$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/B81176247CC811EBAAFADC27C4F9AE02.roa File: B81176247CC811EBAAFADC27C4F9AE02.roa (raw, json) Hash identifier: WkmM3NS4egmXGngkLPlUCMQk7OoCyOWX+LukK1tCms0= Subject key identifier: B1:E3:2C:4D:96:09:85:91:D8:20:5C:1B:D9:79:3B:5E:1E:B6:13:02 Certificate issuer: /CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Certificate serial: 0A69 Authority key identifier: C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/B81176247CC811EBAAFADC27C4F9AE02.roa Signing time: Thu 28 Dec 2023 19:57:44 +0000 ROA not before: Thu 28 Dec 2023 19:57:43 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 3257 IP address blocks: 59.191.240.0/20 maxlen: 20 103.232.16.0/22 maxlen: 22 183.182.80.0/22 maxlen: 22 2405:5e00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 20:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC3E/serialNumber=C869E0A53875FC1259786B527E6784CBF1F89B40 Validity Not Before: Dec 28 19:57:43 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=658dd337-ee23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:da:42:ab:94:63:48:fb:ea:97:9f:33:fc:86: a1:46:bc:48:51:b1:56:f5:15:b2:7a:d0:2b:2e:46: 72:28:0f:ac:56:33:4a:50:a9:f2:68:63:35:8a:85: 16:01:51:df:68:d7:e1:3c:30:f9:90:7d:27:cb:b1: 4e:20:49:25:1e:44:b0:34:79:fe:56:9f:e2:f9:6f: 75:bb:b2:87:18:7a:9d:47:73:e2:fd:8c:74:1f:c2: 82:65:13:6d:0e:b1:47:93:7c:0e:28:b3:05:0e:ef: 99:6e:46:a4:a7:40:ed:38:ef:34:a5:08:21:c9:d0: 3b:c5:8a:43:10:f4:a5:99:38:6c:0c:e6:03:7c:47: c0:eb:07:2b:6d:f2:96:a9:f3:65:fa:84:d1:22:c0: e4:fc:b2:24:2d:ed:bc:f3:60:27:22:d9:ee:85:ad: a0:74:68:fb:d8:44:26:1d:a3:d7:de:f9:24:df:09: f6:5c:3d:56:87:fe:a2:e3:93:25:12:c3:46:43:56: 9e:fe:72:59:7f:b7:f4:59:d8:9d:b9:44:2e:f3:ba: 96:3d:57:da:71:82:2c:e2:c4:db:9d:64:5b:ad:2e: f8:ae:6b:57:9f:ad:21:b2:5f:11:ea:6f:78:07:36: 2c:46:ca:3d:d8:fe:ab:6e:3f:4b:90:7b:7a:40:ff: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E3:2C:4D:96:09:85:91:D8:20:5C:1B:D9:79:3B:5E:1E:B6:13:02 X509v3 Authority Key Identifier: keyid:C8:69:E0:A5:38:75:FC:12:59:78:6B:52:7E:67:84:CB:F1:F8:9B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/yGngpTh1_BJZeGtSfmeEy_H4m0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yGngpTh1_BJZeGtSfmeEy_H4m0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC3E/0F50E03633BA11EA95828581C4F9AE02/B81176247CC811EBAAFADC27C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.191.240.0/20 103.232.16.0/22 183.182.80.0/22 IPv6: 2405:5e00::/32 Signature Algorithm: sha256WithRSAEncryption 5b:b0:95:1c:50:89:cd:27:32:14:d7:5a:00:24:2a:86:10:1b: fb:60:4f:56:b5:96:f6:b3:3f:08:d2:f1:2f:d0:3d:80:e3:71: a3:5a:9c:95:ee:27:70:f5:da:36:54:0d:78:32:6f:6a:70:2c: be:93:4d:6b:17:c0:2e:3c:14:4e:2c:25:8d:9a:1d:3a:c7:44: 87:97:a6:9d:35:55:1b:9c:cb:68:f0:2a:fe:f1:3f:d3:8b:6f: e3:36:0a:a7:0f:d6:27:15:02:3b:97:3f:ad:dc:be:af:cf:bc: d7:d6:74:f5:d4:43:74:49:ce:18:f2:04:d1:49:fd:b4:4a:dc: 84:45:63:92:95:78:f2:a6:ae:33:7b:9f:92:6e:2f:6f:1f:36: 43:ce:9c:96:c9:2a:7b:9f:9d:8e:fc:bc:7b:3b:21:4a:3b:e3: f6:9b:c4:33:6c:b3:2f:58:07:20:bd:87:fe:fa:18:23:a8:f2: 28:19:46:fb:4d:bb:de:07:c0:90:c2:dc:16:39:34:e9:bc:e8: 5e:40:3d:46:d3:dc:da:85:4a:20:91:a3:6d:57:dc:be:66:54: 13:f5:b9:03:e0:05:6b:17:9e:bc:ec:62:22:51:ad:8c:9c:2f: b9:73:15:e2:9d:06:d9:d9:59:e2:2d:7a:65:99:43:a7:ed:2c: 67:71:bf:94 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDM0UxMTAvBgNVBAUTKEM4NjlFMEE1Mzg3NUZDMTI1OTc4NkI1MjdFNjc4NENC RjFGODlCNDAwHhcNMjMxMjI4MTk1NzQzWhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NThkZDMzNy1lZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNpCq5RjSPvql58z/IahRrxIUbFW9RWyetArLkZyKA+sVjNKUKnyaGM1ioUW AVHfaNfhPDD5kH0ny7FOIEklHkSwNHn+Vp/i+W91u7KHGHqdR3Pi/Yx0H8KCZRNt DrFHk3wOKLMFDu+Zbkakp0DtOO80pQghydA7xYpDEPSlmThsDOYDfEfA6wcrbfKW qfNl+oTRIsDk/LIkLe2882AnItnuha2gdGj72EQmHaPX3vkk3wn2XD1Wh/6i45Ml EsNGQ1ae/nJZf7f0WdiduUQu87qWPVfacYIs4sTbnWRbrS74rmtXn60hsl8R6m94 BzYsRso92P6rbj9LkHt6QP/4AwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLHjLE2W CYWR2CBcG9l5O14ethMCMB8GA1UdIwQYMBaAFMhp4KU4dfwSWXhrUn5nhMvx+JtA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzRS8wRjUwRTAzNjMz QkExMUVBOTU4Mjg1ODFDNEY5QUUwMi95R25ncFRoMV9CSlplR3RTZm1lRXlfSDRt MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lHbmdwVGgxX0JKWmVHdFNmbWVFeV9ING0wQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkFDM0UvMEY1MEUwMzYzM0JBMTFFQTk1ODI4NTgxQzRGOUFFMDIvQjgxMTc2MjQ3 Q0M4MTFFQkFBRkFEQzI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAQ7v/ADBAJn6BADBAK3tlAwDQQCAAIwBwMFACQFXgAwDQYJ KoZIhvcNAQELBQADggEBAFuwlRxQic0nMhTXWgAkKoYQG/tgT1a1lvazPwjS8S/Q PYDjcaNanJXuJ3D12jZUDXgyb2pwLL6TTWsXwC48FE4sJY2aHTrHRIeXpp01VRuc y2jwKv7xP9OLb+M2CqcP1icVAjuXP63cvq/PvNfWdPXUQ3RJzhjyBNFJ/bRK3IRF Y5KVePKmrjN7n5JuL28fNkPOnJbJKnufnY78vHs7IUo74/abxDNssy9YByC9h/76 GCOo8igZRvtNu94HwJDC3BY5NOm86F5APUbT3NqFSiCRo21X3L5mVBP1uQPgBWsX nrzsYiJRrYycL7lzFeKdBtnZWeItemWZQ6ftLGdxv5Q= -----END CERTIFICATE-----Generated at Thu May 2 22:28:48 2024 by rpki-client on console-ams.rpki-client.org