$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/CCAA0F667B8911EE9370D427C4F9AE02.roa File: CCAA0F667B8911EE9370D427C4F9AE02.roa (raw, json) Hash identifier: g3rXvCsXTLgyMSwvQGJFedrrzYlZJGmg81OWhtnreEI= Subject key identifier: 30:54:F3:FA:49:81:D8:2D:FD:04:BE:43:8D:E9:13:FA:E8:96:A2:07 Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Certificate serial: 02 Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/CCAA0F667B8911EE9370D427C4F9AE02.roa Signing time: Sun 05 Nov 2023 03:17:07 +0000 ROA not before: Sun 05 Nov 2023 03:17:07 +0000 ROA not after: Fri 31 Jan 2025 00:00:00 +0000 asID: 152094 IP address blocks: 116.199.202.0/23 maxlen: 23 2401:4d60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B Validity Not Before: Nov 5 03:17:07 2023 GMT Not After : Jan 31 00:00:00 2025 GMT Subject: CN=65470933-3dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:8f:63:1e:d6:79:6b:93:9a:72:c3:f9:2f: 32:7a:e8:83:d8:f3:08:a1:cd:d6:6a:aa:2d:93:d2: 89:f7:a6:e4:d6:a8:6a:b7:ff:08:78:2c:ae:59:23: bd:09:8d:26:e6:66:9d:36:c5:2a:1b:d5:d8:9d:da: c3:78:74:3b:ee:59:ac:5c:80:c1:f0:df:4c:e6:8b: f6:ee:5c:75:71:4d:a6:a9:de:5e:58:d2:94:29:35: e7:bd:22:85:cd:b5:59:8f:61:33:97:a9:b6:fc:11: dd:a5:83:a1:af:43:b6:45:66:40:8b:b3:7c:0a:4a: 2b:31:d2:9d:52:ba:76:60:cf:f7:61:6b:38:2b:15: ed:2f:6f:ff:77:b0:2b:4c:57:b9:4e:06:78:2c:57: db:ec:12:39:02:c5:e4:61:3e:36:3e:5f:b6:d1:a6: cf:fd:15:ab:3b:98:cc:1b:cf:fe:56:9d:ca:e5:df: 75:8d:a9:07:55:fc:1d:77:c1:85:50:a4:4d:c0:13: a9:71:f0:88:dc:e3:63:8c:df:9a:76:87:30:39:b4: 8e:c6:4a:44:05:22:74:ed:2a:bb:06:9f:2c:ea:46: 85:bf:74:a8:9a:88:30:07:30:b0:23:7c:b2:4c:77: a5:bf:d4:02:3b:80:6c:b9:72:95:ab:f7:ee:bb:31: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:54:F3:FA:49:81:D8:2D:FD:04:BE:43:8D:E9:13:FA:E8:96:A2:07 X509v3 Authority Key Identifier: keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/CCAA0F667B8911EE9370D427C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.199.202.0/23 IPv6: 2401:4d60::/32 Signature Algorithm: sha256WithRSAEncryption 95:e1:00:1b:84:e1:2a:7c:9d:99:e1:5b:02:d7:67:d7:0f:8f: 34:b2:23:0b:cf:9b:7d:f7:b5:d5:84:ca:e3:fd:87:25:b9:bb: 46:a8:d1:d9:3e:ef:ad:32:ec:e9:99:c9:4b:08:47:dd:5d:51: 8d:94:71:7b:bb:ed:d7:f8:c0:e6:d6:4d:5c:f4:b2:4e:ee:e9: 61:6c:db:17:44:27:e1:80:ce:28:2a:aa:12:b9:a3:d0:c1:0e: 21:ed:cf:1f:da:2a:cd:28:81:03:a1:89:a2:e7:e7:38:b4:8a: 92:c3:d6:b1:07:06:fb:1a:18:58:a4:95:44:25:83:c8:01:71: 48:bf:ae:f2:8d:fa:06:51:b3:6a:fb:e9:fc:2d:bb:54:43:fe: 33:98:38:2c:bb:e3:de:01:69:69:1d:3c:0d:d8:9f:f9:77:3c: 07:4a:74:b2:c9:a3:d6:2a:c4:37:6c:f7:86:ff:a3:41:68:fd: 81:78:55:a4:1c:37:ef:30:7a:8e:02:10:40:d4:9c:d6:95:e3: 5b:ef:e5:7a:11:85:f9:fc:55:ed:5b:68:76:56:4c:87:6c:47: 28:22:66:f4:35:79:32:a1:7a:31:a5:09:4e:14:56:da:e2:1b: a3:18:f9:64:7a:a8:96:ba:19:9a:c7:86:81:20:68:e8:b9:3b: e9:88:0d:fb -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUU5RDExMC8GA1UEBRMoQkUwMTkxMzdBODFEN0U5Q0Q5QUY1NkNEOTFDNTg3QzJF RjA2RTkzQjAeFw0yMzExMDUwMzE3MDdaFw0yNTAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1NDcwOTMzLTNkYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ+49jHtZ5a5OacsP5LzJ66IPY8wihzdZqqi2T0on3puTWqGq3/wh4LK5ZI70J jSbmZp02xSob1did2sN4dDvuWaxcgMHw30zmi/buXHVxTaap3l5Y0pQpNee9IoXN tVmPYTOXqbb8Ed2lg6GvQ7ZFZkCLs3wKSisx0p1SunZgz/dhazgrFe0vb/93sCtM V7lOBngsV9vsEjkCxeRhPjY+X7bRps/9Fas7mMwbz/5Wncrl33WNqQdV/B13wYVQ pE3AE6lx8Ijc42OM35p2hzA5tI7GSkQFInTtKrsGnyzqRoW/dKiaiDAHMLAjfLJM d6W/1AI7gGy5cpWr9+67McafAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUMFTz+kmB 2C39BL5DjekT+uiWogcwHwYDVR0jBBgwFoAUvgGRN6gdfpzZr1bNkcWHwu8G6Tsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5RTlELzUyODI4QjJBN0I4 NzExRUVBODQwRjIxRUM0RjlBRTAyL3ZnR1JONmdkZnB6WnIxYk5rY1dId3U4RzZU cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdmdHUk42Z2RmcHpacjFiTmtjV0h3dThHNlRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUU5RC81MjgyOEIyQTdCODcxMUVFQTg0MEYyMUVDNEY5QUUwMi9DQ0FBMEY2NjdC ODkxMUVFOTM3MEQ0MjdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEAXTHyjANBAIAAjAHAwUAJAFNYDANBgkqhkiG9w0BAQsFAAOC AQEAleEAG4ThKnydmeFbAtdn1w+PNLIjC8+bffe11YTK4/2HJbm7RqjR2T7vrTLs 6ZnJSwhH3V1RjZRxe7vt1/jA5tZNXPSyTu7pYWzbF0Qn4YDOKCqqErmj0MEOIe3P H9oqzSiBA6GJoufnOLSKksPWsQcG+xoYWKSVRCWDyAFxSL+u8o36BlGzavvp/C27 VEP+M5g4LLvj3gFpaR08Ddif+Xc8B0p0ssmj1irEN2z3hv+jQWj9gXhVpBw37zB6 jgIQQNSc1pXjW+/lehGF+fxV7VtodlZMh2xHKCJm9DV5MqF6MaUJThRW2uIboxj5 ZHqolroZmseGgSBo6Lk76YgN+w== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:36 2024 by rpki-client on console-ams.rpki-client.org