$ rpki-client -vvf rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/503E43126E5E11EEB39D9E48C4F9AE02.roa File: 503E43126E5E11EEB39D9E48C4F9AE02.roa (raw, json) Hash identifier: c9GNR8NeMbVcrDhg97LAFKm5i+SYI0xZQAH5pfSpcg4= Subject key identifier: 76:0E:82:AE:15:C6:F2:BC:60:84:DA:13:E1:FE:4C:EE:44:88:98:E2 Certificate issuer: /CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Certificate serial: 47 Authority key identifier: 3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/503E43126E5E11EEB39D9E48C4F9AE02.roa Signing time: Thu 15 Feb 2024 07:09:36 +0000 ROA not before: Thu 15 Feb 2024 07:09:36 +0000 ROA not after: Mon 31 Mar 2025 00:00:00 +0000 asID: 132529 IP address blocks: 43.248.52.0/22 maxlen: 22 103.244.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 08:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91210E0/serialNumber=3F20C29E1D7E515DF3E3D85AA44E751F8172731A Validity Not Before: Feb 15 07:09:36 2024 GMT Not After : Mar 31 00:00:00 2025 GMT Subject: CN=65cdb8b0-61a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f3:d3:ec:c4:c3:d5:2d:1a:9b:91:10:bf:ee: 25:66:25:8b:c4:84:a7:e6:d9:7a:ee:9e:ba:8f:8f: 45:59:ce:5e:9c:bf:b1:9b:4f:49:b9:1e:26:bb:1b: 96:b2:65:f0:db:24:87:4b:a3:fa:74:85:36:0e:da: fa:93:01:58:50:05:8e:ff:a5:44:7b:c8:af:b1:5e: d0:d8:28:a6:b6:ad:15:22:7d:e4:6a:af:97:86:c4: af:a3:95:79:b2:e8:8a:b3:6e:ab:0d:32:17:a1:f5: 95:bc:e9:fe:f8:3d:86:37:0b:96:eb:27:37:ba:50: 3f:80:c6:01:8f:cd:10:a6:7f:06:10:c3:ce:b1:0f: 4a:45:1c:e7:d4:d7:81:27:1c:67:19:75:16:46:d6: 8d:4c:b0:f3:60:e5:40:c1:e5:d9:9e:23:4e:18:eb: 9d:11:fb:1e:5e:e8:73:13:92:59:db:4b:81:12:fd: 30:68:60:17:4f:02:ca:aa:ff:bf:7f:59:c7:57:86: b6:ae:03:35:f5:d0:4e:28:1c:43:7c:f4:88:64:f8: 1b:06:22:81:76:0e:ca:d4:61:c8:24:c1:ab:4d:17: a7:8a:39:10:2c:4f:3e:99:f6:64:9d:02:e1:1d:25: 0a:f0:9a:00:f2:23:89:58:14:ce:5c:a9:20:1b:21: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0E:82:AE:15:C6:F2:BC:60:84:DA:13:E1:FE:4C:EE:44:88:98:E2 X509v3 Authority Key Identifier: keyid:3F:20:C2:9E:1D:7E:51:5D:F3:E3:D8:5A:A4:4E:75:1F:81:72:73:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/PyDCnh1-UV3z49hapE51H4Fycxo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PyDCnh1-UV3z49hapE51H4Fycxo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91210E0/3EB10C9A6D9811EEAA2AA36AC4F9AE02/503E43126E5E11EEB39D9E48C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.52.0/22 103.244.128.0/22 Signature Algorithm: sha256WithRSAEncryption 25:96:55:57:03:eb:94:a5:32:1b:78:eb:70:4f:fd:ed:40:64: 99:a7:ab:36:d0:b3:3b:94:bc:6e:f4:ae:1b:62:93:49:85:f5: e4:97:00:31:d3:33:94:cc:6f:2f:af:ef:7f:01:a6:34:54:53: 95:78:a9:bc:14:01:f2:51:a3:bd:f9:ba:81:e7:a5:c1:b9:3f: 1c:83:99:9a:93:9d:ba:3f:7f:7f:96:71:77:35:e9:c4:ed:50: bc:74:95:5d:0b:fc:d7:ce:f4:64:3a:1c:ec:5c:e7:f6:d2:fb: ed:f8:01:63:7d:77:ca:d7:01:aa:65:c2:49:b2:52:f3:5f:bd: 42:1e:ff:96:d3:e2:0e:58:d7:39:c1:dc:a0:84:f5:76:4c:be: 1e:9c:e7:af:bf:d4:0a:8a:e1:7a:38:5f:56:b9:53:2b:1a:1b: 5d:4d:e5:63:b4:9f:c3:40:b2:cc:f6:fb:48:3a:d1:32:30:68: cb:ad:4b:2f:aa:22:17:e2:2e:fd:c8:1a:e5:71:5b:c1:79:48: 60:10:94:af:ee:9d:3a:32:80:ea:d8:38:68:53:03:e7:c5:5f: 37:d1:97:31:49:fb:82:92:56:b9:05:9e:4a:84:7b:cd:f8:3d: 77:40:14:dc:5e:2c:33:f8:24:02:28:34:21:af:9c:84:6a:e6: e0:8d:01:1f -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTBFMDExMC8GA1UEBRMoM0YyMEMyOUUxRDdFNTE1REYzRTNEODVBQTQ0RTc1MUY4 MTcyNzMxQTAeFw0yNDAyMTUwNzA5MzZaFw0yNTAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1Y2RiOGIwLTYxYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM89PsxMPVLRqbkRC/7iVmJYvEhKfm2XrunrqPj0VZzl6cv7GbT0m5Hia7G5ay ZfDbJIdLo/p0hTYO2vqTAVhQBY7/pUR7yK+xXtDYKKa2rRUifeRqr5eGxK+jlXmy 6IqzbqsNMheh9ZW86f74PYY3C5brJze6UD+AxgGPzRCmfwYQw86xD0pFHOfU14En HGcZdRZG1o1MsPNg5UDB5dmeI04Y650R+x5e6HMTklnbS4ES/TBoYBdPAsqq/79/ WcdXhrauAzX10E4oHEN89Ihk+BsGIoF2DsrUYcgkwatNF6eKORAsTz6Z9mSdAuEd JQrwmgDyI4lYFM5cqSAbIe0RAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUdg6CrhXG 8rxghNoT4f5M7kSImOIwHwYDVR0jBBgwFoAUPyDCnh1+UV3z49hapE51H4Fycxow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxMEUwLzNFQjEwQzlBNkQ5 ODExRUVBQTJBQTM2QUM0RjlBRTAyL1B5RENuaDEtVVYzejQ5aGFwRTUxSDRGeWN4 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHlEQ25oMS1VVjN6NDloYXBFNTFINEZ5Y3hvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTBFMC8zRUIxMEM5QTZEOTgxMUVFQUEyQUEzNkFDNEY5QUUwMi81MDNFNDMxMjZF NUUxMUVFQjM5RDlFNDhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAiv4NAMEAmf0gDANBgkqhkiG9w0BAQsFAAOCAQEAJZZVVwPr lKUyG3jrcE/97UBkmaerNtCzO5S8bvSuG2KTSYX15JcAMdMzlMxvL6/vfwGmNFRT lXipvBQB8lGjvfm6geelwbk/HIOZmpOduj9/f5ZxdzXpxO1QvHSVXQv81870ZDoc 7Fzn9tL77fgBY313ytcBqmXCSbJS81+9Qh7/ltPiDljXOcHcoIT1dky+Hpznr7/U CorhejhfVrlTKxobXU3lY7Sfw0CyzPb7SDrRMjBoy61LL6oiF+Iu/cga5XFbwXlI YBCUr+6dOjKA6tg4aFMD58VfN9GXMUn7gpJWuQWeSoR7zfg9d0AU3F4sM/gkAig0 Ia+chGrm4I0BHw== -----END CERTIFICATE-----Generated at Sat Jun 1 11:47:08 2024 by rpki-client on console-ams.rpki-client.org