$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/4EA15AE44FD811ED8AEB0282C4F9AE02.roa File: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (raw, json) Hash identifier: pqIvgKVthk5LX/Ic+775j1f7FgbBbxGd5VIUAyPa1fQ= Subject key identifier: 58:DB:E2:6C:59:61:87:FF:9E:BF:E4:A4:06:CC:64:9A:74:99:5A:23 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1CCB Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/4EA15AE44FD811ED8AEB0282C4F9AE02.roa Signing time: Thu 28 Sep 2023 16:33:41 +0000 ROA not before: Thu 28 Sep 2023 16:33:41 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 134963 IP address blocks: 8.208.0.0/12 maxlen: 15 8.208.0.0/16 maxlen: 24 8.209.0.0/16 maxlen: 24 8.210.0.0/16 maxlen: 24 8.211.0.0/16 maxlen: 24 8.212.0.0/16 maxlen: 24 8.213.0.0/16 maxlen: 24 8.214.0.0/16 maxlen: 24 8.215.0.0/16 maxlen: 24 8.216.0.0/16 maxlen: 24 8.217.0.0/16 maxlen: 24 8.218.0.0/16 maxlen: 24 8.219.0.0/16 maxlen: 24 8.220.0.0/16 maxlen: 24 8.221.0.0/16 maxlen: 24 8.222.0.0/16 maxlen: 24 8.223.0.0/16 maxlen: 24 149.129.0.0/16 maxlen: 16 161.117.0.0/16 maxlen: 24 170.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 15:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7371 (0x1ccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Sep 28 16:33:41 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=6515aae4-829f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a5:7d:be:48:87:78:3c:36:d6:b6:55:0c:17: 7d:1f:74:6e:e9:8c:67:65:00:2c:f4:48:a4:5b:4d: 44:ac:1d:8c:bc:47:86:1f:b6:dd:e7:87:c9:03:53: a4:b3:9a:14:40:f5:aa:97:7c:ea:ba:12:66:93:80: bb:38:52:aa:20:4d:f0:5b:6a:d7:ed:0c:00:37:7d: db:43:14:60:36:da:8c:d9:a1:dd:7a:0c:1b:81:d0: c2:d4:59:b5:ad:af:0a:7e:5a:e9:41:0b:c2:64:28: 42:c7:0e:a8:a8:01:bd:22:4b:7f:52:a2:30:6d:cf: da:c9:9d:c2:99:dc:03:bc:4a:eb:70:73:fc:6b:2c: b5:c0:91:54:e8:13:b5:21:95:0e:80:9b:60:d4:94: 97:66:66:f3:be:3d:6c:d9:39:4b:e2:32:07:36:58: 73:08:48:a0:a9:1c:bd:32:dd:97:9c:cf:09:09:c9: b5:e4:ce:e2:06:6b:f0:f2:b6:26:02:b6:48:15:65: cf:17:f1:bc:34:3a:79:f1:af:a5:6b:d7:b1:4d:cf: 79:d6:01:ef:41:a6:dc:8f:83:a6:5b:fc:5b:5b:e6: ca:8c:2f:05:f8:b3:ea:25:6a:ca:91:08:e3:6a:cc: e5:2c:ac:55:05:0b:51:8e:cc:93:12:d2:7b:26:1c: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:E2:6C:59:61:87:FF:9E:BF:E4:A4:06:CC:64:9A:74:99:5A:23 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/4EA15AE44FD811ED8AEB0282C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 8.208.0.0/12 149.129.0.0/16 161.117.0.0/16 170.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 06:c1:20:e5:49:6b:6c:88:a7:65:e2:59:db:bb:a6:c9:37:b9: 43:da:c9:c1:99:48:f2:38:05:1f:69:da:37:97:5f:1b:79:99: 69:c1:61:ab:5a:d8:df:1b:e7:4c:cb:13:1c:88:65:f9:9f:0f: 5a:7e:2b:48:8b:89:17:61:ab:94:03:5b:2f:a2:1c:45:b4:8e: ce:4f:92:eb:24:bb:d2:95:12:ed:7c:85:f4:06:4e:18:42:d3: 4a:8a:a9:71:79:7c:bf:eb:6b:cb:2e:3f:8a:57:6f:05:fe:b8: 33:80:44:ee:5f:93:9f:25:17:81:06:f6:2b:8d:06:0d:6c:2c: 33:b9:43:0d:cd:f2:7e:38:f8:aa:5f:9c:07:22:32:05:d5:5e: 42:e6:2a:7c:3c:9a:0c:aa:c7:02:83:ed:1c:22:30:59:34:6d: 6b:29:ca:ee:16:93:e7:06:f7:14:f1:37:eb:44:58:41:43:2a: 81:07:71:20:a1:b8:00:c5:ce:fa:2f:46:d1:1d:03:55:f4:51: 71:12:03:14:29:c1:ad:ba:c2:8f:94:74:fb:38:85:24:55:93: cc:b0:3a:f0:4f:42:71:d8:9a:13:5d:ed:50:f2:c8:8b:0d:60: 3b:a9:6b:78:09:fe:80:8a:d3:ef:bb:7f:7d:9f:7b:8a:40:41: 8d:d9:8b:b5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICHMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjMwOTI4MTYzMzQxWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTE1YWFlNC04MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKV9vkiHeDw21rZVDBd9H3Ru6YxnZQAs9EikW01ErB2MvEeGH7bd54fJA1Ok s5oUQPWql3zquhJmk4C7OFKqIE3wW2rX7QwAN33bQxRgNtqM2aHdegwbgdDC1Fm1 ra8KflrpQQvCZChCxw6oqAG9Ikt/UqIwbc/ayZ3CmdwDvErrcHP8ayy1wJFU6BO1 IZUOgJtg1JSXZmbzvj1s2TlL4jIHNlhzCEigqRy9Mt2XnM8JCcm15M7iBmvw8rYm ArZIFWXPF/G8NDp58a+la9exTc951gHvQabcj4OmW/xbW+bKjC8F+LPqJWrKkQjj aszlLKxVBQtRjsyTEtJ7JhzTzwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFFjb4mxZ YYf/nr/kpAbMZJp0mVojMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvQUQ2MjkyMjJCNTI1MTFFNkFGNkM4OTVFQzRGOUFFMDIvNEVBMTVBRTQ0 RkQ4MTFFRDhBRUIwMjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDAwQI0AMDAJWBAwMAoXUDAwCqITANBgkqhkiG9w0BAQsFAAOC AQEABsEg5UlrbIinZeJZ27umyTe5Q9rJwZlI8jgFH2naN5dfG3mZacFhq1rY3xvn TMsTHIhl+Z8PWn4rSIuJF2GrlANbL6IcRbSOzk+S6yS70pUS7XyF9AZOGELTSoqp cXl8v+tryy4/ildvBf64M4BE7l+TnyUXgQb2K40GDWwsM7lDDc3yfjj4ql+cByIy BdVeQuYqfDyaDKrHAoPtHCIwWTRtaynK7haT5wb3FPE360RYQUMqgQdxIKG4AMXO +i9G0R0DVfRRcRIDFCnBrbrCj5R0+ziFJFWTzLA68E9CcdiaE13tUPLIiw1gO6lr eAn+gIrT77t/fZ97ikBBjdmLtQ== -----END CERTIFICATE-----Generated at Mon May 20 17:22:33 2024 by rpki-client on console-fra.rpki-client.org