$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa File: 171130AE15F011EC805A0A2FC4F9AE02.roa (raw, json) Hash identifier: Ori7x6Ug24EnMmdTF/X3c+lFPZWVZ49paG7mM2LK2nE= Subject key identifier: 26:70:59:AE:CF:79:DE:D6:C6:64:40:06:F7:D4:A7:0A:4B:3E:58:0F Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 2459 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa Signing time: Thu 24 Aug 2023 16:12:23 +0000 ROA not before: Thu 24 Aug 2023 16:12:23 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 56099 IP address blocks: 103.89.236.0/22 maxlen: 24 223.25.0.0/22 maxlen: 24 223.25.4.0/22 maxlen: 24 223.25.8.0/22 maxlen: 24 223.25.12.0/22 maxlen: 24 223.25.16.0/22 maxlen: 24 223.25.20.0/22 maxlen: 24 223.25.24.0/22 maxlen: 24 223.25.28.0/22 maxlen: 24 223.25.32.0/22 maxlen: 24 223.25.36.0/22 maxlen: 24 223.25.40.0/22 maxlen: 24 223.25.44.0/22 maxlen: 24 223.25.48.0/22 maxlen: 24 223.25.52.0/22 maxlen: 24 223.25.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 May 2024 16:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9305 (0x2459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Aug 24 16:12:23 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=64e78167-b247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:01:da:c9:d6:67:57:0d:9f:b3:4f:72:64:f0: c1:80:5f:4a:ef:67:91:8f:9b:8e:ab:d4:4c:96:db: 6c:5f:0e:fa:58:4e:80:3a:08:95:27:bc:ff:77:a7: 84:40:ec:e0:3f:4c:f2:ce:27:d1:a9:b2:f6:8d:6a: bf:a2:25:ad:a8:cf:94:34:9d:7b:c0:40:4e:72:02: 4b:3e:0f:86:5c:87:0e:64:51:ef:28:2f:19:53:2c: 97:c4:2e:04:a1:f7:35:38:de:06:5f:7b:2d:e5:4b: 7c:3c:4d:c3:07:ed:85:6d:2a:f7:81:0b:79:2c:5b: 86:62:39:b3:c6:ac:33:0b:c1:7a:8b:70:a3:2f:3b: aa:ed:19:67:14:3a:a4:24:cc:33:ac:71:a2:93:b4: 78:88:41:32:82:bd:53:3b:1d:42:07:33:d4:d6:48: 4c:fb:3d:ca:2d:b9:c5:25:d1:74:d6:af:9f:30:27: 5d:f1:42:73:a8:2e:51:ba:f1:a2:bd:eb:fb:5a:aa: fe:b9:50:e2:51:2c:ac:5d:33:92:fa:1a:73:85:d5: f4:55:95:31:04:04:4d:05:4a:83:1e:f2:a4:8b:86: 64:52:eb:5f:d8:a3:2d:b2:03:ae:3e:45:8d:c2:f2: f7:5c:5b:01:10:e0:be:bf:08:72:90:ef:1c:5b:72: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:70:59:AE:CF:79:DE:D6:C6:64:40:06:F7:D4:A7:0A:4B:3E:58:0F X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/171130AE15F011EC805A0A2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.236.0/22 223.25.0.0-223.25.59.255 Signature Algorithm: sha256WithRSAEncryption c2:b3:90:d6:c0:4d:d9:f9:c9:b1:6d:f1:00:c7:74:a4:f6:ec: df:56:fb:67:a5:42:f0:56:9a:5e:7f:f0:4d:d6:8a:de:25:f0: c9:8f:3e:22:be:62:46:21:d3:b3:49:9f:3b:b1:97:a3:75:10: c0:ea:9b:87:5b:5b:90:e6:b9:f9:29:f6:b9:fa:d0:06:bd:c8: 96:50:ac:c0:75:af:54:96:76:54:32:47:c1:18:48:d4:dc:24: 2d:90:e5:b5:fa:68:ff:3f:15:8f:21:b3:4b:60:69:95:7e:94: 4f:c0:81:ef:24:dd:90:cf:79:1d:1c:6d:d5:b0:a3:bf:c0:30: e1:19:bd:69:78:4a:2a:9f:2c:7c:21:a0:3f:71:92:46:78:e6: 24:3e:e7:c6:a8:99:a5:7b:cb:9f:d4:d2:28:34:0d:87:ae:16: 05:ab:39:10:7a:7d:aa:e5:5b:07:7a:f0:19:b0:56:d0:3f:0f: d4:7a:2c:b3:6a:ef:84:42:34:0a:be:9c:83:a3:c8:dd:20:70: 6b:3d:da:5e:1c:d9:b6:19:57:e6:bf:ff:6a:f3:ba:3e:6a:e8: 4e:8f:4f:c6:b4:db:4e:7f:56:28:75:3d:dd:c5:02:c1:6b:a4: 35:41:70:52:48:d2:8e:b3:ca:18:fa:34:b3:1d:53:73:06:c5: 7e:fa:59:45 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICJFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjMwODI0MTYxMjIzWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NGU3ODE2Ny1iMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8AHaydZnVw2fs09yZPDBgF9K72eRj5uOq9RMlttsXw76WE6AOgiVJ7z/d6eE QOzgP0zyzifRqbL2jWq/oiWtqM+UNJ17wEBOcgJLPg+GXIcOZFHvKC8ZUyyXxC4E ofc1ON4GX3st5Ut8PE3DB+2FbSr3gQt5LFuGYjmzxqwzC8F6i3CjLzuq7RlnFDqk JMwzrHGik7R4iEEygr1TOx1CBzPU1khM+z3KLbnFJdF01q+fMCdd8UJzqC5RuvGi vev7Wqr+uVDiUSysXTOS+hpzhdX0VZUxBARNBUqDHvKki4ZkUutf2KMtsgOuPkWN wvL3XFsBEOC+vwhykO8cW3J9oQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCZwWa7P ed7WxmRABvfUpwpLPlgPMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgxMTkvQTdFQzU5NkMxMzMzMTFFNUI4M0QwRjdCQzRGOUFFMDIvMTcxMTMwQUUx NUYwMTFFQzgwNUEwQTJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQcBAf8E HTAbMBkEAgABMBMDBAJnWewwCwMDAN8ZAwQC3xk4MA0GCSqGSIb3DQEBCwUAA4IB AQDCs5DWwE3Z+cmxbfEAx3Sk9uzfVvtnpULwVppef/BN1oreJfDJjz4ivmJGIdOz SZ87sZejdRDA6puHW1uQ5rn5Kfa5+tAGvciWUKzAda9UlnZUMkfBGEjU3CQtkOW1 +mj/PxWPIbNLYGmVfpRPwIHvJN2Qz3kdHG3VsKO/wDDhGb1peEoqnyx8IaA/cZJG eOYkPufGqJmle8uf1NIoNA2HrhYFqzkQen2q5VsHevAZsFbQPw/Ueiyzau+EQjQK vpyDo8jdIHBrPdpeHNm2GVfmv/9q87o+auhOj0/GtNtOf1YodT3dxQLBa6Q1QXBS SNKOs8oY+jSzHVNzBsV++llF -----END CERTIFICATE-----Generated at Thu May 16 17:51:54 2024 by rpki-client on console-ams.rpki-client.org