$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2F61CF6F64E11EE8BC2A679C4F9AE02.roa File: A2F61CF6F64E11EE8BC2A679C4F9AE02.roa (raw, json) Hash identifier: X3L2AB3WXC8gi8T48bCcowvV2BvJCIJNaKhXBrCV/Pk= Subject key identifier: E1:13:1D:69:2D:7E:E2:25:A1:A6:8C:92:9B:57:83:51:42:81:26:57 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 1247 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2F61CF6F64E11EE8BC2A679C4F9AE02.roa Signing time: Fri 24 May 2024 22:32:16 +0000 ROA not before: Fri 24 May 2024 22:32:16 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 10753 IP address blocks: 115.167.1.0/24 maxlen: 24 115.167.24.0/22 maxlen: 22 115.167.48.0/24 maxlen: 24 115.167.52.0/22 maxlen: 24 115.167.60.0/22 maxlen: 24 115.167.77.0/24 maxlen: 24 115.167.100.0/22 maxlen: 24 115.167.104.0/22 maxlen: 24 115.167.112.0/22 maxlen: 24 175.110.64.0/22 maxlen: 24 175.110.72.0/22 maxlen: 24 175.110.84.0/22 maxlen: 24 175.110.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jul 2024 21:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: May 24 22:32:16 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=66511570-febf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:75:87:7a:d0:cd:53:3b:fb:fb:09:da:87: 37:2d:fa:ca:0e:11:5b:fe:d3:82:39:95:b6:31:10: eb:a3:b9:1b:dd:40:55:cc:0e:56:cd:18:2c:f1:5a: ce:1d:2d:d6:c2:ad:d5:f0:12:23:15:20:6f:c5:18: 3d:55:bb:7b:d3:03:fd:be:62:e0:35:b1:fd:9f:9a: ba:e4:a4:87:39:f5:99:fd:c3:89:7b:56:b9:a2:cb: a4:00:ac:41:e2:38:e3:de:a8:26:eb:78:01:26:01: 38:d1:2a:d4:e8:8b:1c:8d:5d:4c:b8:73:16:2a:01: da:2f:c9:cf:c7:c0:28:67:e6:fe:db:82:ae:7a:ee: ab:c0:71:79:11:c0:d9:0a:98:50:a3:be:d3:0b:96: b1:15:95:0f:85:f1:c7:09:3e:a7:a3:c8:ae:40:33: 2b:49:67:04:c9:c5:59:21:27:ed:20:ce:f9:77:34: 02:9e:32:da:a8:dc:61:97:e1:52:bd:03:c2:12:73: fb:33:f2:18:a9:2c:f8:04:5c:2c:1a:c8:98:c0:d8: 0f:ab:e9:0c:7d:8d:28:41:41:d0:66:e2:b8:c7:5c: 94:7d:65:a6:5e:c0:cf:26:cf:d7:03:86:30:f2:63: 80:a5:86:4b:71:86:cf:07:55:1b:95:9f:6d:a4:83: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:13:1D:69:2D:7E:E2:25:A1:A6:8C:92:9B:57:83:51:42:81:26:57 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A2F61CF6F64E11EE8BC2A679C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.1.0/24 115.167.24.0/22 115.167.48.0/24 115.167.52.0/22 115.167.60.0/22 115.167.77.0/24 115.167.100.0-115.167.107.255 115.167.112.0/22 175.110.64.0/22 175.110.72.0/22 175.110.84.0/22 175.110.96.0/24 Signature Algorithm: sha256WithRSAEncryption 27:04:88:aa:59:9c:0c:f2:24:9b:9e:9a:12:90:fe:4a:6a:81: 22:eb:8a:3f:e0:44:c9:22:8b:c9:88:df:66:dd:f5:56:67:9b: e8:fd:c6:a1:57:3c:fe:90:5a:84:d7:3d:c9:ae:eb:8c:fd:35: a7:14:29:7e:a2:0b:f9:34:77:17:13:aa:8e:6a:24:19:51:e9: 71:83:35:8e:f3:05:71:6e:47:5e:87:bf:9c:1b:70:a5:07:42: d6:48:70:f1:39:9f:38:74:5a:47:af:8e:98:11:4b:f7:50:5b: aa:2d:fa:fb:d3:ae:31:41:54:61:83:58:cd:8c:26:30:56:0d: 6a:a1:d5:24:70:18:93:dd:09:7d:d7:5a:f3:2a:3f:7a:4b:a0: 50:85:aa:c9:8b:18:ec:2b:5d:61:e7:7e:44:f7:81:5a:d0:4d: 46:b6:51:07:4a:84:63:58:42:61:e8:bb:0a:dd:f2:9f:c4:d0: a4:37:da:e8:c3:f2:e1:df:8e:5a:a2:9e:c3:3b:a7:69:56:89: 8b:67:8a:3d:e8:76:74:46:8e:95:ab:f7:92:4a:56:4b:7f:6d: df:6c:d5:71:e4:35:b7:6b:87:b8:44:ee:c1:0f:6d:52:08:91: 73:98:f2:b9:21:09:31:1a:ab:3e:2c:b1:f4:09:b0:55:33:d5: 4f:30:a7:bb -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjQwNTI0MjIzMjE2WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjUxMTU3MC1mZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqK51h3rQzVM7+/sJ2oc3LfrKDhFb/tOCOZW2MRDro7kb3UBVzA5WzRgs8VrO HS3Wwq3V8BIjFSBvxRg9Vbt70wP9vmLgNbH9n5q65KSHOfWZ/cOJe1a5osukAKxB 4jjj3qgm63gBJgE40SrU6IscjV1MuHMWKgHaL8nPx8AoZ+b+24Kueu6rwHF5EcDZ CphQo77TC5axFZUPhfHHCT6no8iuQDMrSWcEycVZISftIM75dzQCnjLaqNxhl+FS vQPCEnP7M/IYqSz4BFwsGsiYwNgPq+kMfY0oQUHQZuK4x1yUfWWmXsDPJs/XA4Yw 8mOApYZLcYbPB1UblZ9tpIOvywIDAQABo4IC3zCCAtswHQYDVR0OBBYEFOETHWkt fuIloaaMkptXg1FCgSZXMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQTJGNjFDRjZG NjRFMTFFRThCQzJBNjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwaQYIKwYBBQUHAQcBAf8E WjBYMFYEAgABMFADBABzpwEDBAJzpxgDBABzpzADBAJzpzQDBAJzpzwDBABzp00w DAMEAnOnZAMEAnOnaAMEAnOncAMEAq9uQAMEAq9uSAMEAq9uVAMEAK9uYDANBgkq hkiG9w0BAQsFAAOCAQEAJwSIqlmcDPIkm56aEpD+SmqBIuuKP+BEySKLyYjfZt31 Vmeb6P3GoVc8/pBahNc9ya7rjP01pxQpfqIL+TR3FxOqjmokGVHpcYM1jvMFcW5H Xoe/nBtwpQdC1khw8TmfOHRaR6+OmBFL91Bbqi36+9OuMUFUYYNYzYwmMFYNaqHV JHAYk90Jfdda8yo/ekugUIWqyYsY7CtdYed+RPeBWtBNRrZRB0qEY1hCYei7Ct3y n8TQpDfa6MPy4d+OWqKewzunaVaJi2eKPeh2dEaOlav3kkpWS39t32zVceQ1t2uH uETuwQ9tUgiRc5jyuSEJMRqrPiyx9AmwVTPVTzCnuw== -----END CERTIFICATE-----Generated at Mon Jul 1 03:20:43 2024 by rpki-client on console.sobornost.net