy+cDBABxy/YDBAJzpxQw DAMEAHOnHQMEBXOnAAMEAHOnMAMEAnOnOAMEALSyoQMEALSyvAMEAN8d5TANBgkq hkiG9w0BAQsFAAOCAQEAgtT+TQ9H3dneIfOf5o/gZFAt/NQdz+6TYGu6VPFmMYmQ YbTw+wkR5dhMTkKeou4PEM/sFZ/MJC0AWynHaB4IrhmfgSTsSRjQKuTHeqbGykCk aUqO5M+HfkbJuEJpl6sTAEumPMKIm/2uxY2epCrOivmFUEYtG5m9tgSZs+8Ioq9Q SlCkX4X1rQMY9rWZOWdV49Mc57Mco6e325FDxHxPW7NUTkSrHnYV+dsP1MMJ0TGt aE9Yt3b/DhpM+swKIRvGxnMZOgCa5zYDIq6I3snQoGezaF5E7FP6RtzmUgbZhH6a bVnFAXQ1VuVSM+3RMCG8+3GtpZRfGx6MRXwVpmkKnA== -----END CERTIFICATE-----Generated at Fri Nov 22 08:02:28 2024 by rpki-client on console-ams.rpki-client.org