$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa File: CB5012460F6311EABC47D53EC4F9AE02.roa (raw, json) Hash identifier: i7iJDKHTA4FxmKPgeR1Xs1+ytUegp4NlxMYWLSLdlkE= Subject key identifier: 0F:AB:98:C7:97:CC:30:89:C4:1B:0C:57:D3:3F:75:56:E4:FA:81:9A Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0B64 Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa Signing time: Fri 31 May 2024 20:34:39 +0000 ROA not before: Fri 31 May 2024 20:34:39 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 38026 IP address blocks: 43.240.100.0/22 maxlen: 24 103.36.100.0/22 maxlen: 22 103.36.100.0/24 maxlen: 24 103.36.101.0/24 maxlen: 24 103.36.102.0/24 maxlen: 24 103.36.103.0/24 maxlen: 24 116.193.216.0/21 maxlen: 24 202.164.208.0/21 maxlen: 24 2404:af80::/32 maxlen: 32 2404:af80::/48 maxlen: 48 2404:af80:1::/48 maxlen: 48 2404:af80:2::/48 maxlen: 48 2404:af80:3::/48 maxlen: 48 2404:af80:4::/48 maxlen: 48 2404:af80:10::/48 maxlen: 48 2404:af80:11::/48 maxlen: 48 2404:af80:12::/48 maxlen: 48 2404:af80:13::/48 maxlen: 48 2404:af80:14::/48 maxlen: 48 2404:af80:15::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 20:34:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: May 31 20:34:39 2024 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=665a345f-6427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:40:97:1d:8e:31:0e:17:33:42:4f:4f:94: ff:17:4f:4c:80:05:b0:09:c4:b8:7b:7a:63:25:54: b0:ad:07:71:04:ef:22:8a:e8:6d:bb:64:e5:51:18: 72:ab:7b:64:32:0c:7b:37:64:c2:ea:75:90:14:7a: 8f:ac:0d:7b:c1:50:5a:00:33:2a:98:50:ad:1f:64: 1a:9b:4f:a9:60:54:7f:bf:e9:21:05:f9:f5:b8:95: 98:32:fc:32:a3:21:79:39:03:52:2c:de:7f:14:1e: b0:1d:c3:f8:d9:88:02:9f:67:69:cd:dd:85:fb:28: 68:94:6d:a9:09:c8:a9:3d:7d:a8:39:f4:0b:ed:b0: 9d:e7:63:89:d1:2a:02:f7:af:6d:9c:2b:76:f7:4a: de:b7:35:2d:c5:6b:b7:31:38:4a:ad:63:e8:66:a4: da:81:2e:93:fd:db:37:63:e0:c5:d1:3b:d6:df:ad: 51:5a:e8:6c:85:bf:c6:27:bd:e2:77:64:42:87:cd: c3:bd:b4:66:39:af:43:3a:d7:15:65:77:3b:64:3e: a4:ef:4d:b0:ff:66:3f:2f:b0:45:21:61:e3:8c:ca: 79:85:a0:25:a2:b9:d6:c4:29:6f:75:40:d7:dc:4f: ea:45:ff:1e:c2:97:04:59:ee:6f:7f:10:7b:a3:87: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:AB:98:C7:97:CC:30:89:C4:1B:0C:57:D3:3F:75:56:E4:FA:81:9A X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/CB5012460F6311EABC47D53EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.240.100.0/22 103.36.100.0/22 116.193.216.0/21 202.164.208.0/21 IPv6: 2404:af80::/32 Signature Algorithm: sha256WithRSAEncryption 54:f9:30:05:f4:7a:0d:f3:fc:3c:50:36:43:60:66:be:1d:0f: 3b:50:b9:c6:38:d1:85:30:83:7a:f7:34:7b:ac:85:b1:1a:0a: 56:63:94:98:b6:b2:ec:78:96:c9:3c:9e:aa:db:f4:c1:94:2e: e6:70:89:45:2f:a4:4e:b7:20:24:23:fd:61:3e:e6:0f:f9:b0: d9:8d:2b:49:a3:8a:de:69:6e:da:bb:5e:31:7b:e9:2d:f7:a8: 83:49:b2:69:a8:4e:b3:94:dc:20:27:4b:53:15:6d:04:8e:60: 5a:c4:6e:2d:19:b8:4d:aa:d7:c6:9f:68:bc:a8:5f:38:63:67: 55:e1:8e:fb:4b:2c:de:6a:d2:46:fe:97:f8:93:67:91:e4:be: 71:7e:e9:5b:0c:f7:1b:54:1f:2a:20:cc:9c:f3:73:66:64:87: ac:fc:25:4b:72:ef:12:1b:8f:fa:17:6a:1d:ad:c4:2c:62:9b: ab:8a:44:a5:c9:58:af:56:73:91:7f:12:37:09:0c:5e:ae:c2: 27:07:cc:f7:66:b8:eb:20:04:b9:e9:08:c7:95:63:e1:1d:d7: 2c:ce:4f:02:b1:ec:2f:1d:3f:a4:03:8c:8d:26:4c:5e:e5:56: e4:a3:a7:b9:50:24:b3:ae:cc:a6:b2:9e:b3:aa:dd:b9:8a:68: 92:1a:4a:4a -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjQwNTMxMjAzNDM5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NjVhMzQ1Zi02NDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPtAlx2OMQ4XM0JPT5T/F09MgAWwCcS4e3pjJVSwrQdxBO8iiuhtu2TlURhy q3tkMgx7N2TC6nWQFHqPrA17wVBaADMqmFCtH2Qam0+pYFR/v+khBfn1uJWYMvwy oyF5OQNSLN5/FB6wHcP42YgCn2dpzd2F+yholG2pCcipPX2oOfQL7bCd52OJ0SoC 969tnCt290retzUtxWu3MThKrWPoZqTagS6T/ds3Y+DF0TvW361RWuhshb/GJ73i d2RCh83DvbRmOa9DOtcVZXc7ZD6k702w/2Y/L7BFIWHjjMp5haAlornWxClvdUDX 3E/qRf8ewpcEWe5vfxB7o4eN3QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFA+rmMeX zDCJxBsMV9M/dVbk+oGaMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkYxRDUvRUUwMTgwNzgwRjYyMTFFQUE3MDZBRjNEQzRGOUFFMDIvQ0I1MDEyNDYw RjYzMTFFQUJDNDdENTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAIr8GQDBAJnJGQDBAN0wdgDBAPKpNAwDQQCAAIwBwMFACQE r4AwDQYJKoZIhvcNAQELBQADggEBAFT5MAX0eg3z/DxQNkNgZr4dDztQucY40YUw g3r3NHushbEaClZjlJi2sux4lsk8nqrb9MGULuZwiUUvpE63ICQj/WE+5g/5sNmN K0mjit5pbtq7XjF76S33qINJsmmoTrOU3CAnS1MVbQSOYFrEbi0ZuE2q18afaLyo XzhjZ1XhjvtLLN5q0kb+l/iTZ5HkvnF+6VsM9xtUHyogzJzzc2Zkh6z8JUty7xIb j/oXah2txCxim6uKRKXJWK9Wc5F/EjcJDF6uwicHzPdmuOsgBLnpCMeVY+Ed1yzO TwKx7C8dP6QDjI0mTF7lVuSjp7lQJLOuzKaynrOq3bmKaJIaSko= -----END CERTIFICATE-----Generated at Fri May 31 22:13:02 2024 by rpki-client on console-fra.rpki-client.org