$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa File: 5480D316764D11EA8CB5C039C4F9AE02.roa (raw, json) Hash identifier: 0Ucpgjhaf7kx+WxYXGSsBaFJZkKCARop7bQf83/hNh8= Subject key identifier: 9C:45:A4:55:67:17:BB:84:11:FF:43:20:59:02:D0:71:70:95:F6:B5 Certificate issuer: /CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Certificate serial: 2091 Authority key identifier: 3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa Signing time: Tue 26 Sep 2023 16:13:07 +0000 ROA not before: Tue 26 Sep 2023 16:13:07 +0000 ROA not after: Sun 01 Dec 2024 00:00:00 +0000 asID: 56308 IP address blocks: 43.255.124.0/22 maxlen: 22 45.125.196.0/22 maxlen: 22 2407:8100:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8337 (0x2091) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EBF/serialNumber=3ACCB69539AC9F4288BCD0F0A54250D592F540D4 Validity Not Before: Sep 26 16:13:07 2023 GMT Not After : Dec 1 00:00:00 2024 GMT Subject: CN=65130313-a24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a9:31:42:13:9b:02:2f:83:cb:dd:f3:84:c4: e8:39:18:c2:8e:08:76:26:31:4f:be:54:0a:38:89: 68:c2:fa:c0:94:05:f2:52:01:7e:83:0f:83:f4:7e: 98:e5:fc:57:52:7b:bb:b1:2f:ad:75:b6:c8:be:fc: 91:c1:24:79:a5:1e:06:16:33:6b:88:88:22:09:ba: 03:bf:e4:08:ad:d2:7f:e1:44:56:21:01:c9:e2:09: 5a:d7:89:19:5a:9c:c1:54:c6:68:2c:bf:cd:72:90: 8f:1c:bb:ff:3b:76:2e:03:c6:4f:98:29:eb:f2:be: 00:f9:b9:fa:9c:cc:82:11:ec:22:1f:0b:ac:98:16: 50:67:8d:c8:8f:8d:2d:15:fb:fe:21:d4:75:9d:8b: 49:e4:07:34:16:23:27:02:2a:cb:32:2a:57:02:ea: 5f:e8:b1:18:a0:8a:0d:57:66:34:6c:90:5f:66:9a: 4c:84:af:80:e5:bd:c1:46:65:63:cd:1a:7a:79:17: 3b:2f:a3:93:af:12:29:a8:69:a4:07:fa:c5:12:cb: 87:13:85:45:fe:56:63:d2:1b:48:d8:0b:62:ed:9a: b5:66:1b:03:f0:c4:09:cc:76:6e:26:71:42:1b:78: ff:09:8c:3a:fc:38:39:55:7d:98:de:05:59:40:2a: 83:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:A4:55:67:17:BB:84:11:FF:43:20:59:02:D0:71:70:95:F6:B5 X509v3 Authority Key Identifier: keyid:3A:CC:B6:95:39:AC:9F:42:88:BC:D0:F0:A5:42:50:D5:92:F5:40:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Osy2lTmsn0KIvNDwpUJQ1ZL1QNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EBF/5F84D7D8DB8011E59AB7ED1EC4F9AE02/5480D316764D11EA8CB5C039C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.255.124.0/22 45.125.196.0/22 IPv6: 2407:8100:5::/48 Signature Algorithm: sha256WithRSAEncryption 65:ac:c7:20:0d:a6:3f:77:27:82:9b:62:e2:6b:ae:f2:05:5a: 9d:b4:99:49:23:00:3e:ef:8c:aa:56:22:ab:c9:71:6e:3f:67: 96:c7:8e:53:56:50:73:f6:31:47:59:7f:0a:39:99:32:a7:f4: 1a:0b:69:97:f7:9a:2a:73:ba:aa:86:5a:e6:ed:1b:78:85:f9: 95:6a:ae:36:d8:22:6b:4b:fa:80:21:77:74:fd:88:b2:1c:12: 3c:27:39:82:35:ac:f9:15:79:c2:d9:5f:c3:34:2e:39:3f:52: 92:1c:51:8f:ea:df:d2:18:84:65:e7:20:ec:a1:d5:b4:df:82: c1:db:05:f1:8a:79:7f:52:4c:d4:ef:a2:1d:ec:96:ef:15:dd: a5:f1:bf:0f:d6:87:66:c6:04:b3:8f:44:48:09:9f:77:c0:e0: 11:27:00:ed:2f:46:d4:27:e7:67:1c:95:bf:df:4a:32:a2:64: 19:41:8a:91:dc:fe:66:3d:0e:63:4a:d0:ae:3f:a0:41:3a:a8: 59:1c:8e:b4:f8:db:78:52:9a:47:d4:8d:65:6f:18:84:9e:6b: e9:c2:23:37:fd:f4:da:d1:49:d2:31:d8:f0:9f:c3:b3:75:51: 64:7a:c5:cf:d0:a4:c8:63:e8:3e:7c:68:7c:2a:21:02:fa:8f: d7:e7:86:de -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICIJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBFQkYxMTAvBgNVBAUTKDNBQ0NCNjk1MzlBQzlGNDI4OEJDRDBGMEE1NDI1MEQ1 OTJGNTQwRDQwHhcNMjMwOTI2MTYxMzA3WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NTEzMDMxMy1hMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoakxQhObAi+Dy93zhMToORjCjgh2JjFPvlQKOIlowvrAlAXyUgF+gw+D9H6Y 5fxXUnu7sS+tdbbIvvyRwSR5pR4GFjNriIgiCboDv+QIrdJ/4URWIQHJ4gla14kZ WpzBVMZoLL/NcpCPHLv/O3YuA8ZPmCnr8r4A+bn6nMyCEewiHwusmBZQZ43Ij40t Ffv+IdR1nYtJ5Ac0FiMnAirLMipXAupf6LEYoIoNV2Y0bJBfZppMhK+A5b3BRmVj zRp6eRc7L6OTrxIpqGmkB/rFEsuHE4VF/lZj0htI2Ati7Zq1ZhsD8MQJzHZuJnFC G3j/CYw6/Dg5VX2Y3gVZQCqDpwIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFJxFpFVn F7uEEf9DIFkC0HFwlfa1MB8GA1UdIwQYMBaAFDrMtpU5rJ9CiLzQ8KVCUNWS9UDU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEVCRi81Rjg0RDdEOERC ODAxMUU1OUFCN0VEMUVDNEY5QUUwMi9Pc3kybFRtc24wS0l2TkR3cFVKUTFaTDFR TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09zeTJsVG1zbjBLSXZORHdwVUpRMVpMMVFOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBFQkYvNUY4NEQ3RDhEQjgwMTFFNTlBQjdFRDFFQzRGOUFFMDIvNTQ4MEQzMTY3 NjREMTFFQThDQjVDMDM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIr/3wDBAItfcQwDwQCAAIwCQMHACQHgQAABTANBgkqhkiG 9w0BAQsFAAOCAQEAZazHIA2mP3cngpti4muu8gVanbSZSSMAPu+MqlYiq8lxbj9n lseOU1ZQc/YxR1l/CjmZMqf0Ggtpl/eaKnO6qoZa5u0beIX5lWquNtgia0v6gCF3 dP2IshwSPCc5gjWs+RV5wtlfwzQuOT9SkhxRj+rf0hiEZecg7KHVtN+CwdsF8Yp5 f1JM1O+iHeyW7xXdpfG/D9aHZsYEs49ESAmfd8DgEScA7S9G1CfnZxyVv99KMqJk GUGKkdz+Zj0OY0rQrj+gQTqoWRyOtPjbeFKaR9SNZW8YhJ5r6cIjN/302tFJ0jHY 8J/Ds3VRZHrFz9CkyGPoPnxofCohAvqP1+eG3g== -----END CERTIFICATE-----Generated at Sat May 18 16:57:55 2024 by rpki-client on console-fra.rpki-client.org