$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa File: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (raw, json) Hash identifier: oxb+ZVwngQZ78D0VC7fWYXbul+BsPCCKgwQOCW8hTEE= Subject key identifier: 9C:05:2D:9D:3A:45:C1:8D:44:4D:87:C8:E0:FE:A8:A8:BF:CC:67:BE Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 04A1 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa Signing time: Wed 15 Nov 2023 05:53:51 +0000 ROA not before: Wed 15 Nov 2023 05:53:51 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 147027 IP address blocks: 110.164.234.0/24 maxlen: 24 110.164.235.0/24 maxlen: 24 2403:6200:7928::/48 maxlen: 48 2403:6200:7929::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Jun 2024 00:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1185 (0x4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Nov 15 05:53:51 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=65545cef-5b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4a:34:4f:1c:d1:a1:31:a0:36:6a:7d:f5:0b: a9:1a:5f:d4:f3:04:1d:77:90:f7:cc:6c:06:ec:64: 6e:33:ae:56:ba:a5:a0:d3:a5:69:f8:ef:65:74:27: d3:69:9b:14:19:8b:2e:38:6b:e7:62:1e:10:cf:6b: f7:aa:9c:0a:bc:1a:31:7d:6d:a5:f8:49:6d:ba:48: 8f:6a:f9:4e:68:a5:8e:d0:a9:2d:4f:02:96:49:40: e2:14:9b:7a:d2:95:ee:e5:9b:6c:cd:f3:fe:53:19: 54:ad:be:72:0d:e3:93:a4:ed:84:4d:2c:95:78:ad: 88:31:6d:bd:48:cc:01:a9:a9:f6:84:dc:93:d3:f8: 7a:1a:ae:ad:75:0f:f0:85:cb:09:19:65:63:7d:9e: 0d:e2:b5:65:b9:d9:6d:fb:7e:25:a4:3a:ae:79:94: 45:04:b8:22:48:e1:ce:62:f6:b4:7f:60:4b:ad:12: f7:db:1b:57:3b:99:30:12:7d:17:0c:2f:38:f0:6f: 65:91:af:e7:37:b1:de:ad:fc:05:24:a0:9d:6d:d5: 26:ea:0b:ec:7a:90:2d:ef:c2:a4:35:73:a5:ce:2d: 70:7b:a1:7a:32:ff:ae:e4:d9:a1:b2:95:4a:1d:e4: 1a:f9:12:53:a9:3e:a3:4d:3a:0f:20:7f:77:18:3a: a0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:05:2D:9D:3A:45:C1:8D:44:4D:87:C8:E0:FE:A8:A8:BF:CC:67:BE X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/46BE2FE6837B11EEB7855E0FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.164.234.0/23 IPv6: 2403:6200:7928::/47 Signature Algorithm: sha256WithRSAEncryption 3c:92:95:b8:31:db:45:0d:fe:2d:be:ae:1e:e3:b8:c8:df:90: f8:c8:97:fb:7b:13:3f:46:ae:ce:9c:ec:97:1d:58:e6:91:6e: a3:ce:1c:59:70:e5:1c:08:e0:a1:25:a4:c1:5d:90:2c:a8:9b: 9a:1e:d3:5c:e2:98:27:ef:c4:69:ed:a1:60:cc:1a:96:74:f2: b5:23:99:ce:a8:c9:4c:45:3e:c3:84:7a:1f:e5:90:17:ef:66: df:59:8f:55:3f:78:1b:86:23:83:03:78:b8:43:9f:f4:df:db: 7f:0c:57:7b:88:1b:98:15:3c:74:10:83:85:b3:e9:7a:bd:77: 74:a6:48:81:c0:5c:0c:55:a2:ee:4f:b8:92:e1:70:b8:17:47: a9:65:41:b7:2d:49:f7:0d:20:c3:0d:64:9d:2e:ba:6e:1d:4b: fb:7f:6b:4d:41:f0:82:cd:40:2a:dc:d0:4e:da:cd:6d:23:79: b3:e8:ad:c6:af:56:3b:d0:46:55:82:65:a5:35:09:48:f7:a9: 73:5a:28:f2:8e:71:17:1c:ad:ba:89:cc:f3:6d:63:dd:c0:a8: 99:4f:96:40:8c:91:cd:7b:5e:bc:03:4e:41:2a:b5:62:82:b4: 73:4b:4b:06:cd:ec:36:b4:dc:85:f5:ea:54:f0:af:4a:8c:8a: 9b:28:00:f4 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjMxMTE1MDU1MzUxWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTU0NWNlZi01YjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArko0TxzRoTGgNmp99QupGl/U8wQdd5D3zGwG7GRuM65WuqWg06Vp+O9ldCfT aZsUGYsuOGvnYh4Qz2v3qpwKvBoxfW2l+EltukiPavlOaKWO0KktTwKWSUDiFJt6 0pXu5ZtszfP+UxlUrb5yDeOTpO2ETSyVeK2IMW29SMwBqan2hNyT0/h6Gq6tdQ/w hcsJGWVjfZ4N4rVludlt+34lpDqueZRFBLgiSOHOYva0f2BLrRL32xtXO5kwEn0X DC848G9lka/nN7HerfwFJKCdbdUm6gvsepAt78KkNXOlzi1we6F6Mv+u5NmhspVK HeQa+RJTqT6jTToPIH93GDqgwwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFJwFLZ06 RcGNRE2HyOD+qKi/zGe+MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNDZCRTJGRTY4 MzdCMTFFRUI3ODU1RTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFupOowDwQCAAIwCQMHASQDYgB5KDANBgkqhkiG9w0BAQsF AAOCAQEAPJKVuDHbRQ3+Lb6uHuO4yN+Q+MiX+3sTP0auzpzslx1Y5pFuo84cWXDl HAjgoSWkwV2QLKibmh7TXOKYJ+/Eae2hYMwalnTytSOZzqjJTEU+w4R6H+WQF+9m 31mPVT94G4YjgwN4uEOf9N/bfwxXe4gbmBU8dBCDhbPper13dKZIgcBcDFWi7k+4 kuFwuBdHqWVBty1J9w0gww1knS66bh1L+39rTUHwgs1AKtzQTtrNbSN5s+itxq9W O9BGVYJlpTUJSPepc1oo8o5xFxytuonM821j3cComU+WQIyRzXtevANOQSq1YoK0 c0tLBs3sNrTchfXqVPCvSoyKmygA9A== -----END CERTIFICATE-----Generated at Mon May 27 02:57:06 2024 by rpki-client on console-fra.rpki-client.org