$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/426D5CEAD12111ECBBAC1B7DC4F9AE02.roa File: 426D5CEAD12111ECBBAC1B7DC4F9AE02.roa (raw, json) Hash identifier: RCfV8bIqd1stwpdUL12hC5tiTbZoC58Zty/Kc7NRaGk= Subject key identifier: 35:C3:B6:FF:9B:E2:3E:65:20:D0:98:34:81:4F:5C:56:D8:C8:AA:18 Certificate issuer: /CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Certificate serial: 0213 Authority key identifier: 60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/426D5CEAD12111ECBBAC1B7DC4F9AE02.roa Signing time: Sat 13 Jan 2024 03:13:57 +0000 ROA not before: Sat 13 Jan 2024 03:13:57 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 55329 IP address blocks: 103.232.192.0/22 maxlen: 24 175.28.0.0/22 maxlen: 24 223.223.168.0/21 maxlen: 24 2403:6600::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC01A/serialNumber=605BDA3D7ADCC02DAC7386AE39147A646593A89D Validity Not Before: Jan 13 03:13:57 2024 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65a1fff5-7592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:71:9e:76:9c:f7:03:9a:ca:9d:ed:88:38: 0a:09:12:ce:a4:2d:04:2d:b8:bd:1f:63:91:48:4a: 1f:e4:16:e4:3c:20:30:71:80:e3:6c:44:42:cb:12: 1f:96:fc:b8:a8:97:0f:29:bb:68:e7:80:89:b4:2c: 03:42:99:8f:8f:94:96:c2:e6:1f:fb:b4:b0:7c:a8: b3:d1:2f:f2:ef:aa:fc:94:35:e0:c8:4b:72:28:29: 56:cc:65:cb:2d:8a:36:60:56:e4:1f:52:c1:7e:49: 82:2d:f1:2d:71:99:32:f1:c1:53:75:b2:6a:bb:fd: be:47:2f:57:df:63:cc:b0:b5:04:f7:12:f8:83:5f: 56:cb:3c:7d:1b:95:0f:74:33:b7:76:ae:c4:e7:66: 44:c4:d5:42:9d:b4:47:90:cd:19:21:61:ee:3e:37: aa:d5:26:49:80:90:8e:cd:5b:9d:7c:47:86:38:db: a0:48:e9:42:3a:92:f0:50:f6:33:1d:75:4f:4e:e5: 6a:8a:6e:cf:45:2b:ea:41:e3:94:14:ad:56:61:d5: 27:78:e1:dd:de:64:d9:59:b4:e9:13:4e:b1:d5:56: 47:41:91:da:5f:64:67:42:7c:82:78:d1:6a:d7:2f: 2c:9e:96:5d:6c:54:18:8a:a8:92:c1:a9:a0:7f:02: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C3:B6:FF:9B:E2:3E:65:20:D0:98:34:81:4F:5C:56:D8:C8:AA:18 X509v3 Authority Key Identifier: keyid:60:5B:DA:3D:7A:DC:C0:2D:AC:73:86:AE:39:14:7A:64:65:93:A8:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/YFvaPXrcwC2sc4auORR6ZGWTqJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YFvaPXrcwC2sc4auORR6ZGWTqJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC01A/0F85014CD11D11EC81696363C4F9AE02/426D5CEAD12111ECBBAC1B7DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.192.0/22 175.28.0.0/22 223.223.168.0/21 IPv6: 2403:6600::/32 Signature Algorithm: sha256WithRSAEncryption 1c:ae:86:c4:62:63:cb:07:a3:d0:70:c9:e0:18:77:23:05:7d: 13:28:9f:17:62:42:e9:c8:ff:10:86:f7:94:79:d6:35:6f:10: 60:f5:be:50:d7:8b:bf:6f:8c:2a:12:4b:84:b5:de:b0:6b:f6: 51:24:6c:2f:d8:65:f9:c3:81:5a:0e:44:e1:25:07:b4:73:7c: 90:38:fc:4f:be:65:1a:d2:17:9b:3c:ac:09:da:6e:e3:05:2d: 8e:2c:6a:96:a3:f5:53:8d:f5:f3:10:17:2a:11:30:18:ff:f3: 1e:b3:24:ca:6e:0c:70:c6:db:f4:6d:f5:c3:b2:cb:30:94:f9: dc:55:9c:11:bb:d7:79:b5:87:8e:ca:c4:59:ce:73:a3:6c:93: 0e:af:a8:70:88:fb:d8:73:66:53:8f:d5:a6:83:7b:9f:a7:88: 18:2c:94:e0:ed:4e:c7:35:8c:fc:85:08:69:ee:a6:67:94:54: e5:bb:73:c7:ca:6c:cb:3e:fe:c3:5d:92:5c:4e:8b:75:ee:d2: 92:09:8a:af:cf:d7:44:8a:45:b0:d1:c4:a2:54:2c:95:bf:3e: f5:dc:a4:d9:9d:f2:1a:1c:46:51:52:12:2b:a9:0f:cf:37:81: b1:d0:41:e1:9a:0f:f6:f7:b0:10:95:69:0d:d2:73:03:d9:8d: 22:3a:b6:bc -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMwMUExMTAvBgNVBAUTKDYwNUJEQTNEN0FEQ0MwMkRBQzczODZBRTM5MTQ3QTY0 NjU5M0E4OUQwHhcNMjQwMTEzMDMxMzU3WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NWExZmZmNS03NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXVxnnac9wOayp3tiDgKCRLOpC0ELbi9H2ORSEof5BbkPCAwcYDjbERCyxIf lvy4qJcPKbto54CJtCwDQpmPj5SWwuYf+7SwfKiz0S/y76r8lDXgyEtyKClWzGXL LYo2YFbkH1LBfkmCLfEtcZky8cFTdbJqu/2+Ry9X32PMsLUE9xL4g19Wyzx9G5UP dDO3dq7E52ZExNVCnbRHkM0ZIWHuPjeq1SZJgJCOzVudfEeGONugSOlCOpLwUPYz HXVPTuVqim7PRSvqQeOUFK1WYdUneOHd3mTZWbTpE06x1VZHQZHaX2RnQnyCeNFq 1y8snpZdbFQYiqiSwamgfwKnwQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDXDtv+b 4j5lINCYNIFPXFbYyKoYMB8GA1UdIwQYMBaAFGBb2j163MAtrHOGrjkUemRlk6id MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzAxQS8wRjg1MDE0Q0Qx MUQxMUVDODE2OTYzNjNDNEY5QUUwMi9ZRnZhUFhyY3dDMnNjNGF1T1JSNlpHV1Rx SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lGdmFQWHJjd0Myc2M0YXVPUlI2WkdXVHFKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkMwMUEvMEY4NTAxNENEMTFEMTFFQzgxNjk2MzYzQzRGOUFFMDIvNDI2RDVDRUFE MTIxMTFFQ0JCQUMxQjdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAJn6MADBAKvHAADBAPf36gwDQQCAAIwBwMFACQDZgAwDQYJ KoZIhvcNAQELBQADggEBAByuhsRiY8sHo9BwyeAYdyMFfRMonxdiQunI/xCG95R5 1jVvEGD1vlDXi79vjCoSS4S13rBr9lEkbC/YZfnDgVoOROElB7RzfJA4/E++ZRrS F5s8rAnabuMFLY4sapaj9VON9fMQFyoRMBj/8x6zJMpuDHDG2/Rt9cOyyzCU+dxV nBG713m1h47KxFnOc6Nskw6vqHCI+9hzZlOP1aaDe5+niBgslODtTsc1jPyFCGnu pmeUVOW7c8fKbMs+/sNdklxOi3Xu0pIJiq/P10SKRbDRxKJULJW/PvXcpNmd8hoc RlFSEiupD883gbHQQeGaD/b3sBCVaQ3ScwPZjSI6trw= -----END CERTIFICATE-----Generated at Sun May 19 05:08:07 2024 by rpki-client on console-ams.rpki-client.org