$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/192418F6AA1811EA97BC574CC4F9AE02.roa File: 192418F6AA1811EA97BC574CC4F9AE02.roa (raw, json) Hash identifier: HfFeTs2pTlN0dZCGR3ETDmagxtrVoRQmHypj0cKvrXs= Subject key identifier: 95:28:A7:D8:AC:B9:8D:C7:C0:15:D3:F0:63:1A:C3:BD:72:6B:A4:46 Certificate issuer: /CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Certificate serial: 1D71 Authority key identifier: 9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/192418F6AA1811EA97BC574CC4F9AE02.roa Signing time: Thu 28 Sep 2023 16:33:38 +0000 ROA not before: Thu 28 Sep 2023 16:33:38 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 24429 IP address blocks: 43.91.0.0/16 maxlen: 24 2404:2280:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 May 2024 16:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7537 (0x1d71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198/serialNumber=9E1C3531D0045EA389B68CFF9286A08FBCBBD8BD Validity Not Before: Sep 28 16:33:38 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6515aae2-27aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:59:28:6a:46:1c:de:c4:21:78:fa:b0:c9: d4:e9:c8:f8:9d:33:21:bc:43:ed:4b:aa:86:58:ab: 64:31:96:4a:e4:24:8e:77:09:c1:94:90:93:b7:53: 67:b8:93:a3:fb:9d:1c:7e:13:b9:99:9c:47:c3:c8: d0:27:55:ce:4a:fa:fe:a8:2a:f7:29:db:ad:16:31: 40:16:05:82:b7:ff:d7:5f:aa:17:29:a2:cd:e4:ea: fe:a4:bd:a6:ba:5d:b6:bb:cb:ad:5d:23:08:f2:aa: 3f:35:4a:f8:ff:b2:7f:38:bb:41:19:f4:57:9a:12: a6:27:95:8e:4e:85:56:08:cd:de:00:b4:c5:9a:6f: 28:8c:60:8b:77:c2:ee:0d:c3:c2:ad:23:71:53:47: e7:a9:26:50:ef:f7:89:c9:34:fc:60:74:f5:48:ca: d4:ae:c5:49:4a:fb:a0:1b:df:f4:11:eb:d7:14:36: b5:ab:da:9f:d4:26:78:82:c7:9e:74:ec:ad:c8:d8: bd:58:60:ea:a9:aa:d5:15:ca:53:e1:79:c3:30:8a: da:cb:1a:7b:8b:6e:9c:06:80:91:4f:5e:c7:3e:6d: f1:70:fa:08:31:68:dc:67:ec:b7:d8:e1:6a:c0:0e: 55:73:0e:16:ed:0d:20:a9:f8:4c:8b:c4:69:11:0e: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:28:A7:D8:AC:B9:8D:C7:C0:15:D3:F0:63:1A:C3:BD:72:6B:A4:46 X509v3 Authority Key Identifier: keyid:9E:1C:35:31:D0:04:5E:A3:89:B6:8C:FF:92:86:A0:8F:BC:BB:D8:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/nhw1MdAEXqOJtoz_koagj7y72L0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nhw1MdAEXqOJtoz_koagj7y72L0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/993F2090ABC411E6BD6BED14C4F9AE02/192418F6AA1811EA97BC574CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.91.0.0/16 IPv6: 2404:2280:100::/40 Signature Algorithm: sha256WithRSAEncryption 6c:e9:8f:5e:31:c4:a4:12:36:b7:09:7c:63:89:c8:a6:55:ca: 46:8c:dd:7d:ea:dd:30:af:94:b4:58:ce:29:d7:78:8a:48:e9: 56:f4:85:68:57:a6:b5:f7:3e:7a:ea:f6:53:72:0d:67:00:42: 6f:c0:da:4d:c3:8f:0a:1e:ab:c0:75:d3:78:ff:eb:3e:98:4f: c4:e9:0c:f8:ac:88:4a:bb:30:04:6f:b6:9b:f6:8e:99:a4:5a: 4e:4d:01:3a:53:79:14:2e:c3:3e:2d:e8:42:3a:e6:3e:2b:b2: 0b:42:7a:8a:08:6e:17:44:91:6a:9a:37:79:0d:6a:2d:25:8f: f6:a5:f0:9f:a1:18:4a:a0:40:d5:28:04:41:48:a3:3e:8e:68: fe:33:be:00:bf:5e:c5:d3:1a:44:b3:23:84:34:93:4d:83:b0: e7:7a:2f:d5:a4:dc:ec:0b:a4:66:be:09:5f:12:ce:31:d6:07: 71:54:bb:d0:a2:bb:a1:93:4d:3b:a8:c1:9d:cb:83:59:80:52: da:bb:af:fa:76:cf:eb:8c:29:77:1b:a9:f8:00:1c:26:9b:a6: 0f:78:34:b3:7e:cd:00:b5:3d:9c:98:be:56:9c:ca:8e:89:b4: e4:2c:5e:70:6d:a4:9b:6e:54:72:9e:27:e0:11:3b:e1:58:32: 71:49:50:fc -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICHXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDlFMUMzNTMxRDAwNDVFQTM4OUI2OENGRjkyODZBMDhG QkNCQkQ4QkQwHhcNMjMwOTI4MTYzMzM4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1YWFlMi0yN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5JZKGpGHN7EIXj6sMnU6cj4nTMhvEPtS6qGWKtkMZZK5CSOdwnBlJCTt1Nn uJOj+50cfhO5mZxHw8jQJ1XOSvr+qCr3KdutFjFAFgWCt//XX6oXKaLN5Or+pL2m ul22u8utXSMI8qo/NUr4/7J/OLtBGfRXmhKmJ5WOToVWCM3eALTFmm8ojGCLd8Lu DcPCrSNxU0fnqSZQ7/eJyTT8YHT1SMrUrsVJSvugG9/0EevXFDa1q9qf1CZ4gsee dOytyNi9WGDqqarVFcpT4XnDMIrayxp7i26cBoCRT17HPm3xcPoIMWjcZ+y32OFq wA5Vcw4W7Q0gqfhMi8RpEQ5TpwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFJUop9is uY3HwBXT8GMaw71ya6RGMB8GA1UdIwQYMBaAFJ4cNTHQBF6jibaM/5KGoI+8u9i9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC85OTNGMjA5MEFC QzQxMUU2QkQ2QkVEMTRDNEY5QUUwMi9uaHcxTWRBRVhxT0p0b3pfa29hZ2o3eTcy TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25odzFNZEFFWHFPSnRvel9rb2Fnajd5NzJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvOTkzRjIwOTBBQkM0MTFFNkJENkJFRDE0QzRGOUFFMDIvMTkyNDE4RjZB QTE4MTFFQTk3QkM1NzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAsEAgABMAUDAwArWzAOBAIAAjAIAwYAJAQigAEwDQYJKoZIhvcNAQELBQAD ggEBAGzpj14xxKQSNrcJfGOJyKZVykaM3X3q3TCvlLRYzinXeIpI6Vb0hWhXprX3 Pnrq9lNyDWcAQm/A2k3Djwoeq8B103j/6z6YT8TpDPisiEq7MARvtpv2jpmkWk5N ATpTeRQuwz4t6EI65j4rsgtCeooIbhdEkWqaN3kNai0lj/al8J+hGEqgQNUoBEFI oz6OaP4zvgC/XsXTGkSzI4Q0k02DsOd6L9Wk3OwLpGa+CV8SzjHWB3FUu9Ciu6GT TTuowZ3Lg1mAUtq7r/p2z+uMKXcbqfgAHCabpg94NLN+zQC1PZyYvlacyo6JtOQs XnBtpJtuVHKeJ+ARO+FYMnFJUPw= -----END CERTIFICATE-----Generated at Fri May 24 17:57:01 2024 by rpki-client on console-fra.rpki-client.org