$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/206929C4CA4F11EABA13087FC4F9AE02.roa File: 206929C4CA4F11EABA13087FC4F9AE02.roa (raw, json) Hash identifier: HN2wxXwa+kSK089yxD0HDWrYydcNndyobtFpGLOTHwg= Subject key identifier: 16:34:E3:4A:A0:74:71:61:8E:AB:C5:A4:A9:6E:97:C1:0F:A6:BA:BA Certificate issuer: /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Certificate serial: 079F Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/206929C4CA4F11EABA13087FC4F9AE02.roa Signing time: Tue 30 Apr 2024 23:01:12 +0000 ROA not before: Tue 30 Apr 2024 23:01:12 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 18222 IP address blocks: 45.115.216.0/22 maxlen: 22 45.115.216.0/23 maxlen: 24 45.115.218.0/23 maxlen: 24 103.90.84.0/22 maxlen: 22 103.90.84.0/23 maxlen: 23 103.90.84.0/24 maxlen: 24 103.90.85.0/24 maxlen: 24 103.90.86.0/23 maxlen: 23 103.90.86.0/24 maxlen: 24 103.90.87.0/24 maxlen: 24 2400:89e0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Validity Not Before: Apr 30 23:01:12 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=66317838-e777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5b:ce:9d:a2:b6:7a:1f:e8:d9:1b:08:a2:29: 83:5f:aa:be:13:ab:4d:3a:b8:d1:42:2a:7c:1c:6e: 6d:bc:8f:c6:b9:17:c0:06:a9:7c:a4:12:79:7f:2f: 15:b6:b9:be:f6:63:f1:08:d8:89:85:98:f4:b7:c5: e3:56:5a:3f:de:48:1e:79:31:54:a0:d6:38:f5:98: 87:0a:eb:f7:58:30:45:e9:7d:5b:7c:49:a2:86:e5: ac:c6:a8:5b:1a:79:b4:a4:5d:19:66:80:03:87:49: 13:d7:ea:01:fe:78:3e:27:3a:f5:5f:ee:c9:7a:b8: f0:ee:59:fc:3f:1e:0c:83:cc:fc:7e:6b:b9:9c:0d: 8e:27:12:58:00:9b:1a:a2:1f:26:c6:a5:c9:7e:32: 19:3a:71:d8:06:3e:fc:74:68:a5:99:62:80:7e:5c: 9c:6d:5e:65:d6:c2:95:c0:cb:8f:cd:05:98:2c:2e: 49:a8:3f:01:26:23:7b:d4:e4:d9:b4:58:d6:3a:64: 98:a6:88:3a:62:cc:85:31:08:9b:df:64:cd:67:92: a4:bf:20:83:26:3d:06:96:9b:89:a8:a2:a4:69:c5: 1b:5b:83:c1:31:db:8f:a8:f2:84:f3:c2:9b:02:d3: 80:af:d8:0a:78:a6:00:b5:fe:4b:8c:60:dd:d8:f3: 91:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:34:E3:4A:A0:74:71:61:8E:AB:C5:A4:A9:6E:97:C1:0F:A6:BA:BA X509v3 Authority Key Identifier: keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/206929C4CA4F11EABA13087FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.216.0/22 103.90.84.0/22 IPv6: 2400:89e0::/32 Signature Algorithm: sha256WithRSAEncryption 44:8f:41:f7:a4:6f:89:ff:15:6d:96:52:9a:06:20:28:be:a8: 54:3e:1c:75:70:1a:2d:ae:76:37:d8:ec:2b:75:38:22:36:54: 79:40:f4:b5:d1:10:06:c1:de:6d:ab:31:a3:4c:33:da:b9:81: f4:f3:70:d1:d9:0a:b5:8d:df:24:e2:5f:31:f4:de:46:c4:15: 9b:bc:e6:9a:95:75:4e:8c:ef:6f:bb:ea:ec:5f:67:50:16:1c: 11:ec:33:25:c9:90:1f:cd:82:77:a9:e2:19:9a:5f:de:0c:18: 5f:cf:6b:08:65:bc:5c:98:21:eb:d2:67:f7:13:9b:de:52:7f: 92:73:35:fc:3f:00:d9:cf:f3:d4:21:45:bf:9b:4e:7a:70:1c: 3e:97:b1:ee:4b:e3:38:8f:31:2b:8e:d2:44:48:c5:76:19:9b: ae:9a:1c:ef:9d:d9:a8:df:65:41:a5:88:40:2b:13:e2:89:49: 84:5b:eb:4a:4b:46:fb:f6:7c:ba:45:90:4e:d5:00:97:c2:13: 15:35:a9:c3:09:ad:2f:18:19:11:d4:87:a5:be:5e:54:11:d1: 20:b1:c0:46:f2:c9:4e:4e:4e:06:41:ab:83:c8:79:a2:07:e1: 6d:ff:53:64:b1:3c:4f:2f:88:bf:b3:62:88:f3:11:f9:24:b2: e2:54:e7:a1 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDQzgxMTAvBgNVBAUTKDU2RDdCMTVDQzFBRTgyNzc4NThENjQ5MkMwMURENTMz MDg0NENDMDYwHhcNMjQwNDMwMjMwMTEyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjMxNzgzOC1lNzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5VvOnaK2eh/o2RsIoimDX6q+E6tNOrjRQip8HG5tvI/GuRfABql8pBJ5fy8V trm+9mPxCNiJhZj0t8XjVlo/3kgeeTFUoNY49ZiHCuv3WDBF6X1bfEmihuWsxqhb Gnm0pF0ZZoADh0kT1+oB/ng+Jzr1X+7Jerjw7ln8Px4Mg8z8fmu5nA2OJxJYAJsa oh8mxqXJfjIZOnHYBj78dGilmWKAflycbV5l1sKVwMuPzQWYLC5JqD8BJiN71OTZ tFjWOmSYpog6YsyFMQib32TNZ5KkvyCDJj0GlpuJqKKkacUbW4PBMduPqPKE88Kb AtOAr9gKeKYAtf5LjGDd2POR3wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBY040qg dHFhjqvFpKlul8EPprq6MB8GA1UdIwQYMBaAFFbXsVzBroJ3hY1kksAd1TMIRMwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENDOC8wMTJFRDFCRUNB NEQxMUVBQTEzMkUxN0JDNEY5QUUwMi9WdGV4WE1HdWduZUZqV1NTd0IzVk13aEV6 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0ZXhYTUd1Z25lRmpXU1N3QjNWTXdoRXpBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBDQzgvMDEyRUQxQkVDQTREMTFFQUExMzJFMTdCQzRGOUFFMDIvMjA2OTI5QzRD QTRGMTFFQUJBMTMwODdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItc9gDBAJnWlQwDQQCAAIwBwMFACQAieAwDQYJKoZIhvcN AQELBQADggEBAESPQfekb4n/FW2WUpoGICi+qFQ+HHVwGi2udjfY7Ct1OCI2VHlA 9LXREAbB3m2rMaNMM9q5gfTzcNHZCrWN3yTiXzH03kbEFZu85pqVdU6M72+76uxf Z1AWHBHsMyXJkB/Ngnep4hmaX94MGF/PawhlvFyYIevSZ/cTm95Sf5JzNfw/ANnP 89QhRb+bTnpwHD6Xse5L4ziPMSuO0kRIxXYZm66aHO+d2ajfZUGliEArE+KJSYRb 60pLRvv2fLpFkE7VAJfCExU1qcMJrS8YGRHUh6W+XlQR0SCxwEbyyU5OTgZBq4PI eaIH4W3/U2SxPE8viL+zYojzEfkksuJU56E= -----END CERTIFICATE-----Generated at Sun May 19 00:30:23 2024 by rpki-client on console-ams.rpki-client.org