$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa File: 4AC14C4AC6CB11ECB185E43EC4F9AE02.roa (raw, json) Hash identifier: 5X8g5tV4bYQifF8IkjHRjLjcJBh1/+GRN4/WYXiq2e4= Subject key identifier: 25:13:56:5B:3D:59:02:5B:15:B7:27:DE:47:79:F0:92:A3:01:5C:31 Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Certificate serial: 0200 Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa Signing time: Mon 09 Oct 2023 02:54:54 +0000 ROA not before: Mon 09 Oct 2023 02:54:54 +0000 ROA not after: Mon 30 Dec 2024 00:00:00 +0000 asID: 132742 IP address blocks: 43.248.60.0/22 maxlen: 24 103.39.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 04:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Validity Not Before: Oct 9 02:54:54 2023 GMT Not After : Dec 30 00:00:00 2024 GMT Subject: CN=65236b7e-c69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:2e:c6:7f:0f:fa:b7:25:d9:4f:39:7f:99: 2c:d8:9a:4a:c3:ca:78:78:13:94:c1:77:ad:d9:ea: 62:72:4f:e7:0e:9a:3e:7e:5c:58:46:23:10:dd:6c: 68:59:dc:d3:7b:b6:e3:78:d5:07:2b:9f:bd:10:43: 2c:33:05:ac:2c:a0:c4:f0:79:fd:73:2a:83:a7:6b: b4:b8:44:08:3c:be:b3:6f:a0:2e:9a:4d:37:13:21: b7:85:df:f2:f4:33:1a:bd:05:de:e3:30:d1:c1:dc: 35:cb:58:d8:bb:c6:0d:aa:f9:32:2e:dd:d1:a5:8d: 70:7c:db:c3:90:0e:b2:2e:4b:9e:aa:4c:30:54:b9: f6:61:5c:2c:41:b1:57:af:67:af:29:5b:94:01:21: eb:25:98:fe:c0:ac:e8:7a:87:de:0b:46:e9:ef:fd: 39:a6:83:76:3e:31:79:0a:95:51:9b:08:35:59:61: bc:a6:8c:f5:37:63:99:25:7e:bb:44:14:99:d4:1d: cd:43:06:fe:6c:21:16:07:4a:1b:5d:5d:1e:ba:5a: 59:78:84:eb:7d:9c:e3:fb:bb:ed:77:1e:08:51:62: 55:ad:9e:11:ba:cb:5a:22:28:75:fe:c1:c1:ca:74: 39:5e:d7:d2:58:e1:44:01:bb:a0:19:ee:ea:a3:71: fd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:13:56:5B:3D:59:02:5B:15:B7:27:DE:47:79:F0:92:A3:01:5C:31 X509v3 Authority Key Identifier: keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/4AC14C4AC6CB11ECB185E43EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.60.0/22 103.39.148.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:ad:65:a8:5a:ff:29:23:20:9e:88:46:84:14:7e:af:b7:05: d9:24:57:4c:ec:74:22:c2:c1:d6:96:e4:6a:2c:bb:2d:35:7c: b6:ab:39:ad:8d:cf:69:41:13:d9:a1:e4:6b:4e:03:19:ab:b1: e7:58:eb:ec:61:6b:13:6c:e7:ba:4d:67:52:af:3e:ba:c5:12: de:5d:07:da:bc:c6:ba:b4:4c:c5:14:98:71:0a:5a:0a:29:fd: 7e:8f:3d:df:2e:53:81:0c:83:4f:06:dd:58:b2:0d:6c:cf:73: 0a:f5:70:e5:36:8d:33:3a:19:c8:21:79:e5:9f:17:02:72:d9: fa:2c:9e:94:1d:e8:22:61:76:78:a9:2a:6b:a3:52:a5:9c:d0: 87:2d:73:83:71:37:0b:e8:c7:56:22:56:2c:44:d6:9f:4e:dc: 0b:bf:cd:8b:0f:32:b5:5d:1f:0b:2f:46:11:88:8e:18:97:08: df:7d:d4:37:e0:cc:30:6b:05:9e:6a:13:3d:85:00:de:ae:3a: 5c:7b:d2:bb:ae:5f:4f:f2:d6:0e:c7:6d:10:4b:c2:13:69:f4: e4:d8:cb:26:56:02:e5:80:3c:a8:a6:90:eb:e8:9b:51:f8:25: 4d:2f:db:da:2b:8b:b0:e4:65:94:33:60:20:b2:5f:ca:34:bd: 1e:b6:72:e2 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAwQ0MxMTAvBgNVBAUTKDI3NThDNkNGOEI1Mjg5NjZENDM3MTNCQjFCQ0U4RTAz RENBNjFCMUMwHhcNMjMxMDA5MDI1NDU0WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NTIzNmI3ZS1jNjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4Auxn8P+rcl2U85f5ks2JpKw8p4eBOUwXet2epick/nDpo+flxYRiMQ3Wxo WdzTe7bjeNUHK5+9EEMsMwWsLKDE8Hn9cyqDp2u0uEQIPL6zb6Aumk03EyG3hd/y 9DMavQXe4zDRwdw1y1jYu8YNqvkyLt3RpY1wfNvDkA6yLkueqkwwVLn2YVwsQbFX r2evKVuUASHrJZj+wKzoeofeC0bp7/05poN2PjF5CpVRmwg1WWG8poz1N2OZJX67 RBSZ1B3NQwb+bCEWB0obXV0eulpZeITrfZzj+7vtdx4IUWJVrZ4RustaIih1/sHB ynQ5XtfSWOFEAbugGe7qo3H9jQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCUTVls9 WQJbFbcn3kd58JKjAVwxMB8GA1UdIwQYMBaAFCdYxs+LUolm1DcTuxvOjgPcphsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDBDQy9CNEE3Q0NFOEM2 MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lXYlVOeE83Rzg2T0E5eW1H eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oxakd6NHRTaVdiVU54TzdHODZPQTl5bUd4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAwQ0MvQjRBN0NDRThDNjAyMTFFQ0JFQjlCRjNBQzRGOUFFMDIvNEFDMTRDNEFD NkNCMTFFQ0IxODVFNDNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+DwDBAJnJ5QwDQYJKoZIhvcNAQELBQADggEBAFutZaha /ykjIJ6IRoQUfq+3BdkkV0zsdCLCwdaW5Gosuy01fLarOa2Nz2lBE9mh5GtOAxmr sedY6+xhaxNs57pNZ1KvPrrFEt5dB9q8xrq0TMUUmHEKWgop/X6PPd8uU4EMg08G 3ViyDWzPcwr1cOU2jTM6GcgheeWfFwJy2fosnpQd6CJhdnipKmujUqWc0Ictc4Nx Nwvox1YiVixE1p9O3Au/zYsPMrVdHwsvRhGIjhiXCN991DfgzDBrBZ5qEz2FAN6u Olx70ruuX0/y1g7HbRBLwhNp9OTYyyZWAuWAPKimkOvom1H4JU0v29ori7DkZZQz YCCyX8o0vR62cuI= -----END CERTIFICATE-----Generated at Sat Jun 1 05:48:42 2024 by rpki-client on console-fra.rpki-client.org