$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa File: D8BFCB26BA6611EE81A92E6FC4F9AE02.roa (raw, json) Hash identifier: O9tYO6kupKQU9ptuAQl06h/ZNlTFKl9W/lRHr1Y6j4E= Subject key identifier: 2A:93:3E:A1:A6:62:47:36:C6:21:2B:E0:77:46:E8:68:D3:10:83:2F Certificate issuer: /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Certificate serial: 50 Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa Signing time: Wed 15 May 2024 08:43:11 +0000 ROA not before: Wed 15 May 2024 08:43:11 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 55020 IP address blocks: 14.192.4.0/22 maxlen: 23 43.224.224.0/22 maxlen: 23 103.215.77.0/24 maxlen: 24 103.215.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Jun 2024 07:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55 Validity Not Before: May 15 08:43:11 2024 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=6644759f-2cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:a6:e7:02:de:2b:ad:40:27:ac:ae:c4:e5: d1:32:2e:43:ed:31:e5:18:e7:d0:b3:6b:40:d6:45: 21:fa:15:1d:d2:82:64:56:bf:18:66:10:03:d9:f7: 5b:17:a8:a9:fe:a2:ae:56:64:d4:7e:d4:9f:7a:1b: 87:22:a1:fe:d8:80:ae:59:77:2c:e7:23:fb:a7:2e: 7f:75:98:ab:cf:8c:ec:b6:f7:4e:4d:3b:ab:bf:1a: 42:6f:71:1a:ef:0b:55:e7:3a:81:19:9c:20:70:16: 2e:45:37:f8:cd:1f:1d:42:a0:0f:6c:a6:d4:f5:13: a8:3f:f9:dc:3f:d6:8a:a2:21:06:45:28:f2:5d:c7: f6:46:94:49:7e:5a:e4:7c:da:62:69:d2:e4:23:ca: f1:1c:36:92:17:b0:45:6a:b6:fd:e4:a6:5f:d7:54: 25:3b:35:b2:a1:a8:d3:7e:55:b2:0f:ba:5b:56:3b: 8c:a4:12:f9:20:5b:f0:aa:74:ad:fe:69:7d:ee:af: 6b:86:4f:9b:67:50:69:48:45:9e:51:56:9f:e9:db: 73:2b:46:8d:34:02:55:5a:a0:b7:95:af:52:26:95: 26:29:a7:50:9b:07:f1:f6:4e:63:81:6d:9a:0a:59: 25:d3:87:69:f6:93:73:e9:fd:7e:36:0a:f0:8e:18: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:93:3E:A1:A6:62:47:36:C6:21:2B:E0:77:46:E8:68:D3:10:83:2F X509v3 Authority Key Identifier: keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/D8BFCB26BA6611EE81A92E6FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.192.4.0/22 43.224.224.0/22 103.215.77.0-103.215.78.255 Signature Algorithm: sha256WithRSAEncryption 2d:e1:71:c5:94:aa:e4:1b:53:17:62:b5:cb:a3:d3:de:4d:fa: b3:ab:2b:62:3d:e8:35:5c:34:cf:6c:90:54:b2:79:45:42:e4: 0c:f9:82:2d:2e:89:09:34:aa:49:82:82:70:51:8d:81:1d:33: e2:b9:70:d3:86:55:e2:a2:72:97:7d:e5:bf:1a:c2:4b:bd:2a: 6b:83:c5:51:bf:8b:19:cc:5a:41:e2:40:6e:a0:8b:61:63:d6: 29:a2:d9:af:48:ee:71:6d:dc:a8:f7:8d:5f:28:ac:fe:e3:f4: 7a:b2:29:31:6a:bb:3f:ce:db:0a:41:71:87:a4:cc:cd:86:4b: 47:cb:6c:f8:e7:7b:2c:5d:dd:d5:ae:f7:01:04:d5:fd:51:81: cc:6f:31:87:4f:b1:f5:3e:b9:6d:27:dc:04:c9:87:89:b4:4b: bb:8c:93:64:26:4a:39:42:9e:24:2b:23:1e:45:29:f8:13:5b: 32:83:ab:c8:a0:3d:ba:e4:5a:06:25:cd:83:ee:4a:6b:f0:41: ac:be:63:59:52:bc:3e:83:f2:cc:a4:ca:67:27:8e:90:61:b0: f5:97:dc:a8:d3:7b:b6:9b:bf:de:05:3d:fc:9c:7a:30:fb:f5: ab:21:40:70:06:fe:56:05:7f:3f:45:be:11:a1:83:0e:1d:65: 3f:c0:20:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RjUzNTExMC8GA1UEBRMoRDQ4Q0VEMThGNjhDQTIyNjk4M0Y5Rjk5OUExNDA2MzYy NzVCNkE1NTAeFw0yNDA1MTUwODQzMTFaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY2NDQ3NTlmLTJjYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCl9abnAt4rrUAnrK7E5dEyLkPtMeUY59Cza0DWRSH6FR3SgmRWvxhmEAPZ91sX qKn+oq5WZNR+1J96G4ciof7YgK5ZdyznI/unLn91mKvPjOy2905NO6u/GkJvcRrv C1XnOoEZnCBwFi5FN/jNHx1CoA9sptT1E6g/+dw/1oqiIQZFKPJdx/ZGlEl+WuR8 2mJp0uQjyvEcNpIXsEVqtv3kpl/XVCU7NbKhqNN+VbIPultWO4ykEvkgW/CqdK3+ aX3ur2uGT5tnUGlIRZ5RVp/p23MrRo00AlVaoLeVr1ImlSYpp1CbB/H2TmOBbZoK WSXTh2n2k3Pp/X42CvCOGJPLAgMBAAGjggKpMIICpTAdBgNVHQ4EFgQUKpM+oaZi RzbGISvgd0boaNMQgy8wHwYDVR0jBBgwFoAU1IztGPaMoiaYP5+ZmhQGNidbalUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGNTM1LzY5QTU4MDc4QkE2 NjExRUVCQzM5NjI2RUM0RjlBRTAyLzFJenRHUGFNb2lhWVA1LVptaFFHTmlkYmFs VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUl6dEdQYU1vaWFZUDUtWm1oUUdOaWRiYWxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjUzNS82OUE1ODA3OEJBNjYxMUVFQkMzOTYyNkVDNEY5QUUwMi9EOEJGQ0IyNkJB NjYxMUVFODFBOTJFNkZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAzBggrBgEFBQcBBwEB/wQk MCIwIAQCAAEwGgMEAg7ABAMEAivg4DAMAwQAZ9dNAwQAZ9dOMA0GCSqGSIb3DQEB CwUAA4IBAQAt4XHFlKrkG1MXYrXLo9PeTfqzqytiPeg1XDTPbJBUsnlFQuQM+YIt LokJNKpJgoJwUY2BHTPiuXDThlXionKXfeW/GsJLvSprg8VRv4sZzFpB4kBuoIth Y9YpotmvSO5xbdyo941fKKz+4/R6sikxars/ztsKQXGHpMzNhktHy2z453ssXd3V rvcBBNX9UYHMbzGHT7H1PrltJ9wEyYeJtEu7jJNkJko5Qp4kKyMeRSn4E1syg6vI oD265FoGJc2D7kpr8EGsvmNZUrw+g/LMpMpnJ46QYbD1l9yo03u2m7/eBT38nHow +/WrIUBwBv5WBX8/Rb4RoYMOHWU/wCBU -----END CERTIFICATE-----Generated at Thu Jun 13 10:58:37 2024 by rpki-client on console-ams.rpki-client.org