$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa File: E58351049F2011EE8D92FF5EC4F9AE02.roa (raw, json) Hash identifier: BWu80tjmTtwFgBA9Gg0pNPVAxmLEbxB50FcXTkpVaVQ= Subject key identifier: 42:82:C7:CB:7F:A8:BF:C1:8D:35:7D:74:D3:78:3A:EF:A7:77:37:41 Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Certificate serial: 49 Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa Signing time: Wed 20 Dec 2023 10:16:53 +0000 ROA not before: Wed 20 Dec 2023 10:16:53 +0000 ROA not after: Thu 31 Oct 2024 00:00:00 +0000 asID: 45650 IP address blocks: 103.246.64.0/23 maxlen: 24 2001:df2:c540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Validity Not Before: Dec 20 10:16:53 2023 GMT Not After : Oct 31 00:00:00 2024 GMT Subject: CN=6582bf15-1109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:f0:00:91:eb:a9:5b:e4:87:ff:a6:c6:46: 55:6c:84:33:86:11:4e:df:4d:b7:d4:cb:17:48:65: ec:da:11:26:db:c4:de:4c:dc:c9:a5:66:2e:28:f1: 5b:a9:84:01:38:b8:5c:96:99:a8:97:36:3d:0a:87: 2f:64:f0:22:ac:85:56:ff:79:47:35:28:85:f9:75: 6e:88:52:0d:8d:d6:eb:35:85:b5:23:dc:d6:62:9c: f4:60:67:ef:df:0f:9a:d1:fb:0a:02:84:b5:31:06: eb:ad:58:1f:bc:db:33:39:91:27:d0:c2:1e:05:07: 9c:e9:0b:2e:f8:ef:ba:04:e0:5e:c0:1a:c9:bd:ef: 50:24:43:d3:86:ad:0e:c8:d8:2e:d6:5a:f2:40:4b: 26:61:fe:34:de:87:b5:1b:3e:89:28:90:5d:4b:49: 51:6a:cf:26:55:75:8b:a9:5b:38:7e:8c:58:ef:35: e4:af:c1:19:20:4a:e1:56:97:ad:d9:a3:4c:5d:fe: dc:14:99:e7:a6:70:04:f0:1c:1b:2e:dc:78:ba:f1: e1:ee:18:97:1e:f5:9c:cc:47:f3:d8:4a:c5:6a:c8: 0b:2f:72:fa:cd:cc:b4:e8:39:86:7a:35:ec:57:7d: 94:c4:31:da:b9:26:07:56:90:3a:9e:7a:d4:19:f3: 28:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:82:C7:CB:7F:A8:BF:C1:8D:35:7D:74:D3:78:3A:EF:A7:77:37:41 X509v3 Authority Key Identifier: keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/E58351049F2011EE8D92FF5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.246.64.0/23 IPv6: 2001:df2:c540::/48 Signature Algorithm: sha256WithRSAEncryption 9c:18:5a:67:79:86:28:46:2e:a1:b3:8b:71:36:64:dc:54:39: 91:ca:fe:da:cd:93:fa:38:a8:5d:5e:95:52:73:4e:d7:f0:4e: 0c:2c:71:2e:55:e7:6c:bc:a8:d8:df:77:00:68:9b:95:24:7c: 6a:6b:b8:f7:8e:8a:69:50:02:f3:b0:e1:7d:64:11:2c:39:83: bb:b0:25:7f:21:04:b2:96:eb:41:bb:27:c0:91:89:69:69:64: 30:1f:17:46:8b:98:10:47:94:60:73:ed:74:27:1d:fb:9a:02: fe:a3:a5:34:88:1e:4a:38:bd:70:b0:17:54:eb:8b:bf:55:72: bb:26:2b:c8:4e:6a:20:64:e0:47:78:dd:36:c6:84:6e:62:76: 53:fd:a4:7d:b0:50:0f:01:be:7d:15:61:f3:b5:78:b1:86:33: e0:2a:46:b6:17:9e:3f:8e:09:ae:d1:dc:c5:ea:84:05:df:93: 62:6c:a1:1a:b0:4e:07:7d:36:b3:d2:a0:03:33:17:fa:14:e0: 4a:75:7c:a8:c1:64:63:9c:b9:0b:03:00:a2:cf:82:9d:c2:ef: b4:73:14:9d:05:d1:df:08:5b:a8:bf:4d:fc:ac:29:99:9f:ae: 87:bf:81:f2:e4:58:83:0c:a2:a6:9a:83:61:c2:ba:45:4e:fe: be:01:78:70 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy REI5OTExMC8GA1UEBRMoRTk4NjEyRUVFQTRBRTcwRDFGQjVCNjUyNEI5NjlENDc0 MkRDRTgxMDAeFw0yMzEyMjAxMDE2NTNaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY1ODJiZjE1LTExMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfRvAAkeupW+SH/6bGRlVshDOGEU7fTbfUyxdIZezaESbbxN5M3MmlZi4o8Vup hAE4uFyWmaiXNj0Khy9k8CKshVb/eUc1KIX5dW6IUg2N1us1hbUj3NZinPRgZ+/f D5rR+woChLUxBuutWB+82zM5kSfQwh4FB5zpCy7477oE4F7AGsm971AkQ9OGrQ7I 2C7WWvJASyZh/jTeh7UbPokokF1LSVFqzyZVdYupWzh+jFjvNeSvwRkgSuFWl63Z o0xd/twUmeemcATwHBsu3Hi68eHuGJce9ZzMR/PYSsVqyAsvcvrNzLToOYZ6NexX fZTEMdq5JgdWkDqeetQZ8ygbAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUQoLHy3+o v8GNNX1003g676d3N0EwHwYDVR0jBBgwFoAU6YYS7upK5w0ftbZSS5adR0Lc6BAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEQjk5L0JDNjU5QkM2MzFC NDExRUVCNTUxRjIxMUM0RjlBRTAyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZC QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNllZUzd1cEs1dzBmdGJaU1M1YWRSMExjNkJBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi9FNTgzNTEwNDlG MjAxMUVFOEQ5MkZGNUVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh MB8wDAQCAAEwBgMEAWf2QDAPBAIAAjAJAwcAIAEN8sVAMA0GCSqGSIb3DQEBCwUA A4IBAQCcGFpneYYoRi6hs4txNmTcVDmRyv7azZP6OKhdXpVSc07X8E4MLHEuVeds vKjY33cAaJuVJHxqa7j3joppUALzsOF9ZBEsOYO7sCV/IQSylutBuyfAkYlpaWQw HxdGi5gQR5Rgc+10Jx37mgL+o6U0iB5KOL1wsBdU64u/VXK7JivITmogZOBHeN02 xoRuYnZT/aR9sFAPAb59FWHztXixhjPgKka2F54/jgmu0dzF6oQF35NibKEasE4H fTaz0qADMxf6FOBKdXyowWRjnLkLAwCiz4Kdwu+0cxSdBdHfCFuov038rCmZn66H v4Hy5FiDDKKmmoNhwrpFTv6+AXhw -----END CERTIFICATE-----Generated at Sat Jun 1 09:10:29 2024 by rpki-client on console-fra.rpki-client.org