$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/C4CB04C4E2A911EBB4631960C4F9AE02.roa File: C4CB04C4E2A911EBB4631960C4F9AE02.roa (raw, json) Hash identifier: /IQosXeTs3yKI2PYcZx2uhrQ/iH7sT08Mb2D4+fQ4bg= Subject key identifier: C4:07:81:F5:E8:89:45:C3:61:AA:18:2E:2F:11:60:91:5E:5F:D4:27 Certificate issuer: /CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Certificate serial: 04B3 Authority key identifier: 9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/C4CB04C4E2A911EBB4631960C4F9AE02.roa Signing time: Fri 17 May 2024 02:05:30 +0000 ROA not before: Fri 17 May 2024 02:05:30 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 55581 IP address blocks: 27.116.36.0/22 maxlen: 24 45.125.120.0/22 maxlen: 24 103.166.56.0/23 maxlen: 24 103.194.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 May 2024 01:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1203 (0x4b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3B6C/serialNumber=9B09E95FE46ABDBC9F9020585F9A583267773FC9 Validity Not Before: May 17 02:05:30 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6646bb6a-598d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c1:7b:3c:74:9a:f1:9a:76:b2:73:87:ac:bd: de:92:7b:92:50:9b:df:d1:75:e6:5b:a8:37:55:fa: 8c:01:4a:86:fb:28:68:c0:0e:70:e8:91:d5:9c:d6: a4:cc:b5:3d:0b:b5:f4:5f:a4:26:00:75:95:6e:08: 9d:fe:25:28:71:c5:ac:5a:1c:41:7c:09:7a:d3:93: 12:f3:57:95:24:30:eb:7d:29:29:8a:c5:2e:77:7e: 53:e5:4a:23:5b:6b:f4:80:9b:aa:44:ad:26:9d:a7: 44:de:1a:1b:7f:fa:6a:78:88:ab:6e:85:f2:bc:21: 37:41:07:ba:6b:aa:b3:74:36:4a:5d:12:ae:d5:2b: c8:bc:74:28:8d:a0:22:b4:ba:3f:4c:d9:c5:d1:61: 48:9d:46:4c:b0:f5:86:98:0c:9f:ee:71:16:35:4c: 94:9e:2c:6b:9a:f5:2b:e1:61:1c:19:f4:41:8d:63: 01:b1:c8:0e:40:44:c8:f2:0d:30:f2:ea:70:53:db: de:75:f2:28:64:18:5a:33:42:b1:19:5d:55:e7:d8: 08:a1:c3:40:9c:c9:3f:89:5f:43:e1:64:cd:be:f2: ac:9f:0d:3e:00:82:ea:cb:49:86:dc:60:0f:04:7a: 42:b9:43:33:29:22:9d:14:a2:ad:c5:f6:82:5b:0b: fe:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:07:81:F5:E8:89:45:C3:61:AA:18:2E:2F:11:60:91:5E:5F:D4:27 X509v3 Authority Key Identifier: keyid:9B:09:E9:5F:E4:6A:BD:BC:9F:90:20:58:5F:9A:58:32:67:77:3F:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/mwnpX-RqvbyfkCBYX5pYMmd3P8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mwnpX-RqvbyfkCBYX5pYMmd3P8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B6C/8B08920AE2A511EBAD13CC35C4F9AE02/C4CB04C4E2A911EBB4631960C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.116.36.0/22 45.125.120.0/22 103.166.56.0/23 103.194.0.0/22 Signature Algorithm: sha256WithRSAEncryption 69:f5:e3:56:82:ea:87:2d:01:0e:06:fa:70:e8:86:b1:46:8e: 1c:23:da:34:43:ab:0d:d4:ba:10:1a:b5:90:7a:6d:0a:6c:0c: 2c:89:37:34:dd:fb:fd:a9:64:45:4c:09:08:a1:64:af:e6:6a: fc:ff:a9:57:22:6b:be:1d:db:db:ba:1b:f8:3e:c4:8e:10:a5: c5:1d:49:8d:08:7e:f7:6a:2f:34:6b:a2:f7:97:2c:e2:89:2f: 1c:9c:f2:a1:f9:00:47:6e:3c:38:db:2e:75:89:e1:92:1d:d1: 20:23:2b:6f:64:79:9d:21:71:48:e7:40:45:9f:98:0c:e1:23: ec:28:23:90:58:14:58:11:95:c9:33:c5:70:92:4b:3c:fe:b4: 6e:78:e1:1e:72:bc:b5:e7:b2:3d:3e:fd:3e:0f:af:a9:bb:dc: 97:67:d8:60:12:0c:f1:f5:3d:4e:26:aa:92:19:d9:1e:76:98: 84:56:ff:23:13:da:4c:02:78:70:fa:02:28:75:3f:7c:0b:c8: 73:b9:37:a5:4a:b0:b1:62:82:15:be:4b:cd:05:39:59:7e:c4: c4:ce:ee:6d:f0:7a:5b:5e:d8:3a:a9:ec:01:70:5e:1e:3f:eb: 72:0d:3e:bb:87:c6:91:bd:d5:45:fd:b2:c1:08:40:ff:02:91: ae:40:8c:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNCNkMxMTAvBgNVBAUTKDlCMDlFOTVGRTQ2QUJEQkM5RjkwMjA1ODVGOUE1ODMy Njc3NzNGQzkwHhcNMjQwNTE3MDIwNTMwWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQ2YmI2YS01OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cF7PHSa8Zp2snOHrL3eknuSUJvf0XXmW6g3VfqMAUqG+yhowA5w6JHVnNak zLU9C7X0X6QmAHWVbgid/iUoccWsWhxBfAl605MS81eVJDDrfSkpisUud35T5Uoj W2v0gJuqRK0mnadE3hobf/pqeIirboXyvCE3QQe6a6qzdDZKXRKu1SvIvHQojaAi tLo/TNnF0WFInUZMsPWGmAyf7nEWNUyUnixrmvUr4WEcGfRBjWMBscgOQETI8g0w 8upwU9vedfIoZBhaM0KxGV1V59gIocNAnMk/iV9D4WTNvvKsnw0+AILqy0mG3GAP BHpCuUMzKSKdFKKtxfaCWwv+hQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFMQHgfXo iUXDYaoYLi8RYJFeX9QnMB8GA1UdIwQYMBaAFJsJ6V/kar28n5AgWF+aWDJndz/J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0I2Qy84QjA4OTIwQUUy QTUxMUVCQUQxM0NDMzVDNEY5QUUwMi9td25wWC1ScXZieWZrQ0JZWDVwWU1tZDNQ OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL213bnBYLVJxdmJ5ZmtDQllYNXBZTW1kM1A4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjNCNkMvOEIwODkyMEFFMkE1MTFFQkFEMTNDQzM1QzRGOUFFMDIvQzRDQjA0QzRF MkE5MTFFQkI0NjMxOTYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIbdCQDBAItfXgDBAFnpjgDBAJnwgAwDQYJKoZIhvcNAQEL BQADggEBAGn141aC6octAQ4G+nDohrFGjhwj2jRDqw3UuhAatZB6bQpsDCyJNzTd +/2pZEVMCQihZK/mavz/qVcia74d29u6G/g+xI4QpcUdSY0IfvdqLzRroveXLOKJ Lxyc8qH5AEduPDjbLnWJ4ZId0SAjK29keZ0hcUjnQEWfmAzhI+woI5BYFFgRlckz xXCSSzz+tG544R5yvLXnsj0+/T4Pr6m73Jdn2GASDPH1PU4mqpIZ2R52mIRW/yMT 2kwCeHD6Aih1P3wLyHO5N6VKsLFighW+S80FOVl+xMTO7m3welte2Dqp7AFwXh4/ 63INPruHxpG91UX9ssEIQP8Cka5AjLs= -----END CERTIFICATE-----Generated at Tue May 21 02:53:28 2024 by rpki-client on console-fra.rpki-client.org