$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5B3CE0A411D111EFB40E6557C4F9AE02.roa File: 5B3CE0A411D111EFB40E6557C4F9AE02.roa (raw, json) Hash identifier: SCs/OJTlkccEiU8RJN9nfHGno/Iqe4uLqPLcQuc5CGs= Subject key identifier: 3F:D9:6A:13:12:08:0E:33:E0:DD:06:5E:9D:64:DF:53:30:43:7D:42 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 05E2 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5B3CE0A411D111EFB40E6557C4F9AE02.roa Signing time: Tue 14 May 2024 09:07:15 +0000 ROA not before: Tue 14 May 2024 09:07:15 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 137451 IP address blocks: 43.229.152.0/24 maxlen: 24 43.252.208.0/24 maxlen: 24 43.252.209.0/24 maxlen: 24 43.252.210.0/24 maxlen: 24 103.228.64.0/24 maxlen: 24 103.234.54.0/24 maxlen: 24 150.107.0.0/24 maxlen: 24 150.107.1.0/24 maxlen: 24 150.107.2.0/24 maxlen: 24 150.107.3.0/24 maxlen: 24 150.129.42.0/24 maxlen: 24 163.53.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 02:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: May 14 09:07:15 2024 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=664329c3-258e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:41:c6:fb:1e:10:63:b1:53:d5:48:91:98:3f: 56:49:05:c4:f1:c5:ad:18:d8:8c:d7:8f:da:4c:34: 66:c1:69:ed:74:28:0a:46:b4:53:d3:e2:b7:b1:5d: a7:16:95:c7:2e:e6:e5:ba:e5:e7:39:4e:40:e8:bc: 8f:54:ad:4a:f0:8c:ec:c0:9c:aa:de:af:78:8b:24: dc:d2:63:34:3d:0b:e8:49:41:98:35:6d:ff:15:98: 07:43:4f:d5:41:1b:75:29:c9:ed:61:c8:79:8f:07: 44:84:d3:04:46:3d:9b:e5:55:4a:c7:28:38:c0:6c: ef:49:af:37:9c:87:8d:66:d9:aa:5a:1c:a0:fa:9a: 0e:f6:3c:22:ab:45:7f:52:8e:bb:fd:40:a7:04:f5: 2d:5e:42:4d:ad:a0:f0:e8:d8:06:ae:19:db:85:c9: d7:02:eb:7f:23:09:70:83:06:ef:fa:80:ec:56:2f: 3f:d0:33:5c:bd:1e:bd:7d:0a:53:eb:6f:f9:68:31: f6:78:40:dc:86:e7:82:4d:ac:85:42:fe:70:93:2a: 4b:65:fe:6c:fc:bc:7b:4a:23:b1:cf:a6:89:9a:91: b0:40:ed:2a:11:a1:cb:a5:fa:8b:e1:ff:9a:6d:8e: ef:53:a5:8b:d2:b0:2d:57:05:e2:1c:51:0c:9a:ab: 91:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D9:6A:13:12:08:0E:33:E0:DD:06:5E:9D:64:DF:53:30:43:7D:42 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/5B3CE0A411D111EFB40E6557C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.229.152.0/24 43.252.208.0-43.252.210.255 103.228.64.0/24 103.234.54.0/24 150.107.0.0/22 150.129.42.0/24 163.53.16.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:cd:27:5d:ef:a9:17:03:d1:14:3f:3d:75:dd:1f:b1:27:da: e5:e0:bb:33:c1:9b:f0:b1:34:b4:c9:f0:3b:0a:07:be:95:52: a5:ed:a1:7a:31:77:03:67:29:8c:5a:e5:f8:3d:78:26:cb:32: 47:6d:6e:86:c5:41:77:16:ca:ef:70:c6:8d:f8:83:01:64:a8: de:cc:96:81:df:6f:cf:d4:5c:f2:93:af:7a:67:fb:48:e2:d8: e6:bb:b0:a3:70:04:32:a7:e9:e2:5e:24:52:af:b3:e9:f7:62: b2:e5:2c:ea:34:4f:02:80:53:37:df:d5:09:12:4d:c8:3c:9e: d9:5d:8b:68:9b:56:90:69:07:ea:6e:f9:b1:8a:1d:3b:66:e5: 7f:85:c1:d1:7b:4f:6e:6c:3a:2a:41:11:d3:25:05:97:56:2c: e8:cd:51:a2:c6:61:0b:94:90:28:e6:d0:f3:06:4f:a7:f6:e6: 18:e4:54:53:a4:7d:e1:77:c8:6e:2f:bc:8d:3f:21:39:1d:7d: b2:bc:15:fe:ec:1e:ff:c5:9a:84:25:ed:b7:61:1c:07:74:4b: 5c:03:e1:57:0b:cb:00:1e:12:1a:f7:eb:29:1f:53:cd:46:2f: 18:67:71:1a:dd:aa:e5:c5:e6:f3:d9:03:11:3a:29:b2:f3:b9: b8:87:3a:85 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjQwNTE0MDkwNzE1WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NjQzMjljMy0yNThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEHG+x4QY7FT1UiRmD9WSQXE8cWtGNiM14/aTDRmwWntdCgKRrRT0+K3sV2n FpXHLubluuXnOU5A6LyPVK1K8IzswJyq3q94iyTc0mM0PQvoSUGYNW3/FZgHQ0/V QRt1KcntYch5jwdEhNMERj2b5VVKxyg4wGzvSa83nIeNZtmqWhyg+poO9jwiq0V/ Uo67/UCnBPUtXkJNraDw6NgGrhnbhcnXAut/Iwlwgwbv+oDsVi8/0DNcvR69fQpT 62/5aDH2eEDchueCTayFQv5wkypLZf5s/Lx7SiOxz6aJmpGwQO0qEaHLpfqL4f+a bY7vU6WL0rAtVwXiHFEMmquRZwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFD/ZahMS CA4z4N0GXp1k31MwQ31CMB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUI0MTIvQzFFQTAzM0NEMkVBMTFFQkEyMDZCMTc4QzRGOUFFMDIvNUIzQ0UwQTQx MUQxMTFFRkI0MEU2NTU3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAAr5ZgwDAMEBCv80AMEACv80gMEAGfkQAMEAGfqNgMEApZr AAMEAJaBKgMEAKM1EDANBgkqhkiG9w0BAQsFAAOCAQEAHc0nXe+pFwPRFD89dd0f sSfa5eC7M8Gb8LE0tMnwOwoHvpVSpe2hejF3A2cpjFrl+D14JssyR21uhsVBdxbK 73DGjfiDAWSo3syWgd9vz9Rc8pOvemf7SOLY5ruwo3AEMqfp4l4kUq+z6fdisuUs 6jRPAoBTN9/VCRJNyDye2V2LaJtWkGkH6m75sYodO2blf4XB0XtPbmw6KkER0yUF l1Ys6M1RosZhC5SQKObQ8wZPp/bmGORUU6R94XfIbi+8jT8hOR19srwV/uwe/8Wa hCXtt2EcB3RLXAPhVwvLAB4SGvfrKR9TzUYvGGdxGt2q5cXm89kDETopsvO5uIc6 hQ== -----END CERTIFICATE-----Generated at Sat Jun 1 04:07:21 2024 by rpki-client on console-ams.rpki-client.org