$ rpki-client -vvf rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa File: 192968FAA43411E9BF46490BC4F9AE02.roa (raw, json) Hash identifier: CT18OIINBeCDMFBp7n4N+HeNhsnS3K8XZSLl17zRvqs= Subject key identifier: F5:67:97:95:B6:36:11:1C:B1:D7:6D:B4:8A:34:BD:20:B6:1B:C9:9C Certificate issuer: /CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Certificate serial: 0DC1 Authority key identifier: 19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa Signing time: Wed 04 Sep 2024 18:36:17 +0000 ROA not before: Wed 04 Sep 2024 18:36:17 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 132882 IP address blocks: 43.228.200.0/22 maxlen: 22 43.252.216.0/22 maxlen: 22 103.12.140.0/22 maxlen: 22 103.22.160.0/22 maxlen: 22 103.26.248.0/22 maxlen: 22 103.194.80.0/22 maxlen: 22 163.53.224.0/22 maxlen: 22 2400:6e80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Dec 2024 17:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F4B0/serialNumber=194CFAEC075611FF83C421CDA8797ED30EA2D039 Validity Not Before: Sep 4 18:36:17 2024 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=66d8a8a1-1497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:34:77:28:09:a3:5d:3d:e1:1b:d6:d7:fc: bd:5d:98:d4:e7:c3:0b:77:f9:99:d0:85:9d:d1:41: df:af:ad:ed:67:14:8c:75:6e:6e:fa:c0:3a:53:33: 1f:2f:2b:57:fe:d9:10:48:9b:d3:96:ce:30:3c:22: 42:16:51:41:f6:af:c7:78:19:15:6a:80:28:b2:a5: 3f:4a:7f:25:3d:1f:55:1f:ae:34:ac:55:13:8a:73: a1:f2:12:74:22:75:ea:c3:94:d8:c0:5a:b1:df:0c: 81:77:da:ba:a3:df:74:44:8d:07:91:a3:3e:80:18: 7b:52:3a:d3:e6:b8:5c:a9:22:21:24:21:63:b6:b0: ee:3a:b8:65:d6:d2:ba:b0:99:0b:ab:fc:ed:2a:5f: a0:34:ae:86:fb:0d:62:16:b1:d6:e5:4f:4f:6d:e0: b8:a3:fc:0b:29:46:de:0c:94:47:1e:54:f2:b5:1a: f4:ff:a8:76:c0:2d:5d:c2:5b:24:ca:33:fb:24:a0: 19:a0:a9:08:88:3b:85:45:75:ae:b6:c2:3b:44:4f: a4:1c:bc:8d:d9:1a:9e:2a:44:b1:cf:01:16:8d:04: 6d:cb:61:6c:7a:d6:ad:79:94:e9:3a:5e:d2:b3:85: 8d:18:d6:74:66:8d:ea:8e:b8:1a:47:1d:c6:f5:43: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:67:97:95:B6:36:11:1C:B1:D7:6D:B4:8A:34:BD:20:B6:1B:C9:9C X509v3 Authority Key Identifier: keyid:19:4C:FA:EC:07:56:11:FF:83:C4:21:CD:A8:79:7E:D3:0E:A2:D0:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/GUz67AdWEf-DxCHNqHl-0w6i0Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GUz67AdWEf-DxCHNqHl-0w6i0Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F4B0/2D270692A43311E988158F09C4F9AE02/192968FAA43411E9BF46490BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.228.200.0/22 43.252.216.0/22 103.12.140.0/22 103.22.160.0/22 103.26.248.0/22 103.194.80.0/22 163.53.224.0/22 IPv6: 2400:6e80::/32 Signature Algorithm: sha256WithRSAEncryption 01:ec:e0:0c:01:a6:16:d1:4f:49:83:c6:7c:e0:2d:b1:64:e3: 71:5d:c4:07:02:3b:6b:f7:f8:b6:d5:1a:e5:d5:32:59:4a:6f: 05:cc:82:45:50:c4:27:41:de:d1:b5:13:7a:9d:e8:ae:72:22: e3:50:e1:78:96:d1:4a:ed:ef:22:6f:9b:d7:98:5f:a4:c1:a9: 5b:cd:03:1c:d8:d1:f2:46:21:85:bb:5d:4a:f8:d5:89:e9:d3: 73:4e:ca:e7:4c:62:ed:65:f1:e9:98:9f:f4:ac:55:16:07:1b: 42:a7:d1:62:52:05:40:b0:39:0e:68:2b:33:44:4b:7b:2a:ee: 94:13:d4:4c:6f:87:1a:44:bc:56:fb:a4:2e:0d:16:dc:e2:13: 6e:f9:dd:35:d8:cd:59:76:f2:7a:4a:2b:71:f5:0d:4c:4a:00: 90:98:a0:06:f0:43:64:44:94:c4:9f:5b:d2:f5:c7:74:ee:94: d8:09:20:ef:3f:43:46:a7:b4:7f:e7:b5:05:e0:b1:ab:98:08: a7:13:ee:1d:28:01:ea:67:96:30:f0:df:52:03:38:02:39:36: 66:dc:9c:3c:ca:12:90:bd:32:6c:52:75:22:ec:9a:9d:00:2a: 9b:e8:fe:ad:79:d5:01:77:60:ab:76:c5:7c:18:81:24:c0:35: 7c:73:78:15 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Y0QjAxMTAvBgNVBAUTKDE5NENGQUVDMDc1NjExRkY4M0M0MjFDREE4Nzk3RUQz MEVBMkQwMzkwHhcNMjQwOTA0MTgzNjE3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NmQ4YThhMS0xNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RY0dygJo1094RvW1/y9XZjU58MLd/mZ0IWd0UHfr63tZxSMdW5u+sA6UzMf LytX/tkQSJvTls4wPCJCFlFB9q/HeBkVaoAosqU/Sn8lPR9VH640rFUTinOh8hJ0 InXqw5TYwFqx3wyBd9q6o990RI0HkaM+gBh7UjrT5rhcqSIhJCFjtrDuOrhl1tK6 sJkLq/ztKl+gNK6G+w1iFrHW5U9PbeC4o/wLKUbeDJRHHlTytRr0/6h2wC1dwlsk yjP7JKAZoKkIiDuFRXWutsI7RE+kHLyN2RqeKkSxzwEWjQRty2FsetateZTpOl7S s4WNGNZ0Zo3qjrgaRx3G9UPWAQIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFPVnl5W2 NhEcsddttIo0vSC2G8mcMB8GA1UdIwQYMBaAFBlM+uwHVhH/g8Qhzah5ftMOotA5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjRCMC8yRDI3MDY5MkE0 MzMxMUU5ODgxNThGMDlDNEY5QUUwMi9HVXo2N0FkV0VmLUR4Q0hOcUhsLTB3Nmkw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dVejY3QWRXRWYtRHhDSE5xSGwtMHc2aTBEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0Y0QjAvMkQyNzA2OTJBNDMzMTFFOTg4MTU4RjA5QzRGOUFFMDIvMTkyOTY4RkFB NDM0MTFFOUJGNDY0OTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAIr5MgDBAIr/NgDBAJnDIwDBAJnFqADBAJnGvgDBAJnwlAD BAKjNeAwDQQCAAIwBwMFACQAboAwDQYJKoZIhvcNAQELBQADggEBAAHs4AwBphbR T0mDxnzgLbFk43FdxAcCO2v3+LbVGuXVMllKbwXMgkVQxCdB3tG1E3qd6K5yIuNQ 4XiW0Urt7yJvm9eYX6TBqVvNAxzY0fJGIYW7XUr41Ynp03NOyudMYu1l8emYn/Ss VRYHG0Kn0WJSBUCwOQ5oKzNES3sq7pQT1ExvhxpEvFb7pC4NFtziE2753TXYzVl2 8npKK3H1DUxKAJCYoAbwQ2RElMSfW9L1x3TulNgJIO8/Q0antH/ntQXgsauYCKcT 7h0oAepnljDw31IDOAI5NmbcnDzKEpC9MmxSdSLsmp0AKpvo/q151QF3YKt2xXwY gSTANXxzeBU= -----END CERTIFICATE-----Generated at Sun Nov 24 18:36:19 2024 by rpki-client on console-fra.rpki-client.org