$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa File: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (raw, json) Hash identifier: 8vb5a4zBRLuZPicvx+p1is1UuBlmZOpLFgTiD9Hokvc= Subject key identifier: 7E:F8:FA:FB:1B:89:7E:46:33:B2:54:97:A0:08:09:11:41:B8:2C:9F Certificate issuer: /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Certificate serial: 0683 Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa Signing time: Mon 12 Jun 2023 23:15:29 +0000 ROA not before: Mon 12 Jun 2023 23:15:29 +0000 ROA not after: Tue 30 Jul 2024 00:00:00 +0000 asID: 9534 IP address blocks: 43.240.20.0/22 maxlen: 22 43.240.20.0/24 maxlen: 24 43.240.21.0/24 maxlen: 24 43.240.22.0/24 maxlen: 24 43.240.23.0/24 maxlen: 24 103.239.248.0/22 maxlen: 22 202.75.128.0/19 maxlen: 19 202.75.160.0/19 maxlen: 19 202.151.192.0/18 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 23:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB Validity Not Before: Jun 12 23:15:29 2023 GMT Not After : Jul 30 00:00:00 2024 GMT Subject: CN=6487a711-625f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4b:5c:7a:f9:f0:29:5b:b3:5a:81:34:ed:ce: ee:03:c5:16:ca:79:7a:70:3a:f3:29:13:40:96:1a: 2e:e5:c5:28:8a:b8:e1:12:5c:0e:c2:50:57:46:1d: ba:83:9c:32:66:c5:aa:92:c0:2f:f7:5b:3f:35:c2: 7e:54:d8:a9:cb:0b:f1:99:88:5e:3b:19:7f:05:f5: fd:72:71:b5:cd:75:ab:21:3b:bc:43:85:e7:f4:ea: 0d:bc:ce:dd:ef:3d:68:94:27:a0:da:f0:5f:bc:5f: bf:93:24:c7:f0:9b:a5:39:0e:7b:eb:d9:c5:af:42: 4c:45:7f:84:6b:6c:3a:c8:6a:3e:fb:6c:95:35:3b: 83:45:05:80:94:6f:46:c4:ae:c5:cc:df:c8:b8:c6: 1d:97:2b:1e:e9:e0:18:b5:ea:0b:49:f8:d7:a1:a2: c9:26:5e:d3:6d:f1:1d:98:81:25:86:47:33:d8:90: 57:e3:f6:c5:21:bf:e2:4c:d2:b1:0b:27:13:60:bf: 35:b5:91:04:f9:12:5c:62:1e:b4:a6:58:f3:62:3e: 5b:96:0b:d8:ac:7a:48:d3:98:25:e9:23:63:0f:0d: 29:c0:db:49:1a:9b:5b:ca:c3:77:f5:9e:58:b6:fd: 1e:16:05:b2:10:8c:df:ac:6c:b7:73:c1:59:af:a6: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F8:FA:FB:1B:89:7E:46:33:B2:54:97:A0:08:09:11:41:B8:2C:9F X509v3 Authority Key Identifier: keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/477192ACF3FA11EAB9D11D26C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.20.0/22 103.239.248.0/22 202.75.128.0/18 202.151.192.0/18 Signature Algorithm: sha256WithRSAEncryption 90:ce:22:fd:f9:a3:92:0e:ca:58:8d:d3:12:c5:f0:f8:ca:5c: bb:bd:79:72:15:2c:2d:fe:fd:6d:64:b5:5f:24:4b:40:ea:98: 74:5f:98:ec:14:cc:d7:d6:c8:fc:92:89:dc:dd:0a:53:b9:7c: aa:01:43:52:43:e5:5f:01:fe:12:dd:a1:73:c7:b3:7f:fc:3c: 16:1c:c3:b9:a9:eb:44:6c:58:95:87:c3:00:a1:46:5b:fe:03: af:17:ab:df:08:45:2d:24:eb:80:df:b3:9f:d2:e1:c2:f1:1e: 83:b1:a5:35:54:3c:74:fb:17:14:f9:e6:e3:e4:e2:4d:c2:40: 46:47:74:26:5d:86:ef:1e:63:a2:8c:fb:d9:ef:6a:90:d7:7d: 88:c9:8f:61:27:0d:61:e9:87:71:0d:cf:78:62:bf:9e:fa:98: c0:ec:94:c8:2b:e9:e9:9e:b2:4c:c1:b1:67:c4:e9:42:59:47: c6:30:82:54:e6:07:1f:a6:ca:68:a1:df:89:34:ae:52:c0:cb: 1e:e9:21:a1:64:79:1d:c2:ce:1f:54:88:fc:90:a2:ce:0c:de: 66:c3:23:71:9f:f7:90:7c:f7:49:9c:9b:e2:ab:26:e2:80:4d: 93:b7:e7:91:83:12:5e:27:31:78:7d:48:81:43:36:a7:23:4a: 8d:f7:b8:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB RDIxMjcwREIwHhcNMjMwNjEyMjMxNTI5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NDg3YTcxMS02MjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyktcevnwKVuzWoE07c7uA8UWynl6cDrzKRNAlhou5cUoirjhElwOwlBXRh26 g5wyZsWqksAv91s/NcJ+VNipywvxmYheOxl/BfX9cnG1zXWrITu8Q4Xn9OoNvM7d 7z1olCeg2vBfvF+/kyTH8JulOQ5769nFr0JMRX+Ea2w6yGo++2yVNTuDRQWAlG9G xK7FzN/IuMYdlyse6eAYteoLSfjXoaLJJl7TbfEdmIElhkcz2JBX4/bFIb/iTNKx CycTYL81tZEE+RJcYh60pljzYj5blgvYrHpI05gl6SNjDw0pwNtJGptbysN39Z5Y tv0eFgWyEIzfrGy3c8FZr6bkRwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFH74+vsb iX5GM7JUl6AICRFBuCyfMB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5 MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM4MTIvQjI1RUY5OTBFOTE2MTFFQUE3MDVEODRGQzRGOUFFMDIvNDc3MTkyQUNG M0ZBMTFFQUI5RDExRDI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr8BQDBAJn7/gDBAbKS4ADBAbKl8AwDQYJKoZIhvcNAQEL BQADggEBAJDOIv35o5IOyliN0xLF8PjKXLu9eXIVLC3+/W1ktV8kS0DqmHRfmOwU zNfWyPySidzdClO5fKoBQ1JD5V8B/hLdoXPHs3/8PBYcw7mp60RsWJWHwwChRlv+ A68Xq98IRS0k64Dfs5/S4cLxHoOxpTVUPHT7FxT55uPk4k3CQEZHdCZdhu8eY6KM +9nvapDXfYjJj2EnDWHph3ENz3hiv576mMDslMgr6emeskzBsWfE6UJZR8YwglTm Bx+mymih34k0rlLAyx7pIaFkeR3Czh9UiPyQos4M3mbDI3Gf95B890mcm+KrJuKA TZO355GDEl4nMXh9SIFDNqcjSo33uHw= -----END CERTIFICATE-----Generated at Sat Jun 1 00:13:09 2024 by rpki-client on console-ams.rpki-client.org